$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json) Hash identifier: 98a571cLBapbAoWZspS6HLZtnzBpJ5yXc9zRzz9tLgI= Subject key identifier: 43:A7:BA:D3:A5:64:BF:69:51:00:BA:79:1D:DF:9E:37:21:38:BC:66 Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Certificate serial: 20CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft Manifest number: 20BF Signing time: Tue 06 Oct 2026 15:57:11 +0000 Manifest this update: Tue 06 Oct 2026 15:57:10 +0000 Manifest next update: Tue 13 Oct 2026 15:57:10 +0000 Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: cF5I/3krOM8uwVWu0zX4XtUnFrvP2samGl0c/mst2wY=) 2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: vjWgPjyP1dqeWvKxkKTcsD2vuPHSp4MP/FzZfYjUz8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8398 (0x20ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Validity Not Before: Oct 6 15:57:10 2026 GMT Not After : Oct 13 15:57:10 2026 GMT Subject: CN=6ac51a57-c89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:37:98:9c:c1:ce:39:02:90:0b:1f:2d:0a: e6:da:1b:7b:62:b1:e1:5f:c1:a2:91:c6:2b:5b:11: c6:05:5e:8f:6d:99:a6:2d:50:a0:83:77:76:1d:e1: c3:01:8d:0b:0e:02:2b:10:85:e8:39:e1:77:07:d5: 3a:3d:48:b9:1e:41:78:2a:11:6d:9a:13:20:0e:47: 60:61:6e:f7:70:4b:e6:37:5c:3c:5a:c7:d6:93:db: 43:58:4c:4a:08:d8:09:df:3c:2d:b7:6f:44:4e:f3: 66:fd:58:06:91:14:ec:b0:d1:f1:5c:ce:bb:af:ec: f1:14:80:3f:1c:9c:a1:95:97:65:ec:6a:43:ac:4f: f0:45:4f:70:14:f7:da:95:89:b9:78:05:ca:ee:04: 33:7d:c6:64:fb:21:20:90:5f:27:d1:24:13:cb:c8: 4c:99:58:46:b6:5c:81:ac:cc:18:fa:b6:74:13:73: ce:ee:12:d4:12:48:7b:49:57:ef:52:2c:da:d2:73: 9f:85:3f:d1:6c:6e:64:f6:c7:66:94:e9:a1:f5:32: a0:cf:d5:58:e7:91:78:d8:33:a0:06:94:8c:b9:47: 09:69:06:9e:ac:9f:c3:95:56:dc:81:d4:5d:25:45: 33:6c:07:69:4b:1b:a3:76:8b:e3:39:72:65:27:97: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A7:BA:D3:A5:64:BF:69:51:00:BA:79:1D:DF:9E:37:21:38:BC:66 X509v3 Authority Key Identifier: keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:58:ae:62:6a:c0:53:ef:e3:0c:e0:05:f0:92:af:a4:93:9c: 50:df:11:85:98:36:a0:0a:b8:82:fe:df:55:34:4e:e5:e0:0b: 8d:57:c1:e9:76:3e:a2:3c:b2:2f:c1:eb:8c:c1:5c:0d:60:d1: ee:22:bf:73:54:48:bd:1f:fe:cf:00:80:60:3b:63:6a:6a:c7: 6b:92:67:f6:e7:4c:70:c5:6d:73:4d:0f:78:43:1f:95:01:0e: 7c:ae:bd:ff:00:b7:27:37:e6:e3:55:ad:25:ea:fe:49:82:c8: 87:e6:1c:57:66:aa:1f:da:cb:c3:98:5e:ec:d5:ae:2c:6a:b8: cf:69:bf:8d:22:02:8a:90:6d:8b:35:76:d1:04:e7:e6:8e:c5: d8:76:d1:a7:94:6f:9a:bc:1f:b0:1f:6a:8c:41:2e:5a:be:d0: 7d:4c:03:e6:cd:e0:5d:28:5e:eb:14:d6:1d:3c:ac:a9:c1:ad: d9:4b:f3:cf:64:a1:85:17:eb:f6:e2:d7:48:3a:2d:0d:ba:fc: f8:b7:5a:f2:42:3e:f8:85:07:ab:78:20:99:04:30:26:18:3f: ad:c1:54:13:af:b3:38:97:95:33:98:cf:31:be:bf:fe:67:ac: 1d:04:d8:c4:19:c1:ad:4a:fe:ca:e7:2c:c4:f9:7b:db:af:13: c9:ac:1a:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQTkxMTAvBgNVBAUTKDRBNTc1RjJCRjMzMTI0NjJGODU2NDYxQUU5REREMEEz ODQ0QUJEMkYwHhcNMjYxMDA2MTU1NzEwWhcNMjYxMDEzMTU1NzEwWjAYMRYwFAYD VQQDEw02YWM1MWE1Ny1jODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ak3mJzBzjkCkAsfLQrm2ht7YrHhX8GikcYrWxHGBV6PbZmmLVCgg3d2HeHD AY0LDgIrEIXoOeF3B9U6PUi5HkF4KhFtmhMgDkdgYW73cEvmN1w8WsfWk9tDWExK CNgJ3zwtt29ETvNm/VgGkRTssNHxXM67r+zxFIA/HJyhlZdl7GpDrE/wRU9wFPfa lYm5eAXK7gQzfcZk+yEgkF8n0SQTy8hMmVhGtlyBrMwY+rZ0E3PO7hLUEkh7SVfv Uiza0nOfhT/RbG5k9sdmlOmh9TKgz9VY55F42DOgBpSMuUcJaQaerJ/DlVbcgdRd JUUzbAdpSxujdovjOXJlJ5eaMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOnutOl ZL9pUQC6eR3fnjchOLxmMB8GA1UdIwQYMBaAFEpXXyvzMSRi+FZGGund0KOESr0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBOS84M0MzMTEwODMz NUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpHTDRWa1lhNmQzUW80Ukt2 UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NsZGZLX014SkdMNFZrWWE2ZDNRbzRSS3ZTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBOS84M0MzMTEwODMzNUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpH TDRWa1lhNmQzUW80Ukt2UzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZViuYmrAU+/jDOAF8JKvpJOcUN8RhZg2oAq4gv7fVTRO5eALjVfB6XY+ojyy L8HrjMFcDWDR7iK/c1RIvR/+zwCAYDtjamrHa5Jn9udMcMVtc00PeEMflQEOfK69 /wC3Jzfm41WtJer+SYLIh+YcV2aqH9rLw5he7NWuLGq4z2m/jSICipBtizV20QTn 5o7F2HbRp5RvmrwfsB9qjEEuWr7QfUwD5s3gXShe6xTWHTysqcGt2Uvzz2ShhRfr 9uLXSDotDbr8+Lda8kI++IUHq3ggmQQwJhg/rcFUE6+zOJeVM5jPMb6//mesHQTY xBnBrUr+yucsxPl7268TyawaDA== -----END CERTIFICATE-----Generated at Thu Oct 8 10:56:18 2026 by rpki-client