$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft File: 1AI0WEr2BZHzfdP7on68uFzHZWo.mft (raw, json) Hash identifier: WoiJXm5vjgze9b18FBHM/rDkr447Q4mpM0WOUN5Yd6M= Subject key identifier: 50:F3:7E:D0:6D:65:2F:44:F4:F3:92:2A:9E:B3:66:2A:7F:C2:7F:61 Authority key identifier: D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A Certificate issuer: /CN=A91E27F3/serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A Certificate serial: 3598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft Manifest number: 3590 Signing time: Tue 06 Oct 2026 15:04:52 +0000 Manifest this update: Tue 06 Oct 2026 15:04:51 +0000 Manifest next update: Tue 13 Oct 2026 15:04:51 +0000 Files and hashes: 1: 1AI0WEr2BZHzfdP7on68uFzHZWo.crl (hash: efBoyw8QIJXM4Uo7RaDgE3DQEoaOhqChf00Buh8Hc5Q=) 2: 1B4B4FC2152F11ECB72E546FC4F9AE02.roa (hash: grlNN+mm97djcRhLgczSf6yBI8MB1/S7/60D7ODVKSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.crl rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13720 (0x3598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27F3, serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A Validity Not Before: Oct 6 15:04:51 2026 GMT Not After : Oct 13 15:04:51 2026 GMT Subject: CN=6ac50e14-52c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:81:9e:2f:12:f1:32:25:26:9e:eb:16:89: 35:7d:4f:65:59:96:d5:5f:32:95:b2:d0:f1:d2:f7: 31:57:44:72:a0:a2:35:62:67:89:83:7b:51:13:0c: 31:95:26:f0:08:94:15:3c:fe:50:69:72:6d:68:b0: db:1d:e7:ca:09:3a:4d:0b:20:cf:2a:9b:de:aa:14: 6e:39:e4:6a:95:43:a9:c1:a4:d7:51:a5:de:9b:0d: 3d:96:37:c1:93:4f:35:db:9b:7b:14:42:d3:64:48: 7e:db:76:32:d4:b7:05:98:f7:57:6d:51:cd:ec:11: 2d:2d:29:57:ff:6a:3b:0f:a3:32:57:93:cb:55:e9: 36:5f:51:5d:d7:4a:57:2c:15:66:57:4a:37:93:d3: e3:60:b3:2b:aa:08:b2:ef:9a:10:e2:64:a2:91:80: 6c:a0:bb:03:58:14:bb:c3:d5:16:22:e0:d0:a3:7f: 9e:66:f2:b6:db:36:01:60:0f:33:f9:73:f3:2d:55: 28:87:a4:8c:67:1f:62:46:4f:50:d1:22:ef:f8:50: a3:49:9a:a1:4d:af:1f:b4:67:b9:7d:5e:24:13:a8: 5c:c0:d5:ef:d6:cd:c4:22:93:93:4f:66:08:97:2c: b4:66:9e:64:c4:9f:d3:6c:8c:e6:e6:a4:b5:4f:06: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F3:7E:D0:6D:65:2F:44:F4:F3:92:2A:9E:B3:66:2A:7F:C2:7F:61 X509v3 Authority Key Identifier: keyid:D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d0:48:04:42:d8:1c:69:81:d2:77:fa:b5:c0:a0:78:de:3c: bb:32:37:3f:98:1a:6e:c2:61:8b:c5:fb:11:79:a6:67:5a:7e: ed:94:c0:a7:ef:d5:4c:16:00:f4:74:83:87:2c:d6:b5:5a:3d: 08:04:d6:28:1c:42:a1:ad:31:b8:67:64:f7:c4:4f:ba:da:c3: fd:b6:6f:59:1b:af:ab:28:2a:57:3f:16:d1:4d:66:e7:ba:97: a3:fb:ac:58:24:fe:f2:23:b1:ce:c4:b4:ab:cc:70:bc:60:f1: c6:5f:5f:62:46:86:da:79:63:67:b5:61:f5:91:25:02:77:14: 83:f2:59:e5:2e:bc:b3:d5:83:be:a5:ad:bc:76:70:b3:aa:a2: a4:be:20:e5:6f:6f:d4:7d:fc:53:e8:5f:94:4d:b7:e5:10:c8: ec:1f:65:bc:6b:21:88:e3:20:e7:99:e5:23:c7:52:11:23:96: 80:89:aa:cd:70:f7:b5:c4:bc:3e:8c:ba:2c:9a:56:14:80:da: bd:dc:a9:f6:c7:23:6a:5b:07:3f:0f:b3:e1:b0:b4:22:59:85: 93:b8:2a:c9:74:45:cc:4b:a3:30:70:92:8b:f8:6a:03:d0:ed: a1:53:dd:93:a8:86:fe:a0:bc:eb:3a:bb:ac:f8:5d:98:dd:c5: 5e:e3:fb:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3RjMxMTAvBgNVBAUTKEQ0MDIzNDU4NEFGNjA1OTFGMzdERDNGQkEyN0VCQ0I4 NUNDNzY1NkEwHhcNMjYxMDA2MTUwNDUxWhcNMjYxMDEzMTUwNDUxWjAYMRYwFAYD VQQDEw02YWM1MGUxNC01MmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLWBni8S8TIlJp7rFok1fU9lWZbVXzKVstDx0vcxV0RyoKI1YmeJg3tREwwx lSbwCJQVPP5QaXJtaLDbHefKCTpNCyDPKpveqhRuOeRqlUOpwaTXUaXemw09ljfB k08125t7FELTZEh+23Yy1LcFmPdXbVHN7BEtLSlX/2o7D6MyV5PLVek2X1Fd10pX LBVmV0o3k9PjYLMrqgiy75oQ4mSikYBsoLsDWBS7w9UWIuDQo3+eZvK22zYBYA8z +XPzLVUoh6SMZx9iRk9Q0SLv+FCjSZqhTa8ftGe5fV4kE6hcwNXv1s3EIpOTT2YI lyy0Zp5kxJ/TbIzm5qS1TwbiHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDzftBt ZS9E9POSKp6zZip/wn9hMB8GA1UdIwQYMBaAFNQCNFhK9gWR833T+6J+vLhcx2Vq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdGMy9BNkRFMUNFODFE QTExMUUyQTMyRUYyOTMwOEIwMkNEMi8xQUkwV0VyMkJaSHpmZFA3b242OHVGekha V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBSTBXRXIyQlpIemZkUDdvbjY4dUZ6SFpXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdGMy9BNkRFMUNFODFEQTExMUUyQTMyRUYyOTMwOEIwMkNEMi8xQUkwV0VyMkJa SHpmZFA3b242OHVGekhaV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAidBIBELYHGmB0nf6tcCgeN48uzI3P5gabsJhi8X7EXmmZ1p+7ZTAp+/VTBYA 9HSDhyzWtVo9CATWKBxCoa0xuGdk98RPutrD/bZvWRuvqygqVz8W0U1m57qXo/us WCT+8iOxzsS0q8xwvGDxxl9fYkaG2nljZ7Vh9ZElAncUg/JZ5S68s9WDvqWtvHZw s6qipL4g5W9v1H38U+hflE235RDI7B9lvGshiOMg55nlI8dSESOWgImqzXD3tcS8 Poy6LJpWFIDavdyp9scjalsHPw+z4bC0IlmFk7gqyXRFzEujMHCSi/hqA9DtoVPd k6iG/qC86zq7rPhdmN3FXuP7ow== -----END CERTIFICATE-----Generated at Wed Oct 7 17:12:19 2026 by rpki-client