$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: mNi3pQrb23/o/u9ILRFi40oUcKbrIO2ss+plKmjjDPs= Subject key identifier: 89:01:EE:B8:75:EB:01:0C:E7:BC:7F:68:A6:FA:2D:5C:49:BC:39:F1 Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 02B3 Signing time: Tue 27 Oct 2026 01:50:49 +0000 Manifest this update: Tue 27 Oct 2026 01:50:49 +0000 Manifest next update: Tue 03 Nov 2026 01:50:49 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: NjOmuT2f0JhZxpT3zc9qK2WKSxm4brrNwzzoq5pBTQ0=) 2: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: BDN3eWU1QOvpwhp4B8qHZfh25EaapwZh0B/UqPtIRS4=) 3: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: WJy0DDE3R4DJLfi+G/eV3lsb3PxP1zjDf/s8mlf+RmM=) 4: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: +FOKSn3UMqNBdCkwTnN5e6gZKaXTHMKWX9i32crYuLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Oct 27 01:50:49 2026 GMT Not After : Nov 3 01:50:49 2026 GMT Subject: CN=6ae00379-c14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:18:f8:22:ee:1c:a7:4f:23:6e:7f:5f:df: 37:69:00:4b:f9:6a:65:ca:28:47:0f:83:52:a4:12: 78:98:f2:3f:e4:3f:29:ad:cf:81:62:7b:d8:d2:8d: 36:3a:37:ed:94:50:c1:24:17:5b:f2:9c:a7:cf:fe: 2e:e6:4b:55:db:e8:50:44:0d:6c:c1:b4:05:09:29: 54:e4:b8:bb:bc:ef:d7:82:19:7b:f6:d6:63:07:8f: af:59:e1:25:75:36:00:27:be:de:53:24:44:a8:0d: 40:b6:40:96:2b:c9:ee:ec:9e:08:4d:91:9b:12:1a: ac:38:81:8a:2d:41:b4:0b:34:de:51:2b:2c:2d:0a: 20:8c:38:05:5a:98:ae:89:2f:47:34:14:d8:3d:f5: ab:6d:56:5e:22:bd:4b:a4:6e:16:be:a2:04:e6:a1: 04:45:c9:ba:b4:f9:5c:3e:4e:2b:73:7b:79:04:b4: c4:9d:5c:a6:19:06:49:47:be:fc:c1:c8:89:4b:db: 8d:f8:cd:b2:91:4c:1a:41:c7:1e:c6:98:9a:6b:5d: e2:74:4f:a0:d6:97:db:f7:92:1f:d8:23:7f:dd:40: 0b:18:aa:f6:29:83:08:79:48:23:a7:70:57:30:de: b5:41:74:0e:1e:a7:2a:3c:4e:f4:35:db:e5:b9:e3: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:01:EE:B8:75:EB:01:0C:E7:BC:7F:68:A6:FA:2D:5C:49:BC:39:F1 X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:12:ba:c9:20:d0:a9:0d:42:3d:19:a1:43:81:58:25:67:69: 5b:e2:4a:f2:cc:b6:99:8e:4a:6c:6a:4e:27:49:23:d4:da:a8: 77:4c:2f:7b:1c:bb:a3:5e:2b:2a:cf:10:17:40:ca:03:1a:a2: 15:10:f1:7e:30:ea:fe:6d:8f:45:b1:d9:26:6e:08:63:79:66: 40:34:49:7f:56:dc:ea:dc:24:15:86:32:1f:ea:84:cc:ad:6e: 24:a9:24:b9:7f:bf:51:56:99:0a:7e:84:f3:8b:c7:22:c3:b0: 89:b6:43:59:c2:79:b1:7b:37:e0:ef:21:30:f1:23:94:5d:4b: 35:80:46:23:4f:43:18:2e:9a:a8:d8:6d:33:f9:e7:11:4f:45: e6:2d:78:99:f5:00:b7:d7:f4:f4:60:bc:b6:37:0a:49:c0:3d: 89:42:cd:ac:44:40:5d:65:57:46:ee:43:89:ed:d7:6f:12:e6: 1a:06:c7:62:ca:6d:44:aa:5d:7f:5c:4c:5b:d9:ba:3b:8b:4f: 5a:c4:00:5d:72:15:18:29:6c:69:9b:f3:6e:e3:fd:39:42:63: 4b:22:db:57:b7:36:bf:95:d9:f9:10:88:e2:c9:66:8d:2f:ef: fa:2e:ed:ed:73:ac:94:bc:6d:af:b8:9d:bd:20:c8:49:0c:2a: 15:f7:8a:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjYxMDI3MDE1MDQ5WhcNMjYxMTAzMDE1MDQ5WjAYMRYwFAYD VQQDEw02YWUwMDM3OS1jMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0UY+CLuHKdPI25/X983aQBL+WplyihHD4NSpBJ4mPI/5D8prc+BYnvY0o02 OjftlFDBJBdb8pynz/4u5ktV2+hQRA1swbQFCSlU5Li7vO/Xghl79tZjB4+vWeEl dTYAJ77eUyREqA1AtkCWK8nu7J4ITZGbEhqsOIGKLUG0CzTeUSssLQogjDgFWpiu iS9HNBTYPfWrbVZeIr1LpG4WvqIE5qEERcm6tPlcPk4rc3t5BLTEnVymGQZJR778 wciJS9uN+M2ykUwaQccexpiaa13idE+g1pfb95If2CN/3UALGKr2KYMIeUgjp3BX MN61QXQOHqcqPE70NdvlueOrZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkB7rh1 6wEM57x/aKb6LVxJvDnxMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQhK6ySDQqQ1CPRmhQ4FYJWdpW+JK8sy2mY5KbGpOJ0kj1Nqod0wvexy7o14r Ks8QF0DKAxqiFRDxfjDq/m2PRbHZJm4IY3lmQDRJf1bc6twkFYYyH+qEzK1uJKkk uX+/UVaZCn6E84vHIsOwibZDWcJ5sXs34O8hMPEjlF1LNYBGI09DGC6aqNhtM/nn EU9F5i14mfUAt9f09GC8tjcKScA9iULNrERAXWVXRu5Die3XbxLmGgbHYsptRKpd f1xMW9m6O4tPWsQAXXIVGClsaZvzbuP9OUJjSyLbV7c2v5XZ+RCI4slmjS/v+i7t 7XOslLxtr7idvSDISQwqFfeKLw== -----END CERTIFICATE-----Generated at Wed Oct 28 03:20:09 2026 by rpki-client