$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: okyVeh7Zm573yuCBghWnX9KtLT81KnDS2nFQ8t8MmiU= Subject key identifier: B5:BC:7D:E6:73:DA:65:5E:BF:51:AB:36:0B:21:E1:3F:0E:B0:17:1F Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 04AA Signing time: Wed 07 Oct 2026 00:02:42 +0000 Manifest this update: Wed 07 Oct 2026 00:02:42 +0000 Manifest next update: Wed 14 Oct 2026 00:02:42 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: EDR7c7+NwU3xAV0iSVwz/5hF3t6Xo7/LCn1bslwHa7g=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Oct 7 00:02:42 2026 GMT Not After : Oct 14 00:02:42 2026 GMT Subject: CN=6ac58c22-7089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:4e:af:35:74:57:94:27:a3:62:c9:22:39: 51:3e:9f:9b:39:5e:a1:ac:d3:bb:50:83:b2:7c:95: e3:a1:f1:c6:b9:b6:a5:da:f7:4c:46:3e:f3:c8:d1: 67:ab:a8:e5:8b:2f:ea:64:88:e0:62:da:fc:d1:14: 15:2d:ee:44:78:6b:54:95:b5:bc:e0:93:f0:f5:b1: b4:64:17:31:6d:11:ff:cd:ad:bb:69:ef:52:a0:ab: 41:b6:c7:42:2d:97:22:27:08:8c:2d:7c:55:ca:30: 48:cc:24:0b:59:6f:01:86:fe:e9:2f:93:d5:dc:98: b7:60:25:75:d1:2b:c9:6b:d7:c7:09:db:56:ba:5f: 73:eb:ad:3c:dc:47:10:46:e0:2b:12:cd:75:98:ba: 5a:7f:eb:b6:a5:d7:5f:c3:5e:8a:05:8b:0a:fa:fd: e7:db:cd:26:f1:3f:22:2d:ab:9c:e2:52:82:d5:c5: c6:f7:d5:94:01:ed:47:03:cb:2b:6b:da:32:99:e4: d6:d3:cc:32:72:78:b6:de:1e:c6:fa:70:3c:9c:e5: b7:48:b8:78:8b:b4:36:9c:b8:73:f8:8c:70:dc:32: 5a:a8:52:be:2d:20:a9:a2:95:32:18:ac:c0:6c:76: 86:bc:97:01:7b:da:f4:45:60:c6:b6:e2:48:ef:c1: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BC:7D:E6:73:DA:65:5E:BF:51:AB:36:0B:21:E1:3F:0E:B0:17:1F X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:75:03:53:1e:a6:85:ef:30:96:cc:1e:d7:d5:8a:11:65:a4: d4:5b:07:5e:b7:30:56:3f:a2:52:ab:c3:09:19:c9:d9:0f:10: 60:0c:67:3d:02:ea:72:77:0a:06:8e:b4:c1:27:44:9b:7e:54: 7f:ce:a8:a8:ca:f6:47:73:c3:fc:49:c3:df:83:02:25:66:cb: 32:ad:19:15:df:54:83:40:1e:00:61:75:f7:41:bd:33:09:2b: 78:33:89:7f:35:d3:cd:f5:de:83:5e:fc:42:05:27:37:38:17: ee:64:93:15:9a:e4:7c:1f:d7:b0:8d:18:a8:0c:8e:60:8a:90: 4f:81:91:90:08:37:44:38:93:97:57:29:2d:08:67:ee:28:81: 02:52:ec:56:73:4b:5c:b1:d8:07:a9:74:bf:94:71:75:4a:df: 69:6b:fe:f7:f9:9e:37:11:3c:da:a2:f6:19:0f:27:73:36:07: 69:50:b6:5f:f8:4e:18:03:89:69:88:e8:8b:1c:a0:dd:19:50: 12:31:21:bf:79:2e:6e:97:b2:2a:4d:3f:3e:15:c9:da:03:4e: c3:2b:ef:2d:2f:32:64:98:46:ea:44:76:2d:2c:90:bf:b6:65: 0d:17:37:c5:ed:79:cc:01:e7:15:c0:a3:c6:6e:43:8f:9e:da: ca:ee:24:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjYxMDA3MDAwMjQyWhcNMjYxMDE0MDAwMjQyWjAYMRYwFAYD VQQDEw02YWM1OGMyMi03MDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7pOrzV0V5Qno2LJIjlRPp+bOV6hrNO7UIOyfJXjofHGubal2vdMRj7zyNFn q6jliy/qZIjgYtr80RQVLe5EeGtUlbW84JPw9bG0ZBcxbRH/za27ae9SoKtBtsdC LZciJwiMLXxVyjBIzCQLWW8Bhv7pL5PV3Ji3YCV10SvJa9fHCdtWul9z66083EcQ RuArEs11mLpaf+u2pddfw16KBYsK+v3n280m8T8iLauc4lKC1cXG99WUAe1HA8sr a9oymeTW08wycni23h7G+nA8nOW3SLh4i7Q2nLhz+Ixw3DJaqFK+LSCpopUyGKzA bHaGvJcBe9r0RWDGtuJI78GDiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLW8feZz 2mVev1GrNgsh4T8OsBcfMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABXUDUx6mhe8wlswe19WKEWWk1FsHXrcwVj+iUqvDCRnJ2Q8QYAxnPQLqcncK Bo60wSdEm35Uf86oqMr2R3PD/EnD34MCJWbLMq0ZFd9Ug0AeAGF190G9MwkreDOJ fzXTzfXeg178QgUnNzgX7mSTFZrkfB/XsI0YqAyOYIqQT4GRkAg3RDiTl1cpLQhn 7iiBAlLsVnNLXLHYB6l0v5RxdUrfaWv+9/meNxE82qL2GQ8nczYHaVC2X/hOGAOJ aYjoixyg3RlQEjEhv3kubpeyKk0/PhXJ2gNOwyvvLS8yZJhG6kR2LSyQv7ZlDRc3 xe15zAHnFcCjxm5Dj57ayu4kQQ== -----END CERTIFICATE-----Generated at Wed Oct 7 19:29:24 2026 by rpki-client