$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json) Hash identifier: xJKVhhtPFyDt8sCKtuFLQVhdMDjsLlzvN9FVzdOMM48= Subject key identifier: F7:F6:B7:6A:C9:93:36:76:09:34:8A:1A:C1:F8:0F:E6:BE:61:48:DF Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft Manifest number: 8B Signing time: Mon 05 Oct 2026 07:58:37 +0000 Manifest this update: Mon 05 Oct 2026 07:58:36 +0000 Manifest next update: Mon 12 Oct 2026 07:58:36 +0000 Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: ktoMoCdMNhMYC6WX8a9Nk3yvgtTLvM3gdW/yQSQhkpU=) 2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: Oct 5 07:58:36 2026 GMT Not After : Oct 12 07:58:36 2026 GMT Subject: CN=6ac358ad-184f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:2b:87:75:65:3b:3b:23:09:b4:ed:5a:b3: f8:c0:bf:4f:e3:cc:65:55:23:ed:84:fe:72:1f:d3: 08:89:70:19:90:87:37:57:8f:21:06:db:e9:a0:e3: fe:d4:21:92:66:54:1e:d6:0c:f8:ae:f3:cb:c6:7e: 7d:29:ae:00:47:41:69:8f:74:88:c9:e9:1d:ba:84: 61:67:06:a9:a3:65:4c:94:ad:9b:ad:c2:0c:63:64: fd:e6:4c:8d:7e:e5:45:aa:cf:f0:23:d6:59:d1:08: a6:84:e5:a2:b4:50:27:bf:16:19:30:8c:f5:9f:51: f1:7c:b3:c7:95:36:e4:74:78:d3:04:85:3a:fc:0b: 70:ea:48:c4:3b:0e:c7:ee:77:e5:95:97:03:0a:22: 3b:be:e8:d4:ce:00:4f:1d:3c:bf:36:18:43:1d:8b: 44:b9:ea:cd:c7:b5:dc:79:15:e6:aa:71:52:38:f7: 9a:dc:73:24:0e:04:5a:b4:ff:f7:f0:8f:79:29:32: 31:69:fa:68:cc:81:72:99:f2:15:6f:f4:56:63:50: dc:be:c1:90:3b:e1:3e:b0:22:77:8e:c5:e9:21:91: dc:d9:81:9b:91:0a:3d:0b:4d:34:e4:ae:50:57:d3: c6:aa:5f:95:5f:75:a0:f5:f1:57:9c:fa:81:f0:78: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F6:B7:6A:C9:93:36:76:09:34:8A:1A:C1:F8:0F:E6:BE:61:48:DF X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:9c:9f:13:db:d1:60:bc:00:72:bf:a8:ab:5b:26:92:d4:6f: 9d:20:ac:04:2f:39:7a:7e:1c:d3:c0:86:9b:8e:e5:a5:d0:ba: 09:42:b1:ce:29:8b:d2:9b:9b:ca:63:df:b4:61:15:30:3f:98: f7:7b:f9:67:af:74:53:a8:31:ee:65:f4:14:02:17:09:3f:bd: 38:e1:99:ea:2b:00:8c:48:57:4e:f0:41:ea:95:a4:11:5b:63: 85:a5:7a:b0:a7:00:30:fd:90:be:69:db:f5:9f:66:9d:ad:c3: d6:c1:a8:ce:2a:7d:c7:23:92:09:98:9e:1e:cf:f7:25:10:90: fa:fb:8a:2e:ef:23:57:44:90:46:ca:ac:8d:8c:f0:aa:f8:a3: 09:4e:e9:89:7a:8c:b8:23:9b:0b:d9:06:05:5d:c2:5b:de:9b: be:9e:42:a6:fd:cf:7a:70:2b:51:d0:22:29:f5:37:88:15:dd: 4f:d4:b4:6d:cd:57:fb:40:e7:a4:45:30:1d:f3:21:54:48:a5: 31:ff:57:d0:1c:e1:e6:3e:42:d8:a6:7d:d8:3f:fe:09:93:d0: 17:d9:44:ba:1d:93:e8:06:65:24:5e:ed:59:09:da:46:ee:34: 3f:f3:3b:60:5e:5d:67:c9:81:83:4d:c5:cc:6e:0e:86:22:36: 93:02:86:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0NDExMTAvBgNVBAUTKDMxNkQ4OTY0N0YwRDBDQjA2QjM3MzIwNzhBNDIzMEFG MTE1NjUzMzQwHhcNMjYxMDA1MDc1ODM2WhcNMjYxMDEyMDc1ODM2WjAYMRYwFAYD VQQDEw02YWMzNThhZC0xODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqcrh3VlOzsjCbTtWrP4wL9P48xlVSPthP5yH9MIiXAZkIc3V48hBtvpoOP+ 1CGSZlQe1gz4rvPLxn59Ka4AR0Fpj3SIyekduoRhZwapo2VMlK2brcIMY2T95kyN fuVFqs/wI9ZZ0QimhOWitFAnvxYZMIz1n1HxfLPHlTbkdHjTBIU6/Atw6kjEOw7H 7nfllZcDCiI7vujUzgBPHTy/NhhDHYtEuerNx7XceRXmqnFSOPea3HMkDgRatP/3 8I95KTIxafpozIFymfIVb/RWY1DcvsGQO+E+sCJ3jsXpIZHc2YGbkQo9C0005K5Q V9PGql+VX3Wg9fFXnPqB8Hi+gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPf2t2rJ kzZ2CTSKGsH4D+a+YUjfMB8GA1UdIwQYMBaAFDFtiWR/DQywazcyB4pCMK8RVlM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ0MS9FMDgxQTYwQUVF OUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy9NVzJKWkg4TkRMQnJOeklIaWtJd3J4RldV elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ0MS9FMDgxQTYwQUVFOUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy9NVzJKWkg4TkRM QnJOeklIaWtJd3J4RldVelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIJyfE9vRYLwAcr+oq1smktRvnSCsBC85en4c08CGm47lpdC6CUKxzimL0pub ymPftGEVMD+Y93v5Z690U6gx7mX0FAIXCT+9OOGZ6isAjEhXTvBB6pWkEVtjhaV6 sKcAMP2Qvmnb9Z9mna3D1sGozip9xyOSCZieHs/3JRCQ+vuKLu8jV0SQRsqsjYzw qvijCU7piXqMuCObC9kGBV3CW96bvp5Cpv3PenArUdAiKfU3iBXdT9S0bc1X+0Dn pEUwHfMhVEilMf9X0Bzh5j5C2KZ92D/+CZPQF9lEuh2T6AZlJF7tWQnaRu40P/M7 YF5dZ8mBg03FzG4OhiI2kwKGcA== -----END CERTIFICATE-----Generated at Tue Oct 6 21:12:58 2026 by rpki-client