$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: b+9xU2FKtd5Oow83pBQKeE5v8c2DMWjEN6QgH57V6o8= Subject key identifier: 5F:FA:9E:EA:EC:E8:87:15:A5:E4:F9:A8:53:D1:7E:BF:60:14:6E:17 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: D5 Signing time: Sat 24 Oct 2026 23:08:02 +0000 Manifest this update: Sat 24 Oct 2026 23:08:02 +0000 Manifest next update: Sat 31 Oct 2026 23:08:02 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: /bnruehlLifQ3liF/x014O67Ia5qe3WQ95dCaz//6gw=) 2: 5551B690BC2611F18E1A37534111F970.roa (hash: F16PCG2VEAdxTB+L2eKUM8FQEg6FJU6Wfcx7TwfgZ/s=) 3: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: E/Jje5jJPx3HsBr4rPdTqAGYzM44kZ/ZOpAN349E8LM=) 4: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: tF+L5ozw6GVJsQCQ97D7LBOsSW8qcFqBg2pzc4w+7b0=) 5: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: XydHxRvO+DZnu1noJEcNd2CkT2aR/0Xo6Zf7EHDRHc4=) 6: 3D85F9E653BB11F19AC0B954B9833773.roa (hash: U51mlMalJmZBrqYY1BoCbXpfjv9sa1XXUb3od6K2Xgo=) 7: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: EzOCvowpuyBtBPkDe14ju9M+ZSSTfJpiMzZhgJAu2XM=) 8: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: 8H+PbglaIHFfEwlgna+8LyIUK2HVCOEF9s+aP+GbhZ0=) 9: 55DE48EEBC2611F18E1A37534111F970.roa (hash: 7htcGMTGHQp9f5ewK8IlgCc1VFqix/6d4IWdsJHL41c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 24 23:08:02 2026 GMT Not After : Oct 31 23:08:02 2026 GMT Subject: CN=6add3a52-1c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:ab:00:b0:74:3b:fb:9d:2a:8e:aa:51:f7: ab:03:c1:f4:07:d6:f9:72:0e:2d:1e:22:47:e7:38: 72:0d:1d:12:f0:05:3f:ed:74:d9:5f:fa:6a:ec:55: ca:25:ce:a4:1d:f0:73:07:1f:94:9a:e3:fb:82:11: 71:a6:3e:fc:0a:c5:4b:4b:31:fd:5e:c6:eb:fe:3c: 44:32:75:3f:f8:22:d9:1d:68:00:93:e5:95:9b:74: 2e:18:64:92:ac:6a:9e:05:d8:07:7b:6f:3c:ab:42: c0:51:60:28:89:b0:63:6a:d9:12:a1:c8:a8:6d:e5: fc:34:04:30:f9:59:8b:32:58:3a:e6:ef:56:e6:a6: ee:1e:51:0f:14:b7:06:b6:0b:ff:94:ee:88:af:9e: f7:b2:85:aa:04:ac:a8:86:be:b5:0f:a3:e0:69:3d: 7b:48:4e:91:42:f8:65:c2:f4:81:e1:e8:a0:1f:ba: 17:5b:a0:9b:61:3d:da:93:50:65:c9:5b:36:ea:1d: 44:9e:53:58:4f:1e:13:01:1d:08:95:08:2e:02:39: c2:38:0f:67:58:d2:b4:48:50:c2:e4:df:8f:55:7d: 64:2d:e0:38:bd:62:55:8d:f5:9d:1e:cb:d8:3e:a4: 46:e0:c5:59:39:75:c5:44:16:53:f6:ca:1d:84:2b: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FA:9E:EA:EC:E8:87:15:A5:E4:F9:A8:53:D1:7E:BF:60:14:6E:17 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:41:c6:9f:c1:07:e4:5b:87:9a:b5:43:fb:56:af:02:2a:14: 80:dd:45:4b:a4:f6:14:fa:9a:6e:7f:e0:53:93:d3:da:2e:6c: 6c:d7:51:91:f2:89:9a:2e:9e:4b:1b:67:81:52:7c:63:9a:ea: bd:20:0c:32:ad:d0:8c:16:19:1d:e1:39:fa:69:0e:25:f3:b2: 73:44:ab:66:b4:78:94:9f:b7:5b:3c:0d:9b:51:23:9e:3e:a0: 15:28:8c:70:1e:ad:f6:09:f2:42:77:e8:d7:66:8d:1a:2c:2e: e1:e7:ec:d0:88:33:5c:4b:dd:49:cb:a2:f7:85:5f:52:df:9f: 98:79:6d:8f:63:9a:21:cf:6d:a0:62:59:c3:56:c6:8b:fa:62: 09:80:ab:98:5a:d9:a1:8a:59:8c:6b:bb:0f:8d:de:e9:92:61: 7a:08:1f:03:87:18:d5:0b:84:4a:2b:2c:b9:42:d9:16:25:6a: ee:85:1d:5c:03:9b:a3:8b:72:03:b8:7a:58:23:f8:ef:2a:ee: a6:24:8c:29:28:78:75:75:26:b5:60:50:96:11:a1:c5:97:80: 26:10:94:cf:63:d3:06:9a:aa:0d:b5:b7:fb:2e:66:fd:0e:dc: 79:2d:f8:ed:1f:29:8c:80:e2:99:42:1e:25:e9:76:c3:fb:a5: 80:78:33:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYxMDI0MjMwODAyWhcNMjYxMDMxMjMwODAyWjAYMRYwFAYD VQQDEw02YWRkM2E1Mi0xYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud6rALB0O/udKo6qUferA8H0B9b5cg4tHiJH5zhyDR0S8AU/7XTZX/pq7FXK Jc6kHfBzBx+UmuP7ghFxpj78CsVLSzH9Xsbr/jxEMnU/+CLZHWgAk+WVm3QuGGSS rGqeBdgHe288q0LAUWAoibBjatkSociobeX8NAQw+VmLMlg65u9W5qbuHlEPFLcG tgv/lO6Ir573soWqBKyohr61D6PgaT17SE6RQvhlwvSB4eigH7oXW6CbYT3ak1Bl yVs26h1EnlNYTx4TAR0IlQguAjnCOA9nWNK0SFDC5N+PVX1kLeA4vWJVjfWdHsvY PqRG4MVZOXXFRBZT9sodhCuTRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/6nurs 6IcVpeT5qFPRfr9gFG4XMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5 YlE1cmF6a1dlMlhDRUpJUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoUHGn8EH5FuHmrVD+1avAioUgN1FS6T2FPqabn/gU5PT2i5sbNdRkfKJmi6e SxtngVJ8Y5rqvSAMMq3QjBYZHeE5+mkOJfOyc0SrZrR4lJ+3WzwNm1Ejnj6gFSiM cB6t9gnyQnfo12aNGiwu4efs0IgzXEvdScui94VfUt+fmHltj2OaIc9toGJZw1bG i/piCYCrmFrZoYpZjGu7D43e6ZJheggfA4cY1QuESissuULZFiVq7oUdXAObo4ty A7h6WCP47yrupiSMKSh4dXUmtWBQlhGhxZeAJhCUz2PTBpqqDbW3+y5m/Q7ceS34 7R8pjIDimUIeJel2w/ulgHgzpQ== -----END CERTIFICATE-----Generated at Mon Oct 26 21:10:36 2026 by rpki-client