$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft File: sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json) Hash identifier: CEkkRsNmAprOlFDz6ofXSLzPpR/DF1GhXtUbm2RMK4E= Subject key identifier: 91:8A:78:B3:8F:A3:A1:8F:21:BC:8E:D0:E0:8C:47:F9:DD:7A:CF:4D Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft Manifest number: 016C Signing time: Tue 27 Oct 2026 05:11:00 +0000 Manifest this update: Tue 27 Oct 2026 05:11:00 +0000 Manifest next update: Tue 03 Nov 2026 05:11:00 +0000 Files and hashes: 1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: Wop9SeFWiHjtpL6KddcLawPxrD/MbOolzLe7Ph34f/A=) 2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: vVE/wYQljIOEW6qq0MvXd9SjBMo9AS5Tw8SXEPHuwyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 05:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Validity Not Before: Oct 27 05:11:00 2026 GMT Not After : Nov 3 05:11:00 2026 GMT Subject: CN=6ae03264-7b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:c8:fa:b5:d8:62:84:2d:68:38:85:8c:b7: 3d:c7:28:6c:40:de:e1:6e:c2:2c:db:6a:82:49:8f: 23:89:c5:e3:82:b4:2f:94:91:70:23:f9:2f:80:65: 25:e1:d5:0e:4a:b3:eb:e4:88:8e:83:b9:72:57:0d: 99:5d:7d:22:43:5b:82:01:ee:5e:04:78:49:ad:ef: 89:7a:13:71:04:5a:55:b6:48:83:2b:c4:09:76:c5: 01:ff:e5:57:e0:98:17:32:51:77:27:d9:fc:da:c1: f3:1e:84:dd:65:6a:62:bf:55:a9:3f:d0:49:26:f9: 4a:27:19:e1:4c:eb:a6:89:bb:ee:9d:d6:24:5f:2a: 7f:80:14:c5:46:df:26:95:b7:70:49:eb:75:fb:66: 8b:0e:37:d0:18:5f:9d:07:61:49:2c:31:d2:5b:92: 66:a1:cc:e4:14:11:b6:e0:00:7d:eb:f2:ca:c6:4e: 70:84:06:90:75:74:d0:79:96:1a:4b:38:37:da:3d: 58:fd:08:7b:09:5e:76:44:56:5f:bf:b3:32:3c:72: 5a:30:ce:8b:4f:73:4a:01:e6:e6:81:0a:54:2a:be: 3d:39:eb:90:29:1f:fb:38:41:dd:fc:11:9b:de:31: 18:ac:25:ee:65:9f:fa:f1:ee:06:17:3b:c5:28:f7: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:78:B3:8F:A3:A1:8F:21:BC:8E:D0:E0:8C:47:F9:DD:7A:CF:4D X509v3 Authority Key Identifier: keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:77:cf:f0:da:fe:e3:57:79:b5:c1:fb:83:22:e8:3a:20:ad: 94:09:42:e8:65:8b:73:f4:df:44:b8:f7:ca:60:9a:2f:04:2d: 90:1b:6f:49:fa:22:f3:73:92:e9:d7:98:a8:ed:bf:32:96:65: 96:63:9b:00:56:66:36:22:84:3b:f1:0e:e8:d1:20:f5:b8:f3: 86:28:53:ba:97:8b:51:90:1d:7b:4b:86:68:a4:5c:6d:9f:b4: 39:88:2f:1d:bd:54:d4:10:21:a4:18:aa:4e:be:05:66:57:2a: 1e:53:85:46:07:db:d9:61:19:f7:a6:23:2e:a5:9b:b2:45:db: bc:30:06:0a:9e:ce:99:6a:dd:b0:77:a6:38:1a:7b:62:42:3e: fd:0d:db:35:e0:0f:49:cd:af:a8:fc:9a:f5:ff:0a:cd:04:04: 0f:72:78:c2:1b:f7:51:d9:35:74:17:36:aa:9b:19:1c:ad:1c: 30:4e:bc:66:02:c7:6e:e9:a5:33:7c:06:0d:d1:03:8d:a2:50: 46:c9:67:6b:69:17:41:32:bd:65:49:19:d5:2b:40:89:7a:6d: 9d:fe:61:87:4a:c0:04:e1:03:0b:f1:40:e4:40:08:07:48:32: a9:97:29:43:98:0f:d6:52:90:56:79:f5:f0:0f:02:57:8b:79: 86:ce:2b:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUyMEYxMTAvBgNVBAUTKEIxQkQ0REIwMjFGNTRDNzI2M0YzQzM1MzVGODgzNjg0 OUJBMkU2MEUwHhcNMjYxMDI3MDUxMTAwWhcNMjYxMTAzMDUxMTAwWjAYMRYwFAYD VQQDEw02YWUwMzI2NC03YjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoA3I+rXYYoQtaDiFjLc9xyhsQN7hbsIs22qCSY8jicXjgrQvlJFwI/kvgGUl 4dUOSrPr5IiOg7lyVw2ZXX0iQ1uCAe5eBHhJre+JehNxBFpVtkiDK8QJdsUB/+VX 4JgXMlF3J9n82sHzHoTdZWpiv1WpP9BJJvlKJxnhTOumibvundYkXyp/gBTFRt8m lbdwSet1+2aLDjfQGF+dB2FJLDHSW5JmoczkFBG24AB96/LKxk5whAaQdXTQeZYa Szg32j1Y/Qh7CV52RFZfv7MyPHJaMM6LT3NKAebmgQpUKr49OeuQKR/7OEHd/BGb 3jEYrCXuZZ/68e4GFzvFKPe73wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGKeLOP o6GPIbyO0OCMR/ndes9NMB8GA1UdIwQYMBaAFLG9TbAh9UxyY/PDU1+INoSbouYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTIwRi80MUNDQkM2RUE4 MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRISmo4OE5UWDRnMmhKdWk1 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NiMU5zQ0gxVEhKajg4TlRYNGcyaEp1aTVnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTIwRi80MUNDQkM2RUE4MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRI Smo4OE5UWDRnMmhKdWk1ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASXfP8Nr+41d5tcH7gyLoOiCtlAlC6GWLc/TfRLj3ymCaLwQtkBtvSfoi83OS 6deYqO2/MpZllmObAFZmNiKEO/EO6NEg9bjzhihTupeLUZAde0uGaKRcbZ+0OYgv Hb1U1BAhpBiqTr4FZlcqHlOFRgfb2WEZ96YjLqWbskXbvDAGCp7OmWrdsHemOBp7 YkI+/Q3bNeAPSc2vqPya9f8KzQQED3J4whv3Udk1dBc2qpsZHK0cME68ZgLHbuml M3wGDdEDjaJQRslna2kXQTK9ZUkZ1StAiXptnf5hh0rABOEDC/FA5EAIB0gyqZcp Q5gP1lKQVnn18A8CV4t5hs4rBw== -----END CERTIFICATE-----Generated at Tue Oct 27 20:49:13 2026 by rpki-client