$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: If7A7yRETkvqfiXb6+UBHo98R2v/l2+QUGGoKlXeeuE= Subject key identifier: A1:FC:19:48:C1:5E:21:47:50:6A:59:C7:3A:59:DC:39:A0:C8:F1:62 Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 03AB Signing time: Fri 09 Oct 2026 00:47:16 +0000 Manifest this update: Fri 09 Oct 2026 00:47:16 +0000 Manifest next update: Fri 16 Oct 2026 00:47:16 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: S4XWFxjsWngOE2UI6W9SUMam0jOnIKkP7Wuuwz/DDxE=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Q6NYe2Vl6swnL94bFMvFyQ1nEGZFVn7Br4W4RJTVQEQ=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: OIfGssLEQpbD7cZsL0poYC+ggBlzdXE7TwY8gIPebIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: Oct 9 00:47:16 2026 GMT Not After : Oct 16 00:47:16 2026 GMT Subject: CN=6ac83994-3f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:da:2a:f9:98:98:6c:76:31:11:b2:0f:fa: 62:da:47:41:b9:e0:83:0e:ca:2a:e2:1d:4c:9c:11: 76:f1:89:df:45:09:76:df:a3:d6:3d:3b:6c:c5:04: 2e:7e:43:15:0a:79:54:6b:82:19:81:2f:58:61:47: c3:d6:96:99:4d:73:ae:31:88:a5:5b:21:48:63:95: 42:7c:99:a6:9d:a0:51:ac:50:2a:6c:35:69:3d:75: 6e:00:b9:c6:d1:03:7e:3f:b6:7d:0f:11:3e:5d:ae: dc:18:5c:2d:b7:1a:c1:9f:fd:69:f4:5c:e6:8b:b8: 97:7d:be:32:6d:da:47:54:ed:93:2e:45:17:20:74: 05:e7:4e:f3:98:25:22:5c:56:0c:f8:a2:8b:a1:bd: bc:7f:d2:a5:a4:c3:fa:7d:b2:98:97:3a:d0:ab:d1: a9:2a:ec:5b:01:cc:de:64:3c:60:a8:6b:7b:0f:2b: c0:10:de:e6:1c:27:54:b6:ef:45:49:99:d6:81:19: 56:35:0e:b8:61:58:42:97:5f:6b:29:a6:b2:b0:26: cb:f1:0c:e0:d9:cd:0e:40:db:14:70:73:8c:c4:c3: d9:4e:02:aa:3b:dc:70:25:5d:e0:22:e8:e0:04:20: b4:20:e8:fc:4e:4b:7a:2b:a6:9c:b7:f7:84:fa:a1: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FC:19:48:C1:5E:21:47:50:6A:59:C7:3A:59:DC:39:A0:C8:F1:62 X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:be:ce:83:2e:c5:d9:90:04:5e:d6:91:9e:21:9f:ad:48:ff: 35:0f:24:cc:2e:5a:f2:7d:b9:88:09:7d:bf:aa:3d:40:f2:d2: 9e:f9:b8:62:62:53:4c:5d:5a:bd:50:82:1c:54:6e:2d:0a:1c: 09:f1:bb:7d:f8:b0:d4:4c:fc:61:d7:c6:eb:76:56:80:1d:a1: 88:4f:aa:a6:dc:bf:15:53:51:31:3d:f1:8d:0a:80:d6:d3:37: 05:cc:cf:3d:05:bb:3b:e3:90:b0:bc:f5:b4:75:8b:7a:57:97: 50:03:df:e1:f4:1e:67:58:2b:6c:3a:a7:1d:ff:ef:a9:72:26: 09:d4:4d:a7:d3:db:b9:84:91:35:29:72:db:05:57:67:63:ab: 3f:07:86:d9:35:c5:54:85:5e:a1:8f:4a:ba:48:d6:f9:24:58: 56:a8:43:67:84:13:6d:7a:0b:fb:05:c0:1a:cf:d8:cd:07:71: 59:26:35:ce:2e:d6:2a:af:01:62:a3:4a:a9:ba:a2:bb:68:97: 01:f7:df:e6:15:18:dc:aa:ca:85:74:51:57:58:ff:e7:d9:d0: b7:ac:11:27:35:ba:5d:c6:2a:ad:88:ac:7b:8d:a1:0c:42:dc: 28:8e:1c:c5:b8:8d:76:60:81:37:81:f6:8e:99:12:06:23:ff: 15:4c:f0:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjYxMDA5MDA0NzE2WhcNMjYxMDE2MDA0NzE2WjAYMRYwFAYD VQQDEw02YWM4Mzk5NC0zZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU/aKvmYmGx2MRGyD/pi2kdBueCDDsoq4h1MnBF28YnfRQl236PWPTtsxQQu fkMVCnlUa4IZgS9YYUfD1paZTXOuMYilWyFIY5VCfJmmnaBRrFAqbDVpPXVuALnG 0QN+P7Z9DxE+Xa7cGFwttxrBn/1p9Fzmi7iXfb4ybdpHVO2TLkUXIHQF507zmCUi XFYM+KKLob28f9KlpMP6fbKYlzrQq9GpKuxbAczeZDxgqGt7DyvAEN7mHCdUtu9F SZnWgRlWNQ64YVhCl19rKaaysCbL8Qzg2c0OQNsUcHOMxMPZTgKqO9xwJV3gIujg BCC0IOj8Tkt6K6act/eE+qEwPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKH8GUjB XiFHUGpZxzpZ3DmgyPFiMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlb7Ogy7F2ZAEXtaRniGfrUj/NQ8kzC5a8n25iAl9v6o9QPLSnvm4YmJTTF1a vVCCHFRuLQocCfG7ffiw1Ez8YdfG63ZWgB2hiE+qpty/FVNRMT3xjQqA1tM3BczP PQW7O+OQsLz1tHWLeleXUAPf4fQeZ1grbDqnHf/vqXImCdRNp9PbuYSRNSly2wVX Z2OrPweG2TXFVIVeoY9KukjW+SRYVqhDZ4QTbXoL+wXAGs/YzQdxWSY1zi7WKq8B YqNKqbqiu2iXAfff5hUY3KrKhXRRV1j/59nQt6wRJzW6XcYqrYise42hDELcKI4c xbiNdmCBN4H2jpkSBiP/FUzwCw== -----END CERTIFICATE-----Generated at Fri Oct 9 04:50:38 2026 by rpki-client