$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: i5MTiEP+BFxspvKa4F3SKrW1jhNDCXWTCRuiu+UrwgI= Subject key identifier: 69:07:EB:E4:0E:A5:DF:0B:DB:70:39:C5:90:93:75:0F:09:9D:11:DD Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 01A1 Signing time: Sun 01 Nov 2026 05:25:07 +0000 Manifest this update: Sun 01 Nov 2026 05:25:06 +0000 Manifest next update: Sun 08 Nov 2026 05:25:06 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: XK1NFzV0IxKw/sEkefA/SKtLwCmVyqIbNKrT3MQU+zc=) 2: DF6D4464818211F097447962C4F9AE02.roa (hash: ECp6iTOoC7ugUrkKriIznxv1yN7v34fWx9R69XQA+Mk=) 3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: 4Kp8/F948IGItMQRXGhC5wmWo1Mqzonrab9/ibHUE4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 05:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Nov 1 05:25:06 2026 GMT Not After : Nov 8 05:25:06 2026 GMT Subject: CN=6ae6cd32-88e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:ef:13:a8:35:14:bf:b9:c4:4a:35:9f:62: 4e:03:ec:d9:ac:58:83:4b:02:74:61:62:c1:21:92: c6:2e:7b:c7:28:cb:19:cd:81:d5:84:29:fd:20:4f: d6:08:84:ac:9c:bf:15:de:a4:05:f8:c2:db:7c:78: 89:c6:31:5d:d8:88:bc:45:f7:bc:bd:43:1f:a7:f3: 2b:e4:7f:39:66:6e:24:b3:bf:3b:15:84:f8:aa:80: c7:5f:d7:e3:66:5e:68:b7:ab:da:04:c4:6f:ff:e3: e7:8b:70:f5:53:95:51:f1:8f:52:22:24:b0:ba:46: ba:b7:6b:95:fc:fc:a4:0d:0f:3a:e2:dd:fb:4e:0c: b6:ef:48:46:c9:97:1e:66:76:05:88:09:39:7a:a0: 1f:ff:6d:9b:c6:b4:1c:76:67:e8:f0:bc:8c:b8:5e: 01:3f:72:f0:aa:2a:c3:27:f2:f1:d4:5d:a6:58:b4: 3d:92:07:2f:ac:d1:d1:da:e2:9c:3b:c6:09:d4:25: b3:4d:f8:ea:2d:f6:60:f8:cd:ed:f8:cf:4e:fc:09: 48:91:d3:02:06:28:84:ff:43:c0:09:f3:77:38:d5: 2a:de:af:4a:48:91:51:ab:7c:f1:c5:eb:82:76:78: 41:95:32:56:a0:0c:de:13:9d:21:47:ee:32:86:ab: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:07:EB:E4:0E:A5:DF:0B:DB:70:39:C5:90:93:75:0F:09:9D:11:DD X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:33:70:d1:6d:cf:94:ff:11:06:77:ac:de:87:91:bd:01:c3: 50:de:14:fe:f0:2f:14:18:d6:4c:4e:91:15:da:5d:ae:d6:4b: 14:fa:0b:bb:30:d0:00:62:bd:f4:25:4b:49:fe:52:df:4d:91: 01:fa:3b:d5:b9:26:de:50:54:41:49:76:37:d7:2d:28:32:23: ff:11:62:b8:98:38:37:42:a9:37:6a:1d:00:31:8a:17:8c:3f: 90:e3:76:2a:e5:7a:b8:d5:26:50:37:99:a4:9d:68:01:db:3c: 4d:b8:cb:6b:70:a2:89:e5:cc:48:e8:f2:5c:ce:5a:1b:25:e5: 4f:dc:7e:31:6e:4a:58:e7:44:d9:1b:ff:df:ee:72:5e:00:48: 4b:ef:6d:0c:c3:db:96:82:2a:29:06:ac:ca:14:8a:15:2d:85: 12:e4:fc:60:84:15:7a:f0:4d:d1:4b:ba:a5:f5:aa:ed:82:f6: d4:a2:4c:ca:50:70:fb:91:a5:18:a7:19:ac:c8:f3:56:ef:04: ee:2b:fc:42:9e:2e:7e:ee:f4:3c:d3:e1:2b:c8:1e:c6:3c:2b: 89:69:73:5f:92:54:a1:78:f0:cf:b9:23:29:25:f8:b1:8c:28: f1:a8:bb:72:1e:4e:65:d0:61:ae:ba:e4:9c:67:5c:f7:63:2f: 76:71:27:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjYxMTAxMDUyNTA2WhcNMjYxMTA4MDUyNTA2WjAYMRYwFAYD VQQDEw02YWU2Y2QzMi04OGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFXvE6g1FL+5xEo1n2JOA+zZrFiDSwJ0YWLBIZLGLnvHKMsZzYHVhCn9IE/W CISsnL8V3qQF+MLbfHiJxjFd2Ii8Rfe8vUMfp/Mr5H85Zm4ks787FYT4qoDHX9fj Zl5ot6vaBMRv/+Pni3D1U5VR8Y9SIiSwuka6t2uV/PykDQ864t37Tgy270hGyZce ZnYFiAk5eqAf/22bxrQcdmfo8LyMuF4BP3LwqirDJ/Lx1F2mWLQ9kgcvrNHR2uKc O8YJ1CWzTfjqLfZg+M3t+M9O/AlIkdMCBiiE/0PACfN3ONUq3q9KSJFRq3zxxeuC dnhBlTJWoAzeE50hR+4yhqvgLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkH6+QO pd8L23A5xZCTdQ8JnRHdMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOzNw0W3PlP8RBnes3oeRvQHDUN4U/vAvFBjWTE6RFdpdrtZLFPoLuzDQAGK9 9CVLSf5S302RAfo71bkm3lBUQUl2N9ctKDIj/xFiuJg4N0KpN2odADGKF4w/kON2 KuV6uNUmUDeZpJ1oAds8TbjLa3CiieXMSOjyXM5aGyXlT9x+MW5KWOdE2Rv/3+5y XgBIS+9tDMPbloIqKQasyhSKFS2FEuT8YIQVevBN0Uu6pfWq7YL21KJMylBw+5Gl GKcZrMjzVu8E7iv8Qp4ufu70PNPhK8gexjwriWlzX5JUoXjwz7kjKSX4sYwo8ai7 ch5OZdBhrrrknGdc92MvdnEnXw== -----END CERTIFICATE-----Generated at Mon Nov 2 21:56:54 2026 by rpki-client