$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: eaz+mbb0M5Up7/Wlk0jxd0UOM5TbLCMMkJZuCe6bWqw= Subject key identifier: A6:48:33:8C:75:5D:7D:F1:02:7E:69:E6:43:DF:19:63:2C:05:4D:FC Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1C19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1BE9 Signing time: Mon 02 Nov 2026 16:19:04 +0000 Manifest this update: Mon 02 Nov 2026 16:19:04 +0000 Manifest next update: Mon 09 Nov 2026 16:19:04 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: bH+x5+ysLQvY/AHTBfV3ysgrXjMABE9LGeRAQLyhWkA=) 2: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: nSC5zdMsQPFLTo2n37S2hHT1g8ZFIDvzCzjnrqu5sXM=) 3: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (hash: OGm0uB3FR35hN/gFsyIV99ObU52GXmXg7+3oLUUM2jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 16:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7193 (0x1c19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Nov 2 16:19:04 2026 GMT Not After : Nov 9 16:19:04 2026 GMT Subject: CN=6ae8b7f8-d621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:89:32:66:2e:d4:06:b4:6d:dc:9b:fd:c4: 66:77:f4:a4:2a:63:67:ae:13:94:88:65:0d:6a:c9: 89:63:ee:d6:d1:4a:05:0b:58:0e:6a:0a:ca:1c:d1: 0e:6c:61:63:f2:0a:20:23:54:34:60:91:fb:dc:6c: 95:20:eb:e9:aa:0d:cd:94:68:1d:cb:d2:86:49:b4: a9:ca:d6:6e:75:16:12:8b:7e:83:32:fa:12:a1:0e: bd:73:27:16:3c:13:62:a5:db:90:43:e9:b9:2d:da: 42:4d:8d:d4:1c:1b:64:c7:f9:c1:f3:f6:c7:ec:63: 18:72:18:8d:f8:eb:82:62:7d:e9:9e:3e:49:94:fa: 90:fe:9b:a5:9b:8e:ee:25:bd:13:c4:1e:e8:10:33: a9:53:07:5a:b3:87:7d:44:6e:da:00:60:74:ae:75: 0f:11:9c:92:23:31:f5:b4:36:97:02:6b:ce:29:c7: b2:85:ae:7b:9a:6b:bb:ad:4d:b2:7b:b0:f4:8b:8f: 8e:9a:d6:f8:17:09:41:00:9e:f0:87:af:54:99:c7: 52:c2:b2:f5:d6:4b:e9:eb:18:d9:94:49:88:85:58: 98:86:9d:65:47:0f:90:0c:de:40:71:52:9c:7a:8c: ca:eb:d7:79:68:c5:23:34:de:24:c0:24:71:66:49: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:48:33:8C:75:5D:7D:F1:02:7E:69:E6:43:DF:19:63:2C:05:4D:FC X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:da:ef:f6:72:18:ca:6d:9b:de:33:e9:2f:5b:a6:7a:ba:c4: 9f:97:26:7a:e4:a2:91:5c:a9:46:ab:8e:a2:69:ff:5d:85:01: bc:40:77:01:25:57:7c:a0:97:21:31:b6:a6:20:74:fe:1c:b0: 25:ef:d4:bd:bd:8f:80:ef:d4:29:92:be:0e:2e:f6:db:ab:2b: ee:c7:a3:37:d2:9b:f8:9d:ce:24:62:c8:dd:06:56:e7:a6:e0: b9:25:97:2c:7b:35:e7:7a:ea:65:57:1e:c8:57:46:3f:b2:11: 12:9f:90:13:c0:0c:8f:4f:df:12:0b:2a:e1:14:57:22:ed:d5: 92:aa:bf:8b:a7:5c:99:e4:e6:92:7c:74:f6:e8:d3:61:f7:b0: 7d:21:cc:4b:9e:63:77:9f:e9:b0:ee:59:b0:5c:ea:f6:b7:1b: 0d:00:9f:0f:dc:a6:6c:55:90:21:42:6c:11:61:43:e8:93:75: a8:fb:ce:40:54:35:89:39:e7:03:29:c8:da:41:e1:c9:de:85: c6:b0:2d:4b:fa:5c:44:df:ed:92:bc:86:5f:32:e4:af:ba:dd: 57:5b:9e:b8:66:78:b9:ae:54:3d:1e:04:77:48:8a:42:fd:8b: d0:c8:3f:d4:03:ec:3b:aa:1f:f7:6a:dd:b5:18:28:8e:a9:80: 2f:a5:bd:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjYxMTAyMTYxOTA0WhcNMjYxMTA5MTYxOTA0WjAYMRYwFAYD VQQDEw02YWU4YjdmOC1kNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuayJMmYu1Aa0bdyb/cRmd/SkKmNnrhOUiGUNasmJY+7W0UoFC1gOagrKHNEO bGFj8gogI1Q0YJH73GyVIOvpqg3NlGgdy9KGSbSpytZudRYSi36DMvoSoQ69cycW PBNipduQQ+m5LdpCTY3UHBtkx/nB8/bH7GMYchiN+OuCYn3pnj5JlPqQ/pulm47u Jb0TxB7oEDOpUwdas4d9RG7aAGB0rnUPEZySIzH1tDaXAmvOKceyha57mmu7rU2y e7D0i4+Omtb4FwlBAJ7wh69UmcdSwrL11kvp6xjZlEmIhViYhp1lRw+QDN5AcVKc eozK69d5aMUjNN4kwCRxZkldBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZIM4x1 XX3xAn5p5kPfGWMsBU38MB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkNrv9nIYym2b3jPpL1umerrEn5cmeuSikVypRquOomn/XYUBvEB3ASVXfKCX ITG2piB0/hywJe/Uvb2PgO/UKZK+Di7226sr7sejN9Kb+J3OJGLI3QZW56bguSWX LHs153rqZVceyFdGP7IREp+QE8AMj0/fEgsq4RRXIu3Vkqq/i6dcmeTmknx09ujT YfewfSHMS55jd5/psO5ZsFzq9rcbDQCfD9ymbFWQIUJsEWFD6JN1qPvOQFQ1iTnn AynI2kHhyd6FxrAtS/pcRN/tkryGXzLkr7rdV1ueuGZ4ua5UPR4Ed0iKQv2L0Mg/ 1APsO6of92rdtRgojqmAL6W9Pw== -----END CERTIFICATE-----Generated at Tue Nov 3 12:58:56 2026 by rpki-client