$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: EpWjEKDMtHBI6NERwId+x6TXn64GoSFxHUQnYOiAVB4= Subject key identifier: C6:63:CD:DB:6F:94:DA:B5:2B:01:FD:40:83:22:4F:DE:41:60:47:CA Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 0595 Signing time: Tue 20 Oct 2026 23:30:48 +0000 Manifest this update: Tue 20 Oct 2026 23:30:48 +0000 Manifest next update: Tue 27 Oct 2026 23:30:48 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: hcWQkZUxO7gqsbndolPE6CgKMAC0YEy5uhFoLd992Gk=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: UtLN9LK6PXWEEFxc1KoSs2w5t7H8ccMsoGEgQElh3YE=) 3: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: 4s7irTp5YZt4t4JUuvpt1hajQ6RV33feyUo5ylQX8mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 23:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Oct 20 23:30:48 2026 GMT Not After : Oct 27 23:30:48 2026 GMT Subject: CN=6ad7f9a8-a0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:9a:f9:99:65:1b:f9:c6:a0:5e:18:9f:6d: 36:60:65:b0:c1:aa:c7:bd:b6:31:5e:2c:2c:3e:ae: 88:76:ba:84:72:de:6e:81:30:af:e0:6a:c1:42:05: 6d:8b:b3:98:52:d4:9a:d1:e3:87:75:37:67:3d:1f: 0a:39:20:7b:ea:56:03:1c:e0:0a:dd:b4:f5:2e:1f: 14:b0:24:8d:b6:75:d2:4c:1f:2f:25:c5:ed:56:74: 67:9d:f8:db:cf:88:f8:a9:f5:40:1c:bc:5d:ac:2a: 7a:39:aa:6b:ea:ac:58:14:94:f7:6f:09:2d:45:09: dd:44:d9:90:87:bc:62:a6:5a:56:04:18:c1:56:e9: ae:b3:e7:7c:e3:ec:3c:66:70:84:32:66:59:bc:9f: 0c:0e:30:9a:28:f7:56:f8:4b:7b:a2:f5:fd:8f:dd: b1:6f:26:2f:98:98:ef:49:b8:02:0b:da:a4:64:6a: 27:e0:58:ee:52:22:ea:71:e6:d4:ee:15:28:5e:6d: da:aa:d5:b6:c3:60:3f:4c:21:ba:d1:ec:d8:65:6b: 16:9e:b3:c3:86:b7:b1:47:38:89:29:81:18:e8:4e: f1:8e:59:28:9d:7c:57:4d:e7:24:1e:29:44:d3:4e: b8:53:32:04:8f:86:5a:a4:52:07:3d:ea:b5:0d:2d: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:CD:DB:6F:94:DA:B5:2B:01:FD:40:83:22:4F:DE:41:60:47:CA X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:43:87:24:9c:e8:e6:79:d6:27:6a:7b:b9:5e:f2:7e:62:51: 20:17:44:07:bc:54:da:de:41:8d:b6:27:48:73:9e:27:0b:d9: b6:9f:36:a7:98:88:60:98:b4:fa:41:ae:ac:fc:0b:ae:96:b2: 87:5a:a2:b8:b4:89:f9:3b:57:b5:86:6a:88:93:d9:df:c5:63: 8d:0c:99:2e:80:79:34:8f:e6:c6:74:a7:88:59:d5:55:14:75: 67:ee:94:07:19:db:31:ea:05:a4:d4:90:6a:06:79:02:df:06: f0:b1:fb:17:97:0e:7b:5f:6c:b8:e0:01:1c:b8:83:e1:4b:90: 39:45:f3:93:c0:74:1e:2d:1d:94:ce:6a:b9:07:0b:fd:ea:4f: 83:77:4e:37:05:15:49:e6:d0:8b:2f:52:dd:f9:38:56:a6:79: a2:5e:fa:51:1d:5e:e0:0b:4e:1a:01:87:4a:85:11:53:f1:88: 03:ca:1b:9f:70:6d:2b:ad:e4:d9:02:71:e7:df:43:4c:c8:0b: db:ee:6f:80:7e:65:94:b5:27:4b:30:62:7d:bc:b0:cd:32:32: 06:da:fd:91:36:d5:2d:75:bf:82:4b:ac:b3:d9:24:7c:4b:6c: 4c:73:57:b4:61:74:91:cb:d1:2a:3c:b0:18:3d:cd:c5:5d:31: d9:f8:23:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjYxMDIwMjMzMDQ4WhcNMjYxMDI3MjMzMDQ4WjAYMRYwFAYD VQQDEw02YWQ3ZjlhOC1hMGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqWa+ZllG/nGoF4Yn202YGWwwarHvbYxXiwsPq6IdrqEct5ugTCv4GrBQgVt i7OYUtSa0eOHdTdnPR8KOSB76lYDHOAK3bT1Lh8UsCSNtnXSTB8vJcXtVnRnnfjb z4j4qfVAHLxdrCp6Oapr6qxYFJT3bwktRQndRNmQh7xiplpWBBjBVumus+d84+w8 ZnCEMmZZvJ8MDjCaKPdW+Et7ovX9j92xbyYvmJjvSbgCC9qkZGon4FjuUiLqcebU 7hUoXm3aqtW2w2A/TCG60ezYZWsWnrPDhrexRziJKYEY6E7xjlkonXxXTeckHilE 0064UzIEj4ZapFIHPeq1DS2o+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZjzdtv lNq1KwH9QIMiT95BYEfKMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOkOHJJzo5nnWJ2p7uV7yfmJRIBdEB7xU2t5BjbYnSHOeJwvZtp82p5iIYJi0 +kGurPwLrpayh1qiuLSJ+TtXtYZqiJPZ38VjjQyZLoB5NI/mxnSniFnVVRR1Z+6U BxnbMeoFpNSQagZ5At8G8LH7F5cOe19suOABHLiD4UuQOUXzk8B0Hi0dlM5quQcL /epPg3dONwUVSebQiy9S3fk4VqZ5ol76UR1e4AtOGgGHSoURU/GIA8obn3BtK63k 2QJx599DTMgL2+5vgH5llLUnSzBifbywzTIyBtr9kTbVLXW/gkuss9kkfEtsTHNX tGF0kcvRKjywGD3NxV0x2fgj/A== -----END CERTIFICATE-----Generated at Thu Oct 22 08:16:44 2026 by rpki-client