$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft File: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft (raw, json) Hash identifier: P+mm3w6PA57NE20esj3794wg8UfLoYyWOl/ATfHdOOg= Subject key identifier: 82:82:35:FD:60:8A:74:A4:5B:6E:33:64:B1:61:29:E4:9A:2A:32:82 Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Certificate serial: 14EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft Manifest number: 14C6 Signing time: Thu 22 Oct 2026 15:25:41 +0000 Manifest this update: Thu 22 Oct 2026 15:25:40 +0000 Manifest next update: Thu 29 Oct 2026 15:25:40 +0000 Files and hashes: 1: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl (hash: u9ap784JyDYbrwkPjhrr19J33raCKmX17f/0XQf+mNg=) 2: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (hash: Ud5rGXdsvm2mwszq8gV1a3f93uHlsVz51C6UOk64thk=) 3: B969D2D0BA4A11EC90B53115C4F9AE02.roa (hash: ifpIwtwH21MGtyhP0efYlv476sZB8oAZKR7P4ILcbsU=) 4: 49678FBCB72B11EC8C8E3017C4F9AE02.roa (hash: +w2vcpHK75X0Tet8/CGiCfjrwOEMZcMJWwhe54Tggdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5359 (0x14ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Validity Not Before: Oct 22 15:25:40 2026 GMT Not After : Oct 29 15:25:40 2026 GMT Subject: CN=6ada2af4-83ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:05:19:45:05:3b:a9:3f:13:34:d2:8f:80: d1:c7:40:76:2f:bb:51:13:13:c0:87:ea:28:9e:13: c4:4d:58:32:e4:fd:4c:e8:5f:7b:4f:7e:b7:79:77: 1d:0c:55:b6:2a:a5:19:48:75:6b:67:70:61:a7:80: 78:7a:2c:b7:b6:a8:cb:72:f0:8e:91:d6:24:3c:49: b2:66:4f:ce:ab:fd:78:71:c1:8b:8d:5e:28:e2:61: d4:68:08:b0:62:c7:50:94:19:ec:df:d0:75:7a:b0: c5:9c:3c:a3:47:b1:c3:ef:5f:96:9c:61:c0:a0:c1: 1a:83:33:a6:eb:02:99:53:56:76:f2:be:5c:20:67: 2e:cb:57:39:38:a2:b4:2f:60:54:17:80:63:f5:04: 08:f2:2e:2b:85:ed:42:63:4f:88:cb:5b:5d:e5:2e: 9c:6d:09:49:79:c8:e9:bd:49:3c:06:71:6d:c1:82: 53:ae:07:88:8f:0c:f1:29:c1:7e:70:96:fa:41:1d: b8:7e:fd:f4:05:36:2c:c9:89:57:72:e7:35:33:54: 8e:9c:f5:7b:05:f2:60:ae:75:a3:5b:43:20:bb:ef: 07:a0:4b:17:9d:8f:21:f9:78:b8:64:e7:d1:8e:ba: a3:bb:40:f6:14:6b:bb:27:73:ca:a6:ce:86:c3:e3: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:82:35:FD:60:8A:74:A4:5B:6E:33:64:B1:61:29:E4:9A:2A:32:82 X509v3 Authority Key Identifier: keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:71:ee:44:51:fa:1a:88:30:f5:43:1d:47:3c:6f:8f:24:0b: 2e:ff:1f:d0:60:9e:62:cc:40:31:ac:41:71:fb:cf:2e:a9:3f: 13:95:25:69:36:16:4f:21:09:7b:50:47:a0:d5:47:bd:14:81: c8:dc:7e:e7:96:19:24:c0:cb:c8:f4:b0:9f:05:bd:c1:d8:e0: fe:4f:5f:0d:63:5e:66:46:9a:a9:c0:ea:63:66:09:b3:bb:aa: 82:c7:e2:d6:15:a1:1f:ee:1d:9e:88:a6:5d:16:00:19:ac:2f: 53:0e:b2:ba:55:48:2c:65:05:aa:8d:53:42:51:41:d2:bb:50: fe:af:68:40:85:31:f9:4b:7a:83:ea:b4:64:d1:3d:3e:de:0d: 53:f9:62:e0:d5:79:9a:46:36:f1:9c:bc:e5:b3:9c:98:7b:e8: e8:d1:18:45:de:33:e3:63:50:bb:9a:74:8f:1f:7c:f5:41:86: 8e:84:ef:00:68:e7:42:77:3e:97:bf:5e:8f:5c:91:f2:eb:b7: bf:cf:79:b9:76:d0:74:d0:1f:28:96:48:ca:ba:66:2f:3a:f9: 5c:ca:a2:d3:67:28:cb:a5:02:ae:86:27:96:b8:64:1a:6f:05: 82:4d:73:eb:7b:2b:64:b7:5e:ae:bb:90:f9:f2:b3:5d:f0:68: 9e:87:ab:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKERBNEI1QzIxMjNCQTlEMEY4MDIzNzhEQURERDQ4MDFC NTY3MEEzRUQwHhcNMjYxMDIyMTUyNTQwWhcNMjYxMDI5MTUyNTQwWjAYMRYwFAYD VQQDEw02YWRhMmFmNC04M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4IFGUUFO6k/EzTSj4DRx0B2L7tRExPAh+oonhPETVgy5P1M6F97T363eXcd DFW2KqUZSHVrZ3Bhp4B4eiy3tqjLcvCOkdYkPEmyZk/Oq/14ccGLjV4o4mHUaAiw YsdQlBns39B1erDFnDyjR7HD71+WnGHAoMEagzOm6wKZU1Z28r5cIGcuy1c5OKK0 L2BUF4Bj9QQI8i4rhe1CY0+Iy1td5S6cbQlJecjpvUk8BnFtwYJTrgeIjwzxKcF+ cJb6QR24fv30BTYsyYlXcuc1M1SOnPV7BfJgrnWjW0Mgu+8HoEsXnY8h+Xi4ZOfR jrqju0D2FGu7J3PKps6Gw+O6vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKCNf1g inSkW24zZLFhKeSaKjKCMB8GA1UdIwQYMBaAFNpLXCEjup0PgCN42t3UgBtWcKPt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wNzQ5NTg5MDkx ODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5RLUFJM2phM2RTQUcxWndv LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJrdGNJU082blEtQUkzamEzZFNBRzFad28tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wNzQ5NTg5MDkxODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5R LUFJM2phM2RTQUcxWndvLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE3HuRFH6Gogw9UMdRzxvjyQLLv8f0GCeYsxAMaxBcfvPLqk/E5UlaTYWTyEJ e1BHoNVHvRSByNx+55YZJMDLyPSwnwW9wdjg/k9fDWNeZkaaqcDqY2YJs7uqgsfi 1hWhH+4dnoimXRYAGawvUw6yulVILGUFqo1TQlFB0rtQ/q9oQIUx+Ut6g+q0ZNE9 Pt4NU/li4NV5mkY28Zy85bOcmHvo6NEYRd4z42NQu5p0jx989UGGjoTvAGjnQnc+ l79ej1yR8uu3v895uXbQdNAfKJZIyrpmLzr5XMqi02coy6UCroYnlrhkGm8Fgk1z 63srZLderruQ+fKzXfBonoerDQ== -----END CERTIFICATE-----Generated at Thu Oct 22 18:29:52 2026 by rpki-client