$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json) Hash identifier: 5enoS27EOrD8i7Lo+aTokP7Rzw70VTDXU9P3wmPEU7c= Subject key identifier: 9B:A3:65:5C:87:A5:BA:50:B5:55:7C:40:E9:86:A6:C9:F5:23:3E:19 Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft Manifest number: 0D17 Signing time: Mon 26 Oct 2026 18:23:06 +0000 Manifest this update: Mon 26 Oct 2026 18:23:05 +0000 Manifest next update: Mon 02 Nov 2026 18:23:05 +0000 Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: VvneTF31s58FeKp9S7RLFv9cWVLxIEtkCrIiA/noTV0=) 2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Validity Not Before: Oct 26 18:23:05 2026 GMT Not After : Nov 2 18:23:05 2026 GMT Subject: CN=6adf9a89-f348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:59:f3:96:46:ad:f0:a4:2e:d6:c8:fb:a4: 25:c8:5f:2d:2f:77:ed:13:43:26:17:53:1e:eb:08: 7d:4f:7c:bb:71:3f:25:bf:62:62:cc:2d:f2:55:81: 94:61:c2:50:aa:98:70:e4:79:41:cd:71:d8:0f:21: e2:34:77:ff:22:a5:f9:c3:a5:1e:ad:be:61:d9:4b: 87:46:25:79:bd:07:e0:2f:f0:d4:0d:68:ca:97:f2: 23:4d:f4:9a:8f:27:43:a6:6e:52:d2:f3:8f:87:7d: ee:d8:8c:ff:56:15:37:1b:30:25:4f:33:60:98:a3: e7:b8:22:99:07:36:e6:b7:54:d4:1e:e2:79:ae:3b: a3:bf:83:81:b4:d1:0a:e4:c3:06:21:11:fb:a1:ba: f4:d5:a2:f2:fb:0b:bf:0a:f0:08:26:59:8b:2c:fa: 1e:40:de:89:48:7d:76:0d:a7:54:bb:a5:b0:8d:fa: bc:a2:f7:b5:0a:89:44:67:7f:5b:13:1e:82:65:7d: 87:d5:5c:86:35:87:08:02:c3:9f:47:bb:db:8e:4d: d8:49:4d:ad:6f:95:e1:87:0e:3d:e1:3d:19:56:00: 11:bb:e9:9e:86:3e:cb:22:27:0e:30:ab:be:9f:09: d0:e6:a3:f2:30:c6:60:03:0e:d0:e3:e1:3f:07:f8: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A3:65:5C:87:A5:BA:50:B5:55:7C:40:E9:86:A6:C9:F5:23:3E:19 X509v3 Authority Key Identifier: keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b1:b3:9e:ad:68:2b:bb:21:99:c1:ce:b6:52:d4:18:c1:9f: 50:97:08:bd:8e:22:6e:e0:74:48:dc:82:bb:a7:82:2b:c6:b4: ff:42:e5:9b:2a:3e:db:80:e7:57:55:60:9a:e9:b8:84:44:f2: ae:37:4d:b5:38:10:03:ae:9f:6e:9f:ac:e5:b0:c8:f3:ab:87: 9d:15:98:5f:a3:54:13:38:06:29:5d:21:3e:07:3f:25:0b:e7: db:27:6c:6d:d6:b2:4b:b1:01:83:bc:d5:03:63:01:4b:79:1d: b7:d0:8f:81:11:be:f7:55:3b:36:77:84:88:d0:1c:f3:e5:d1: ae:d9:40:af:44:ec:19:a7:46:e9:9f:3e:75:50:c5:ed:4f:19: 13:4e:27:d7:e8:8d:04:1c:98:6c:7a:c0:dc:1f:ab:56:d4:dc: 92:21:4a:7a:34:90:08:f3:70:a6:75:31:f5:06:b4:a4:83:ea: bb:d7:0b:83:2e:e9:17:6b:94:da:c0:75:28:01:a5:42:8c:7c: 68:6a:bf:58:f0:3a:b5:31:a3:9e:e9:b0:ca:55:e7:cf:db:25: bf:7c:6b:f9:39:b7:a0:81:d3:01:7c:14:45:c2:e1:34:ce:c1: a4:31:ca:e8:3f:26:8f:0a:3b:4a:d2:5f:26:e7:87:46:81:b6: af:46:8a:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAyRUExMTAvBgNVBAUTKDNEMjg3MDg4RTM4NjgyQTRFNEI5RDgyODQ1MEIzMzY2 QkRFQUQ1REQwHhcNMjYxMDI2MTgyMzA1WhcNMjYxMTAyMTgyMzA1WjAYMRYwFAYD VQQDEw02YWRmOWE4OS1mMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt95Z85ZGrfCkLtbI+6QlyF8tL3ftE0MmF1Me6wh9T3y7cT8lv2JizC3yVYGU YcJQqphw5HlBzXHYDyHiNHf/IqX5w6Uerb5h2UuHRiV5vQfgL/DUDWjKl/IjTfSa jydDpm5S0vOPh33u2Iz/VhU3GzAlTzNgmKPnuCKZBzbmt1TUHuJ5rjujv4OBtNEK 5MMGIRH7obr01aLy+wu/CvAIJlmLLPoeQN6JSH12DadUu6Wwjfq8ove1ColEZ39b Ex6CZX2H1VyGNYcIAsOfR7vbjk3YSU2tb5Xhhw494T0ZVgARu+mehj7LIicOMKu+ nwnQ5qPyMMZgAw7Q4+E/B/hBvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJujZVyH pbpQtVV8QOmGpsn1Iz4ZMB8GA1UdIwQYMBaAFD0ocIjjhoKk5LnYKEULM2a96tXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDJFQS9EQjE1Q0RFMDEx REIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dxVGt1ZGdvUlFzelpyM3Ex ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTaHdpT09HZ3FUa3VkZ29SUXN6WnIzcTFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDJFQS9EQjE1Q0RFMDExREIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dx VGt1ZGdvUlFzelpyM3ExZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVrGznq1oK7shmcHOtlLUGMGfUJcIvY4ibuB0SNyCu6eCK8a0/0Llmyo+24Dn V1Vgmum4hETyrjdNtTgQA66fbp+s5bDI86uHnRWYX6NUEzgGKV0hPgc/JQvn2yds bdayS7EBg7zVA2MBS3kdt9CPgRG+91U7NneEiNAc8+XRrtlAr0TsGadG6Z8+dVDF 7U8ZE04n1+iNBByYbHrA3B+rVtTckiFKejSQCPNwpnUx9Qa0pIPqu9cLgy7pF2uU 2sB1KAGlQox8aGq/WPA6tTGjnumwylXnz9slv3xr+Tm3oIHTAXwURcLhNM7BpDHK 6D8mjwo7StJfJueHRoG2r0aKrQ== -----END CERTIFICATE-----Generated at Wed Oct 28 14:35:42 2026 by rpki-client