$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: tnG1VxlhroBGEhi5V1Im/1kNQjVAIOQx/kCXzgemWGI= Subject key identifier: DC:D4:E8:A7:C0:D2:08:79:00:5E:D1:7C:E9:33:6B:43:F4:7A:4A:5C Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 026B Signing time: Thu 29 Oct 2026 02:42:26 +0000 Manifest this update: Thu 29 Oct 2026 02:42:25 +0000 Manifest next update: Thu 05 Nov 2026 02:42:25 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: XmuvVtqA3n2C0QPm9oBGY7tDHL2HwE5pxBipq3IXv28=) 2: AQv43jrMcaTm5wanlEzkIxjLGMI.asa (hash: G6QaVxtFGklvwqxJGIH6jtAmOyvEhmrVF96Ku+VucXY=) 3: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: yd8nZQYXpuBuXMJow036oPSXKDSenHOrq9DNYBNpxgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Oct 29 02:42:25 2026 GMT Not After : Nov 5 02:42:25 2026 GMT Subject: CN=6ae2b291-99ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:50:c5:04:87:67:6e:84:f2:0d:4a:3f:93: 1e:62:c9:a3:4c:6e:d6:59:a2:20:b3:c5:8b:12:d4: 6b:18:de:3b:2a:7d:ef:e3:33:1b:b8:40:21:c3:5f: 0d:03:45:01:df:a4:07:35:c6:18:04:f0:d0:92:e5: 5d:98:09:03:05:be:b3:2b:df:43:d4:7e:46:85:88: d3:79:6b:44:bc:8c:8a:69:e7:21:aa:91:4d:85:28: 02:35:39:d4:f5:f3:d6:9c:7c:6f:c4:a7:a1:39:51: ac:28:89:d4:6f:5e:78:25:f5:ed:ee:07:0c:ae:af: f5:87:3e:44:1c:b7:1b:4e:25:c0:ac:7a:cb:f1:9a: f4:ba:b0:a9:ea:74:ea:c4:35:5b:65:63:e3:05:72: 6b:f1:70:17:1b:08:96:81:36:34:c4:b3:2e:5c:6c: 16:7c:df:6a:0b:d4:fa:c0:21:9d:5c:29:97:cd:ae: 65:f7:e5:dd:1f:1e:d9:c4:c0:79:19:63:20:80:c4: 7a:7e:69:04:b8:55:cc:9e:e5:1f:57:a5:d2:60:54: 91:68:2f:2a:6b:8c:48:f5:54:cd:0e:a6:7e:ad:78: fa:60:fd:80:39:9e:e1:55:33:74:f2:a5:ba:c6:13: 19:e2:4b:47:8b:af:55:b5:90:24:28:cb:5f:ff:fb: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D4:E8:A7:C0:D2:08:79:00:5E:D1:7C:E9:33:6B:43:F4:7A:4A:5C X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5b:10:35:3a:88:07:05:1b:e0:38:5c:e7:6f:22:b8:72:3e: cb:ac:50:5a:aa:01:28:eb:b0:85:48:2b:5d:2b:a5:fc:34:27: 1d:56:52:cb:8b:95:52:1c:55:1f:28:eb:c5:df:b5:62:f4:b6: 16:83:af:75:57:1c:9a:af:14:cd:2a:21:81:5b:4d:80:5e:c3: 3a:c3:40:d4:8d:a6:6e:fe:db:26:e2:3d:50:8c:16:91:93:81: f0:af:32:a0:de:59:cb:0f:bb:c9:83:20:d1:bc:6c:14:5b:ff: fb:3e:24:37:01:11:5a:7a:b4:a3:a3:00:af:75:ea:e5:2e:ef: b7:b7:d0:88:af:fb:c4:e4:ae:4e:ed:15:79:86:e5:fd:1b:45: c0:4a:27:4d:a4:40:b6:4f:5c:77:fc:71:c0:eb:de:96:78:9f: 1f:af:3a:24:5e:eb:42:fd:96:06:da:c0:31:32:20:b1:d8:b7: 4f:65:24:8b:56:44:7f:4b:78:b0:ec:fe:b2:34:c3:eb:3a:1c: b4:00:5f:4c:38:ea:d8:9f:47:8c:cc:0c:6f:c3:7e:cd:60:02: b7:95:bc:7a:f6:ab:26:2c:8e:73:6b:3c:5c:43:15:ed:32:98: 3a:77:db:d2:c0:41:55:02:73:98:d9:b2:7e:2b:4c:f7:67:f4: a8:e5:df:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjYxMDI5MDI0MjI1WhcNMjYxMTA1MDI0MjI1WjAYMRYwFAYD VQQDEw02YWUyYjI5MS05OWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IJQxQSHZ26E8g1KP5MeYsmjTG7WWaIgs8WLEtRrGN47Kn3v4zMbuEAhw18N A0UB36QHNcYYBPDQkuVdmAkDBb6zK99D1H5GhYjTeWtEvIyKaechqpFNhSgCNTnU 9fPWnHxvxKehOVGsKInUb154JfXt7gcMrq/1hz5EHLcbTiXArHrL8Zr0urCp6nTq xDVbZWPjBXJr8XAXGwiWgTY0xLMuXGwWfN9qC9T6wCGdXCmXza5l9+XdHx7ZxMB5 GWMggMR6fmkEuFXMnuUfV6XSYFSRaC8qa4xI9VTNDqZ+rXj6YP2AOZ7hVTN08qW6 xhMZ4ktHi69VtZAkKMtf//t5XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzU6KfA 0gh5AF7RfOkza0P0ekpcMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALVsQNTqIBwUb4Dhc528iuHI+y6xQWqoBKOuwhUgrXSul/DQnHVZSy4uVUhxV Hyjrxd+1YvS2FoOvdVccmq8UzSohgVtNgF7DOsNA1I2mbv7bJuI9UIwWkZOB8K8y oN5Zyw+7yYMg0bxsFFv/+z4kNwERWnq0o6MAr3Xq5S7vt7fQiK/7xOSuTu0VeYbl /RtFwEonTaRAtk9cd/xxwOvelnifH686JF7rQv2WBtrAMTIgsdi3T2Uki1ZEf0t4 sOz+sjTD6zoctABfTDjq2J9HjMwMb8N+zWACt5W8evarJiyOc2s8XEMV7TKYOnfb 0sBBVQJzmNmyfitM92f0qOXfHw== -----END CERTIFICATE-----Generated at Thu Oct 29 13:53:31 2026 by rpki-client