$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft File: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json) Hash identifier: 0Qtm2Z2k61m8/2NbNRDLtn6Ejf8sUNiHvOYe/wqBYIc= Subject key identifier: 87:0F:67:16:27:8C:7D:5C:87:17:D9:76:86:BA:8E:DE:80:F2:AF:81 Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A Certificate issuer: /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A Certificate serial: 0D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft Manifest number: 1F9C Signing time: Wed 28 Oct 2026 17:11:36 +0000 Manifest this update: Wed 28 Oct 2026 17:11:35 +0000 Manifest next update: Wed 04 Nov 2026 17:11:35 +0000 Files and hashes: 1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: IpB9g3HrkbDZtkTO1EjNXh20nCI7MnU0jLs6IXxO6Nw=) 2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: PoMZXZYHdteODhPAtacBWSXCAi/gVbSsN+xQtOQaEQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 17:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A Validity Not Before: Oct 28 17:11:35 2026 GMT Not After : Nov 4 17:11:35 2026 GMT Subject: CN=6ae22cc7-1746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:fc:c3:02:44:d3:be:1e:dd:85:60:97:06: 3f:27:c8:83:36:91:e0:7a:b2:48:1b:0a:da:aa:67: 8a:38:ec:f9:5f:e9:c8:4b:69:f1:23:0e:93:a6:9f: 88:f2:cc:b0:f8:ed:8a:db:ff:82:c2:47:40:60:f1: 2e:54:16:aa:bf:ca:cb:b8:a3:da:36:96:e5:03:01: 36:5b:54:0f:50:ac:4d:1f:66:71:86:a7:21:e5:12: 65:bd:ce:e3:b8:1d:12:14:f9:6c:8f:7b:ee:23:2e: 9a:a9:3a:ea:9a:5e:0b:02:ae:66:eb:2c:d3:09:ed: e2:45:fd:f8:a7:8f:d6:6a:12:7e:39:2d:93:3b:7d: 2b:85:f2:3d:99:dc:68:ee:e1:49:dd:fb:33:63:50: 7c:01:83:ed:8b:0d:95:b1:34:29:c8:9e:49:75:82: 22:56:44:6f:8b:9c:2c:c5:1c:c0:87:36:bd:6a:0b: d7:f4:8f:74:bd:5c:46:de:89:9e:de:da:09:94:25: f8:f3:47:f9:b7:78:52:b3:02:81:d7:c9:6e:1a:68: ea:9f:0c:b4:df:b9:10:10:16:5c:a4:8b:25:75:f4: c7:83:18:cf:30:d7:15:47:75:5c:e0:d2:3b:6e:0d: 08:bb:91:cc:b2:97:af:48:af:dc:37:98:8a:77:e6: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0F:67:16:27:8C:7D:5C:87:17:D9:76:86:BA:8E:DE:80:F2:AF:81 X509v3 Authority Key Identifier: keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d4:9e:79:20:39:63:1d:28:78:75:a2:35:e0:0b:01:0c:bc: f1:0a:c1:21:83:6a:2d:5e:dd:d6:3c:92:07:51:a7:50:13:dc: d3:69:51:18:55:64:32:eb:5e:ba:8a:31:95:37:28:72:4d:1e: ff:e5:13:1e:38:13:75:72:58:d5:6e:54:1c:53:79:c3:54:63: 08:f4:dc:ab:ef:c3:bc:20:b7:6c:d2:ff:83:a9:30:28:d8:07: 6c:e7:87:b9:37:c6:93:09:0c:09:52:92:a4:99:da:6e:f5:24: ca:16:a0:41:51:e5:5a:d5:73:2b:15:17:3b:5d:3f:3f:87:a2: d6:bb:bf:09:83:75:5e:1c:3c:fc:3b:15:2c:65:bd:5a:2b:d1: 33:59:55:f8:72:8f:33:34:08:70:d0:54:87:36:bc:1c:e4:ae: 7c:be:94:1f:5c:49:43:a3:97:d4:f0:b8:cc:a1:0e:32:a8:09: 45:9f:15:13:83:36:02:be:cc:71:6f:2e:8e:e9:a4:27:79:2f: dd:f2:9e:f7:b6:e5:7d:35:43:fe:9d:48:30:7a:99:45:fd:aa: 00:e5:27:0b:6e:b4:69:48:aa:79:55:1a:28:57:e4:c5:e7:d9: 03:3b:e0:90:ce:df:a4:8e:7f:f2:5f:ec:47:f2:0a:70:d5:7a: 8d:40:20:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBRjAxMTAvBgNVBAUTKEQ5QkQ3MEU3NzdGODYxQUU1NDM4NTcxNDhFNjMzNTJG REE4NEMwN0EwHhcNMjYxMDI4MTcxMTM1WhcNMjYxMTA0MTcxMTM1WjAYMRYwFAYD VQQDEw02YWUyMmNjNy0xNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eL8wwJE074e3YVglwY/J8iDNpHgerJIGwraqmeKOOz5X+nIS2nxIw6Tpp+I 8syw+O2K2/+CwkdAYPEuVBaqv8rLuKPaNpblAwE2W1QPUKxNH2Zxhqch5RJlvc7j uB0SFPlsj3vuIy6aqTrqml4LAq5m6yzTCe3iRf34p4/WahJ+OS2TO30rhfI9mdxo 7uFJ3fszY1B8AYPtiw2VsTQpyJ5JdYIiVkRvi5wsxRzAhza9agvX9I90vVxG3ome 3toJlCX480f5t3hSswKB18luGmjqnwy037kQEBZcpIsldfTHgxjPMNcVR3Vc4NI7 bg0Iu5HMspevSK/cN5iKd+avPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcPZxYn jH1chxfZdoa6jt6A8q+BMB8GA1UdIwQYMBaAFNm9cOd3+GGuVDhXFI5jNS/ahMB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlhNVVPRmNVam1NMUw5cUV3 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJiMXc1M2Y0WWE1VU9GY1VqbU0xTDlxRXdIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlh NVVPRmNVam1NMUw5cUV3SG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtSeeSA5Yx0oeHWiNeALAQy88QrBIYNqLV7d1jySB1GnUBPc02lRGFVkMute uooxlTcock0e/+UTHjgTdXJY1W5UHFN5w1RjCPTcq+/DvCC3bNL/g6kwKNgHbOeH uTfGkwkMCVKSpJnabvUkyhagQVHlWtVzKxUXO10/P4ei1ru/CYN1Xhw8/DsVLGW9 WivRM1lV+HKPMzQIcNBUhza8HOSufL6UH1xJQ6OX1PC4zKEOMqgJRZ8VE4M2Ar7M cW8ujumkJ3kv3fKe97blfTVD/p1IMHqZRf2qAOUnC260aUiqeVUaKFfkxefZAzvg kM7fpI5/8l/sR/IKcNV6jUAgTw== -----END CERTIFICATE-----Generated at Wed Oct 28 22:48:35 2026 by rpki-client