$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft File: eHnvTZd9yKcBAzr1eKtUikC2lOE.mft (raw, json) Hash identifier: hO21EOSerN+HgIyHn8GEcWIKkEa22eBGu72DXNe5bfw= Subject key identifier: 19:3C:6E:62:E1:CA:5A:3E:A1:6A:5B:72:15:73:CB:00:C5:85:00:2B Authority key identifier: 78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 Certificate issuer: /CN=A91F0EF9/serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft Manifest number: 2F Signing time: Sun 25 Oct 2026 09:03:31 +0000 Manifest this update: Sun 25 Oct 2026 09:03:30 +0000 Manifest next update: Sun 01 Nov 2026 09:03:30 +0000 Files and hashes: 1: eHnvTZd9yKcBAzr1eKtUikC2lOE.crl (hash: D7pi7L2p5/NHJ1stBr6WcC0US+nJ7erMRXLLJdQbyUw=) 2: 2C9C69108A9A11F1AFC3D80E4E11F970.roa (hash: uSqkn8LIl8mlBYrH3ffPd4fErtRj9+veTGhqeaUcpmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EF9, serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Validity Not Before: Oct 25 09:03:30 2026 GMT Not After : Nov 1 09:03:30 2026 GMT Subject: CN=6addc5e3-557f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ad:0e:ac:e2:7e:00:67:8e:4b:eb:ae:27:9c: 96:f5:6d:f3:60:a9:1d:f4:ac:97:12:c8:1e:c0:76: e3:2e:4c:98:ed:7d:56:3a:8c:8b:0d:5e:3c:a2:07: ec:60:7b:b4:ac:43:ea:00:5f:fc:1b:4c:f9:92:ab: f0:fe:6e:a3:d1:b1:15:01:24:9e:b8:3b:21:bf:9c: 8b:54:65:3e:de:f4:d8:2e:69:dd:dd:4d:2f:eb:69: 10:f0:bd:ab:01:15:88:a8:0d:9a:7b:3d:2b:65:fa: cc:a2:50:9e:2b:c7:d0:45:aa:a6:1a:29:70:e9:26: 4b:82:16:08:d6:b7:59:00:a1:6c:32:1b:86:2d:c9: da:4a:e0:f1:28:d6:4f:b1:d7:1d:0c:8e:e0:b5:3f: f4:62:10:7e:00:69:9c:1f:7e:bc:4e:96:c4:7d:70: dd:00:a6:fc:f5:c4:74:46:25:f5:60:f8:d0:7b:e7: 35:92:6c:37:7a:66:ae:32:85:66:37:2d:fb:17:8d: 92:6e:af:df:f8:5b:f1:4b:8b:91:52:ff:6a:6a:f7: 4e:57:30:f8:b5:97:df:16:83:12:6a:b6:ea:fe:6a: 01:d1:82:73:45:70:ba:1a:13:86:ee:25:76:45:9d: 0a:18:b1:66:d9:c4:b0:8e:46:fd:83:ba:82:8a:8f: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3C:6E:62:E1:CA:5A:3E:A1:6A:5B:72:15:73:CB:00:C5:85:00:2B X509v3 Authority Key Identifier: keyid:78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f8:3e:71:72:9b:a2:c1:2d:92:19:eb:a0:74:fc:8f:ba:2f: 90:94:1a:05:99:f2:8e:e2:8d:cd:d9:91:74:05:02:34:0a:ab: 3f:1f:bb:81:26:82:cf:43:98:66:01:95:c0:56:99:93:14:77: 9e:bc:0d:f7:e2:61:9a:3c:92:84:75:47:ec:d7:1b:c9:73:90: 8d:aa:60:37:44:50:fe:fd:13:61:4e:03:71:96:ce:cf:07:f5: 7c:d0:1c:31:f9:94:c9:f9:94:d6:5f:f8:0f:61:a5:f1:a5:df: 12:4d:7f:23:ee:89:15:7b:af:db:13:68:8d:90:07:0e:21:0a: 45:3d:26:da:d1:c8:19:f7:1c:03:16:12:09:b5:9f:2a:43:fb: 0f:64:85:9d:49:c3:57:ee:a1:9e:a4:13:cb:42:da:72:08:1b: 07:3f:de:96:c7:e3:fd:19:21:30:ec:49:c6:ce:fa:9f:c6:8c: 97:1a:f8:d6:af:e5:c7:be:9d:4a:c0:75:da:f0:18:18:a1:18: e6:a2:cc:27:4f:a5:20:50:c8:d9:01:42:70:6e:87:67:2a:01: b7:7d:7e:5b:b8:66:53:45:9d:1a:99:3f:79:86:e4:a1:6a:cf: cb:66:29:8e:7c:90:ee:b6:9d:5d:ff:8e:70:82:5d:18:c1:ea: ec:95:65:7c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEVGOTExMC8GA1UEBRMoNzg3OUVGNEQ5NzdEQzhBNzAxMDMzQUY1NzhBQjU0OEE0 MEI2OTRFMTAeFw0yNjEwMjUwOTAzMzBaFw0yNjExMDEwOTAzMzBaMBgxFjAUBgNV BAMTDTZhZGRjNWUzLTU1N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkrQ6s4n4AZ45L664nnJb1bfNgqR30rJcSyB7AduMuTJjtfVY6jIsNXjyiB+xg e7SsQ+oAX/wbTPmSq/D+bqPRsRUBJJ64OyG/nItUZT7e9Nguad3dTS/raRDwvasB FYioDZp7PStl+syiUJ4rx9BFqqYaKXDpJkuCFgjWt1kAoWwyG4YtydpK4PEo1k+x 1x0MjuC1P/RiEH4AaZwffrxOlsR9cN0Apvz1xHRGJfVg+NB75zWSbDd6Zq4yhWY3 LfsXjZJur9/4W/FLi5FS/2pq905XMPi1l98WgxJqtur+agHRgnNFcLoaE4buJXZF nQoYsWbZxLCORv2DuoKKj92xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGTxuYuHK Wj6haltyFXPLAMWFACswHwYDVR0jBBgwFoAUeHnvTZd9yKcBAzr1eKtUikC2lOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwRUY5L0UyOTA2QUFDOEE5 ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtjQkF6cjFlS3RVaWtDMmxP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUhudlRaZDl5S2NCQXpyMWVLdFVpa0MybE9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw RUY5L0UyOTA2QUFDOEE5ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtj QkF6cjFlS3RVaWtDMmxPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCy+D5xcpuiwS2SGeugdPyPui+QlBoFmfKO4o3N2ZF0BQI0Cqs/H7uBJoLPQ5hm AZXAVpmTFHeevA334mGaPJKEdUfs1xvJc5CNqmA3RFD+/RNhTgNxls7PB/V80Bwx +ZTJ+ZTWX/gPYaXxpd8STX8j7okVe6/bE2iNkAcOIQpFPSba0cgZ9xwDFhIJtZ8q Q/sPZIWdScNX7qGepBPLQtpyCBsHP96Wx+P9GSEw7EnGzvqfxoyXGvjWr+XHvp1K wHXa8BgYoRjmoswnT6UgUMjZAUJwbodnKgG3fX5buGZTRZ0amT95huShas/LZimO fJDutp1d/45wgl0YwerslWV8 -----END CERTIFICATE-----Generated at Mon Oct 26 02:33:42 2026 by rpki-client