$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json) Hash identifier: Lo9/SrUHMOEEFLN94HPxYZcrnItH1XyXTxVixiWGQc4= Subject key identifier: 55:8F:D8:04:E6:26:C8:AB:66:2D:FB:8A:2D:6C:DE:FD:5A:CF:F6:61 Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft Manifest number: 01B5 Signing time: Sun 25 Oct 2026 04:52:34 +0000 Manifest this update: Sun 25 Oct 2026 04:52:33 +0000 Manifest next update: Sun 01 Nov 2026 04:52:33 +0000 Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: xNGfqD8+gL3mp5YSh4dN8EL9EvTesVUserAM4+m4HqU=) 2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: 3JLODxhN0Gn0lsDxOt6EcOaxGyyt181ihZTIs7fhlE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Validity Not Before: Oct 25 04:52:33 2026 GMT Not After : Nov 1 04:52:33 2026 GMT Subject: CN=6add8b12-4428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:ce:48:1d:c4:26:67:ff:8d:6f:68:4f:44: 21:1f:94:57:35:20:77:36:7c:92:a8:cd:bc:18:88: 89:c6:65:05:85:24:24:b9:21:04:1e:38:6e:25:e4: 13:85:a1:94:e3:fe:80:80:29:22:7a:e9:b0:d9:c2: 5a:69:41:31:03:46:89:42:7c:5c:65:44:d6:61:42: 09:af:9f:3f:39:48:ab:17:9b:e0:43:08:7f:c6:16: 55:e1:c9:24:83:14:fd:99:d7:7a:78:e1:e9:40:64: 68:bb:9a:a3:64:83:c0:64:0a:92:b1:bf:4d:5a:a7: f6:e4:20:47:34:cc:d4:ad:48:f9:bc:db:14:5c:28: e1:22:f8:36:ab:5b:e0:df:ce:10:56:4f:82:9a:b2: 70:55:b5:1d:9d:93:57:a6:00:33:cb:2a:7b:ef:0f: 3c:f1:cb:3c:87:02:a2:28:da:7b:e6:57:c8:ad:40: 4a:43:0a:d6:c2:50:55:86:34:37:6a:ec:16:0a:06: 30:75:4b:8b:e0:ff:a2:1a:f8:9a:93:f7:e9:3b:34: 13:51:2a:0b:04:76:62:0c:7d:80:f1:37:a9:d0:f8: 09:33:40:58:8f:35:06:b2:8c:0f:6f:e2:9c:b1:b5: 83:b5:16:1c:80:b1:30:f3:70:2d:7e:86:f4:9e:5d: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8F:D8:04:E6:26:C8:AB:66:2D:FB:8A:2D:6C:DE:FD:5A:CF:F6:61 X509v3 Authority Key Identifier: keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e3:2d:fb:e1:bc:e5:86:81:70:c2:48:83:79:50:75:2b:f1: 70:8d:c8:f0:90:74:6a:33:4f:05:04:99:04:52:50:3c:77:98: c9:02:85:66:f2:c2:43:74:f3:1c:f1:e2:99:79:aa:e8:92:ea: 3e:ce:11:7a:1f:c4:00:ab:df:08:5f:c0:08:e7:9c:32:7a:44: 31:7e:94:ca:97:0c:5e:73:3d:95:cb:94:f9:da:5a:86:9a:de: 5f:62:75:9b:cc:bc:3a:31:19:fc:e3:95:c8:be:e9:7a:7f:ae: a6:a2:ef:2d:5f:fc:d5:af:fc:b6:1f:60:5c:04:9a:2d:d6:45: 74:7e:13:05:bf:7a:75:c9:29:f8:33:ad:ba:87:01:3f:68:47: d2:ef:36:b5:0a:9f:3f:23:e2:2b:f7:a9:e2:56:40:2c:40:df: 1b:2f:ac:f7:61:14:29:0f:b8:86:11:02:fe:a3:36:60:83:76: 5d:27:c1:b4:ab:00:90:b4:aa:47:4b:a5:4c:3b:1d:da:68:35: 94:de:bd:4f:f9:0e:0a:c7:21:c6:8b:82:c9:41:da:d1:e6:e4: 0e:e7:ee:12:bf:03:46:bc:fa:1a:c5:10:16:cd:1e:d1:7c:7b: 4c:a3:e1:6d:10:ac:3c:01:65:97:a4:f3:df:7b:c3:f9:0d:c5: e7:ba:e2:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjExRUUxMTAvBgNVBAUTKEZBQzJCMkU1NDE0NDVCNUI0N0M1OURBRTFERTJEREU4 ODc5QUI4QkIwHhcNMjYxMDI1MDQ1MjMzWhcNMjYxMTAxMDQ1MjMzWjAYMRYwFAYD VQQDEw02YWRkOGIxMi00NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcDOSB3EJmf/jW9oT0QhH5RXNSB3NnySqM28GIiJxmUFhSQkuSEEHjhuJeQT haGU4/6AgCkieumw2cJaaUExA0aJQnxcZUTWYUIJr58/OUirF5vgQwh/xhZV4ckk gxT9mdd6eOHpQGRou5qjZIPAZAqSsb9NWqf25CBHNMzUrUj5vNsUXCjhIvg2q1vg 384QVk+CmrJwVbUdnZNXpgAzyyp77w888cs8hwKiKNp75lfIrUBKQwrWwlBVhjQ3 auwWCgYwdUuL4P+iGviak/fpOzQTUSoLBHZiDH2A8Tep0PgJM0BYjzUGsowPb+Kc sbWDtRYcgLEw83Atfob0nl1b5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWP2ATm JsirZi37ii1s3v1az/ZhMB8GA1UdIwQYMBaAFPrCsuVBRFtbR8Wdrh3i3eiHmri7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTFFRS9FOThBNDY1MjNF ODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcxdEh4WjJ1SGVMZDZJZWF1 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1zS3k1VUZFVzF0SHhaMnVIZUxkNkllYXVMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTFFRS9FOThBNDY1MjNFODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcx dEh4WjJ1SGVMZDZJZWF1THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgOMt++G85YaBcMJIg3lQdSvxcI3I8JB0ajNPBQSZBFJQPHeYyQKFZvLCQ3Tz HPHimXmq6JLqPs4Reh/EAKvfCF/ACOecMnpEMX6UypcMXnM9lcuU+dpahpreX2J1 m8y8OjEZ/OOVyL7pen+upqLvLV/81a/8th9gXASaLdZFdH4TBb96dckp+DOtuocB P2hH0u82tQqfPyPiK/ep4lZALEDfGy+s92EUKQ+4hhEC/qM2YIN2XSfBtKsAkLSq R0ulTDsd2mg1lN69T/kOCschxouCyUHa0ebkDufuEr8DRrz6GsUQFs0e0Xx7TKPh bRCsPAFll6Tz33vD+Q3F57riZg== -----END CERTIFICATE-----Generated at Sun Oct 25 23:20:49 2026 by rpki-client