$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: fFDXB+nVDOr2z0yDO5SP9XwWvSsyYlr6Q5zsud3gX/I= Subject key identifier: 23:55:35:1F:CD:B2:C4:B0:45:95:32:A7:55:BB:D0:BF:AA:65:5E:88 Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: 0189 Signing time: Sun 25 Oct 2026 05:01:20 +0000 Manifest this update: Sun 25 Oct 2026 05:01:19 +0000 Manifest next update: Sun 01 Nov 2026 05:01:19 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: BzihB5Nm1xbx0iu0Mmwd1EfaLALtitz4NDajyMXH98A=) 2: B6783AB2DBC511F0ACB3398151641951.roa (hash: 8nSDYPqmj9///M7ihOu/Qy1ziSupwMIbXuYBnGolzzo=) 3: EFC2CA2489D311F0B3F8631DC4F9AE02.roa (hash: gxZFWSG/EQsmYDfM8pL8cu4/7hBAQnAKWm8Ca27ncb0=) 4: B6FC11FCDBC511F0ACB3398151641951.roa (hash: 0ueEp7gkNyo/eRbYSZCsOjM7D/HOAUYNpRhkEzgVUdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Validity Not Before: Oct 25 05:01:19 2026 GMT Not After : Nov 1 05:01:19 2026 GMT Subject: CN=6add8d20-7aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:cc:5a:28:d2:23:f6:94:92:0d:c3:34:a8: 8a:44:6c:08:9d:be:f6:da:ea:c9:c5:60:f2:db:bd: 4d:d4:b8:68:cd:2a:91:41:07:34:62:c6:60:80:67: 77:b2:b5:91:48:af:ae:0f:b7:ca:b8:e0:05:f5:85: df:de:f7:bd:a4:bb:b0:75:ca:49:12:55:89:18:96: a7:35:25:ee:a9:65:00:f5:9a:98:d1:a6:82:47:f6: d1:e3:cd:ac:5b:db:ae:d0:0a:67:90:f7:2d:05:d7: e7:8c:83:84:e7:37:10:86:42:6d:c8:d2:bd:cd:03: 06:6b:08:a6:98:73:64:d9:41:b2:f3:97:03:ff:5b: 0d:60:bd:69:9e:9f:37:3b:e8:15:ed:2a:b6:f2:30: 36:1c:4d:7e:59:2c:69:bf:d0:99:39:1d:b9:03:e4: 5f:8a:c2:2f:d9:a1:6c:c8:86:39:8f:fd:67:d8:01: af:58:6a:7a:d2:46:1b:75:8f:62:a1:ab:b3:61:fa: fd:96:4e:10:0b:4c:3a:f5:b1:95:bd:9a:02:7c:0d: 90:b9:29:d2:de:e5:c8:f3:07:5e:a4:8f:fb:d2:08: e7:0d:ae:50:be:fd:3f:b8:78:f1:85:ac:55:b7:b1: 1b:08:b0:be:67:0b:60:7a:68:3a:80:ae:76:e1:cb: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:55:35:1F:CD:B2:C4:B0:45:95:32:A7:55:BB:D0:BF:AA:65:5E:88 X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:35:f2:ec:df:ac:cf:0f:23:67:0a:b2:1d:6e:31:ef:8f:f6: c9:0b:7f:70:4d:fb:53:47:46:8c:4d:7a:66:93:1d:7b:90:b0: 06:2f:46:6b:c9:c1:0b:1f:47:2d:12:22:53:1a:45:b1:ed:b8: b2:d6:96:c9:76:a6:2e:a9:f5:1e:cf:0c:9c:c9:5f:4d:58:08: 4f:ff:7d:c6:79:9a:c3:87:15:79:63:78:df:bc:de:2a:dd:34: 9d:85:1d:d2:72:89:63:1a:20:39:be:cd:5b:6f:6f:f0:e6:81: e3:cd:01:91:fa:6d:eb:3d:5e:6b:2c:36:55:46:a1:c7:dd:26: ec:41:a6:1f:78:44:c4:7f:61:00:d3:47:85:9f:38:34:d7:3c: 2c:5f:bc:04:35:5d:61:31:da:c2:37:52:4e:9c:b5:ba:39:e7: 3f:c8:72:fe:4f:e9:dc:a6:4a:7f:51:dc:75:c0:83:50:c0:8c: e2:30:a2:cc:30:42:65:f2:98:f0:d4:67:64:13:91:22:31:f1: d8:c7:ef:40:ea:b5:e3:5d:30:b0:b9:32:83:ba:5d:bf:c3:8a: 0c:27:1f:a4:75:5f:29:e0:8d:36:86:9d:37:7d:cc:36:32:c9: 47:a0:65:16:ed:f2:9e:ca:9d:60:a1:15:13:3c:3c:8d:ed:b5: 56:7d:e3:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIzNjQxMTAvBgNVBAUTKDQ3MENERkQ0OUY1REZGMjEyNTc4REVDNURBMjFGMjFE QTBCM0ZBRDIwHhcNMjYxMDI1MDUwMTE5WhcNMjYxMTAxMDUwMTE5WjAYMRYwFAYD VQQDEw02YWRkOGQyMC03YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeDMWijSI/aUkg3DNKiKRGwInb722urJxWDy271N1LhozSqRQQc0YsZggGd3 srWRSK+uD7fKuOAF9YXf3ve9pLuwdcpJElWJGJanNSXuqWUA9ZqY0aaCR/bR482s W9uu0ApnkPctBdfnjIOE5zcQhkJtyNK9zQMGawimmHNk2UGy85cD/1sNYL1pnp83 O+gV7Sq28jA2HE1+WSxpv9CZOR25A+RfisIv2aFsyIY5j/1n2AGvWGp60kYbdY9i oauzYfr9lk4QC0w69bGVvZoCfA2QuSnS3uXI8wdepI/70gjnDa5Qvv0/uHjxhaxV t7EbCLC+Zwtgemg6gK524cvZewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNVNR/N ssSwRZUyp1W70L+qZV6IMB8GA1UdIwQYMBaAFEcM39SfXf8hJXjexdoh8h2gs/rS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjM2NC8wNDA1NjZBODg0 Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95RWxlTjdGMmlIeUhhQ3ot dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjM2NC8wNDA1NjZBODg0Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95 RWxlTjdGMmlIeUhhQ3otdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXjXy7N+szw8jZwqyHW4x74/2yQt/cE37U0dGjE16ZpMde5CwBi9Ga8nBCx9H LRIiUxpFse24staWyXamLqn1Hs8MnMlfTVgIT/99xnmaw4cVeWN437zeKt00nYUd 0nKJYxogOb7NW29v8OaB480Bkfpt6z1eayw2VUahx90m7EGmH3hExH9hANNHhZ84 NNc8LF+8BDVdYTHawjdSTpy1ujnnP8hy/k/p3KZKf1HcdcCDUMCM4jCizDBCZfKY 8NRnZBORIjHx2MfvQOq1410wsLkyg7pdv8OKDCcfpHVfKeCNNoadN33MNjLJR6Bl Fu3ynsqdYKEVEzw8je21Vn3j/Q== -----END CERTIFICATE-----Generated at Mon Oct 26 11:15:52 2026 by rpki-client