$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json) Hash identifier: 0A56B5e9okKJ3Qbriai9mVonSS9scID40rwuz22csLE= Subject key identifier: 50:DD:31:42:6B:5F:BF:A1:20:BA:53:8E:91:68:C1:D9:45:CC:62:72 Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 10D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft Manifest number: 108B Signing time: Tue 20 Oct 2026 17:25:03 +0000 Manifest this update: Tue 20 Oct 2026 17:25:03 +0000 Manifest next update: Tue 27 Oct 2026 17:25:03 +0000 Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: HymfyVvF+18wy/0aPXM6jMPogdLxPVPQ3ZYkJeX+aPw=) 2: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: RfbqC8GS1hHzeb5ag3voBDbpoO632YWZC1e96BmW8tY=) 3: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: j42PYjWNb/mnyEI0E6+iq6JxrFxqeSi6M5a2jMZwTdM=) 4: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: Ep5ULjpLJ97bV5VifiZFQEn0w2yErIZH+uUxSWGKvrg=) 5: B490CD0621C911EB991D562EC4F9AE02.roa (hash: WR/88pfaCczDigHpfgd4GYy1P6qmyhWsOy4WabOWrlU=) 6: B3876B1821C911EB991D562EC4F9AE02.roa (hash: PAJXVnplsOIegEPXMbATwr923PfH+sXu4QP6bOY+9aU=) 7: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: m1jd0Q2D9k3+2i/d4GmRzebyVctCB9sAwMGAQxkAF/8=) 8: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: bx80odAXkY0MYIUdPq3Se5Z99i5ov0hqTySdt08ambI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 17:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4309 (0x10d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Oct 20 17:25:03 2026 GMT Not After : Oct 27 17:25:03 2026 GMT Subject: CN=6ad7a3ef-cc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:38:02:b5:ec:1e:8a:d4:c5:20:a7:48:a9:4f: 14:27:ce:bf:83:a8:fd:d1:c0:62:05:15:e0:21:da: 82:48:89:5a:24:e5:7a:1d:55:96:77:17:c8:57:b7: a3:5b:3e:cc:ae:bc:fc:37:27:45:88:15:29:a1:4e: d0:46:ce:09:43:78:6c:7d:34:4f:fe:bd:0b:d0:43: 28:cf:19:85:0c:c5:f6:fc:07:0a:51:ff:56:60:8f: 6d:0e:72:8d:80:bf:3c:1f:2b:c8:3e:9d:02:6e:b0: 4a:d3:06:9f:7c:cf:a8:87:d7:a2:dc:b7:d2:6b:6f: 8d:06:4d:a9:5d:f5:db:99:a8:d6:67:fd:1c:da:17: f7:b3:61:65:0c:33:07:a1:ed:60:36:99:01:56:cb: 10:e4:c6:0c:81:10:b2:4e:2a:c3:98:e3:82:de:5f: 7f:4c:59:53:35:20:62:a1:17:a2:52:34:3b:f0:cc: 35:f1:dc:4c:4f:1f:a3:eb:f3:9d:4e:b1:4f:d5:5b: 01:f8:ce:44:52:50:c2:db:f7:80:d9:7f:43:45:5d: 67:c1:6f:46:d0:9d:f4:11:8c:b2:45:97:f8:9f:48: 55:b3:70:2d:c5:82:0e:5d:ec:bb:39:6e:f5:74:67: 7c:3f:be:c1:be:4a:88:5f:5e:f4:31:4c:9c:c6:2d: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DD:31:42:6B:5F:BF:A1:20:BA:53:8E:91:68:C1:D9:45:CC:62:72 X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:df:34:3e:3f:97:a5:7a:f6:fe:37:7a:9e:84:a7:ce:17:12: 2a:d9:df:9b:39:e1:0c:03:37:e4:46:33:5a:0d:f7:86:3f:f4: eb:67:1b:4c:ac:46:8d:cc:71:41:ce:58:d4:c6:af:29:c8:1a: f0:c5:a3:3d:fb:8b:00:90:03:7b:0f:0e:29:75:b0:f5:f4:a7: 1f:b5:a9:1c:4e:68:1c:5d:b2:af:82:a3:95:9d:cd:f5:45:25: cf:58:76:74:dc:37:a1:47:e0:c1:7a:f6:9c:c8:26:99:01:95: 3a:29:63:d5:df:a4:2a:cb:b5:df:b1:11:ca:c6:2b:9e:90:bd: c2:7d:25:87:22:95:d9:21:7b:96:ba:ce:e7:05:2e:c9:10:80: 70:36:59:77:aa:d1:1c:63:49:67:1a:67:7d:22:4e:51:2e:8b: 7e:15:13:69:e9:ff:27:1b:92:33:5c:63:52:77:16:1f:28:4d: e5:72:45:d1:b7:f7:00:3a:09:8e:60:55:df:2c:2a:c9:04:dc: fc:31:dc:3b:c9:4f:5f:17:71:e1:8f:e4:be:83:f6:ed:28:8d: 22:4e:34:13:07:97:29:38:15:86:a2:01:ea:b4:9a:47:54:5f: d5:c4:aa:4f:4a:a5:61:9e:1f:d9:e1:86:6d:3f:0d:d3:82:ee: 5a:ce:a7:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICENUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjYxMDIwMTcyNTAzWhcNMjYxMDI3MTcyNTAzWjAYMRYwFAYD VQQDEw02YWQ3YTNlZi1jYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTgCteweitTFIKdIqU8UJ86/g6j90cBiBRXgIdqCSIlaJOV6HVWWdxfIV7ej Wz7Mrrz8NydFiBUpoU7QRs4JQ3hsfTRP/r0L0EMozxmFDMX2/AcKUf9WYI9tDnKN gL88HyvIPp0CbrBK0waffM+oh9ei3LfSa2+NBk2pXfXbmajWZ/0c2hf3s2FlDDMH oe1gNpkBVssQ5MYMgRCyTirDmOOC3l9/TFlTNSBioReiUjQ78Mw18dxMTx+j6/Od TrFP1VsB+M5EUlDC2/eA2X9DRV1nwW9G0J30EYyyRZf4n0hVs3AtxYIOXey7OW71 dGd8P77BvkqIX170MUycxi0T5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDdMUJr X7+hILpTjpFowdlFzGJyMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0YwMi9DQ0FCNTc1MDYzRjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JB WHBsMVJiQ05ONU52LXNSbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKt80Pj+XpXr2/jd6noSnzhcSKtnfmznhDAM35EYzWg33hj/062cbTKxGjcxx Qc5Y1MavKcga8MWjPfuLAJADew8OKXWw9fSnH7WpHE5oHF2yr4KjlZ3N9UUlz1h2 dNw3oUfgwXr2nMgmmQGVOilj1d+kKsu137ERysYrnpC9wn0lhyKV2SF7lrrO5wUu yRCAcDZZd6rRHGNJZxpnfSJOUS6LfhUTaen/JxuSM1xjUncWHyhN5XJF0bf3ADoJ jmBV3ywqyQTc/DHcO8lPXxdx4Y/kvoP27SiNIk40EweXKTgVhqIB6rSaR1Rf1cSq T0qlYZ4f2eGGbT8N04LuWs6nnA== -----END CERTIFICATE-----Generated at Thu Oct 22 14:54:48 2026 by rpki-client