$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: TDMGorivFLCh0OGQ2252MjSXaFjbYn5WcEmg2ggKISY= Subject key identifier: 86:70:2B:E2:F3:C3:F4:13:4B:56:8D:DF:46:CC:D9:6F:1F:04:59:8D Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 060D Signing time: Tue 20 Oct 2026 23:08:47 +0000 Manifest this update: Tue 20 Oct 2026 23:08:46 +0000 Manifest next update: Tue 27 Oct 2026 23:08:46 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: b+t8KKrH1rwZcjlM09vbJJslksoaGGnONwBu6SyGh0I=) 2: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=) 3: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=) 4: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=) 7: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 23:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Oct 20 23:08:46 2026 GMT Not After : Oct 27 23:08:46 2026 GMT Subject: CN=6ad7f47f-12b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:92:7b:2c:12:e9:d9:d0:dc:67:48:cc:b5: b6:fb:d5:7f:17:25:58:9d:cb:43:a3:5b:08:3e:25: 70:0d:03:0f:01:60:4b:87:93:c1:42:28:e1:61:ad: 8a:56:dc:86:81:9c:c5:19:c0:b9:3c:68:7c:6d:15: 0a:e6:38:48:4b:49:88:97:c0:a5:c0:83:bc:2e:5a: bf:5a:19:18:aa:23:3a:86:80:0b:13:74:3c:68:d9: ee:a4:0b:80:33:1c:08:3f:11:d0:35:e1:4e:b2:70: 93:39:73:c9:ef:62:65:53:f3:e2:d7:21:0f:84:76: 20:01:ba:bb:52:1e:01:8f:48:c2:71:51:73:f5:d6: fd:7b:4e:78:ec:ca:e5:f6:4c:29:31:45:f7:d5:e5: be:9a:24:48:0e:16:1b:4b:31:1a:5f:77:7e:5c:0b: ec:0c:09:36:92:9b:19:68:c0:d6:41:a9:4e:fd:59: 8b:2d:b4:f0:e3:a6:8a:0d:db:11:f2:13:b9:79:e8: 2d:13:5c:21:a3:2c:4c:30:40:1d:7c:41:5f:09:7a: fa:84:14:49:06:1b:1a:9d:b0:84:72:a1:e7:65:ea: 71:be:ea:79:c5:25:b9:b1:c1:71:04:f9:b7:45:ed: 8b:86:c4:03:2c:73:42:64:64:8e:67:75:8a:bd:98: c4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:2B:E2:F3:C3:F4:13:4B:56:8D:DF:46:CC:D9:6F:1F:04:59:8D X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:7f:03:8b:d8:8f:04:17:4e:88:32:b7:46:2e:c0:6a:65:26: 71:a0:2d:0e:4e:07:d8:d0:b0:1c:a7:8b:97:5a:61:12:bb:53: b0:12:5f:be:8d:7e:7e:d5:9c:3a:f3:26:01:c0:8d:79:30:9d: 08:93:e1:dd:0c:cf:4e:c5:19:2a:72:6d:42:21:5f:7c:69:bf: c0:07:be:23:41:ab:19:f3:5c:22:cf:75:60:0b:96:ed:be:fa: f2:52:1c:e7:fd:fa:a8:d4:06:0a:22:45:f4:13:42:b0:94:fe: 93:6d:69:3f:29:d1:71:d0:3d:3b:f3:38:8f:b3:2e:0c:1d:b4: 34:45:0c:30:c7:bd:66:95:a4:e6:be:ec:86:e6:53:70:2d:3a: 95:fa:28:22:cb:a2:04:81:78:c3:e3:6f:35:0b:81:7f:32:1a: 9a:b1:1d:7b:f7:a7:62:62:2f:90:38:36:b6:86:30:27:ef:bf: 86:82:e4:4f:fa:be:38:b8:b2:73:ed:7b:f7:1e:0c:23:98:27: 76:83:9e:7b:7b:df:15:c4:ec:1b:0b:c0:a1:c6:92:04:b0:3d: fa:c5:1b:03:f0:6a:a4:97:14:9d:3f:ff:bb:a8:9c:42:77:2a: e1:b3:a6:f3:38:aa:b5:6d:3d:b0:22:bf:09:05:78:74:17:9d: d0:78:12:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjYxMDIwMjMwODQ2WhcNMjYxMDI3MjMwODQ2WjAYMRYwFAYD VQQDEw02YWQ3ZjQ3Zi0xMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMKSeywS6dnQ3GdIzLW2+9V/FyVYnctDo1sIPiVwDQMPAWBLh5PBQijhYa2K VtyGgZzFGcC5PGh8bRUK5jhIS0mIl8ClwIO8Llq/WhkYqiM6hoALE3Q8aNnupAuA MxwIPxHQNeFOsnCTOXPJ72JlU/Pi1yEPhHYgAbq7Uh4Bj0jCcVFz9db9e0547Mrl 9kwpMUX31eW+miRIDhYbSzEaX3d+XAvsDAk2kpsZaMDWQalO/VmLLbTw46aKDdsR 8hO5eegtE1whoyxMMEAdfEFfCXr6hBRJBhsanbCEcqHnZepxvup5xSW5scFxBPm3 Re2LhsQDLHNCZGSOZ3WKvZjENQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZwK+Lz w/QTS1aN30bM2W8fBFmNMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvH8Di9iPBBdOiDK3Ri7AamUmcaAtDk4H2NCwHKeLl1phErtTsBJfvo1+ftWc OvMmAcCNeTCdCJPh3QzPTsUZKnJtQiFffGm/wAe+I0GrGfNcIs91YAuW7b768lIc 5/36qNQGCiJF9BNCsJT+k21pPynRcdA9O/M4j7MuDB20NEUMMMe9ZpWk5r7shuZT cC06lfooIsuiBIF4w+NvNQuBfzIamrEde/enYmIvkDg2toYwJ++/hoLkT/q+OLiy c+179x4MI5gndoOee3vfFcTsGwvAocaSBLA9+sUbA/BqpJcUnT//u6icQncq4bOm 8ziqtW09sCK/CQV4dBed0HgSMg== -----END CERTIFICATE-----Generated at Wed Oct 21 17:12:39 2026 by rpki-client