$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json) Hash identifier: RwKH+lFoAoiaBXzVzYyRfo3uWiQHFiSnmooYKakaPwU= Subject key identifier: D1:85:38:81:87:A8:19:FA:E3:76:C3:CF:04:31:82:60:B4:6F:2A:2E Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft Manifest number: 04AB Signing time: Thu 29 Oct 2026 00:05:36 +0000 Manifest this update: Thu 29 Oct 2026 00:05:36 +0000 Manifest next update: Thu 05 Nov 2026 00:05:36 +0000 Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: CmwROUvc+8aSsWxvZIBUuHph1HdiJ2Wf4OTEN3vL74s=) 2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 00:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Validity Not Before: Oct 29 00:05:36 2026 GMT Not After : Nov 5 00:05:36 2026 GMT Subject: CN=6ae28dd0-9c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:37:00:68:58:09:61:89:90:25:de:34:c2: e3:bc:9c:90:4b:9f:b4:32:e6:43:3f:1f:ba:8d:5d: a1:bb:52:e9:18:9a:9c:7e:6d:48:14:73:af:ac:b7: 80:a5:f1:2c:eb:77:ac:d2:99:19:10:d2:54:fd:f7: 0f:d6:0d:97:fb:96:bb:3a:32:2d:f9:d5:bc:ef:2c: 3a:7d:1d:f8:ee:cc:cf:2a:7b:02:70:c6:89:99:af: ba:7b:d9:5f:42:3b:aa:8f:54:28:2d:8e:7c:46:c4: 3a:4e:19:f3:1c:a6:88:c1:c4:61:64:19:94:74:b5: 59:a9:27:7d:27:3d:7b:6f:97:c8:f3:92:9e:cd:bd: 77:82:df:26:09:6f:75:cb:85:b8:eb:5f:bd:be:14: c4:2c:1f:db:af:bc:0e:c4:70:a7:aa:9f:fe:c1:d4: 88:3a:aa:79:f0:b4:b7:d7:9c:d0:4b:11:1b:55:e0: 33:10:98:98:4c:19:78:28:94:80:3a:1d:ca:aa:bb: d8:23:9e:77:c3:9f:9d:51:0d:b2:43:8f:35:e0:31: 47:a4:f0:e2:c6:b8:d8:44:a5:88:7d:e7:bf:2f:d8: ab:c6:d4:81:ee:8c:87:6e:f5:c9:3a:80:99:05:44: 95:46:8b:0e:ef:a2:73:57:55:c9:3e:97:4a:c0:5f: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:85:38:81:87:A8:19:FA:E3:76:C3:CF:04:31:82:60:B4:6F:2A:2E X509v3 Authority Key Identifier: keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ff:ae:28:f0:bd:1b:4a:47:a3:56:15:c5:38:4f:48:b2:18: 98:ab:38:18:9a:ab:cb:d1:1a:57:01:8d:c7:02:2c:d7:c5:d7: c3:5b:c0:41:af:ef:91:18:05:eb:e7:dd:04:13:73:72:9c:29: 96:2e:30:69:9b:aa:9d:a3:a1:f7:73:fa:e1:67:b6:05:d6:44: aa:fa:04:ba:36:fd:00:64:72:26:8d:be:ef:26:2f:8d:61:85: 9d:20:3f:1c:03:00:a4:98:1d:f5:02:72:61:46:a9:7d:9a:f9: 08:1f:d9:a0:e5:54:e8:be:f3:47:6e:c0:95:f9:3b:10:b5:97: 30:d6:be:a4:ac:00:19:c3:2a:99:51:87:04:99:83:8d:5b:2d: 37:1c:71:c9:7d:ea:fc:f5:9d:a6:81:99:ef:e1:83:5e:b9:c7: 9d:57:7b:65:f1:44:a7:41:12:b4:95:18:fb:2b:f3:fe:50:02: 41:1f:b0:e9:d2:1f:41:69:50:0c:6e:2a:a6:c3:75:9a:7b:86: 15:cd:c2:5a:11:8e:5e:d7:4a:ad:19:0b:db:d5:2e:c1:15:0a: fe:f6:b0:05:84:f8:d2:53:f0:69:27:9c:a5:a1:14:32:ba:0a: f3:4e:4e:d2:87:1e:ed:c1:7e:6c:1d:4a:0a:b1:cb:df:49:11: 3e:95:5e:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3OUMxMTAvBgNVBAUTKDMxOTc0MDJDQzFENDA2Rjk3MDdEMkUyMjA0MzYzQkMw RDEzQzAyOTkwHhcNMjYxMDI5MDAwNTM2WhcNMjYxMTA1MDAwNTM2WjAYMRYwFAYD VQQDEw02YWUyOGRkMC05YzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/I3AGhYCWGJkCXeNMLjvJyQS5+0MuZDPx+6jV2hu1LpGJqcfm1IFHOvrLeA pfEs63es0pkZENJU/fcP1g2X+5a7OjIt+dW87yw6fR347szPKnsCcMaJma+6e9lf Qjuqj1QoLY58RsQ6ThnzHKaIwcRhZBmUdLVZqSd9Jz17b5fI85Kezb13gt8mCW91 y4W461+9vhTELB/br7wOxHCnqp/+wdSIOqp58LS315zQSxEbVeAzEJiYTBl4KJSA Oh3KqrvYI553w5+dUQ2yQ4814DFHpPDixrjYRKWIfee/L9irxtSB7oyHbvXJOoCZ BUSVRosO76JzV1XJPpdKwF+XHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGFOIGH qBn643bDzwQxgmC0byouMB8GA1UdIwQYMBaAFDGXQCzB1Ab5cH0uIgQ2O8DRPAKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDc5Qy8zMkJGODUwRTk4 RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2bHdmUzRpQkRZN3dORThB cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01aZEFMTUhVQnZsd2ZTNGlCRFk3d05FOEFway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDc5Qy8zMkJGODUwRTk4RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2 bHdmUzRpQkRZN3dORThBcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoP+uKPC9G0pHo1YVxThPSLIYmKs4GJqry9EaVwGNxwIs18XXw1vAQa/vkRgF 6+fdBBNzcpwpli4waZuqnaOh93P64We2BdZEqvoEujb9AGRyJo2+7yYvjWGFnSA/ HAMApJgd9QJyYUapfZr5CB/ZoOVU6L7zR27Alfk7ELWXMNa+pKwAGcMqmVGHBJmD jVstNxxxyX3q/PWdpoGZ7+GDXrnHnVd7ZfFEp0EStJUY+yvz/lACQR+w6dIfQWlQ DG4qpsN1mnuGFc3CWhGOXtdKrRkL29UuwRUK/vawBYT40lPwaSecpaEUMroK805O 0oce7cF+bB1KCrHL30kRPpVeAQ== -----END CERTIFICATE-----Generated at Fri Oct 30 18:06:36 2026 by rpki-client