$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: HcrUfMjwqB/A/UdXFKGG42ehFkPzTCXTVDuk6tqbMNw= Subject key identifier: FD:6D:02:1A:A6:1B:FF:88:8A:EF:58:CE:08:36:AD:6F:08:AF:91:0C Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 022C Signing time: Sun 25 Oct 2026 03:18:03 +0000 Manifest this update: Sun 25 Oct 2026 03:18:03 +0000 Manifest next update: Sun 01 Nov 2026 03:18:03 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: LEl+qTpB5qvDqLA2vdV142ER5jswqvNqkcnjMoqKC5Q=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: pHxXivDFEbvkF+NQAZkLY9uNgdyvvnZXrHsc10zFfQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 03:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Oct 25 03:18:03 2026 GMT Not After : Nov 1 03:18:03 2026 GMT Subject: CN=6add74eb-c177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:be:25:40:47:2b:26:86:0d:7b:05:b1:e8: 8f:cc:aa:70:a5:a9:58:2f:49:09:9f:ae:79:e4:29: 0a:68:05:47:9e:ac:85:ed:83:e6:06:e0:70:e2:36: fc:25:f9:9a:35:19:f5:60:ac:35:36:be:66:84:03: 5e:b5:76:55:a8:06:6e:d6:16:3e:ae:02:0b:d4:92: 3b:a5:65:11:86:f9:c7:c4:b1:93:6e:29:b5:dc:aa: 37:82:c9:e3:6e:a7:bd:d6:63:83:61:d2:1d:6b:ef: 7d:02:e4:18:33:fd:e4:a4:4c:89:63:e8:aa:c8:34: de:9f:fb:f8:bc:da:c1:5e:a0:87:5a:a6:6c:9d:81: 14:68:4e:e8:18:f5:13:dd:18:f1:c7:5c:59:57:8f: e2:98:53:0a:ae:a9:a7:4e:70:d4:dd:f7:b4:0a:60: c3:2f:0b:16:3e:d4:48:17:52:56:b9:56:cf:5d:44: bd:ea:15:b8:df:c6:6f:ea:e1:6e:63:ea:4e:0b:e6: 31:31:0a:30:d1:af:e1:f2:07:59:38:12:3d:8e:71: af:8b:e3:c4:05:b2:be:d3:22:d8:de:9c:0b:6d:db: 57:2d:2d:fa:bb:63:80:85:d7:88:ec:d7:52:fd:b4: ac:c6:17:01:0f:80:93:0e:c3:15:2e:a8:5b:93:44: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6D:02:1A:A6:1B:FF:88:8A:EF:58:CE:08:36:AD:6F:08:AF:91:0C X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:89:ed:44:42:95:27:3c:d5:b4:f9:3f:06:d9:d3:14:04:b7: 14:08:49:f9:69:0c:4e:61:49:fe:ae:ba:0c:3e:5f:a2:b5:fc: c6:88:bf:d0:a1:4f:9f:7f:1b:1a:4d:71:7e:3e:0b:d8:08:d6: e2:22:09:ff:17:f2:4c:2b:02:37:28:37:5d:cd:cd:26:c0:eb: 86:7f:6e:91:16:02:66:c5:1d:07:c4:9b:f5:f9:ae:0f:3b:21: 65:8e:01:49:f0:34:8c:b5:fb:09:41:e5:ae:11:51:4a:62:a2: 50:cf:54:d8:cc:13:1b:b6:97:fa:f7:47:7a:80:a5:04:2e:39: 46:a8:6b:66:4a:9a:29:70:ba:c4:21:f6:73:42:f9:26:f0:4e: 2f:59:f5:f1:c9:44:a2:0d:90:5f:2b:d9:d5:49:9e:12:c5:e8: 9b:aa:d5:0c:a1:77:e1:60:f8:5b:e5:1e:91:64:92:cd:42:b7: 80:6b:eb:0e:71:9b:d5:52:40:ad:93:a7:69:22:fa:5a:da:a6: d1:af:d9:04:87:74:ba:f2:1c:18:9c:bd:30:8a:22:c9:bf:f8: bf:ec:07:d9:f8:a1:dd:73:18:e7:e3:d7:20:f3:97:a6:da:1d: 33:fc:e0:23:7e:73:5a:82:45:f6:45:6b:7c:9c:e0:bf:db:63: a6:43:48:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjYxMDI1MDMxODAzWhcNMjYxMTAxMDMxODAzWjAYMRYwFAYD VQQDEw02YWRkNzRlYi1jMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVG+JUBHKyaGDXsFseiPzKpwpalYL0kJn6555CkKaAVHnqyF7YPmBuBw4jb8 JfmaNRn1YKw1Nr5mhANetXZVqAZu1hY+rgIL1JI7pWURhvnHxLGTbim13Ko3gsnj bqe91mODYdIda+99AuQYM/3kpEyJY+iqyDTen/v4vNrBXqCHWqZsnYEUaE7oGPUT 3Rjxx1xZV4/imFMKrqmnTnDU3fe0CmDDLwsWPtRIF1JWuVbPXUS96hW438Zv6uFu Y+pOC+YxMQow0a/h8gdZOBI9jnGvi+PEBbK+0yLY3pwLbdtXLS36u2OAhdeI7NdS /bSsxhcBD4CTDsMVLqhbk0RLgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1tAhqm G/+Iiu9Yzgg2rW8Ir5EMMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiYntREKVJzzVtPk/BtnTFAS3FAhJ+WkMTmFJ/q66DD5forX8xoi/0KFPn38b Gk1xfj4L2AjW4iIJ/xfyTCsCNyg3Xc3NJsDrhn9ukRYCZsUdB8Sb9fmuDzshZY4B SfA0jLX7CUHlrhFRSmKiUM9U2MwTG7aX+vdHeoClBC45RqhrZkqaKXC6xCH2c0L5 JvBOL1n18clEog2QXyvZ1UmeEsXom6rVDKF34WD4W+UekWSSzUK3gGvrDnGb1VJA rZOnaSL6Wtqm0a/ZBId0uvIcGJy9MIoiyb/4v+wH2fih3XMY5+PXIPOXptodM/zg I35zWoJF9kVrfJzgv9tjpkNIcw== -----END CERTIFICATE-----Generated at Mon Oct 26 12:43:47 2026 by rpki-client