$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/cZ7lvcjZUimqKv11kDQwnl6Rjl0.mft File: cZ7lvcjZUimqKv11kDQwnl6Rjl0.mft (raw, json) Hash identifier: bowubJ0IvXem0DilvGwaM/KuGkj43YoY52OmtYj39rc= Subject key identifier: 25:72:A4:9A:58:3C:42:B3:74:C6:78:9B:5E:C7:36:6E:E9:17:82:46 Authority key identifier: 71:9E:E5:BD:C8:D9:52:29:AA:2A:FD:75:90:34:30:9E:5E:91:8E:5D Certificate issuer: /CN=A91FA8C4/serialNumber=719EE5BDC8D95229AA2AFD759034309E5E918E5D Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZ7lvcjZUimqKv11kDQwnl6Rjl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/cZ7lvcjZUimqKv11kDQwnl6Rjl0.mft Manifest number: 05 Signing time: Sat 03 Oct 2026 10:02:17 +0000 Manifest this update: Sat 03 Oct 2026 10:02:17 +0000 Manifest next update: Sat 10 Oct 2026 10:02:17 +0000 Files and hashes: 1: cZ7lvcjZUimqKv11kDQwnl6Rjl0.crl (hash: yMyuJdCA4neHbzyXe48G10NyGR2iGvr6Tnx1D5pgKOY=) 2: 475D0C82BC8611F1A1A53DC85D11F970.roa (hash: 0OJ0RHdJwx+yPSurAHc/a8I+zvC+uB1HPqrgYAIta40=) 3: 4634ADD8BC8611F1A1A53DC85D11F970.roa (hash: MZDVJvCQLOE+Sp9weuIcISPm8ifbMvKF8IZooMFieo0=) 4: 46BC6584BC8611F1A1A53DC85D11F970.roa (hash: c2B3Tgp4xkE36o2AkuW2q/3lxQ459ziunl5cB4IILUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/cZ7lvcjZUimqKv11kDQwnl6Rjl0.crl rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/cZ7lvcjZUimqKv11kDQwnl6Rjl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZ7lvcjZUimqKv11kDQwnl6Rjl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 10:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8C4, serialNumber=719EE5BDC8D95229AA2AFD759034309E5E918E5D Validity Not Before: Oct 3 10:02:17 2026 GMT Not After : Oct 10 10:02:17 2026 GMT Subject: CN=6ac0d2a9-2406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:f1:9b:e7:7c:a2:8a:e0:72:56:c8:08:00: 6b:3b:e5:e5:7a:82:04:9b:53:58:14:19:e4:ba:5f: 35:01:0d:77:0e:ac:a4:5b:4d:71:65:bc:51:0e:ac: b5:fd:83:e1:57:8d:02:eb:d6:b1:51:75:4d:e8:89: 51:cd:50:81:d3:75:30:e3:c7:b8:f2:1d:69:43:1d: fd:d6:15:79:ec:2a:d9:9f:28:bc:e8:b0:ef:21:40: 91:ce:97:37:14:31:45:0f:17:f3:a3:92:b8:c1:2c: 76:3e:7b:2b:d5:5e:e6:6e:24:e4:56:83:49:bb:0f: 19:07:df:b0:26:98:be:61:7f:6b:c6:fa:94:3f:e8: e0:c9:28:c4:06:3d:5a:c0:5f:d7:50:d2:dc:21:64: 25:c9:f1:b9:93:dc:15:53:f9:29:9d:45:ed:a6:dc: 45:a3:4a:da:ea:f7:16:a3:73:31:d1:3a:11:93:85: 17:5b:17:54:41:81:35:b0:78:16:71:c0:6c:f5:50: 7a:9e:94:b0:6a:6f:d4:1a:e0:42:75:bd:29:3a:54: e9:99:ac:41:83:08:8a:ed:32:bf:b5:dd:96:59:7d: d6:67:fc:32:0b:18:86:d5:e0:f0:8e:3b:8e:5b:3f: 75:0f:37:6a:32:bd:61:f2:22:b7:78:da:b2:8b:9c: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:A4:9A:58:3C:42:B3:74:C6:78:9B:5E:C7:36:6E:E9:17:82:46 X509v3 Authority Key Identifier: keyid:71:9E:E5:BD:C8:D9:52:29:AA:2A:FD:75:90:34:30:9E:5E:91:8E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/cZ7lvcjZUimqKv11kDQwnl6Rjl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZ7lvcjZUimqKv11kDQwnl6Rjl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8C4/7865E584BC8511F1852CEB175D11F970/cZ7lvcjZUimqKv11kDQwnl6Rjl0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:29:c6:37:83:ac:a4:1f:6b:1c:0e:d1:3e:09:08:0e:b2:e1: 4b:8e:15:97:55:c2:6e:f2:b1:59:8c:2f:25:7c:d2:38:65:fb: 55:18:fa:30:bb:06:70:4e:3c:bb:cf:fb:1e:f0:03:65:d7:9a: 1a:00:3c:3f:cd:76:7a:9b:a7:74:27:b8:99:25:32:6c:26:57: 04:11:2c:ef:ae:b0:b8:3e:55:ce:aa:26:6b:c3:21:50:f8:94: fd:90:db:9f:7d:99:27:b1:0c:5a:1a:1f:f1:15:10:08:f2:51: 57:9f:26:26:0e:bf:82:10:64:b4:6e:da:39:65:2b:06:3e:35: fe:b8:39:13:59:22:97:f9:4d:53:f8:0d:b1:ff:6e:3c:13:d0: 91:5f:ac:96:c3:a0:b9:48:c5:a7:12:a7:e2:35:9a:af:e3:3e: 90:98:98:97:0e:d8:e3:46:5b:f2:a6:10:34:09:28:19:a5:b7: 34:32:47:e9:1d:58:d7:04:ce:34:b2:de:71:6e:b6:9d:18:0e: df:94:cb:91:a7:2d:5b:d6:8f:9e:f5:70:52:21:80:76:9c:20: 4c:03:b2:94:07:53:15:92:28:22:28:5e:24:ec:7a:cc:89:3d: 1c:f1:95:0e:24:4b:75:d6:50:c7:18:14:0d:2c:96:0b:fa:23: 00:5a:a0:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QThDNDExMC8GA1UEBRMoNzE5RUU1QkRDOEQ5NTIyOUFBMkFGRDc1OTAzNDMwOUU1 RTkxOEU1RDAeFw0yNjEwMDMxMDAyMTdaFw0yNjEwMTAxMDAyMTdaMBgxFjAUBgNV BAMTDTZhYzBkMmE5LTI0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCT7/Gb53yiiuByVsgIAGs75eV6ggSbU1gUGeS6XzUBDXcOrKRbTXFlvFEOrLX9 g+FXjQLr1rFRdU3oiVHNUIHTdTDjx7jyHWlDHf3WFXnsKtmfKLzosO8hQJHOlzcU MUUPF/OjkrjBLHY+eyvVXuZuJORWg0m7DxkH37AmmL5hf2vG+pQ/6ODJKMQGPVrA X9dQ0twhZCXJ8bmT3BVT+SmdRe2m3EWjStrq9xajczHROhGThRdbF1RBgTWweBZx wGz1UHqelLBqb9Qa4EJ1vSk6VOmZrEGDCIrtMr+13ZZZfdZn/DILGIbV4PCOO45b P3UPN2oyvWHyIrd42rKLnLMPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJXKkmlg8 QrN0xnibXsc2bukXgkYwHwYDVR0jBBgwFoAUcZ7lvcjZUimqKv11kDQwnl6Rjl0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBOEM0Lzc4NjVFNTg0QkM4 NTExRjE4NTJDRUIxNzVEMTFGOTcwL2NaN2x2Y2paVWltcUt2MTFrRFF3bmw2Umps MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1o3bHZjalpVaW1xS3YxMWtEUXdubDZSamwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB OEM0Lzc4NjVFNTg0QkM4NTExRjE4NTJDRUIxNzVEMTFGOTcwL2NaN2x2Y2paVWlt cUt2MTFrRFF3bmw2UmpsMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDRKcY3g6ykH2scDtE+CQgOsuFLjhWXVcJu8rFZjC8lfNI4ZftVGPowuwZwTjy7 z/se8ANl15oaADw/zXZ6m6d0J7iZJTJsJlcEESzvrrC4PlXOqiZrwyFQ+JT9kNuf fZknsQxaGh/xFRAI8lFXnyYmDr+CEGS0bto5ZSsGPjX+uDkTWSKX+U1T+A2x/248 E9CRX6yWw6C5SMWnEqfiNZqv4z6QmJiXDtjjRlvyphA0CSgZpbc0MkfpHVjXBM40 st5xbradGA7flMuRpy1b1o+e9XBSIYB2nCBMA7KUB1MVkigiKF4k7HrMiT0c8ZUO JEt11lDHGBQNLJYL+iMAWqDG -----END CERTIFICATE-----Generated at Sun Oct 4 18:42:12 2026 by rpki-client