$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft File: -rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft (raw, json) Hash identifier: iIlsb6n6Dgr5Qax/IBI6iKY9iSsD4aTrWrjcgzA8plo= Subject key identifier: 63:A8:60:D1:5D:BE:CA:08:45:2D:E3:49:49:BB:59:9A:1C:96:94:B4 Authority key identifier: FA:B1:1C:D0:E7:E6:58:C0:8E:99:7C:F1:95:4D:CA:9C:10:C8:D7:24 Certificate issuer: /CN=A91FAD99/serialNumber=FAB11CD0E7E658C08E997CF1954DCA9C10C8D724 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft Manifest number: 16 Signing time: Fri 09 Oct 2026 09:49:50 +0000 Manifest this update: Fri 09 Oct 2026 09:49:49 +0000 Manifest next update: Fri 16 Oct 2026 09:49:49 +0000 Files and hashes: 1: -rEc0OfmWMCOmXzxlU3KnBDI1yQ.crl (hash: WlWG+JQ5NdFIsUNtPROp/pwzp4TMzhyYu8jduY2OK7k=) 2: 2E58EDD0A4F011F19025BAB06B11F970.roa (hash: 2ocGI8kGqmVxj84NUkACI9xBvegH5llIIlxG7IvKFX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.crl rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD99, serialNumber=FAB11CD0E7E658C08E997CF1954DCA9C10C8D724 Validity Not Before: Oct 9 09:49:49 2026 GMT Not After : Oct 16 09:49:49 2026 GMT Subject: CN=6ac8b8bd-62ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:46:38:ca:de:a9:66:7f:81:be:33:5d:72: 74:9d:1c:a0:e8:2d:a1:47:c8:79:11:a2:25:ec:f2: 6c:a9:78:cb:b2:54:ac:a4:91:33:51:61:4c:ad:8c: 1a:1e:cb:d6:52:17:bf:0c:94:76:d4:1f:ee:54:f8: 51:f5:91:e3:4a:1c:78:f3:69:3e:27:d6:97:40:28: de:41:c7:4c:39:f3:df:11:73:fb:e8:0a:52:59:a3: f0:02:0e:02:6d:af:73:7b:96:89:8e:d2:59:cd:50: d9:58:0e:4c:2f:34:3b:7d:1a:ca:96:b5:52:05:3e: fe:8c:3e:e1:fb:a8:49:f1:07:68:d4:4f:99:2a:39: 52:e8:76:e9:dd:a3:d2:fb:b5:fd:98:4f:c1:33:c2: 93:90:e9:83:89:e9:eb:1e:d3:0e:80:e9:eb:eb:cc: 6f:6f:45:68:da:9a:e0:6f:6f:dd:fc:65:8f:96:97: d1:46:51:d1:9c:e1:c2:01:8c:2a:31:b2:fa:61:03: db:78:f6:db:32:d2:08:e0:5f:b6:ed:44:3f:b7:60: 09:fe:cd:f5:bf:fb:f0:59:bb:a5:a6:bf:33:03:8d: fe:bf:a1:e2:cd:1a:ed:28:c2:e4:6b:27:8f:b1:3a: 8c:6b:75:5d:1f:be:f7:2d:30:7b:d8:d8:8c:21:df: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A8:60:D1:5D:BE:CA:08:45:2D:E3:49:49:BB:59:9A:1C:96:94:B4 X509v3 Authority Key Identifier: keyid:FA:B1:1C:D0:E7:E6:58:C0:8E:99:7C:F1:95:4D:CA:9C:10:C8:D7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:af:f8:99:18:f4:92:69:9c:92:0b:07:64:df:31:4d:ad:cc: 28:8f:ae:73:0c:6e:8f:b0:68:9d:f9:6b:df:63:5a:81:5b:b8: c0:95:f1:7d:23:72:9b:ad:c0:95:2a:fa:f6:ba:7e:dd:3e:f4: a9:50:71:09:ce:2b:66:d8:0e:d8:a8:79:68:c7:91:87:c7:2c: f8:5b:43:a3:30:be:90:8d:ef:99:1a:cd:d8:70:f2:34:ad:46: 77:97:c8:93:40:19:04:31:e4:0b:c2:c6:f6:08:1e:c0:61:84: 6f:be:cb:02:6a:a6:55:fe:a2:19:70:40:ea:64:8f:b8:7f:06: 65:1f:1f:cd:68:ad:a0:26:7f:ad:f9:4c:91:84:a9:1b:f2:db: 72:60:39:b2:d2:d7:9d:86:53:a8:7c:53:b3:39:45:0f:0a:b8: 17:fd:20:93:86:cc:e7:ed:a0:88:8c:d8:f6:79:23:39:92:e9: b6:8d:55:75:e9:16:92:fe:69:b5:5b:62:4d:6a:8b:d1:a0:55: c0:78:86:97:01:fe:b6:c4:a1:00:bb:13:fc:87:56:90:30:db: 48:b4:b2:04:34:7c:d7:98:9a:da:75:92:67:0b:eb:7d:6c:6b: c0:88:3a:8e:db:46:20:23:22:0e:20:23:7d:23:6d:63:a6:ab: 37:02:08:1c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUQ5OTExMC8GA1UEBRMoRkFCMTFDRDBFN0U2NThDMDhFOTk3Q0YxOTU0RENBOUMx MEM4RDcyNDAeFw0yNjEwMDkwOTQ5NDlaFw0yNjEwMTYwOTQ5NDlaMBgxFjAUBgNV BAMTDTZhYzhiOGJkLTYyZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDASUY4yt6pZn+BvjNdcnSdHKDoLaFHyHkRoiXs8mypeMuyVKykkTNRYUytjBoe y9ZSF78MlHbUH+5U+FH1keNKHHjzaT4n1pdAKN5Bx0w5898Rc/voClJZo/ACDgJt r3N7lomO0lnNUNlYDkwvNDt9GsqWtVIFPv6MPuH7qEnxB2jUT5kqOVLodundo9L7 tf2YT8EzwpOQ6YOJ6ese0w6A6evrzG9vRWjamuBvb938ZY+Wl9FGUdGc4cIBjCox svphA9t49tsy0gjgX7btRD+3YAn+zfW/+/BZu6WmvzMDjf6/oeLNGu0owuRrJ4+x OoxrdV0fvvctMHvY2Iwh3xL/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUY6hg0V2+ yghFLeNJSbtZmhyWlLQwHwYDVR0jBBgwFoAU+rEc0OfmWMCOmXzxlU3KnBDI1yQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBRDk5LzU4QUJEREM2QTRF QzExRjE5M0U0MUIwRDZCMTFGOTcwLy1yRWMwT2ZtV01DT21YenhsVTNLbkJESTF5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXJFYzBPZm1XTUNPbVh6eGxVM0tuQkRJMXlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB RDk5LzU4QUJEREM2QTRFQzExRjE5M0U0MUIwRDZCMTFGOTcwLy1yRWMwT2ZtV01D T21YenhsVTNLbkJESTF5US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBmr/iZGPSSaZySCwdk3zFNrcwoj65zDG6PsGid+WvfY1qBW7jAlfF9I3KbrcCV Kvr2un7dPvSpUHEJzitm2A7YqHlox5GHxyz4W0OjML6Qje+ZGs3YcPI0rUZ3l8iT QBkEMeQLwsb2CB7AYYRvvssCaqZV/qIZcEDqZI+4fwZlHx/NaK2gJn+t+UyRhKkb 8ttyYDmy0tedhlOofFOzOUUPCrgX/SCThszn7aCIjNj2eSM5kum2jVV16RaS/mm1 W2JNaovRoFXAeIaXAf62xKEAuxP8h1aQMNtItLIENHzXmJradZJnC+t9bGvAiDqO 20YgIyIOICN9I21jpqs3Aggc -----END CERTIFICATE-----Generated at Sat Oct 10 12:53:08 2026 by rpki-client