$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: HQIW6SZ3yE+BaaaENTjif8N76r4Vs2T4BpXJqc7dHiQ= Subject key identifier: 8F:08:AC:83:47:D6:2B:29:7B:52:A0:A7:53:8A:E2:02:EF:7F:CB:69 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 027A Signing time: Wed 21 Oct 2026 02:26:01 +0000 Manifest this update: Wed 21 Oct 2026 02:26:00 +0000 Manifest next update: Wed 28 Oct 2026 02:26:00 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: qr2jwFDW0nkmXjcsBf4KeeeUm2o8pg/EiGZt67XAmBk=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: nMFdDCUb4ENNKUnmKytdPmfWGdDIIdu20F9f9Lqgp3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Oct 21 02:26:00 2026 GMT Not After : Oct 28 02:26:00 2026 GMT Subject: CN=6ad822b9-2c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:c0:91:9e:42:86:c4:98:25:a2:44:fe:a7: f8:71:ba:1d:5a:f2:db:3d:38:f8:8c:25:e7:28:0d: 48:09:5f:24:1e:60:f8:c3:a3:86:3a:c8:f3:20:8f: 59:cd:56:35:29:7d:e0:79:ec:95:80:4e:2b:55:5c: 15:71:32:67:ee:bb:9d:60:c9:38:60:01:8c:74:bd: 31:b1:2e:e8:4b:95:98:6b:a7:c6:47:a2:2b:48:57: 9d:89:d2:ab:83:60:30:c9:84:1e:f5:5e:3b:ab:8e: 4f:2c:23:21:a4:41:c1:c6:eb:bd:50:52:28:cf:4c: cc:13:22:e7:3d:3c:8d:43:38:c6:24:41:02:9a:59: cd:28:27:ef:e3:a5:bc:1f:94:b9:20:2e:5a:10:4d: db:e5:7b:1d:6f:3a:44:09:ad:55:f1:e2:c3:05:32: 10:61:6e:40:36:7d:4a:86:91:47:2f:57:dd:bd:62: 79:1e:f4:04:ca:87:65:28:f3:ed:04:d8:fb:0b:8c: 21:02:86:28:3c:c6:d1:48:04:50:42:65:58:b9:ce: 96:98:52:ff:30:f2:d5:82:fc:a5:61:5e:2b:0f:91: 15:ac:d1:2f:75:dc:fd:b4:01:a6:20:2f:ac:22:6f: b9:2c:15:d1:43:31:29:cb:eb:43:11:60:aa:1c:ee: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:08:AC:83:47:D6:2B:29:7B:52:A0:A7:53:8A:E2:02:EF:7F:CB:69 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:b3:de:65:95:24:3a:84:a4:d0:0a:80:2e:b7:fc:2f:e0: c8:1f:4e:a0:ce:0d:5c:cc:27:c6:7d:9c:59:2c:17:a4:d4:84: 79:31:a7:c8:73:1a:77:43:09:ac:75:33:67:38:b1:ad:54:e6: 35:ec:6e:36:c4:3c:6c:f7:2d:e8:34:07:1b:92:88:e3:f6:1c: dd:09:7e:1f:49:e3:ab:90:9d:28:61:d0:2c:b3:a4:84:2d:a6: 63:8c:a8:3f:76:e2:a9:8c:97:b0:38:0a:44:2c:5f:69:5a:a4: d8:20:f7:45:67:1e:4d:2c:67:a7:f8:33:42:b9:54:ff:37:9c: 27:d2:98:56:a3:e0:3c:c3:39:d6:aa:21:e2:18:63:e5:40:dc: 2d:94:4f:4e:9d:59:0b:83:49:c1:49:b5:64:3e:99:6c:b4:77: 4a:1c:19:13:37:09:48:3f:4b:80:2d:12:bf:83:a8:66:97:c8: 2e:44:6b:03:d6:76:f6:f0:26:11:10:35:70:48:29:70:c6:86: 44:b9:6d:10:25:bf:7b:b6:45:db:84:d4:a8:af:28:57:72:05: f7:c5:d4:26:71:6e:47:a5:0f:dd:55:65:92:50:12:f6:0f:fd: 2f:e9:5f:91:86:46:90:05:b4:f2:12:dd:73:48:df:6b:a4:6d: c9:38:f3:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjYxMDIxMDIyNjAwWhcNMjYxMDI4MDIyNjAwWjAYMRYwFAYD VQQDEw02YWQ4MjJiOS0yYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1nAkZ5ChsSYJaJE/qf4cbodWvLbPTj4jCXnKA1ICV8kHmD4w6OGOsjzII9Z zVY1KX3geeyVgE4rVVwVcTJn7rudYMk4YAGMdL0xsS7oS5WYa6fGR6IrSFedidKr g2AwyYQe9V47q45PLCMhpEHBxuu9UFIoz0zMEyLnPTyNQzjGJEECmlnNKCfv46W8 H5S5IC5aEE3b5XsdbzpECa1V8eLDBTIQYW5ANn1KhpFHL1fdvWJ5HvQEyodlKPPt BNj7C4whAoYoPMbRSARQQmVYuc6WmFL/MPLVgvylYV4rD5EVrNEvddz9tAGmIC+s Im+5LBXRQzEpy+tDEWCqHO4igwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8IrINH 1ispe1Kgp1OK4gLvf8tpMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP9qz3mWVJDqEpNAKgC63/C/gyB9OoM4NXMwnxn2cWSwXpNSEeTGnyHMad0MJ rHUzZzixrVTmNexuNsQ8bPct6DQHG5KI4/Yc3Ql+H0njq5CdKGHQLLOkhC2mY4yo P3biqYyXsDgKRCxfaVqk2CD3RWceTSxnp/gzQrlU/zecJ9KYVqPgPMM51qoh4hhj 5UDcLZRPTp1ZC4NJwUm1ZD6ZbLR3ShwZEzcJSD9LgC0Sv4OoZpfILkRrA9Z29vAm ERA1cEgpcMaGRLltECW/e7ZF24TUqK8oV3IF98XUJnFuR6UP3VVlklAS9g/9L+lf kYZGkAW08hLdc0jfa6RtyTjzsQ== -----END CERTIFICATE-----Generated at Thu Oct 22 21:59:12 2026 by rpki-client