$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: GssU/wbmoz/6mEY8qV/p8DAE3UbA06WpG2BzpoD6o+A= Subject key identifier: 80:42:72:2D:64:DD:52:6D:A2:B7:2E:F2:C1:46:6E:15:34:77:CF:0F Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 0261 Signing time: Sun 01 Nov 2026 03:14:30 +0000 Manifest this update: Sun 01 Nov 2026 03:14:30 +0000 Manifest next update: Sun 08 Nov 2026 03:14:30 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: ABpBM9RLn5KB5xq53cvFRIlpklyiiv6TYTHgVPdASsA=) 2: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) 3: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) 4: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 03:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Nov 1 03:14:30 2026 GMT Not After : Nov 8 03:14:30 2026 GMT Subject: CN=6ae6ae96-7c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:73:e8:e5:0a:79:81:da:a4:f0:5f:16:5f: 2b:d1:b6:ba:67:82:28:c9:8e:73:78:03:3d:1c:c1: a7:8a:0f:88:1e:ab:d1:1e:18:7d:23:d5:97:3b:d0: 41:fd:68:64:56:2d:f2:c4:7d:95:70:22:71:93:18: 63:83:bd:cc:89:04:cf:63:12:e8:ca:89:40:17:a7: 0e:e6:60:b8:c4:70:48:26:38:30:bf:9e:d9:09:e7: 94:2e:c6:f4:ac:af:37:3f:cd:a9:03:fb:0c:33:c5: 8b:67:bb:e9:56:07:20:11:b8:96:09:4d:36:23:ab: 33:03:a4:d9:23:55:f1:44:e6:a4:95:5a:0d:94:dd: 89:a7:fe:35:52:1b:79:47:2e:52:3b:6c:26:aa:c9: 45:60:aa:8e:1b:31:ae:86:ce:42:1e:ea:ca:ad:f6: 1a:1c:bd:3a:52:0a:40:7f:9e:bd:14:12:50:86:51: d1:fe:c6:2f:86:d6:b2:0e:ca:2c:44:83:bb:a1:e0: f7:73:67:2c:45:88:00:2e:25:bb:56:86:ff:67:5a: be:44:bc:ba:64:db:ae:0f:a0:4b:03:b0:09:e7:8f: 25:41:75:88:c0:9b:b1:49:67:e5:9f:24:c4:74:2f: b7:ce:1b:57:1e:14:22:12:e4:8e:69:3a:46:2b:d2: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:42:72:2D:64:DD:52:6D:A2:B7:2E:F2:C1:46:6E:15:34:77:CF:0F X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:84:90:47:ca:db:03:d7:5f:2c:53:eb:58:a5:b2:85:95:02: ca:69:5c:26:36:96:da:4c:50:b5:58:d4:31:ed:19:2e:3b:8c: f1:7b:f7:93:4c:3c:eb:a9:59:0c:8f:2f:30:ab:13:05:74:26: 3b:9a:f5:d2:b2:b8:a1:40:78:54:4a:85:5b:90:0b:d7:f1:c0: c2:30:32:68:47:21:cb:b7:a9:86:37:c4:07:9a:78:9d:7f:c8: 9d:f6:a9:f9:7b:2c:8c:68:40:6a:9b:1d:74:65:b3:87:78:4a: ed:4e:33:6d:a1:a2:66:87:51:3d:ea:17:91:4e:e9:1e:a8:25: 4f:e4:ca:4e:d8:43:ec:40:04:79:ec:ff:eb:ea:23:8b:a0:1a: 14:92:57:93:f1:5f:c6:66:32:0f:84:31:4b:bf:29:d6:39:b6: ce:c8:5a:d8:57:57:cb:0e:14:7a:25:75:a3:cd:0d:40:3a:e8: 4c:55:ed:24:81:38:e4:c6:b5:d3:2c:5d:77:8e:92:55:11:03: 2d:d6:c4:d6:79:f3:fb:7d:ea:13:85:0f:d6:15:d6:9a:36:10: 45:3e:fa:87:50:1d:92:32:9d:93:f1:e3:72:b2:ad:b4:d5:a5: 66:a6:a4:95:ec:e2:5f:b9:da:75:4d:62:71:2c:0c:af:f1:76: a0:d8:ef:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYxMTAxMDMxNDMwWhcNMjYxMTA4MDMxNDMwWjAYMRYwFAYD VQQDEw02YWU2YWU5Ni03YzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8Jz6OUKeYHapPBfFl8r0ba6Z4IoyY5zeAM9HMGnig+IHqvRHhh9I9WXO9BB /WhkVi3yxH2VcCJxkxhjg73MiQTPYxLoyolAF6cO5mC4xHBIJjgwv57ZCeeULsb0 rK83P82pA/sMM8WLZ7vpVgcgEbiWCU02I6szA6TZI1XxROaklVoNlN2Jp/41Uht5 Ry5SO2wmqslFYKqOGzGuhs5CHurKrfYaHL06UgpAf569FBJQhlHR/sYvhtayDsos RIO7oeD3c2csRYgALiW7Vob/Z1q+RLy6ZNuuD6BLA7AJ548lQXWIwJuxSWflnyTE dC+3zhtXHhQiEuSOaTpGK9Ll7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBCci1k 3VJtorcu8sFGbhU0d88PMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnoSQR8rbA9dfLFPrWKWyhZUCymlcJjaW2kxQtVjUMe0ZLjuM8Xv3k0w866lZ DI8vMKsTBXQmO5r10rK4oUB4VEqFW5AL1/HAwjAyaEchy7ephjfEB5p4nX/Infap +XssjGhAapsddGWzh3hK7U4zbaGiZodRPeoXkU7pHqglT+TKTthD7EAEeez/6+oj i6AaFJJXk/FfxmYyD4QxS78p1jm2zsha2FdXyw4UeiV1o80NQDroTFXtJIE45Ma1 0yxdd46SVREDLdbE1nnz+33qE4UP1hXWmjYQRT76h1AdkjKdk/HjcrKttNWlZqak leziX7nadU1icSwMr/F2oNjv7w== -----END CERTIFICATE-----Generated at Mon Nov 2 12:44:09 2026 by rpki-client