$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json) Hash identifier: T1T6/EP0e4m0zIgcQQp9imsBaBVPhxpHcDWGB+qV+zI= Subject key identifier: 9B:82:F9:CD:1E:69:B3:BA:B6:1F:0C:3C:0F:78:11:98:3F:C2:55:F4 Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft Manifest number: 011D Signing time: Sun 25 Oct 2026 06:20:53 +0000 Manifest this update: Sun 25 Oct 2026 06:20:52 +0000 Manifest next update: Sun 01 Nov 2026 06:20:52 +0000 Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: +/Z/CUV1O4D6DpVlYGglvj1Yd8Hip7WULZMYOtrtcjc=) 2: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=) 3: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 06:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Validity Not Before: Oct 25 06:20:52 2026 GMT Not After : Nov 1 06:20:52 2026 GMT Subject: CN=6add9fc5-d04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:0e:ed:74:c5:fc:41:9e:c7:08:d0:a1:96: 9e:37:8b:9e:a5:47:bc:19:d3:30:62:0b:17:dc:96: 56:4c:3c:a8:84:f8:f8:dc:78:e9:f3:97:8f:42:78: f4:ec:ec:a7:b5:56:f7:bb:66:40:54:b2:11:78:8b: 5e:fa:a4:c4:e5:8a:dd:33:f0:62:83:cd:2a:c7:83: 19:ec:45:d4:3f:37:ee:b5:73:71:18:ec:ba:ba:f9: 71:fc:e1:69:21:9d:3a:dc:d6:77:fe:ad:58:e4:ea: 04:83:1a:c4:19:0c:b2:8f:9b:dc:49:95:dc:0c:f1: 76:33:b2:4b:ef:73:44:b0:ef:55:d9:a6:84:e8:be: 9b:a4:4e:8c:45:cf:2f:8d:1f:a1:1d:b4:d3:b8:9a: 81:a4:92:2e:85:f9:03:4e:b4:34:82:2b:c4:67:63: 91:6d:93:d4:26:0d:6f:e7:17:08:15:77:61:49:34: 03:35:d2:e7:a9:3d:74:6a:f7:01:85:79:dd:75:0a: 1a:57:e9:e1:ac:10:1b:b4:61:7a:c5:07:53:ee:54: a9:60:09:9c:e1:8d:6b:d3:75:b3:a4:9a:ab:09:15: 53:79:12:88:de:de:5c:09:0b:ef:36:e5:ef:42:dd: f2:9a:e6:8d:ec:dd:7f:ff:75:2b:92:24:94:70:83: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:82:F9:CD:1E:69:B3:BA:B6:1F:0C:3C:0F:78:11:98:3F:C2:55:F4 X509v3 Authority Key Identifier: keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:84:b9:14:3a:31:69:f8:dc:bf:36:68:b4:05:c8:0d:db:d0: 34:74:40:9f:13:34:d3:b5:51:64:ea:f8:36:1e:93:e7:e8:b0: fc:24:76:31:0a:8d:b3:54:55:03:87:0e:4c:d5:a3:16:f3:cc: 40:d8:27:b4:5d:e0:57:20:7e:48:23:b4:66:df:33:f1:dc:ec: 00:f2:7d:40:2e:bf:7a:25:65:9b:77:98:c6:b5:e4:21:e1:57: fd:d4:96:e2:e0:51:60:9e:52:0b:84:d2:42:81:f4:8c:eb:f3: 56:c9:8a:dc:53:3e:63:ef:17:78:ee:48:fd:ce:8c:56:30:23: de:38:97:8f:a3:f0:b0:a2:ee:62:a7:5f:79:1e:34:ef:c1:b1: 2d:47:08:be:cf:8d:9e:82:cf:87:fb:de:43:15:ac:a4:19:ad: ce:05:1f:f5:c2:ca:74:c2:07:ad:f3:93:aa:ac:43:fc:cb:24: 00:6d:dd:3e:c5:32:f0:31:ac:e8:fb:a0:1e:0b:c0:71:77:da: 0b:17:92:86:f7:6d:ce:39:79:8c:3e:cd:05:2b:51:db:ad:9d: e8:ea:1c:8e:c5:1e:f2:5c:fd:9b:01:9d:cb:b0:ff:a5:79:4d: b7:2e:b9:e2:05:80:9c:30:2d:d4:13:6f:39:55:5d:29:e8:39: 44:3d:b8:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFMTMxMTAvBgNVBAUTKDQ5RkQzM0Q2RjUxQUQ2QTQ5ODg0NDY5RkEzOUZFRjA0 MzIzMzZGODEwHhcNMjYxMDI1MDYyMDUyWhcNMjYxMTAxMDYyMDUyWjAYMRYwFAYD VQQDEw02YWRkOWZjNS1kMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcQO7XTF/EGexwjQoZaeN4uepUe8GdMwYgsX3JZWTDyohPj43Hjp85ePQnj0 7OyntVb3u2ZAVLIReIte+qTE5YrdM/Big80qx4MZ7EXUPzfutXNxGOy6uvlx/OFp IZ063NZ3/q1Y5OoEgxrEGQyyj5vcSZXcDPF2M7JL73NEsO9V2aaE6L6bpE6MRc8v jR+hHbTTuJqBpJIuhfkDTrQ0givEZ2ORbZPUJg1v5xcIFXdhSTQDNdLnqT10avcB hXnddQoaV+nhrBAbtGF6xQdT7lSpYAmc4Y1r03WzpJqrCRVTeRKI3t5cCQvvNuXv Qt3ymuaN7N1//3UrkiSUcINcbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJuC+c0e abO6th8MPA94EZg/wlX0MB8GA1UdIwQYMBaAFEn9M9b1GtakmIRGn6Of7wQyM2+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREUxMy8xNTFGRTQ3RTJB NTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFxU1loRWFmbzVfdkJESXpi NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REUxMy8xNTFGRTQ3RTJBNTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFx U1loRWFmbzVfdkJESXpiNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaYS5FDoxafjcvzZotAXIDdvQNHRAnxM007VRZOr4Nh6T5+iw/CR2MQqNs1RV A4cOTNWjFvPMQNgntF3gVyB+SCO0Zt8z8dzsAPJ9QC6/eiVlm3eYxrXkIeFX/dSW 4uBRYJ5SC4TSQoH0jOvzVsmK3FM+Y+8XeO5I/c6MVjAj3jiXj6PwsKLuYqdfeR40 78GxLUcIvs+NnoLPh/veQxWspBmtzgUf9cLKdMIHrfOTqqxD/MskAG3dPsUy8DGs 6PugHgvAcXfaCxeShvdtzjl5jD7NBStR262d6OocjsUe8lz9mwGdy7D/pXlNty65 4gWAnDAt1BNvOVVdKeg5RD24UA== -----END CERTIFICATE-----Generated at Mon Oct 26 16:15:18 2026 by rpki-client