$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: rlEaR8Op4zWjd+6/H4l/lXuW6KqfOs2WSW/hY5LcK+8= Subject key identifier: 12:E4:42:25:52:5B:AF:F4:C6:42:11:F5:B2:04:B4:3C:BA:12:59:C3 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 01EA Signing time: Fri 23 Oct 2026 04:02:02 +0000 Manifest this update: Fri 23 Oct 2026 04:02:02 +0000 Manifest next update: Fri 30 Oct 2026 04:02:02 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: hYCaI1rUs2FYh6ral/jXE4tsgtqRKsjiZnKWkHA2pA0=) 2: C6DFFAD8906B11F1A67C05D95E11F970.roa (hash: MxNcCgJXLkjB8/Q2d2fNCaIOQkKIonVn32bIfIAzNVA=) 3: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Oct 23 04:02:02 2026 GMT Not After : Oct 30 04:02:02 2026 GMT Subject: CN=6adadc3a-4a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:0e:3c:d2:e7:32:f1:93:14:7e:a9:b9:34: 65:78:ff:53:67:c6:83:a0:e5:15:2d:72:84:04:57: 64:ca:22:10:90:cf:3f:3d:3d:bc:f0:ce:f0:61:58: 4c:62:ee:8f:21:5e:8d:89:77:3c:22:d3:45:dd:db: 5b:c6:d0:c0:0c:7f:69:54:aa:90:d0:40:16:5d:49: 6c:d1:30:3a:8f:c6:d6:17:ae:06:d7:93:e1:fd:1c: 6c:93:77:56:1f:8e:a7:b9:d0:55:98:a4:30:8e:10: a4:a4:8f:67:75:80:bd:0e:2c:6d:11:7f:fc:46:b7: d9:2e:84:f3:3b:73:f3:f0:95:9a:14:27:d4:b3:71: 9e:d4:2e:29:1f:67:47:75:2f:9a:fc:5d:45:c9:e3: 0c:23:47:16:fa:1d:97:6b:57:e3:e8:03:99:b5:d6: db:a1:ad:e7:ef:d3:4f:41:6f:4a:68:1c:62:7c:12: 0e:45:eb:c4:80:30:c7:55:59:08:43:51:3c:7f:23: d1:3a:01:0d:8d:da:2f:20:31:53:f9:8f:16:ff:86: 1f:48:83:49:05:f2:2f:2b:a5:26:38:da:52:d3:e4: 18:8e:c6:5a:7e:9a:ab:a9:6f:e3:38:93:d8:90:1b: c9:5a:d8:d1:e0:0f:bf:20:f3:16:6a:b6:2e:3f:2a: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E4:42:25:52:5B:AF:F4:C6:42:11:F5:B2:04:B4:3C:BA:12:59:C3 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:af:e4:47:ec:d6:fa:29:d0:68:92:b0:96:24:0b:3f:eb:f7: 24:e7:57:2d:0b:cb:fa:01:65:6d:ee:41:26:d9:11:83:7d:e5: 4d:22:8a:c2:37:bc:cc:6a:00:11:dc:5b:d8:04:00:37:66:bc: a0:47:bc:3a:b0:b5:94:6f:a3:61:d6:a6:8d:e1:50:f7:2d:f7: 33:ff:74:89:56:c1:01:13:35:c4:19:16:4b:ac:d4:a4:03:3d: 18:65:09:40:7b:0f:8d:60:3a:12:ea:fd:f8:f7:70:10:5a:95: ea:fa:2f:de:92:14:5f:b9:07:a2:b7:1f:a5:69:1c:04:07:1e: 93:d4:d7:ac:d8:82:37:f9:7f:0c:8d:2e:56:c8:e0:52:a6:e7: 99:4d:6e:fc:65:97:2b:37:1c:63:a1:78:8f:a7:d2:ce:9d:c4: 39:91:54:f8:aa:a8:94:ad:05:1e:d2:e3:0b:6b:88:d5:60:96: 79:cb:c9:4a:e9:ba:fa:e3:dd:5e:3c:8d:c4:a8:bb:6f:d0:98: 5b:3c:75:44:ea:de:3d:b4:f8:78:cd:ed:10:59:38:56:87:dc: 0b:9c:73:a6:82:1e:15:02:7c:e9:a7:54:16:53:15:4d:7c:15: ce:85:68:dd:fe:b2:28:b7:19:18:09:95:13:35:e8:e4:3e:02: 1a:f0:07:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYxMDIzMDQwMjAyWhcNMjYxMDMwMDQwMjAyWjAYMRYwFAYD VQQDEw02YWRhZGMzYS00YTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdQOPNLnMvGTFH6puTRleP9TZ8aDoOUVLXKEBFdkyiIQkM8/PT288M7wYVhM Yu6PIV6NiXc8ItNF3dtbxtDADH9pVKqQ0EAWXUls0TA6j8bWF64G15Ph/Rxsk3dW H46nudBVmKQwjhCkpI9ndYC9DixtEX/8RrfZLoTzO3Pz8JWaFCfUs3Ge1C4pH2dH dS+a/F1FyeMMI0cW+h2Xa1fj6AOZtdbboa3n79NPQW9KaBxifBIORevEgDDHVVkI Q1E8fyPROgENjdovIDFT+Y8W/4YfSINJBfIvK6UmONpS0+QYjsZafpqrqW/jOJPY kBvJWtjR4A+/IPMWarYuPyrDhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLkQiVS W6/0xkIR9bIEtDy6ElnDMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI6/kR+zW+inQaJKwliQLP+v3JOdXLQvL+gFlbe5BJtkRg33lTSKKwje8zGoA Edxb2AQAN2a8oEe8OrC1lG+jYdamjeFQ9y33M/90iVbBARM1xBkWS6zUpAM9GGUJ QHsPjWA6Eur9+PdwEFqV6vov3pIUX7kHorcfpWkcBAcek9TXrNiCN/l/DI0uVsjg UqbnmU1u/GWXKzccY6F4j6fSzp3EOZFU+KqolK0FHtLjC2uI1WCWecvJSum6+uPd XjyNxKi7b9CYWzx1ROrePbT4eM3tEFk4VofcC5xzpoIeFQJ86adUFlMVTXwVzoVo 3f6yKLcZGAmVEzXo5D4CGvAHxw== -----END CERTIFICATE-----Generated at Sat Oct 24 10:13:25 2026 by rpki-client