$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft File: MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft (raw, json) Hash identifier: K2UvqeK8H2XRHIS5zWxmPMvNRk/Ib9znpChNVeU2O3I= Subject key identifier: 3C:1B:B6:4F:60:E1:06:4B:CA:4D:5C:07:3B:4B:BF:7B:37:8E:7E:6E Authority key identifier: 31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 Certificate issuer: /CN=A91FF21A/serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft Manifest number: 38 Signing time: Wed 21 Oct 2026 09:19:27 +0000 Manifest this update: Wed 21 Oct 2026 09:19:26 +0000 Manifest next update: Wed 28 Oct 2026 09:19:26 +0000 Files and hashes: 1: MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl (hash: MGj7VnX7/cI+itcVnzCPEO/cRxPOrD+GwilB7gFNyvo=) 2: 5C878D268DAB11F189A852AF4511F970.roa (hash: I/jr3tgpLyEseQdfcMV7kCau5f4YQ1NsnEo0xyEHwzc=) 3: 5D1D397A8DAB11F189A852AF4511F970.roa (hash: 8SHLMBij6okm9+8J31gc2FeJFmgTdVNdbizMOipyo0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF21A, serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Validity Not Before: Oct 21 09:19:26 2026 GMT Not After : Oct 28 09:19:26 2026 GMT Subject: CN=6ad8839f-f55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:55:74:f0:9e:0e:7e:55:63:c1:24:0b:2c: d0:44:b1:6a:76:a2:56:08:21:23:f2:33:1c:ad:a0: 43:40:60:86:67:e2:ca:c0:be:b8:fb:da:40:37:2b: 2d:39:c3:a8:8c:b7:e4:8f:07:3f:cc:56:dc:fc:f0: 8b:d9:1b:ce:df:73:03:23:a5:85:d6:97:db:07:2e: f0:24:81:26:66:cd:fa:27:77:97:ea:07:04:61:e5: 26:d0:ce:03:d8:96:8b:28:c6:41:36:f0:81:30:f8: 81:20:01:bd:e8:d5:87:fd:93:c0:6d:04:fa:e1:0a: b1:11:0f:19:08:09:44:52:23:90:ee:23:9d:a6:a4: 70:aa:c6:f8:1c:cd:3c:5e:7c:82:5b:2b:de:1b:ec: 55:c5:07:b7:26:85:b5:91:d5:ef:6d:81:3e:f6:ba: c9:c6:fe:24:fe:05:83:95:f8:a7:95:05:8e:38:9c: 12:0b:c9:f7:54:b8:01:9e:a5:40:ad:38:e9:af:60: c4:94:c7:ec:81:f6:5a:02:ca:b0:11:79:fb:07:46: 3c:2d:9b:42:9b:12:17:8f:28:a7:24:e7:69:a7:87: 1b:f9:64:8a:ec:6b:22:a1:42:f9:49:4c:82:f7:4d: 41:a2:2e:49:bc:b6:e7:c1:5f:c0:8a:1b:45:77:fd: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1B:B6:4F:60:E1:06:4B:CA:4D:5C:07:3B:4B:BF:7B:37:8E:7E:6E X509v3 Authority Key Identifier: keyid:31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:bf:95:90:b6:f5:5d:71:a6:27:b7:af:b3:56:d4:ee:89:3e: 66:02:0a:51:5e:02:6b:e4:b8:d2:0d:16:1b:76:a0:f4:89:4a: bd:04:10:a4:4a:29:67:c0:5e:0f:b4:f1:c3:21:30:f9:e7:3c: 46:04:72:fb:19:cc:eb:48:36:b1:7d:66:e8:dd:ce:49:e8:04: 2e:a1:5d:3a:49:d7:d8:a4:ef:47:f9:ea:b8:f7:99:34:72:8b: b9:85:59:78:7b:aa:42:1c:b3:cd:19:ab:4b:d6:cf:b6:53:a0: 38:be:b3:ff:8d:7e:de:42:3d:67:df:76:7a:33:0e:8c:39:36: d7:37:de:a7:f1:44:b1:b7:16:07:80:5f:b5:e2:d8:d0:c4:17: 37:a8:2f:d2:62:f3:3f:54:a2:14:1d:c6:35:44:6d:d2:40:9d: 42:93:6e:2b:6f:b1:d6:bd:6f:38:3a:62:22:21:eb:38:19:90: a8:22:3b:85:2d:7b:17:25:e7:7d:75:2c:74:d6:b6:af:c4:ea: 15:45:dd:90:f0:70:49:db:51:a1:82:cb:e9:cc:b1:38:7e:74: 2a:19:98:78:76:00:51:b6:ad:f2:3c:15:c9:68:c6:0c:15:66: 37:d9:a7:dd:6c:48:00:db:88:7f:90:3b:fc:2d:0f:dc:3e:4b: 81:e6:d1:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjIxQTExMC8GA1UEBRMoMzE0NDAzRDA0OTFGMEQ3MjFGRDg3NzI5OEJFREVFQkFB RUJFMTE3ODAeFw0yNjEwMjEwOTE5MjZaFw0yNjEwMjgwOTE5MjZaMBgxFjAUBgNV BAMTDTZhZDg4MzlmLWY1NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCtlV08J4OflVjwSQLLNBEsWp2olYIISPyMxytoENAYIZn4srAvrj72kA3Ky05 w6iMt+SPBz/MVtz88IvZG87fcwMjpYXWl9sHLvAkgSZmzfond5fqBwRh5SbQzgPY losoxkE28IEw+IEgAb3o1Yf9k8BtBPrhCrERDxkICURSI5DuI52mpHCqxvgczTxe fIJbK94b7FXFB7cmhbWR1e9tgT72usnG/iT+BYOV+KeVBY44nBILyfdUuAGepUCt OOmvYMSUx+yB9loCyrARefsHRjwtm0KbEhePKKck52mnhxv5ZIrsayKhQvlJTIL3 TUGiLkm8tufBX8CKG0V3/SPpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPBu2T2Dh BkvKTVwHO0u/ezeOfm4wHwYDVR0jBBgwFoAUMUQD0EkfDXIf2Hcpi+3uuq6+EXgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMjFBLzc5QjlENzg4OEJG QzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJZjJIY3BpLTN1dXE2LUVY Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVVRRDBFa2ZEWElmMkhjcGktM3V1cTYtRVhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MjFBLzc5QjlENzg4OEJGQzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJ ZjJIY3BpLTN1dXE2LUVYZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwv5WQtvVdcaYnt6+zVtTuiT5mAgpRXgJr5LjSDRYbdqD0iUq9BBCkSilnwF4P tPHDITD55zxGBHL7GczrSDaxfWbo3c5J6AQuoV06SdfYpO9H+eq495k0cou5hVl4 e6pCHLPNGatL1s+2U6A4vrP/jX7eQj1n33Z6Mw6MOTbXN96n8USxtxYHgF+14tjQ xBc3qC/SYvM/VKIUHcY1RG3SQJ1Ck24rb7HWvW84OmIiIes4GZCoIjuFLXsXJed9 dSx01ravxOoVRd2Q8HBJ21GhgsvpzLE4fnQqGZh4dgBRtq3yPBXJaMYMFWY32afd bEgA24h/kDv8LQ/cPkuB5tEH -----END CERTIFICATE-----Generated at Wed Oct 21 20:17:16 2026 by rpki-client