$ rpki-client -vvvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json) Hash identifier: STlrvPsHNZs6WZcyZv9LJswZtmmoNMrNolTY2WtLvEw= Subject key identifier: 00:D0:1E:92:5C:10:34:1D:32:B8:E4:D9:56:D4:C5:19:E7:1D:A1:41 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0DC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft Manifest number: 0DA8 Signing time: Sat 10 Oct 2026 17:57:04 +0000 Manifest this update: Sat 10 Oct 2026 17:57:04 +0000 Manifest next update: Sat 17 Oct 2026 17:57:04 +0000 Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: QNESADGehThaB1Q33EwgxMm9e3vAkIfcKX7HOfmaRyM=) 2: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=) 3: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=) 4: 3AED03D23F0211F186B62790C8833773.roa (hash: O/S7ipxs7LAaw3lfKf/6hOXusOP9np78Uf6jI39ajNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3522 (0xdc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Oct 10 17:57:04 2026 GMT Not After : Oct 17 17:57:04 2026 GMT Subject: CN=6aca7c70-0f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:d7:b6:ee:82:b1:9f:63:09:a0:d7:c2:31: 1b:b4:c4:4d:f9:75:6f:07:d3:4f:c8:9e:b0:08:b5: 21:a3:16:be:ed:67:60:30:7e:1d:2c:b7:fb:61:ed: 3b:5d:8b:f5:d2:72:2c:12:ec:0e:fd:41:34:25:75: 85:d1:e8:c1:96:27:42:ed:7d:ae:96:fb:91:5b:e4: 2c:ba:ec:99:f9:44:8a:48:bc:d5:3b:ec:7b:fc:cd: f1:d0:a1:dc:93:35:2c:a6:c9:b9:67:d3:ad:03:61: cc:7a:ed:84:3b:6d:1d:9c:7b:4e:4c:92:c6:99:42: c8:e3:bd:af:6c:43:96:dc:ad:fa:47:61:c0:3f:b8: 7a:79:e2:a7:95:90:d7:35:2c:ab:0e:ed:51:1e:21: f6:61:93:de:5c:5a:d9:e8:70:9b:30:8c:b1:05:45: cd:e0:bb:34:c6:0b:86:56:c2:e1:11:e4:4e:4f:20: a7:24:5b:59:f7:a5:cc:8e:3c:39:0a:da:e7:c1:7d: c0:49:e6:ad:a0:ef:49:54:7d:42:5b:cc:85:f1:0e: ea:10:ae:ae:37:62:da:5d:bb:6b:79:17:18:e9:df: 39:d0:f3:84:cf:c0:c4:b3:d9:57:3d:2b:e4:28:ef: 14:18:5d:ec:a0:47:af:13:da:a3:f8:86:9a:33:2e: 98:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D0:1E:92:5C:10:34:1D:32:B8:E4:D9:56:D4:C5:19:E7:1D:A1:41 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:b1:f3:a8:53:f2:71:2b:8e:48:a6:c5:26:6c:0b:45:43:7c: 1a:03:f8:fa:71:3e:92:f7:2d:1f:34:97:ea:82:68:45:52:b2: f7:fd:5e:df:1d:dc:29:0a:b3:73:b6:8f:d1:83:67:5c:f0:6c: fc:36:4a:4b:e9:d8:92:be:fb:7f:75:9b:15:ae:67:4b:a8:73: 74:57:bb:60:32:be:68:0c:b6:88:6a:93:cc:85:95:08:db:cb: c0:a5:87:9e:1e:21:99:b2:67:db:d0:77:b1:3f:b1:10:fe:61: 9c:13:ea:68:26:89:ca:67:06:1b:e2:fd:a7:52:53:66:55:e9: 83:41:10:5d:3d:9d:2a:39:7a:02:f4:f9:f1:6b:c1:79:27:34: 0c:56:45:86:94:33:d2:15:a3:73:ed:72:a3:64:ac:63:3d:18: 34:fa:b2:4a:f6:4b:2f:79:6a:2b:f7:60:67:10:51:02:31:17: b2:2b:d4:fc:a6:50:fd:3d:28:b6:cf:b5:15:6b:c9:29:f2:9c: e8:12:ae:5b:98:b5:6e:af:c3:58:e9:9a:8f:d8:5d:d2:f2:0f: 43:6c:4e:27:43:46:2b:13:ea:85:e8:c5:01:da:22:14:3a:7f: 75:93:1d:4a:16:4f:e3:46:b1:6a:ea:85:8e:72:cb:07:58:51: 19:17:e7:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjYxMDEwMTc1NzA0WhcNMjYxMDE3MTc1NzA0WjAYMRYwFAYD VQQDEw02YWNhN2M3MC0wZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9XXtu6CsZ9jCaDXwjEbtMRN+XVvB9NPyJ6wCLUhoxa+7WdgMH4dLLf7Ye07 XYv10nIsEuwO/UE0JXWF0ejBlidC7X2ulvuRW+QsuuyZ+USKSLzVO+x7/M3x0KHc kzUspsm5Z9OtA2HMeu2EO20dnHtOTJLGmULI472vbEOW3K36R2HAP7h6eeKnlZDX NSyrDu1RHiH2YZPeXFrZ6HCbMIyxBUXN4Ls0xguGVsLhEeROTyCnJFtZ96XMjjw5 CtrnwX3ASeatoO9JVH1CW8yF8Q7qEK6uN2LaXbtreRcY6d850POEz8DEs9lXPSvk KO8UGF3soEevE9qj+IaaMy6YxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADQHpJc EDQdMrjk2VbUxRnnHaFBMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF7HzqFPycSuOSKbFJmwLRUN8GgP4+nE+kvctHzSX6oJoRVKy9/1e3x3cKQqz c7aP0YNnXPBs/DZKS+nYkr77f3WbFa5nS6hzdFe7YDK+aAy2iGqTzIWVCNvLwKWH nh4hmbJn29B3sT+xEP5hnBPqaCaJymcGG+L9p1JTZlXpg0EQXT2dKjl6AvT58WvB eSc0DFZFhpQz0hWjc+1yo2SsYz0YNPqySvZLL3lqK/dgZxBRAjEXsivU/KZQ/T0o ts+1FWvJKfKc6BKuW5i1bq/DWOmaj9hd0vIPQ2xOJ0NGKxPqhejFAdoiFDp/dZMd ShZP40axauqFjnLLB1hRGRfnZQ== -----END CERTIFICATE-----Generated at Sun Oct 11 08:03:01 2026 by rpki-client