$ rpki-client -vvvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: IonF+nyb+hUAXCIH1anir3+XMcqKRIHTvlwtEWkEyHs= Subject key identifier: 97:10:12:2A:5D:83:AE:D4:5D:4D:78:38:F9:42:7C:90:CC:92:9F:28 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0D59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0D4B Signing time: Fri 02 Oct 2026 18:20:06 +0000 Manifest this update: Fri 02 Oct 2026 18:20:06 +0000 Manifest next update: Fri 09 Oct 2026 18:20:06 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: EiiyFDpJoEus0GHhUqaJeVT7jevf5CaljEm1iQrwxBY=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: XcRGzifAbD8nNLaizhBvxl/3s2M38329oybDy1dhDiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3417 (0xd59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Oct 2 18:20:06 2026 GMT Not After : Oct 9 18:20:06 2026 GMT Subject: CN=6abff5d6-0637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:65:de:e3:9a:16:e0:e9:fb:16:ec:34:05: 20:9f:e2:53:1a:6d:37:ea:b2:2b:34:f0:72:3b:b2: 96:28:d6:36:2f:cf:b5:0f:0a:76:26:ce:ab:aa:ea: aa:3a:12:3c:f9:ee:2c:b2:2a:32:1f:d5:66:e3:6e: 5b:89:ac:08:97:34:4d:39:98:0f:bf:8f:a3:84:4a: 10:b1:a5:51:ee:f8:a4:f4:5e:bd:ce:d6:24:4d:a1: 05:bd:5b:3e:49:6c:60:55:df:d9:2a:ff:9e:78:55: de:4b:13:99:54:4f:5a:63:44:ca:5e:96:e0:01:6a: 7a:9a:96:51:81:8a:84:22:00:98:c2:26:8c:9b:7e: ef:1f:e5:e1:58:d0:f3:de:23:b8:79:e7:b5:e0:df: 15:c8:0b:18:d9:e5:f9:66:04:01:5f:78:d5:9e:83: 2b:0d:d1:65:81:b9:7d:38:71:87:61:56:0c:1d:aa: 8e:fe:7b:ff:aa:89:23:31:f9:b7:58:73:47:2d:ac: 84:de:2d:ee:8d:a7:e0:03:7e:cf:0f:be:5b:99:65: 83:c5:23:d7:35:4c:04:0e:e3:d1:45:85:87:36:d5: 9a:72:2a:61:28:6f:8b:f6:d6:62:17:4d:e0:69:c1: 12:f5:1a:d0:89:59:33:6a:35:af:ac:bc:e3:7c:a0: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:10:12:2A:5D:83:AE:D4:5D:4D:78:38:F9:42:7C:90:CC:92:9F:28 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:0d:11:fc:5f:60:24:ab:72:44:08:89:ab:2d:07:23:64:a4: 21:d1:d3:c4:90:1e:21:05:0e:26:68:53:08:fb:eb:34:56:a8: 8d:94:2f:20:34:3a:a1:24:e5:d9:cc:44:23:e5:89:ea:82:75: 22:31:73:bf:93:6b:c7:57:95:b4:ae:24:49:4c:81:1f:9a:a0: dd:0a:97:51:fa:c9:a8:53:8b:0e:81:62:05:60:c0:d1:8a:e5: 77:8f:a8:3f:03:32:c0:47:de:07:84:5d:2b:59:92:95:91:ef: 86:6c:7e:4f:87:1d:4d:33:be:c1:03:16:3f:e3:40:16:48:9c: 4a:0f:69:b6:f1:04:d1:4f:13:b2:43:76:78:fc:82:5a:b9:04: 43:15:9c:92:d7:b7:75:a5:c4:4c:4c:cb:4f:2d:2c:f1:44:b3: 87:0c:1e:f0:a7:27:d2:76:14:08:5f:5c:6b:c0:a0:8a:e5:b1: a2:c9:58:c2:c6:b0:68:f4:17:2d:8b:46:4b:22:d6:af:9b:be: 70:19:c4:47:2d:f9:31:83:d0:a3:b5:27:03:81:fc:c6:22:15: 06:0f:89:01:08:ad:66:05:dc:1e:f7:c9:72:5c:8a:bb:6c:2c: 87:cd:a5:6a:cd:a0:ed:20:6c:a5:16:0e:d9:5c:d3:85:9d:7e: d0:82:b7:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjYxMDAyMTgyMDA2WhcNMjYxMDA5MTgyMDA2WjAYMRYwFAYD VQQDEw02YWJmZjVkNi0wNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKJl3uOaFuDp+xbsNAUgn+JTGm036rIrNPByO7KWKNY2L8+1Dwp2Js6rquqq OhI8+e4ssioyH9Vm425biawIlzRNOZgPv4+jhEoQsaVR7vik9F69ztYkTaEFvVs+ SWxgVd/ZKv+eeFXeSxOZVE9aY0TKXpbgAWp6mpZRgYqEIgCYwiaMm37vH+XhWNDz 3iO4eee14N8VyAsY2eX5ZgQBX3jVnoMrDdFlgbl9OHGHYVYMHaqO/nv/qokjMfm3 WHNHLayE3i3ujafgA37PD75bmWWDxSPXNUwEDuPRRYWHNtWaciphKG+L9tZiF03g acES9RrQiVkzajWvrLzjfKBW9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcQEipd g67UXU14OPlCfJDMkp8oMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVA0R/F9gJKtyRAiJqy0HI2SkIdHTxJAeIQUOJmhTCPvrNFaojZQvIDQ6oSTl 2cxEI+WJ6oJ1IjFzv5Nrx1eVtK4kSUyBH5qg3QqXUfrJqFOLDoFiBWDA0Yrld4+o PwMywEfeB4RdK1mSlZHvhmx+T4cdTTO+wQMWP+NAFkicSg9ptvEE0U8TskN2ePyC WrkEQxWckte3daXETEzLTy0s8USzhwwe8Kcn0nYUCF9ca8CgiuWxoslYwsawaPQX LYtGSyLWr5u+cBnERy35MYPQo7UnA4H8xiIVBg+JAQitZgXcHvfJclyKu2wsh82l as2g7SBspRYO2VzThZ1+0IK3sg== -----END CERTIFICATE-----Generated at Sun Oct 4 00:11:33 2026 by rpki-client