$ rpki-client -vvvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: SQc3ndzihMN2QwhwZdqsJwLN7r6la1GVWl8XIyTOkoI= Subject key identifier: C5:FD:EB:4E:D9:DE:A3:EE:60:5B:33:66:A8:D3:08:FE:D7:A1:E3:FB Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 01A7 Signing time: Tue 13 Oct 2026 04:47:29 +0000 Manifest this update: Tue 13 Oct 2026 04:47:28 +0000 Manifest next update: Tue 20 Oct 2026 04:47:28 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: 6+RUasw9kel6Ns80K8gTTfMNAiXi/Z1nEPzW5wfp7I4=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: YmYTcwhgDvKWuwVdE5g0+SEXv17ijbphmsKcmV8ZajM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 04:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Oct 13 04:47:28 2026 GMT Not After : Oct 20 04:47:28 2026 GMT Subject: CN=6acdb7e1-cc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:99:c7:c8:b8:f1:cf:76:56:12:b9:af:55: 20:df:52:09:2a:70:90:d8:f2:1a:b1:79:16:07:da: be:43:de:31:49:f0:30:67:5f:3f:75:df:65:5b:96: 99:8d:47:76:12:99:09:4f:67:fe:4a:2a:c8:54:77: fe:b8:bd:b3:6a:45:0d:a9:41:32:ed:77:98:dd:5c: 6a:42:dc:c1:83:a3:1c:ba:12:10:db:db:ea:31:ac: 75:d0:6e:25:25:04:6d:30:f8:d9:92:45:76:20:cc: 2c:4d:4b:40:d7:19:34:98:6e:65:0d:29:bd:d9:c4: 14:aa:2e:86:26:94:6b:95:c0:bd:61:b5:37:62:74: 0a:ad:5c:bb:ca:15:e6:30:52:84:4c:02:af:39:8a: 29:40:98:96:f1:6f:b1:04:15:66:dc:3e:85:36:8c: c8:ed:e0:61:63:c6:f5:61:ae:6a:00:b1:7c:54:42: 94:88:3f:d3:13:20:ca:5a:b0:a2:ff:8a:a4:f7:14: 39:46:91:4e:62:e0:8f:73:b0:1f:55:5a:8e:1c:70: 4a:10:c7:93:88:f8:52:fe:f5:ff:36:e3:4a:eb:c0: 55:d6:f0:80:53:3f:ca:1b:1e:5d:83:84:c3:c8:d5: 1f:e1:44:e9:d7:49:0c:73:1d:66:73:4d:66:02:75: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FD:EB:4E:D9:DE:A3:EE:60:5B:33:66:A8:D3:08:FE:D7:A1:E3:FB X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c9:3b:51:0f:4a:18:d2:1c:0a:78:5d:34:3b:ec:9f:f8:56: d9:e6:15:4f:d3:23:34:02:12:ee:cd:0c:e0:58:39:37:b4:76: 21:83:19:b7:30:24:c2:67:0c:ca:ec:d7:06:f2:e2:c5:9b:95: 84:ae:0b:23:86:d1:db:48:c7:50:c5:a9:42:f2:ba:55:6f:58: 13:4c:7e:cb:4b:93:d3:b1:86:8b:24:a4:66:73:5c:a7:c9:b2: e8:ef:63:8c:14:41:b0:4f:52:34:0d:69:2f:7b:3c:cb:a4:ad: ff:50:fa:a6:4d:a8:28:38:1b:c8:6c:b1:d7:89:e9:75:8f:4b: db:03:74:0c:77:5c:0a:8e:12:38:54:db:c6:98:c1:28:f5:53: 7b:44:5c:2d:3f:8c:f9:6a:7b:36:71:d0:0e:ee:1b:25:62:de: 8a:1e:a4:8f:e9:73:48:eb:d4:3c:48:a8:83:2c:d3:39:36:08: 2b:d3:27:ab:18:d8:8f:a5:43:da:d8:d3:40:43:a0:dc:92:8f: ff:85:59:04:f6:c6:0e:a2:d0:01:ca:b0:22:89:32:71:9f:80: 66:85:90:5f:77:b2:bc:66:3a:62:44:c2:db:8e:54:9b:91:29: 33:7c:80:4b:bf:f9:37:29:2b:69:f4:05:ed:0f:3b:5b:fc:73: ef:b5:94:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjYxMDEzMDQ0NzI4WhcNMjYxMDIwMDQ0NzI4WjAYMRYwFAYD VQQDEw02YWNkYjdlMS1jYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLWZx8i48c92VhK5r1Ug31IJKnCQ2PIasXkWB9q+Q94xSfAwZ18/dd9lW5aZ jUd2EpkJT2f+SirIVHf+uL2zakUNqUEy7XeY3VxqQtzBg6McuhIQ29vqMax10G4l JQRtMPjZkkV2IMwsTUtA1xk0mG5lDSm92cQUqi6GJpRrlcC9YbU3YnQKrVy7yhXm MFKETAKvOYopQJiW8W+xBBVm3D6FNozI7eBhY8b1Ya5qALF8VEKUiD/TEyDKWrCi /4qk9xQ5RpFOYuCPc7AfVVqOHHBKEMeTiPhS/vX/NuNK68BV1vCAUz/KGx5dg4TD yNUf4UTp10kMcx1mc01mAnUIJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMX9607Z 3qPuYFszZqjTCP7XoeP7MB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHMk7UQ9KGNIcCnhdNDvsn/hW2eYVT9MjNAIS7s0M4Fg5N7R2IYMZtzAkwmcM yuzXBvLixZuVhK4LI4bR20jHUMWpQvK6VW9YE0x+y0uT07GGiySkZnNcp8my6O9j jBRBsE9SNA1pL3s8y6St/1D6pk2oKDgbyGyx14npdY9L2wN0DHdcCo4SOFTbxpjB KPVTe0RcLT+M+Wp7NnHQDu4bJWLeih6kj+lzSOvUPEiogyzTOTYIK9MnqxjYj6VD 2tjTQEOg3JKP/4VZBPbGDqLQAcqwIokycZ+AZoWQX3eyvGY6YkTC245Um5EpM3yA S7/5NykrafQF7Q87W/xz77WUlw== -----END CERTIFICATE-----Generated at Tue Oct 13 19:10:16 2026 by rpki-client