$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json) Hash identifier: lSM43CzH+d0DE6cl19gH78wi6U+683lT9SM5jtNi7jQ= Subject key identifier: B5:7E:EE:D0:A8:39:50:97:59:85:49:2F:1D:A2:DC:1D:C1:9E:2C:7D Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft Manifest number: 0112 Signing time: Thu 05 Nov 2026 06:51:26 +0000 Manifest this update: Thu 05 Nov 2026 06:51:26 +0000 Manifest next update: Thu 12 Nov 2026 06:51:26 +0000 Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: 1GNHG5qa1EnskOwAIWR0UdVdktGWzvnIjT5SA2tapBY=) 2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: THMYN1koeOfwnbK8AGxlReff3pZqD6xwEXO++zbayH8=) 3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: EWbmDsTGqQLpUfNOlcyjqkg7ey8/2rO6qBfbLaQNH74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 06:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Validity Not Before: Nov 5 06:51:26 2026 GMT Not After : Nov 12 06:51:26 2026 GMT Subject: CN=6aec276e-98f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:df:93:ea:22:41:29:9a:92:8c:bf:4d:29:d0: 66:31:db:7e:95:7a:d8:6f:45:9b:8f:6b:c9:ff:ab: b2:6f:91:fd:03:3d:a5:e1:50:00:06:38:e2:97:4c: 9d:7c:f1:e0:25:fe:8f:10:f7:53:57:2a:18:46:e0: 90:d8:e2:27:11:92:95:64:0b:31:ea:51:88:72:6c: 6e:06:11:5e:34:c0:ad:94:7c:45:db:ee:d4:b0:2f: 85:31:e9:47:0c:c8:39:16:ab:8d:3a:39:51:7c:e0: 8f:1d:3b:b9:3b:38:3f:55:b6:9d:d1:b2:63:c9:a2: 52:e9:7d:f7:63:70:2b:dc:68:1f:99:37:32:52:c0: 8e:8b:d1:49:d7:45:9d:82:91:f4:8f:97:1c:d6:b1: 80:93:43:92:0c:c5:bd:a6:00:6a:2c:7a:d3:a7:2f: f5:d8:85:29:ca:ea:72:52:da:97:3b:af:25:0e:82: 52:c2:a6:5e:2d:38:b0:63:dc:2a:e6:bc:21:e9:fa: 70:a8:55:d9:49:d3:1d:35:e7:4b:a6:ca:c7:c1:fb: 2f:6c:b1:42:00:00:c0:d8:4b:7c:bd:08:29:01:66: a2:97:e9:31:a6:5f:20:94:9f:f3:4a:6b:5f:b8:5e: 4d:d5:a5:5f:60:66:2f:0d:a5:e8:53:69:c4:02:04: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7E:EE:D0:A8:39:50:97:59:85:49:2F:1D:A2:DC:1D:C1:9E:2C:7D X509v3 Authority Key Identifier: keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:77:47:49:09:f9:d2:b2:ac:a3:5b:21:b0:4d:72:82:3d:8d: d5:cb:db:b6:14:ed:e0:e7:b1:47:f4:7b:2f:da:4e:95:87:7d: 06:21:48:f3:68:63:b0:59:8d:bf:ba:8a:1b:f0:d7:85:48:7d: d0:8c:95:0d:c2:f8:4d:8b:4b:30:47:19:a1:fb:e4:65:b1:a1: 4e:8c:cd:32:38:5f:70:d7:c4:05:96:5d:5a:a0:1f:90:4e:f7: c2:24:8b:d9:14:83:9d:34:b1:df:bb:a2:1f:f7:24:33:ed:1a: f3:72:c2:c6:0e:ea:ea:8e:c7:a3:f2:c9:7a:2c:83:48:79:6a: b8:26:68:d3:00:5b:75:15:ed:e3:df:12:ff:24:9a:b3:c3:bb: 22:ba:a0:b5:be:59:99:fd:9c:70:5f:a4:27:62:4c:e0:ee:18: 6d:9a:e0:6a:85:76:da:fc:e0:fc:6d:f4:9a:90:89:85:e3:31: 01:fa:71:58:d3:f0:23:89:ad:26:10:c1:bc:41:87:f1:04:40: dd:71:0e:93:0a:20:74:34:b9:56:68:3e:96:7e:1d:b1:25:58: 6b:34:0d:3e:33:2d:27:ea:a1:6f:06:4d:46:3b:f9:7b:fe:eb: 73:8b:cc:a8:b0:20:c5:ec:0d:c9:9b:e0:b4:9c:a5:70:ae:e6: 11:56:b0:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5MTYxMTAvBgNVBAUTKDZGQzIyRDMwRjMxOUNENjVEQjVFM0Y2RkZDNUQxNDFD RDAxNjY4ODIwHhcNMjYxMTA1MDY1MTI2WhcNMjYxMTEyMDY1MTI2WjAYMRYwFAYD VQQDEw02YWVjMjc2ZS05OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA99+T6iJBKZqSjL9NKdBmMdt+lXrYb0Wbj2vJ/6uyb5H9Az2l4VAABjjil0yd fPHgJf6PEPdTVyoYRuCQ2OInEZKVZAsx6lGIcmxuBhFeNMCtlHxF2+7UsC+FMelH DMg5FquNOjlRfOCPHTu5Ozg/Vbad0bJjyaJS6X33Y3Ar3GgfmTcyUsCOi9FJ10Wd gpH0j5cc1rGAk0OSDMW9pgBqLHrTpy/12IUpyupyUtqXO68lDoJSwqZeLTiwY9wq 5rwh6fpwqFXZSdMdNedLpsrHwfsvbLFCAADA2Et8vQgpAWail+kxpl8glJ/zSmtf uF5N1aVfYGYvDaXoU2nEAgRRlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLV+7tCo OVCXWYVJLx2i3B3Bnix9MB8GA1UdIwQYMBaAFG/CLTDzGc1l214/b/xdFBzQFmiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkxNi8wNDBCODdCQTM2 NEExMUYwODA0QURFNUVDNEY5QUUwMi9iOEl0TVBNWnpXWGJYajl2X0YwVUhOQVdh SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4SXRNUE1aeldYYlhqOXZfRjBVSE5BV2FJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkxNi8wNDBCODdCQTM2NEExMUYwODA0QURFNUVDNEY5QUUwMi9iOEl0TVBNWnpX WGJYajl2X0YwVUhOQVdhSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3dHSQn50rKso1shsE1ygj2N1cvbthTt4OexR/R7L9pOlYd9BiFI82hjsFmN v7qKG/DXhUh90IyVDcL4TYtLMEcZofvkZbGhTozNMjhfcNfEBZZdWqAfkE73wiSL 2RSDnTSx37uiH/ckM+0a83LCxg7q6o7Ho/LJeiyDSHlquCZo0wBbdRXt498S/ySa s8O7Irqgtb5Zmf2ccF+kJ2JM4O4YbZrgaoV22vzg/G30mpCJheMxAfpxWNPwI4mt JhDBvEGH8QRA3XEOkwogdDS5Vmg+ln4dsSVYazQNPjMtJ+qhbwZNRjv5e/7rc4vM qLAgxewNyZvgtJylcK7mEVawoQ== -----END CERTIFICATE-----Generated at Thu Nov 5 14:55:53 2026 by rpki-client