$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json) Hash identifier: S62QqyKqvISDun2ugXMcQYUHaU9RRrfNKbc2XV++268= Subject key identifier: 10:DE:03:36:50:66:5B:54:F7:D9:13:1E:FF:A6:C7:EB:E8:7A:CD:CD Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft Manifest number: 0378 Signing time: Tue 13 Oct 2026 00:58:37 +0000 Manifest this update: Tue 13 Oct 2026 00:58:37 +0000 Manifest next update: Tue 20 Oct 2026 00:58:37 +0000 Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: CuHEON4716u3xW0j+Sra/vEi1Vh/px7ShJzaoSmWF3Q=) 2: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: yJO+i+oPRpe2hJdrBjCi6ZjWjUnUDaX0mnbL3Z2r1os=) 3: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: x4nzg1eiqnQ3xL+MBP6Ok4N2HAa+La4GXnfqybcguR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 00:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Validity Not Before: Oct 13 00:58:37 2026 GMT Not After : Oct 20 00:58:37 2026 GMT Subject: CN=6acd823d-b34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:59:65:89:d4:c3:7d:72:44:76:95:06:1e: c7:33:6e:6c:96:1c:24:36:b9:e6:d7:6a:00:4b:e0: 88:7e:fd:46:e2:c2:70:b6:de:38:41:a8:a2:4e:54: 4b:84:d8:c2:fd:05:c1:d3:0b:8a:dc:79:80:cd:ce: c0:f4:2d:01:2e:a1:95:18:d1:4a:24:71:a8:fa:44: 85:c3:26:41:7a:67:9b:93:48:0e:f9:4b:8f:dc:b6: ed:82:2f:fa:77:72:38:3b:43:fc:61:47:1b:3e:37: 63:c5:7f:96:ef:00:9d:f8:aa:87:56:0f:b2:a6:c8: 84:57:a4:87:dd:03:83:cd:cc:da:0b:87:36:ba:9f: aa:95:75:1e:6a:88:ce:95:17:7a:83:a6:e6:7a:c4: ef:95:0d:f8:80:87:11:c7:c1:ba:fe:ac:52:25:5c: ed:bf:97:be:5d:fd:68:ef:f7:0a:21:98:eb:55:80: 40:58:dd:6f:0e:6b:50:c9:82:1f:9e:01:16:1b:ba: da:44:03:db:75:1d:47:dc:37:39:a3:f4:f6:24:cd: 33:9f:41:3d:bb:ed:e6:8a:3c:bf:34:7e:c6:04:2d: 87:c0:e5:55:93:10:6c:8c:db:2b:10:e6:d8:19:7e: a1:f0:29:8e:7f:3c:41:29:9a:a6:52:df:5b:a5:f3: 58:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:03:36:50:66:5B:54:F7:D9:13:1E:FF:A6:C7:EB:E8:7A:CD:CD X509v3 Authority Key Identifier: keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6a:c8:ab:af:ed:80:68:c0:fd:ff:27:1b:7a:9e:02:b0:8c: f5:97:69:b1:29:62:c0:6e:da:ce:ce:a9:b0:17:af:0b:67:a4: 3a:b0:65:2c:ac:a2:52:0d:d1:16:4a:64:f6:00:ab:67:de:39: 9b:f5:ea:c9:36:a2:a6:89:58:4c:f4:da:d7:60:56:1b:1c:35: fa:70:3a:01:9a:6c:1a:24:d2:75:d6:60:62:c7:db:e5:b1:fe: 91:7c:b7:89:ac:49:34:54:bc:4b:25:9c:b5:8b:59:04:b6:12: 27:d1:5a:8a:2e:59:ac:34:ec:bb:76:00:b6:17:0d:cf:7d:4e: 45:66:77:9b:41:f4:45:d3:b7:fd:64:cb:17:74:a0:e9:a6:36: c8:65:de:a0:f2:69:42:cb:17:2c:41:f5:83:cc:e4:22:7a:21: 7f:a5:54:88:4e:60:c3:7f:a4:65:9c:81:62:8c:15:1e:6b:5e: 1f:80:2c:f2:22:a2:54:76:08:49:13:6f:2c:e8:94:5f:a1:88: c9:6d:0e:c7:c5:a0:6e:79:4a:ef:b0:f5:65:ef:d2:a1:63:a6: 57:b9:6d:17:8f:93:a7:62:9a:db:b4:bc:03:48:82:98:ff:fb: a3:b4:7e:73:6f:0c:3b:27:f6:92:49:63:ff:48:5d:69:0f:d3: 88:5f:b3:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMUIxMTAvBgNVBAUTKDRCNDQxNEFFNjg1RTQ4OEY0MkIxQjY0N0VFQTAxREVC QjBDNEYzQTAwHhcNMjYxMDEzMDA1ODM3WhcNMjYxMDIwMDA1ODM3WjAYMRYwFAYD VQQDEw02YWNkODIzZC1iMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKNZZYnUw31yRHaVBh7HM25slhwkNrnm12oAS+CIfv1G4sJwtt44QaiiTlRL hNjC/QXB0wuK3HmAzc7A9C0BLqGVGNFKJHGo+kSFwyZBemebk0gO+UuP3Lbtgi/6 d3I4O0P8YUcbPjdjxX+W7wCd+KqHVg+ypsiEV6SH3QODzczaC4c2up+qlXUeaojO lRd6g6bmesTvlQ34gIcRx8G6/qxSJVztv5e+Xf1o7/cKIZjrVYBAWN1vDmtQyYIf ngEWG7raRAPbdR1H3Dc5o/T2JM0zn0E9u+3mijy/NH7GBC2HwOVVkxBsjNsrEObY GX6h8CmOfzxBKZqmUt9bpfNYuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDeAzZQ ZltU99kTHv+mx+voes3NMB8GA1UdIwQYMBaAFEtEFK5oXkiPQrG2R+6gHeuwxPOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIxQi80QjM4NjREODBF MEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJOUNzYlpIN3FBZDY3REU4 NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwUVVybWhlU0k5Q3NiWkg3cUFkNjdERTg2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIxQi80QjM4NjREODBFMEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJ OUNzYlpIN3FBZDY3REU4NkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV2rIq6/tgGjA/f8nG3qeArCM9ZdpsSliwG7azs6psBevC2ekOrBlLKyiUg3R Fkpk9gCrZ945m/XqyTaipolYTPTa12BWGxw1+nA6AZpsGiTSddZgYsfb5bH+kXy3 iaxJNFS8SyWctYtZBLYSJ9Faii5ZrDTsu3YAthcNz31ORWZ3m0H0RdO3/WTLF3Sg 6aY2yGXeoPJpQssXLEH1g8zkInohf6VUiE5gw3+kZZyBYowVHmteH4As8iKiVHYI SRNvLOiUX6GIyW0Ox8WgbnlK77D1Ze/SoWOmV7ltF4+Tp2Ka27S8A0iCmP/7o7R+ c28MOyf2kklj/0hdaQ/TiF+zoA== -----END CERTIFICATE-----Generated at Tue Oct 13 16:22:25 2026 by rpki-client