$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: buVDwOfmszNO6v0ND/MMCe6WXYeOv81yZKYL3mt0PTA= Subject key identifier: E7:88:01:AC:23:9B:30:B5:9D:CB:E7:E4:37:73:C4:6C:8D:13:DE:3D Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 011F Signing time: Fri 09 Oct 2026 06:34:35 +0000 Manifest this update: Fri 09 Oct 2026 06:34:35 +0000 Manifest next update: Fri 16 Oct 2026 06:34:35 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: UxzQYAo4CG8OyYOlIq0kVkeXtGNCWgipvy27yzGCHiE=) 2: 1DA281C82D9E11F1B1FA5F5A88EE528E.roa (hash: gMJWlgng2lgevvc5aZJ8BLiTHzTn0UTcScrCCSp3b7g=) 3: 1C1628BE2D9E11F1B1FA5F5A88EE528E.roa (hash: AdqbKoLvsHyKD6HghcgCeYloGvI0ehL1LADbVK02jZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 06:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Oct 9 06:34:35 2026 GMT Not After : Oct 16 06:34:35 2026 GMT Subject: CN=6ac88afb-9132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:55:08:02:ef:94:6e:c5:fa:bd:c7:44:44: 6f:73:49:60:08:60:09:a7:cd:35:f2:26:5c:64:af: a0:cc:8c:38:59:5d:fd:2e:c0:dc:6e:82:ed:01:79: fb:ef:6d:c5:f8:bc:75:07:69:e3:27:31:e1:74:9a: d7:6f:f9:f4:91:97:20:bc:4b:2e:0c:ec:d7:4c:c2: db:2e:30:3f:e1:0d:51:54:de:aa:91:eb:56:4a:21: db:af:fb:a5:ab:67:c3:35:5b:50:fd:63:7e:5d:9d: 9e:3f:20:da:8d:0e:29:b4:59:d1:3c:cf:64:fb:91: c8:eb:aa:d4:70:d5:22:33:f4:0f:32:69:4b:46:d4: c9:31:e5:40:24:06:f9:56:ea:4e:60:8a:d6:c0:2f: d3:82:c4:40:80:16:37:dd:7f:74:1c:e3:e9:2c:5d: 73:ab:64:66:05:f4:ec:3b:63:9e:2c:18:ae:3e:44: af:5e:78:a8:d5:06:5d:1f:a4:a6:ea:c0:04:1e:a6: fb:b9:0d:e5:47:0a:aa:ac:da:10:06:f3:a3:89:ba: 1f:af:85:97:46:55:8b:12:ad:f2:4f:a0:1f:fd:d9: 86:b3:9d:9e:f5:e4:87:1e:61:24:44:8f:7b:f2:3e: 3d:2f:55:2c:ff:6e:a2:dc:41:59:be:57:77:1b:72: 6a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:88:01:AC:23:9B:30:B5:9D:CB:E7:E4:37:73:C4:6C:8D:13:DE:3D X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:99:08:97:a0:48:d3:a5:f7:64:f8:10:f2:f5:33:83:98:6d: 83:70:cb:02:07:86:f1:ab:71:ca:1d:1a:4f:73:b3:e8:3a:e5: e5:47:38:db:f4:49:74:80:f6:4b:c0:aa:fd:a5:a1:0e:cb:e0: 33:13:7e:3d:22:e3:41:11:28:e9:de:41:e1:00:78:05:e7:e9: 9f:e1:c2:e0:6f:9a:24:0f:e2:db:39:3a:7b:ce:e9:01:0f:12: e6:23:ed:3b:9a:80:db:3e:67:54:7d:28:be:f6:b8:ab:47:a3: 43:64:9f:90:8d:c9:64:83:a2:c4:1d:1d:fb:7c:ba:99:bd:5c: 1b:e4:70:61:7f:73:6b:fe:70:69:31:69:d8:dc:41:53:af:ba: 7a:58:55:90:c2:48:9d:a7:d5:43:09:9c:ce:6f:94:03:bd:07: ed:d8:45:ce:1d:6e:6b:24:32:1b:11:60:f6:e0:20:be:72:f4: 1d:43:f6:a0:45:e2:00:97:36:1d:10:92:4b:2d:47:b9:95:f6: 62:ad:b9:8f:38:23:a2:c3:be:1b:eb:5d:94:f8:48:b1:a7:dc: 74:55:d8:3b:4e:b6:57:c1:de:1b:9a:9c:d9:25:21:ce:ed:22: 5e:c9:c0:c9:76:01:47:0f:f3:8c:79:ca:06:88:b7:70:b3:fb: e4:5f:20:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDQkIxMTAvBgNVBAUTKEZDMjRGNTM5MDc0Nzg3RUNFQUIwMEMyNDI2MDZDMkJE Njg4MTlBMEQwHhcNMjYxMDA5MDYzNDM1WhcNMjYxMDE2MDYzNDM1WjAYMRYwFAYD VQQDEw02YWM4OGFmYi05MTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9JVCALvlG7F+r3HRERvc0lgCGAJp8018iZcZK+gzIw4WV39LsDcboLtAXn7 723F+Lx1B2njJzHhdJrXb/n0kZcgvEsuDOzXTMLbLjA/4Q1RVN6qketWSiHbr/ul q2fDNVtQ/WN+XZ2ePyDajQ4ptFnRPM9k+5HI66rUcNUiM/QPMmlLRtTJMeVAJAb5 VupOYIrWwC/TgsRAgBY33X90HOPpLF1zq2RmBfTsO2OeLBiuPkSvXnio1QZdH6Sm 6sAEHqb7uQ3lRwqqrNoQBvOjibofr4WXRlWLEq3yT6Af/dmGs52e9eSHHmEkRI97 8j49L1Us/26i3EFZvld3G3JqxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOeIAawj mzC1ncvn5DdzxGyNE949MB8GA1UdIwQYMBaAFPwk9TkHR4fs6rAMJCYGwr1ogZoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNCQi9ENTNCRDE0NjE1 QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgtenFzQXdrSmdiQ3ZXaUJt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNCQi9ENTNCRDE0NjE1QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgt enFzQXdrSmdiQ3ZXaUJtZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApZkIl6BI06X3ZPgQ8vUzg5htg3DLAgeG8atxyh0aT3Oz6Drl5Uc42/RJdID2 S8Cq/aWhDsvgMxN+PSLjQREo6d5B4QB4Befpn+HC4G+aJA/i2zk6e87pAQ8S5iPt O5qA2z5nVH0ovva4q0ejQ2SfkI3JZIOixB0d+3y6mb1cG+RwYX9za/5waTFp2NxB U6+6elhVkMJInafVQwmczm+UA70H7dhFzh1uayQyGxFg9uAgvnL0HUP2oEXiAJc2 HRCSSy1HuZX2Yq25jzgjosO+G+tdlPhIsafcdFXYO062V8HeG5qc2SUhzu0iXsnA yXYBRw/zjHnKBoi3cLP75F8gBQ== -----END CERTIFICATE-----Generated at Fri Oct 9 21:26:08 2026 by rpki-client