$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft File: b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json) Hash identifier: hZXPoOaOQFpiSdzSwxzbm9Xf8bq9iSUkmT9rDq3Vdxg= Subject key identifier: 30:B0:99:44:19:FD:D7:4C:41:80:DF:7A:4A:76:BD:D3:B2:50:0E:1E Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0E6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft Manifest number: 0E3B Signing time: Sun 18 Oct 2026 17:53:51 +0000 Manifest this update: Sun 18 Oct 2026 17:53:50 +0000 Manifest next update: Sun 25 Oct 2026 17:53:50 +0000 Files and hashes: 1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: da5yOvAReJ629agw5kg/OvLuJAfhpWxkBOKAVfaGj78=) 2: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (hash: meOmGfY3r0GblklalG+4OMMAMZcdYPQdKS2Ett97RO8=) 3: 11815E36135311EE94A8A114C4F9AE02.roa (hash: T5GAbC0yTN338KtcDTUO9gQz4ASEYtGI5aC6qczg2W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 17:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3692 (0xe6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Oct 18 17:53:50 2026 GMT Not After : Oct 25 17:53:50 2026 GMT Subject: CN=6ad507af-83e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:cd:dc:6d:95:2f:60:5e:ff:bf:0b:96:ee: 36:ba:7b:6e:70:6a:7f:bd:bf:35:6c:97:a9:52:c9: cb:af:ca:84:c6:c9:df:27:46:06:42:35:85:e7:b4: 03:f6:d3:3f:31:17:fa:7b:fe:55:ac:29:2c:74:39: f0:a6:3c:6b:ad:64:63:ec:6e:95:af:53:f8:31:2d: e6:8c:f4:25:03:d4:73:9c:6f:9f:79:8a:07:84:3a: d6:d1:4b:5b:9d:13:01:7a:7b:69:e3:9b:73:15:7a: 62:2c:7a:b4:bc:49:3a:d4:8b:ab:3c:7e:93:9a:fe: fb:89:b9:46:ae:80:7d:92:d7:76:b8:a5:36:49:1b: 15:11:bd:d5:b8:e8:f6:19:dd:b3:d1:3a:7a:bf:2a: 63:85:12:4e:35:fd:86:53:3d:d5:88:a2:d3:d8:76: 66:e2:b7:6a:a7:c8:07:ac:9e:de:1f:fb:57:b8:1b: 8f:98:9d:d4:11:ca:dc:6f:76:31:82:b4:22:ec:e4: 00:96:f2:65:a0:ea:be:14:6f:53:a3:01:e6:cc:7e: 35:9d:7f:2f:0c:ce:b4:b7:8b:e9:13:f8:97:23:c2: 92:ac:0c:82:a9:bb:e7:21:9f:d9:b4:0a:2c:b1:96: 96:15:b7:e0:11:bb:55:c7:33:f7:37:db:8c:10:cc: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B0:99:44:19:FD:D7:4C:41:80:DF:7A:4A:76:BD:D3:B2:50:0E:1E X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:47:a3:32:5b:54:77:dd:d2:1f:91:a4:3f:8f:34:a0:92:1e: 2a:83:0e:af:78:e6:ab:d8:e5:61:3c:ee:47:80:71:b1:fe:e7: c9:f7:6c:14:15:55:6b:7c:87:9f:6b:5f:e1:98:19:c0:c8:b4: 2f:6e:1a:31:2f:98:15:f3:aa:57:2f:22:59:d5:9e:11:91:00: 8f:87:dc:60:6f:bf:26:a3:86:53:c0:aa:d4:a3:a2:d2:90:7f: 47:6d:15:ce:14:4e:e2:7d:4d:7d:19:30:cb:bf:40:aa:59:e2: 5d:0c:4d:cb:d2:c0:c6:e0:2c:71:d6:cc:4d:17:87:5c:0e:cd: 61:c4:3c:79:12:cd:c1:8a:ce:ce:a9:96:f1:ae:66:0e:2c:cd: c3:54:3a:5f:bb:b1:23:39:ff:29:fe:ab:82:d9:33:8a:ec:0b: 3a:50:5d:9c:0b:f4:49:91:25:ce:f8:15:ce:40:aa:3f:14:92: fa:71:df:36:0d:ca:24:8f:82:35:8e:d9:87:13:4d:69:04:a9: 46:85:a3:8d:96:19:3b:a5:89:ae:8b:fe:d0:ce:2a:07:b7:86: 52:4d:89:68:e0:c6:82:90:f7:14:43:d3:fc:bf:de:f0:56:64: 1d:ff:8b:f1:fc:63:88:fd:1a:83:84:0f:e1:76:d7:88:d6:91: 2b:57:aa:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjYxMDE4MTc1MzUwWhcNMjYxMDI1MTc1MzUwWjAYMRYwFAYD VQQDEw02YWQ1MDdhZi04M2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn3N3G2VL2Be/78Llu42untucGp/vb81bJepUsnLr8qExsnfJ0YGQjWF57QD 9tM/MRf6e/5VrCksdDnwpjxrrWRj7G6Vr1P4MS3mjPQlA9RznG+feYoHhDrW0Utb nRMBentp45tzFXpiLHq0vEk61IurPH6Tmv77iblGroB9ktd2uKU2SRsVEb3VuOj2 Gd2z0Tp6vypjhRJONf2GUz3ViKLT2HZm4rdqp8gHrJ7eH/tXuBuPmJ3UEcrcb3Yx grQi7OQAlvJloOq+FG9TowHmzH41nX8vDM60t4vpE/iXI8KSrAyCqbvnIZ/ZtAos sZaWFbfgEbtVxzP3N9uMEMyi9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCwmUQZ /ddMQYDfekp2vdOyUA4eMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx Ty13UlNhRzlzdTJ5azhuWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaEejMltUd93SH5GkP480oJIeKoMOr3jmq9jlYTzuR4Bxsf7nyfdsFBVVa3yH n2tf4ZgZwMi0L24aMS+YFfOqVy8iWdWeEZEAj4fcYG+/JqOGU8Cq1KOi0pB/R20V zhRO4n1NfRkwy79AqlniXQxNy9LAxuAscdbMTReHXA7NYcQ8eRLNwYrOzqmW8a5m DizNw1Q6X7uxIzn/Kf6rgtkziuwLOlBdnAv0SZElzvgVzkCqPxSS+nHfNg3KJI+C NY7ZhxNNaQSpRoWjjZYZO6WJrov+0M4qB7eGUk2JaODGgpD3FEPT/L/e8FZkHf+L 8fxjiP0ag4QP4XbXiNaRK1eqHQ== -----END CERTIFICATE-----Generated at Tue Oct 20 08:25:49 2026 by rpki-client