$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: 6OBbCGcz5fJsIJ9hbm44WpllfOm5ilPgGclodYpd+ig= Subject key identifier: A5:55:31:7E:F3:A3:06:BD:5E:92:C3:DE:A2:A9:16:BC:EC:B4:71:64 Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0DB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0D77 Signing time: Tue 06 Oct 2026 18:11:49 +0000 Manifest this update: Tue 06 Oct 2026 18:11:48 +0000 Manifest next update: Tue 13 Oct 2026 18:11:48 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: HtHW8SzFZHXtRy78n6b0cN+mSGInTFnnm3eZqz8faBg=) 2: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: 5Gz1em/PdO/Bv/3TCy3czbXrmcPfmWaq1s4vYyqJQmE=) 3: CCA73AD084D111F195FCD5AD58A30FBC.roa (hash: Zsxd7kKN0wCdkDigU6/ttzwC27LOJzyfJn/Dkigf1fg=) 4: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: rZrIOdq3ol6lcEAYXeq2DsJFaFbmt+O1xVdoQjKA9Ic=) 5: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +v702T+ecCOjmmS56vuMtDJ6RGqPmaswdGe/Ps9k7F8=) 6: 4DC07014161411F1B995070A2E3D8C67.roa (hash: H0Jb9txtazlliAU6uAWUSrabDYFIpiBg6C2fr7jj4yU=) 7: 5DB19F74332511F19B77F41AB8833773.roa (hash: eS81eZ4BRnB1S8RBeTEIim17x0/NA9jClADK3JWCczs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Oct 6 18:11:48 2026 GMT Not After : Oct 13 18:11:48 2026 GMT Subject: CN=6ac539e5-ea74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:3c:d9:2c:3f:d8:41:cc:76:5b:85:96:86: 4e:18:f2:4d:12:cb:cf:ab:d2:7f:aa:2d:a1:bd:ac: 71:f2:79:13:34:4c:3a:83:60:f8:06:29:22:49:61: 3d:7e:b8:c1:de:53:5a:3e:88:95:ea:27:21:95:55: 5d:bf:1c:8c:58:f7:74:c1:fa:91:a6:56:f1:6b:ce: 93:fa:0b:b9:e0:71:6e:b3:ce:3a:7b:f8:43:ab:f8: ac:71:d6:91:b9:41:e5:29:77:cf:0e:7f:cb:9c:12: 35:7f:a5:ac:5d:c0:7d:32:6d:bc:df:5c:a6:b9:c3: 05:fb:4e:4a:7d:84:c5:2b:7d:71:3d:36:03:a1:44: d5:04:99:c5:23:45:88:05:8b:5f:f0:a6:cd:8a:3b: 75:bc:73:d8:d1:11:68:aa:72:c7:b3:df:14:96:77: 63:ae:a8:7d:a9:4f:dd:2a:6d:94:ad:53:fa:7e:1e: 5d:2c:f3:a7:ad:73:80:23:38:ad:58:0e:ab:90:18: e1:82:a8:b3:16:a3:3a:2f:42:7a:4b:87:50:70:7d: 97:de:91:cd:a0:56:2b:0d:4d:a5:2e:b9:16:d3:55: b7:77:7a:32:0d:70:29:17:01:3b:d1:4e:ae:a2:d5: 50:b5:1f:a7:59:5c:e8:3b:7d:a7:6c:3e:dd:7b:ce: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:55:31:7E:F3:A3:06:BD:5E:92:C3:DE:A2:A9:16:BC:EC:B4:71:64 X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ec:ae:ec:2b:0c:4c:d6:bf:57:bb:ca:9f:f4:71:86:b4:6d: 49:46:13:6d:ea:91:a4:47:d1:09:e0:9c:2b:4e:3e:9b:ea:92: ea:62:88:f6:ae:31:cb:0c:96:8d:4f:44:45:4c:7a:85:33:2d: c5:dd:85:12:e9:62:a1:ad:ac:08:16:98:5d:3b:7f:07:73:0f: ec:56:b2:c2:d4:b3:bf:8b:28:d2:53:be:40:3a:7d:50:a6:6d: 24:c8:ed:5f:fa:ab:58:a0:5d:f7:fc:23:4b:20:e3:33:97:01: 6c:ae:7f:5e:1d:e4:2d:72:a3:22:63:3b:14:04:b6:8d:0f:1d: cb:58:a8:de:40:11:f0:29:68:b5:d5:06:74:59:0c:dc:61:f7: ef:3f:d2:41:09:01:4f:70:dd:b9:26:4c:84:25:48:bc:b4:b6: 64:52:e2:64:1e:ed:03:22:8c:81:ef:7e:45:97:a7:d6:02:86: bb:e0:81:1e:51:02:5c:32:65:e3:a6:6b:48:b7:ce:02:75:98: e7:95:42:f9:62:46:c6:bf:e9:3b:0e:80:99:f8:22:bd:9e:7e: bf:b0:c4:3c:04:a9:8d:06:25:46:7f:e3:3b:6b:07:6d:5e:e8: 01:06:86:2f:66:3d:a8:18:ec:76:93:76:ad:8d:9c:46:8b:4b: 31:16:e1:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjYxMDA2MTgxMTQ4WhcNMjYxMDEzMTgxMTQ4WjAYMRYwFAYD VQQDEw02YWM1MzllNS1lYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLQ82Sw/2EHMdluFloZOGPJNEsvPq9J/qi2hvaxx8nkTNEw6g2D4BikiSWE9 frjB3lNaPoiV6ichlVVdvxyMWPd0wfqRplbxa86T+gu54HFus846e/hDq/iscdaR uUHlKXfPDn/LnBI1f6WsXcB9Mm2831ymucMF+05KfYTFK31xPTYDoUTVBJnFI0WI BYtf8KbNijt1vHPY0RFoqnLHs98Ulndjrqh9qU/dKm2UrVP6fh5dLPOnrXOAIzit WA6rkBjhgqizFqM6L0J6S4dQcH2X3pHNoFYrDU2lLrkW01W3d3oyDXApFwE70U6u otVQtR+nWVzoO32nbD7de85pbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVVMX7z owa9XpLD3qKpFrzstHFkMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPuyu7CsMTNa/V7vKn/RxhrRtSUYTbeqRpEfRCeCcK04+m+qS6mKI9q4xywyW jU9ERUx6hTMtxd2FEulioa2sCBaYXTt/B3MP7FaywtSzv4so0lO+QDp9UKZtJMjt X/qrWKBd9/wjSyDjM5cBbK5/Xh3kLXKjImM7FAS2jQ8dy1io3kAR8ClotdUGdFkM 3GH37z/SQQkBT3DduSZMhCVIvLS2ZFLiZB7tAyKMge9+RZen1gKGu+CBHlECXDJl 46ZrSLfOAnWY55VC+WJGxr/pOw6AmfgivZ5+v7DEPASpjQYlRn/jO2sHbV7oAQaG L2Y9qBjsdpN2rY2cRotLMRbhww== -----END CERTIFICATE-----Generated at Wed Oct 7 00:32:38 2026 by rpki-client