$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: tg0aoKoc6VHWr8K5i9NnRCPgo6ejZfdtBrJtliLhVs0= Subject key identifier: 82:DC:8C:BE:9C:12:A8:20:E1:40:5A:61:B3:94:6E:1F:38:61:56:6B Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 0ABC Signing time: Sun 18 Oct 2026 19:35:26 +0000 Manifest this update: Sun 18 Oct 2026 19:35:26 +0000 Manifest next update: Sun 25 Oct 2026 19:35:26 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: ZeiSXEiAv0I2D1o8XKrc8mr8Mpe/6MNkF6qAiwQdeEM=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ERhX+neEQpWaGHgDx788YR3fYNG7D/j2H84jmEv5law=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: Oct 18 19:35:26 2026 GMT Not After : Oct 25 19:35:26 2026 GMT Subject: CN=6ad51f7e-a9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:6c:26:ee:59:30:fa:e9:7d:c9:a1:af:b4: 54:b8:f0:d8:d8:15:2c:73:46:fb:e6:41:5d:c8:48: 7e:2b:f8:67:37:37:e4:c4:44:65:0a:fb:14:85:2f: 5c:3f:d1:a3:b3:bd:a1:b1:fe:20:57:43:fc:e5:3a: 3f:76:fa:fa:ed:52:29:3f:7d:6d:2e:b1:14:ad:5e: bd:89:8e:01:9f:9a:fe:6d:03:77:79:28:39:bc:79: 1f:2f:51:b7:5b:5a:ef:ff:31:8d:89:e1:2d:50:75: 21:44:0f:7a:a5:e9:99:0d:11:41:e3:b7:01:39:c3: ab:d0:57:8f:43:69:75:b0:2b:52:6c:40:57:97:e1: 78:31:6b:5d:65:9f:95:03:eb:f3:8e:d0:03:60:fb: 0f:b0:26:06:61:f5:67:8f:50:35:01:a9:20:5a:20: 34:c3:c5:b7:a8:cf:43:38:14:ac:55:ce:5f:8b:51: 3c:f8:68:a5:62:6d:54:f5:dc:73:19:c4:5b:74:90: d8:99:a7:53:3a:a9:d3:30:ea:b1:06:92:4a:71:79: 49:2c:32:17:e1:38:27:d9:55:0c:31:2b:ad:66:fc: 5e:9a:b6:3f:48:ac:5b:26:71:53:d3:81:0b:f4:f1: 34:52:d4:d1:b1:4b:04:bd:08:31:de:82:a1:9f:77: e6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DC:8C:BE:9C:12:A8:20:E1:40:5A:61:B3:94:6E:1F:38:61:56:6B X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a2:f7:26:4c:a4:67:30:79:ef:56:6c:94:5e:61:a9:f0:5d: 11:e4:65:ef:b8:48:8d:db:2b:49:9a:bf:bd:af:07:1e:6c:ab: 92:65:f0:34:e3:18:14:30:dd:1e:1e:59:67:d6:c2:95:93:45: c6:66:5e:55:98:48:a0:e2:c6:a2:b9:ee:65:e6:a3:d5:e9:92: 8f:23:85:f8:e4:d6:df:9c:8d:f8:a6:c4:cc:ae:9b:21:13:f9: 32:d5:35:a4:2b:9a:b1:11:a5:75:84:e2:b7:0e:b9:19:10:a9: ef:3b:ca:3f:61:21:c6:b2:72:e7:8e:0e:22:0f:d1:a1:e8:46: c3:b7:50:be:0e:19:3a:a9:10:55:ca:01:29:09:db:66:34:ba: 34:2b:cf:ac:bf:7c:e8:f5:15:34:71:dd:a8:82:25:27:bf:75: d3:70:c4:6a:5e:f4:7b:b0:ad:fb:d5:af:2a:f5:52:0c:78:79: b3:5b:b7:09:57:50:bb:47:d6:37:4f:55:b7:2f:61:5d:14:64: b7:02:12:f0:a7:c1:d0:ff:33:23:ed:b6:ed:fe:28:df:06:3f: cc:72:c3:14:a6:9e:c1:bb:9e:3a:f7:40:f2:09:3f:ec:31:14: 4c:2f:65:95:55:9b:1e:9c:7b:d7:15:f5:1d:b0:22:80:79:03: cc:b1:23:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjYxMDE4MTkzNTI2WhcNMjYxMDI1MTkzNTI2WjAYMRYwFAYD VQQDEw02YWQ1MWY3ZS1hOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IhsJu5ZMPrpfcmhr7RUuPDY2BUsc0b75kFdyEh+K/hnNzfkxERlCvsUhS9c P9Gjs72hsf4gV0P85To/dvr67VIpP31tLrEUrV69iY4Bn5r+bQN3eSg5vHkfL1G3 W1rv/zGNieEtUHUhRA96pemZDRFB47cBOcOr0FePQ2l1sCtSbEBXl+F4MWtdZZ+V A+vzjtADYPsPsCYGYfVnj1A1AakgWiA0w8W3qM9DOBSsVc5fi1E8+GilYm1U9dxz GcRbdJDYmadTOqnTMOqxBpJKcXlJLDIX4Tgn2VUMMSutZvxemrY/SKxbJnFT04EL 9PE0UtTRsUsEvQgx3oKhn3fmewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILcjL6c Eqgg4UBaYbOUbh84YVZrMB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfqL3JkykZzB571ZslF5hqfBdEeRl77hIjdsrSZq/va8HHmyrkmXwNOMYFDDd Hh5ZZ9bClZNFxmZeVZhIoOLGornuZeaj1emSjyOF+OTW35yN+KbEzK6bIRP5MtU1 pCuasRGldYTitw65GRCp7zvKP2EhxrJy544OIg/RoehGw7dQvg4ZOqkQVcoBKQnb ZjS6NCvPrL986PUVNHHdqIIlJ79103DEal70e7Ct+9WvKvVSDHh5s1u3CVdQu0fW N09Vty9hXRRktwIS8KfB0P8zI+227f4o3wY/zHLDFKaewbueOvdA8gk/7DEUTC9l lVWbHpx71xX1HbAigHkDzLEj6A== -----END CERTIFICATE-----Generated at Tue Oct 20 08:21:53 2026 by rpki-client