$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: Ncloybhe3y+udLwevUDvfyHqyMHZyy2NIO0Sic3rB4I= Subject key identifier: C9:50:DD:3B:62:B2:3E:47:5D:FD:C9:C1:23:12:80:88:BF:6E:A0:26 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1E36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1E21 Signing time: Sat 10 Oct 2026 16:04:47 +0000 Manifest this update: Sat 10 Oct 2026 16:04:46 +0000 Manifest next update: Sat 17 Oct 2026 16:04:46 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: VguHD38nGQv7gBC7lsC8ZU/898iurWwXphlhGaKooEQ=) 2: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: y589PiSSMhNrGOrnncCafxxVdSHTLvTbZSYrRDFCPDk=) 3: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: rD0K63hEtFRbmUFMwp16mvboZk+CtCmdJfPRvsaFveU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7734 (0x1e36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Oct 10 16:04:46 2026 GMT Not After : Oct 17 16:04:46 2026 GMT Subject: CN=6aca621f-f1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:55:c7:8d:d6:9c:ad:f6:55:83:ea:5e:03:f0: 79:4e:7c:55:d8:2e:99:5b:c1:ad:45:52:de:8e:43: 23:4b:c2:9e:4e:d8:04:af:54:e7:47:bc:49:2c:c2: 7f:df:48:65:ab:d3:5a:bd:d5:70:3d:be:86:ea:03: 02:da:9a:f4:1e:fb:7d:ef:0a:f6:26:00:ab:8c:29: 3f:58:e6:e7:65:36:d1:bd:f6:35:90:92:75:5a:a1: 5e:a1:29:2a:e0:0d:9d:07:69:e0:22:3f:01:ff:61: 26:7c:9b:3f:b8:71:d3:63:90:ff:88:ce:4a:f0:29: a5:8c:84:bc:59:07:e4:83:b1:b5:55:8c:66:0d:3f: db:c2:31:79:ab:46:bb:67:bb:f6:67:58:f0:59:34: a9:7d:96:17:43:39:91:9e:96:21:ad:56:e4:ba:44: 43:3f:8d:5b:b8:85:97:d1:b5:19:d3:c3:8a:73:ae: 0a:b4:3a:19:2e:ee:57:e4:a4:50:34:4e:15:79:8b: 7c:e8:3f:e2:54:7d:29:81:83:c1:2e:63:b5:15:cd: 69:ae:34:28:90:e6:d6:90:52:ba:20:a5:c0:97:33: bf:a9:c8:b3:13:ac:06:72:90:1a:91:9a:37:8f:3d: 5f:b8:37:0c:f4:2e:42:ab:50:1a:dd:b0:c9:2a:3f: ef:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:DD:3B:62:B2:3E:47:5D:FD:C9:C1:23:12:80:88:BF:6E:A0:26 X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4d:8a:fd:f2:91:95:77:83:db:99:7d:1d:b2:c8:ef:41:a9: eb:44:01:24:5b:cc:00:87:c2:b1:14:28:c6:f4:40:53:fa:81: 8d:d5:32:73:1b:9a:2b:cd:a9:1a:5c:7a:53:93:6c:74:8f:5c: 26:96:8d:8d:3a:3f:5e:7e:e1:66:fe:db:78:16:a5:99:7d:7a: c5:4c:51:d1:11:b4:11:76:1f:79:97:ff:de:2e:de:26:78:eb: 42:6c:6e:04:4b:1d:5e:94:cc:4b:4c:56:ab:67:98:88:53:7d: 05:7b:0f:d9:fd:a6:c0:d6:c5:cd:03:45:0e:d3:fe:78:8b:9b: 62:f7:4c:6d:4e:e0:aa:b7:04:d2:af:6c:87:7f:cf:05:36:50: f2:b0:1c:28:1c:91:f2:08:d0:9b:e0:3d:84:db:0e:21:21:30: 7f:72:e4:12:a2:aa:7e:c9:15:e3:4b:ed:45:e4:8f:9a:f6:6a: 13:bd:61:af:48:97:28:a2:77:a1:24:cf:a1:c4:53:35:71:49: 23:97:4a:ec:d1:d9:28:57:fa:c8:ea:32:82:8d:e0:cc:df:cb: 41:02:01:0e:2a:bd:fd:52:a9:8e:37:b0:f9:1e:cb:57:75:6c: 56:32:91:78:27:14:06:d7:d3:cf:a8:bc:73:e3:f0:26:e8:cb: 57:6b:19:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjYxMDEwMTYwNDQ2WhcNMjYxMDE3MTYwNDQ2WjAYMRYwFAYD VQQDEw02YWNhNjIxZi1mMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiVXHjdacrfZVg+peA/B5TnxV2C6ZW8GtRVLejkMjS8KeTtgEr1TnR7xJLMJ/ 30hlq9NavdVwPb6G6gMC2pr0Hvt97wr2JgCrjCk/WObnZTbRvfY1kJJ1WqFeoSkq 4A2dB2ngIj8B/2EmfJs/uHHTY5D/iM5K8CmljIS8WQfkg7G1VYxmDT/bwjF5q0a7 Z7v2Z1jwWTSpfZYXQzmRnpYhrVbkukRDP41buIWX0bUZ08OKc64KtDoZLu5X5KRQ NE4VeYt86D/iVH0pgYPBLmO1Fc1prjQokObWkFK6IKXAlzO/qcizE6wGcpAakZo3 jz1fuDcM9C5Cq1Aa3bDJKj/vCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlQ3Tti sj5HXf3JwSMSgIi/bqAmMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB02K/fKRlXeD25l9HbLI70Gp60QBJFvMAIfCsRQoxvRAU/qBjdUycxuaK82p Glx6U5NsdI9cJpaNjTo/Xn7hZv7beBalmX16xUxR0RG0EXYfeZf/3i7eJnjrQmxu BEsdXpTMS0xWq2eYiFN9BXsP2f2mwNbFzQNFDtP+eIubYvdMbU7gqrcE0q9sh3/P BTZQ8rAcKByR8gjQm+A9hNsOISEwf3LkEqKqfskV40vtReSPmvZqE71hr0iXKKJ3 oSTPocRTNXFJI5dK7NHZKFf6yOoygo3gzN/LQQIBDiq9/VKpjjew+R7LV3VsVjKR eCcUBtfTz6i8c+PwJujLV2sZ5w== -----END CERTIFICATE-----Generated at Mon Oct 12 04:07:00 2026 by rpki-client