$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: a3bXqF0V3NoPvgPHMbl7Qc/XqCfzVHXZdPfZXI1V2jk= Subject key identifier: DE:73:7F:84:7D:B4:8D:BF:26:5B:66:0E:7E:FE:9F:23:E3:08:07:B6 Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 0A98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 0A8A Signing time: Sat 10 Oct 2026 19:11:19 +0000 Manifest this update: Sat 10 Oct 2026 19:11:19 +0000 Manifest next update: Sat 17 Oct 2026 19:11:19 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: F9XjVBa1nY6BY7E28rKaIXxpimuyyeiVjsonVHAFKc0=) 2: E087B580870011F194514C90ABEE528E.roa (hash: 2efKLZ6+j+xLV+MxHpyalIXFsQcJ+EVXE0MVqPPKULk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2712 (0xa98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Oct 10 19:11:19 2026 GMT Not After : Oct 17 19:11:19 2026 GMT Subject: CN=6aca8dd7-726c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:9b:45:de:a8:26:74:89:85:59:85:21:54: ed:8b:94:5d:cb:c4:0e:67:27:60:62:be:c6:35:1d: ed:f0:5f:f1:bd:ce:49:7d:82:27:a2:57:8b:88:be: 2b:15:79:79:b2:68:7e:6e:13:fc:af:c7:a0:48:11: f2:37:e3:fd:d0:11:2f:c2:10:d7:ca:4a:96:7a:65: f5:54:82:b6:6a:27:31:68:67:8e:aa:e5:35:f6:de: d2:ae:ad:72:7a:26:08:45:c5:d4:76:ca:9f:05:ff: fb:bd:18:ea:dc:e2:59:ff:96:ea:82:ca:32:55:7e: 45:aa:a9:68:f4:f2:4b:5e:67:79:bc:75:d7:5b:31: 9b:36:b3:ef:7e:93:37:9e:57:d2:a8:c9:03:0d:b3: 6b:5d:c3:b3:8d:3f:27:86:9c:cd:c3:4e:6b:4e:bc: 32:40:dd:7a:d3:ac:06:63:44:08:2c:bd:3f:9f:3c: 60:38:35:7d:fb:59:bd:28:c1:07:f4:58:dc:e3:e7: 3d:82:10:bc:bb:55:24:2c:1b:85:e7:6c:14:71:7e: 23:25:7e:2e:a6:4b:f5:c1:92:f9:fa:6d:1f:e0:1f: 0f:47:16:9c:eb:02:dc:a1:36:cb:8f:f1:d8:f5:dd: 2b:78:37:cf:d1:de:87:d7:9b:3d:b0:cd:b8:f9:9e: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:73:7F:84:7D:B4:8D:BF:26:5B:66:0E:7E:FE:9F:23:E3:08:07:B6 X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:59:c0:0d:29:db:d7:e8:6f:5b:ae:c3:da:0f:b4:49:b3:3c: 66:8e:3d:2a:03:09:fe:5e:ca:f9:9f:24:b4:0f:25:c1:23:99: 9c:54:d7:a4:f7:a5:a2:9d:c5:1e:f1:c2:f4:c9:89:b1:9e:3a: 22:cf:95:e3:21:70:a2:4e:87:c1:90:a5:c7:6c:7f:52:61:8b: 58:fc:6d:9a:c5:96:51:c0:58:28:66:e9:de:7c:a0:31:e5:54: 2f:13:36:dd:ba:3e:da:ae:08:55:94:cb:99:e2:ee:de:6a:e3: c9:40:71:5e:2e:aa:83:f6:8c:1b:64:d6:2b:f0:cc:58:34:dd: 6d:ac:a6:ad:49:1d:17:ce:3b:20:92:ac:55:84:30:43:64:7a: b6:6c:2c:f9:18:7d:76:62:df:7c:b9:10:51:35:9c:55:42:38: ee:b2:db:d1:b0:b0:cf:04:c7:6f:1c:4f:44:ea:9c:c5:6a:e0: 70:72:cc:67:21:eb:7d:ee:21:2c:81:04:8d:da:aa:aa:bf:61: 3a:7c:4a:95:b8:67:12:75:62:6b:eb:90:c5:d1:ef:33:9f:b6: 87:6c:fb:bb:d3:4d:de:1c:b9:0e:11:df:e5:ae:d0:38:9f:21: 1a:0a:11:05:9d:be:a7:b2:0a:6e:2c:4c:95:f5:34:de:cf:6e: 94:05:00:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjYxMDEwMTkxMTE5WhcNMjYxMDE3MTkxMTE5WjAYMRYwFAYD VQQDEw02YWNhOGRkNy03MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXibRd6oJnSJhVmFIVTti5Rdy8QOZydgYr7GNR3t8F/xvc5JfYInoleLiL4r FXl5smh+bhP8r8egSBHyN+P90BEvwhDXykqWemX1VIK2aicxaGeOquU19t7Srq1y eiYIRcXUdsqfBf/7vRjq3OJZ/5bqgsoyVX5Fqqlo9PJLXmd5vHXXWzGbNrPvfpM3 nlfSqMkDDbNrXcOzjT8nhpzNw05rTrwyQN1606wGY0QILL0/nzxgODV9+1m9KMEH 9Fjc4+c9ghC8u1UkLBuF52wUcX4jJX4upkv1wZL5+m0f4B8PRxac6wLcoTbLj/HY 9d0reDfP0d6H15s9sM24+Z4FBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5zf4R9 tI2/JltmDn7+nyPjCAe2MB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVlnADSnb1+hvW67D2g+0SbM8Zo49KgMJ/l7K+Z8ktA8lwSOZnFTXpPelop3F HvHC9MmJsZ46Is+V4yFwok6HwZClx2x/UmGLWPxtmsWWUcBYKGbp3nygMeVULxM2 3bo+2q4IVZTLmeLu3mrjyUBxXi6qg/aMG2TWK/DMWDTdbaymrUkdF847IJKsVYQw Q2R6tmws+Rh9dmLffLkQUTWcVUI47rLb0bCwzwTHbxxPROqcxWrgcHLMZyHrfe4h LIEEjdqqqr9hOnxKlbhnEnVia+uQxdHvM5+2h2z7u9NN3hy5DhHf5a7QOJ8hGgoR BZ2+p7IKbixMlfU03s9ulAUAKA== -----END CERTIFICATE-----Generated at Sun Oct 11 15:33:50 2026 by rpki-client