$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: s1Rav+xZE22I6yM2fMwTRGjb295YAwOlbdSBnvKTazI= Subject key identifier: 11:DB:8E:71:27:F3:19:3D:6E:F4:13:C6:A5:14:7D:45:F9:42:57:2D Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2E71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2E4A Signing time: Mon 12 Oct 2026 15:30:47 +0000 Manifest this update: Mon 12 Oct 2026 15:30:46 +0000 Manifest next update: Mon 19 Oct 2026 15:30:46 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: ppOJ9eZI80t6ZhbkVxbeMMlfZ289A6/LAKXp9/b8Nwg=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: ZGLBdSKyApanjt3DB4LGqUMAAL9hh/eBxEwyqsKMNwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11889 (0x2e71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: Oct 12 15:30:46 2026 GMT Not After : Oct 19 15:30:46 2026 GMT Subject: CN=6accfd27-06eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:b3:0b:cb:e5:90:ca:b4:d7:69:91:20:73: 1d:94:92:6f:96:15:3d:23:d6:4d:42:ab:d3:2d:c1: 36:3d:f8:e8:57:79:b9:12:7d:6e:47:7f:61:fd:61: 3f:8e:eb:12:38:04:d8:ec:96:2e:de:96:7c:44:80: c8:ec:97:37:3d:7d:ad:09:bb:71:ab:4b:ab:c9:0e: 61:b4:b3:37:a1:06:49:8a:0a:17:ad:6c:0c:c6:e0: cb:3b:b3:e7:7a:19:85:54:56:a2:aa:cb:8e:3e:32: 86:36:42:35:b6:55:79:1f:f7:88:59:93:99:d6:7c: 90:56:df:1b:bf:4d:d4:f8:b2:00:b2:01:82:f1:27: fd:24:bb:36:72:e9:25:6a:5b:26:9f:f3:45:24:e7: 2c:2b:35:6c:14:13:85:28:3c:03:0e:ca:33:c3:4d: 93:f6:4f:18:4e:5b:07:b7:84:9a:e1:f8:bf:85:50: 15:f3:ab:ca:14:96:5f:27:0a:50:85:3f:6e:6c:54: 9a:d3:4c:59:9e:f2:f1:de:31:f2:82:bc:f7:6e:1c: ff:66:a1:e4:1a:7f:17:01:0d:48:7e:07:68:03:83: 39:fa:a4:a7:61:36:03:a1:c3:c0:75:3a:ce:06:c0: 46:32:eb:57:72:50:47:06:b1:e8:b5:c3:3c:86:71: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:8E:71:27:F3:19:3D:6E:F4:13:C6:A5:14:7D:45:F9:42:57:2D X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:20:fb:e0:99:22:59:e7:6c:1a:34:e0:71:99:05:dc:6a:7e: 93:91:2e:eb:46:ba:89:75:0d:18:17:88:b8:d9:91:4b:df:aa: 6f:1f:1c:62:c1:ce:b0:f8:73:9d:8e:85:08:26:e9:c4:12:ec: 2d:51:2e:c7:9d:04:f9:68:9a:15:41:f3:db:56:c7:3f:1c:2c: 07:c5:16:2f:9b:ff:3f:10:7b:6f:5e:c1:7d:12:cb:f4:ce:85: c2:b5:a0:23:cd:fc:03:f8:d2:0a:c5:4e:04:11:30:57:bd:6a: 5a:0c:b1:6a:6f:52:81:de:6b:22:63:39:ff:83:af:03:2d:3b: 9f:cb:61:f7:49:55:65:17:69:f0:b2:2d:74:4d:ba:82:2b:e6: 64:3e:9c:f4:8e:84:e2:b4:8c:1f:a5:e2:89:88:04:09:b4:83: 59:8b:63:09:4d:59:65:d9:09:fa:f4:d9:01:d2:9f:4e:64:83: 8c:4e:22:e4:ec:11:86:4e:48:fa:9c:5a:d6:6a:4a:99:ed:4c: d0:2d:35:c1:06:88:90:9c:0e:08:a2:7c:45:57:94:90:f5:a4: 86:d7:f7:62:ab:d4:0f:5d:29:50:76:e2:cd:3b:79:96:e3:33: 9a:ed:5f:55:0e:d4:45:e1:1d:b2:6f:0c:c2:a5:7b:38:9c:0c: 64:71:bb:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjYxMDEyMTUzMDQ2WhcNMjYxMDE5MTUzMDQ2WjAYMRYwFAYD VQQDEw02YWNjZmQyNy0wNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVazC8vlkMq012mRIHMdlJJvlhU9I9ZNQqvTLcE2PfjoV3m5En1uR39h/WE/ jusSOATY7JYu3pZ8RIDI7Jc3PX2tCbtxq0uryQ5htLM3oQZJigoXrWwMxuDLO7Pn ehmFVFaiqsuOPjKGNkI1tlV5H/eIWZOZ1nyQVt8bv03U+LIAsgGC8Sf9JLs2cukl alsmn/NFJOcsKzVsFBOFKDwDDsozw02T9k8YTlsHt4Sa4fi/hVAV86vKFJZfJwpQ hT9ubFSa00xZnvLx3jHygrz3bhz/ZqHkGn8XAQ1IfgdoA4M5+qSnYTYDocPAdTrO BsBGMutXclBHBrHotcM8hnE1QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHbjnEn 8xk9bvQTxqUUfUX5QlctMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAICD74JkiWedsGjTgcZkF3Gp+k5Eu60a6iXUNGBeIuNmRS9+qbx8cYsHOsPhz nY6FCCbpxBLsLVEux50E+WiaFUHz21bHPxwsB8UWL5v/PxB7b17BfRLL9M6FwrWg I838A/jSCsVOBBEwV71qWgyxam9Sgd5rImM5/4OvAy07n8th90lVZRdp8LItdE26 givmZD6c9I6E4rSMH6XiiYgECbSDWYtjCU1ZZdkJ+vTZAdKfTmSDjE4i5OwRhk5I +pxa1mpKme1M0C01wQaIkJwOCKJ8RVeUkPWkhtf3YqvUD10pUHbizTt5luMzmu1f VQ7UReEdsm8MwqV7OJwMZHG7nQ== -----END CERTIFICATE-----Generated at Tue Oct 13 16:24:41 2026 by rpki-client