$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: NP5vW9jkVb9INyyB7GdzbsGGnj3vx2ZjTo/aLHVukZM= Subject key identifier: AF:D8:65:19:FA:90:14:D7:60:78:06:6E:5F:7E:CC:74:D0:7A:8F:16 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 016F Signing time: Sat 03 Oct 2026 05:34:24 +0000 Manifest this update: Sat 03 Oct 2026 05:34:24 +0000 Manifest next update: Sat 10 Oct 2026 05:34:24 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: LfuaRCt8GL2bLVJ7rtQ0PD+21ol369Vcy4v92jyLO4I=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: GdbfGtYS8h77XRd1qyihe8+9mJGRbTVbLdhWwXMqNGc=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: SUhQMhc4f0iIonT89sMRWBYG1AnMoqeXmV34+Ua8hnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Oct 3 05:34:24 2026 GMT Not After : Oct 10 05:34:24 2026 GMT Subject: CN=6ac093e0-c4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:88:d4:a1:4b:c7:12:c7:97:3f:a4:02:b2: 4d:ac:54:67:af:f9:bf:62:15:ab:82:96:5d:20:ab: 0c:7c:11:dc:f5:ba:3e:56:e8:1c:14:9b:1d:03:56: 8e:77:37:96:ee:08:cd:a3:5e:81:76:f9:87:e5:78: bf:61:39:55:ec:1a:3b:a1:68:b8:2a:45:e5:dd:41: 56:32:73:db:4e:c0:22:39:62:15:b8:dd:19:af:76: f5:2f:4c:11:d4:34:ec:21:6d:69:f2:de:72:8b:fd: 6d:5a:e8:19:83:e9:04:ff:4c:c7:51:d4:af:fc:37: 53:fc:4d:8a:31:79:3c:ac:c0:cf:42:c2:90:c4:34: 64:0a:52:7e:fb:5d:34:e8:28:96:f2:d3:81:67:13: 44:50:32:8e:e6:14:67:de:8c:92:09:14:74:8e:24: 12:6f:87:4f:04:7c:c7:6a:51:ae:34:bd:a3:55:08: ff:63:cb:ca:93:a1:80:e0:0c:fc:69:7a:be:39:e4: bf:b7:6e:9b:90:b9:47:ba:98:b7:b3:e7:6e:81:44: e8:c5:9c:56:d0:5d:83:ff:71:51:16:36:bc:55:09: b0:68:16:9a:f7:c2:b8:7f:58:e5:51:77:70:c8:4c: 6c:33:9c:7e:21:73:05:84:f9:11:d6:56:99:b5:fa: 1a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:65:19:FA:90:14:D7:60:78:06:6E:5F:7E:CC:74:D0:7A:8F:16 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:b5:63:46:46:18:c5:2c:75:66:c1:15:9e:b5:66:40:1a:7e: 49:d9:bd:45:4a:07:7c:71:40:4c:a5:ab:e5:9f:e0:3a:b7:a8: 2d:3f:9d:29:0a:35:ca:f0:36:90:fa:51:cb:21:67:55:ee:6b: 8d:7e:3e:cf:b5:4a:e3:4e:0d:55:7c:55:2b:11:66:8e:be:0f: 37:14:8f:02:b1:0b:2a:4f:8f:fb:36:ad:ca:be:f7:56:88:b1: f8:6b:65:42:de:a9:04:b3:0c:3e:20:a5:8d:25:73:27:7c:b2: ad:99:46:a1:d6:4a:94:34:b4:97:e3:c4:70:87:0a:c0:0f:1a: 46:a9:da:d4:72:ba:f6:12:7d:2f:b7:e6:1a:df:d9:90:fa:3c: d2:e2:52:06:03:a4:73:96:d9:3b:df:91:af:65:3d:ec:99:d4: 2f:11:72:87:3c:b9:c4:eb:96:5e:4f:6c:08:3f:e7:89:87:eb: 3a:34:ce:4f:af:9d:9e:95:8a:a3:66:70:50:31:3f:d3:62:6b: 77:dc:18:2f:5e:43:c0:64:ec:f6:d2:83:b9:c7:cb:1f:2d:79: 28:cb:26:44:6c:40:4e:66:3d:9e:4d:f7:55:06:68:bf:59:e2: 5f:ca:25:56:bd:81:ac:d3:e8:53:51:14:5e:57:96:d0:6e:0d: ae:a6:89:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjYxMDAzMDUzNDI0WhcNMjYxMDEwMDUzNDI0WjAYMRYwFAYD VQQDEw02YWMwOTNlMC1jNGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQ2I1KFLxxLHlz+kArJNrFRnr/m/YhWrgpZdIKsMfBHc9bo+VugcFJsdA1aO dzeW7gjNo16BdvmH5Xi/YTlV7Bo7oWi4KkXl3UFWMnPbTsAiOWIVuN0Zr3b1L0wR 1DTsIW1p8t5yi/1tWugZg+kE/0zHUdSv/DdT/E2KMXk8rMDPQsKQxDRkClJ++100 6CiW8tOBZxNEUDKO5hRn3oySCRR0jiQSb4dPBHzHalGuNL2jVQj/Y8vKk6GA4Az8 aXq+OeS/t26bkLlHupi3s+dugUToxZxW0F2D/3FRFja8VQmwaBaa98K4f1jlUXdw yExsM5x+IXMFhPkR1laZtfoazwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/YZRn6 kBTXYHgGbl9+zHTQeo8WMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx7VjRkYYxSx1ZsEVnrVmQBp+Sdm9RUoHfHFATKWr5Z/gOreoLT+dKQo1yvA2 kPpRyyFnVe5rjX4+z7VK404NVXxVKxFmjr4PNxSPArELKk+P+zatyr73Voix+Gtl Qt6pBLMMPiCljSVzJ3yyrZlGodZKlDS0l+PEcIcKwA8aRqna1HK69hJ9L7fmGt/Z kPo80uJSBgOkc5bZO9+Rr2U97JnULxFyhzy5xOuWXk9sCD/niYfrOjTOT6+dnpWK o2ZwUDE/02Jrd9wYL15DwGTs9tKDucfLHy15KMsmRGxATmY9nk33VQZov1niX8ol Vr2BrNPoU1EUXleW0G4NrqaJpA== -----END CERTIFICATE-----Generated at Sat Oct 3 19:36:14 2026 by rpki-client