$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft File: afotkTN0HoMAQ-tA5A0ivzU4684.mft (raw, json) Hash identifier: aNJmR3ejJCs3qFt/d/A+TeEmcNsbcUiFWPyPBMLuGAA= Subject key identifier: 82:78:EC:DB:6E:EB:11:82:04:38:AC:AF:3A:8C:BE:0A:BF:B6:8F:CD Authority key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE Certificate issuer: /CN=A91CCB81/serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft Manifest number: 85 Signing time: Sun 27 Sep 2026 08:14:34 +0000 Manifest this update: Sun 27 Sep 2026 08:14:34 +0000 Manifest next update: Sun 04 Oct 2026 08:14:34 +0000 Files and hashes: 1: afotkTN0HoMAQ-tA5A0ivzU4684.crl (hash: DM+sHrXqXwhc1coh7/mRKfdAwSPGM76HAUUUmeSYQKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 08:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Validity Not Before: Sep 27 08:14:34 2026 GMT Not After : Oct 4 08:14:34 2026 GMT Subject: CN=6ab8d06a-afe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:3b:3c:61:87:28:5e:d4:e1:5c:9d:82:58: 79:44:5f:4a:32:b8:d1:22:56:f4:06:7a:b0:43:f7: 62:c6:99:be:58:1d:10:54:de:e7:d9:0e:92:e5:88: 77:a9:08:37:84:cb:d8:67:e2:b6:2a:30:81:ef:54: 41:8f:a2:e4:fd:8a:c9:4b:2a:d4:a0:5d:35:05:29: 46:af:b9:da:9b:e8:89:fc:5a:1c:e0:5d:84:56:df: b8:97:6a:a8:40:bc:c7:74:6d:42:8e:a8:2e:6c:60: 0f:4c:f7:f1:21:ba:ba:55:db:a0:57:c4:f1:67:ba: e2:3e:2d:98:cb:5e:7f:cb:73:85:08:a0:72:a6:55: 9a:05:88:49:53:c0:c7:32:7c:49:34:3a:78:ed:a8: 1a:63:67:26:27:19:8c:24:d4:bb:84:ba:50:91:f5: 27:50:69:00:4a:38:ea:cc:c6:af:75:f3:cf:52:f0: d0:42:bf:c5:76:c3:2f:f4:be:0d:ab:b5:e7:16:a8: c8:06:7f:22:63:64:f0:93:27:8f:7b:1f:e1:e2:8e: 69:28:00:68:dc:37:59:11:c1:32:02:5d:94:6a:1f: 71:bd:ae:f5:06:0a:76:a8:dc:b5:ac:77:70:df:b7: cb:ae:3e:84:cd:12:7f:dd:f4:c8:59:6f:d9:e4:ec: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:78:EC:DB:6E:EB:11:82:04:38:AC:AF:3A:8C:BE:0A:BF:B6:8F:CD X509v3 Authority Key Identifier: keyid:69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:33:00:0e:83:6e:a6:0f:1b:e6:6e:0f:28:11:85:37:5f:93: 9c:2a:e5:17:ec:fc:f8:64:eb:68:68:e2:64:64:7e:e1:bd:e3: d0:06:ea:75:38:f8:4a:75:8a:71:61:ba:b9:94:17:d1:f3:7e: 8e:70:2b:69:59:e1:fe:d6:28:af:3a:4e:b1:27:31:cf:d2:ba: e5:fe:6b:73:cb:ec:f3:89:80:ca:5a:94:10:b0:8b:fe:bc:4e: b4:9b:ee:69:a9:8d:4f:0a:af:8e:35:63:89:22:d1:cf:aa:e6: 7d:b6:d8:ac:a3:24:c1:71:2c:74:64:cc:54:9a:d5:5b:48:c2: 3b:0b:4c:3c:c9:bc:9a:7c:13:71:59:c4:d4:58:5e:f2:8e:5f: 45:1a:19:9d:44:8a:e2:9c:4c:76:79:ba:e4:d4:ca:34:f2:9a: 5b:c8:9d:b1:19:20:7c:ef:e8:8a:0c:0a:ef:ff:29:9e:36:08: 88:8c:ca:13:34:b6:11:f2:e0:76:86:60:26:ce:24:b2:72:c8: 6c:9f:fd:b9:fb:5d:6b:9c:1d:54:cb:2c:de:2d:99:de:aa:df: 29:c0:9d:2b:98:8d:15:15:e5:84:9b:89:65:3f:40:08:01:6e: 1d:8b:2b:ca:2d:37:46:f5:c5:37:8e:b1:b5:d1:98:b8:45:4e: fd:b5:3e:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NCODExMTAvBgNVBAUTKDY5RkEyRDkxMzM3NDFFODMwMDQzRUI0MEU0MEQyMkJG MzUzOEVCQ0UwHhcNMjYwOTI3MDgxNDM0WhcNMjYxMDA0MDgxNDM0WjAYMRYwFAYD VQQDEw02YWI4ZDA2YS1hZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4c7PGGHKF7U4Vydglh5RF9KMrjRIlb0BnqwQ/dixpm+WB0QVN7n2Q6S5Yh3 qQg3hMvYZ+K2KjCB71RBj6Lk/YrJSyrUoF01BSlGr7nam+iJ/Foc4F2EVt+4l2qo QLzHdG1CjqgubGAPTPfxIbq6VdugV8TxZ7riPi2Yy15/y3OFCKByplWaBYhJU8DH MnxJNDp47agaY2cmJxmMJNS7hLpQkfUnUGkASjjqzMavdfPPUvDQQr/FdsMv9L4N q7XnFqjIBn8iY2TwkyePex/h4o5pKABo3DdZEcEyAl2Uah9xva71Bgp2qNy1rHdw 37fLrj6EzRJ/3fTIWW/Z5OxhRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJ47Ntu 6xGCBDisrzqMvgq/to/NMB8GA1UdIwQYMBaAFGn6LZEzdB6DAEPrQOQNIr81OOvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0I4MS8yODYxRTQ5NkY4 NkExMUYwQjRCQkFGM0M0QTZGNTZCQy9hZm90a1ROMEhvTUFRLXRBNUEwaXZ6VTQ2 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fmb3RrVE4wSG9NQVEtdEE1QTBpdnpVNDY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0I4MS8yODYxRTQ5NkY4NkExMUYwQjRCQkFGM0M0QTZGNTZCQy9hZm90a1ROMEhv TUFRLXRBNUEwaXZ6VTQ2ODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHzMADoNupg8b5m4PKBGFN1+TnCrlF+z8+GTraGjiZGR+4b3j0AbqdTj4SnWK cWG6uZQX0fN+jnAraVnh/tYorzpOsScxz9K65f5rc8vs84mAylqUELCL/rxOtJvu aamNTwqvjjVjiSLRz6rmfbbYrKMkwXEsdGTMVJrVW0jCOwtMPMm8mnwTcVnE1Fhe 8o5fRRoZnUSK4pxMdnm65NTKNPKaW8idsRkgfO/oigwK7/8pnjYIiIzKEzS2EfLg doZgJs4ksnLIbJ/9uftda5wdVMss3i2Z3qrfKcCdK5iNFRXlhJuJZT9ACAFuHYsr yi03RvXFN46xtdGYuEVO/bU+Gw== -----END CERTIFICATE-----Generated at Mon Sep 28 04:36:03 2026 by rpki-client