$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json) Hash identifier: 9+xt3fTntNXDOaYUCofnzSKuRB3Wc93hUpf4np1fZiA= Subject key identifier: 07:6B:9D:48:D8:69:33:82:C4:7B:D6:7C:0E:3A:5D:E6:AF:88:19:45 Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft Manifest number: DD Signing time: Tue 13 Oct 2026 07:16:19 +0000 Manifest this update: Tue 13 Oct 2026 07:16:18 +0000 Manifest next update: Tue 20 Oct 2026 07:16:18 +0000 Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: r6CI74FB52lfXOgLl1o9dDi82HWEYw8e2aSCrXbTqMo=) 2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: aA5xOOf0l5kwLxMjA9WGASG0n2PqG9HAsf+v12Q+bMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 07:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Validity Not Before: Oct 13 07:16:18 2026 GMT Not After : Oct 20 07:16:18 2026 GMT Subject: CN=6acddac3-4170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:11:37:e3:a2:8c:cf:00:ed:f8:79:91:1b: 1a:68:b1:72:e7:88:89:d5:15:3c:c0:a1:0c:d1:2e: d4:3f:66:55:9f:9c:21:1b:87:0e:28:56:84:61:12: e0:4d:83:74:be:49:36:35:d8:52:27:c1:31:b0:cf: cd:71:a9:49:fe:ec:1b:f5:02:23:83:52:fe:e8:b7: 4b:62:b3:75:f4:9e:05:07:0f:17:67:80:22:32:12: d7:49:d8:e5:02:9f:a9:a2:99:49:d8:e2:0e:f9:41: 9b:7f:58:78:df:bf:ab:b7:65:74:8c:62:7e:52:19: ac:e4:17:52:fd:f2:53:8b:82:03:22:1f:e1:2b:3c: d3:74:9e:89:55:78:08:a3:b7:ad:cf:b8:d9:3d:b0: 9a:11:20:72:bb:b9:fc:c3:b8:63:35:e4:99:bc:54: 1d:f8:49:ca:20:ac:f5:30:fd:30:06:b9:86:d0:36: d2:dc:40:3c:6f:84:28:7c:7f:d0:fe:00:8f:ae:ab: 03:6e:ef:95:d6:49:dd:f9:49:fe:7e:45:07:64:c2: 09:eb:9d:03:92:01:4c:74:71:37:77:5f:aa:b8:ac: cc:5a:52:3d:2a:22:c6:a8:0c:69:9e:24:2e:e0:59: 6d:73:d7:96:7e:21:c8:2e:ad:45:34:f7:a1:20:ce: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6B:9D:48:D8:69:33:82:C4:7B:D6:7C:0E:3A:5D:E6:AF:88:19:45 X509v3 Authority Key Identifier: keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6c:f0:a9:17:9f:90:fe:05:ed:3a:39:4f:04:51:74:64:52: 18:b7:c6:04:a9:72:b2:c8:54:52:01:2c:f2:95:7d:0f:39:e1: 28:ab:07:d2:ca:2f:ae:49:54:38:dc:e6:2d:5a:96:84:a1:1a: 68:fb:9d:59:7f:a7:31:5e:5c:bd:9f:f1:87:fb:e5:4a:39:3f: a7:b5:53:63:68:dd:07:30:03:56:8b:58:cc:22:10:49:db:98: 8f:3a:1e:ee:f4:13:d9:c7:76:73:a0:e7:7c:a5:bd:07:2d:e9: 48:9b:f5:ea:6e:35:2f:b3:b0:b4:34:2b:01:35:5b:36:75:d3: 51:eb:cf:1a:d1:10:5f:00:df:b8:70:b1:9c:ed:6d:25:91:4d: 52:b1:15:ac:c5:37:f1:f2:b7:24:10:5b:51:56:38:b7:2e:83: 1b:b7:e4:f7:41:e0:56:ce:7b:82:95:a7:53:b2:50:f3:da:64: a7:d2:40:8c:65:bc:09:54:4d:cd:87:93:87:3d:d3:cf:4b:e2: e9:5b:88:63:02:d7:b9:29:4a:63:f9:d4:02:5f:8c:89:de:56: 7f:f6:06:8b:56:f2:af:92:49:f5:95:bd:5c:81:3d:a2:7e:2e: b0:3b:14:71:18:dd:80:0d:a5:11:75:5c:df:ca:35:38:bf:8b: bf:ab:6b:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwMUUxMTAvBgNVBAUTKDBCQkJBNDEyNEJBNEM3QzhBN0Y5RDA5N0VFRUFBOTgz MkYwOTc5NjcwHhcNMjYxMDEzMDcxNjE4WhcNMjYxMDIwMDcxNjE4WjAYMRYwFAYD VQQDEw02YWNkZGFjMy00MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuYRN+OijM8A7fh5kRsaaLFy54iJ1RU8wKEM0S7UP2ZVn5whG4cOKFaEYRLg TYN0vkk2NdhSJ8ExsM/NcalJ/uwb9QIjg1L+6LdLYrN19J4FBw8XZ4AiMhLXSdjl Ap+poplJ2OIO+UGbf1h437+rt2V0jGJ+Uhms5BdS/fJTi4IDIh/hKzzTdJ6JVXgI o7etz7jZPbCaESByu7n8w7hjNeSZvFQd+EnKIKz1MP0wBrmG0DbS3EA8b4QofH/Q /gCPrqsDbu+V1knd+Un+fkUHZMIJ650DkgFMdHE3d1+quKzMWlI9KiLGqAxpniQu 4Fltc9eWfiHILq1FNPehIM4ZIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdrnUjY aTOCxHvWfA46XeaviBlFMB8GA1UdIwQYMBaAFAu7pBJLpMfIp/nQl+7qqYMvCXln MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTAxRS9FNkU4ODBEODc4 REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4aW4tZENYN3VxcGd5OEpl V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTAxRS9FNkU4ODBEODc4REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4 aW4tZENYN3VxcGd5OEplV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKGzwqRefkP4F7To5TwRRdGRSGLfGBKlysshUUgEs8pV9DznhKKsH0sovrklU ONzmLVqWhKEaaPudWX+nMV5cvZ/xh/vlSjk/p7VTY2jdBzADVotYzCIQSduYjzoe 7vQT2cd2c6DnfKW9By3pSJv16m41L7OwtDQrATVbNnXTUevPGtEQXwDfuHCxnO1t JZFNUrEVrMU38fK3JBBbUVY4ty6DG7fk90HgVs57gpWnU7JQ89pkp9JAjGW8CVRN zYeThz3Tz0vi6VuIYwLXuSlKY/nUAl+Mid5Wf/YGi1byr5JJ9ZW9XIE9on4usDsU cRjdgA2lEXVc38o1OL+Lv6tr9Q== -----END CERTIFICATE-----Generated at Tue Oct 13 19:10:41 2026 by rpki-client