$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: wRZWmOUslpF+LHZKR3bcrhEJUCCjXrMaZ+yPX5+omkw= Subject key identifier: EA:5A:CF:D0:FA:3F:86:2B:84:C2:E5:6B:62:DD:0B:D6:E9:08:A3:C6 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 029B Signing time: Tue 03 Nov 2026 02:33:27 +0000 Manifest this update: Tue 03 Nov 2026 02:33:27 +0000 Manifest next update: Tue 10 Nov 2026 02:33:27 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: hdibV6ZfkCNV6Lmt+s0hjFg0f2aXr2l9PsEXtQY0Lwk=) 2: C5AFD098167311F0916F5435C4F9AE02.roa (hash: oXr+vmkmATSoU0utBEAVuOzrUcdZ9gNuCzhDxhz21iY=) 3: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: V6SrxQGUuxMhaHjz0uz3/Z2ziHbiF2Bwsg8Gikl9lKg=) 4: bWGJXuuqJMcQM-lFvXq-3Lg6wr8.asa (hash: RfLYtZj4X5BF1ZyAY4I1p9QAM2RVSMuSfbxQ5HpibCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 02:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Nov 3 02:33:27 2026 GMT Not After : Nov 10 02:33:27 2026 GMT Subject: CN=6ae947f7-3b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:fc:13:63:da:33:9d:f1:07:26:01:68:5a: c7:6b:14:bb:e3:e0:e7:cb:e0:17:24:70:e6:a6:6b: 84:2c:b8:dc:72:15:d2:54:ce:96:c1:2a:ec:42:e6: 62:7c:fc:93:e4:54:14:31:5c:7d:7e:0b:9f:09:49: 45:01:ec:71:39:97:8e:15:c5:a7:5e:78:ec:84:b4: 2a:11:bb:10:60:c4:01:f0:32:a3:57:81:2e:a0:94: 35:84:79:be:b3:12:d4:57:7b:7c:61:ec:bf:6a:70: 61:b1:3e:c9:54:b5:79:3f:a2:dd:94:e3:f8:b6:3b: 4c:e7:df:ab:ec:60:4b:f0:80:b5:e0:d1:2a:ce:15: f3:36:c0:c5:68:e8:f7:15:d3:1e:43:af:b3:8a:45: eb:bb:c9:d5:6e:73:23:3f:c2:b6:fa:20:4d:9d:d6: 19:1a:73:1a:ac:8a:64:f2:fc:24:9d:c7:a3:ec:56: be:c2:ef:ff:d1:bc:bd:66:2a:f9:b9:d6:42:4e:93: fc:82:15:33:ce:ad:3d:06:bd:17:67:fc:24:a9:3a: 59:56:38:5b:40:53:3e:7a:5b:14:d8:9e:ec:11:1a: bf:b8:29:d9:ca:ce:95:11:b5:89:13:a5:cc:6a:5a: cb:ae:49:80:43:d7:54:d6:13:2e:3f:b4:d6:98:3d: 7d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5A:CF:D0:FA:3F:86:2B:84:C2:E5:6B:62:DD:0B:D6:E9:08:A3:C6 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d5:86:bc:b5:23:0b:8f:5b:ea:e1:3c:db:91:3f:53:75:2a: 8f:31:ee:43:38:eb:d7:2c:92:e2:b8:cb:cc:a7:48:91:09:dc: ee:e4:2a:4a:30:42:0d:81:9c:ee:be:d0:15:c8:b3:68:70:5e: d3:87:df:c1:2a:0e:0e:a0:a5:d0:44:fa:96:51:7e:67:02:8d: 74:a0:a4:3c:9c:d8:09:b3:7d:76:52:95:bf:09:43:03:bc:9f: 30:1e:dd:a6:39:a3:e3:55:29:d5:4b:a0:19:aa:04:d7:3a:e6: 02:b8:03:14:36:77:a7:f8:4c:26:31:a6:ae:17:a3:82:17:78: 6f:93:8d:c2:d8:02:b0:0e:39:d7:79:fa:d6:73:4c:8e:4c:b0: 10:f8:8a:e9:37:89:b5:27:95:80:a4:3c:c0:4f:45:15:0a:9a: d0:1a:cb:c5:78:f8:ea:b4:93:20:b8:4e:5a:46:47:6f:97:e3: d9:6a:67:17:81:3a:f4:f5:bb:e6:1d:0d:f1:9f:57:ee:06:9d: d5:fd:94:c3:41:a6:1b:9a:56:b4:6d:e0:e2:e5:d4:c8:ec:15: c3:bc:c8:5d:14:88:85:c4:5a:e5:8c:ab:2f:ae:19:18:fd:4f: 84:f0:b9:94:17:09:e8:50:33:c5:57:9f:69:f9:b7:95:f3:a4: b8:7c:d9:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjYxMTAzMDIzMzI3WhcNMjYxMTEwMDIzMzI3WjAYMRYwFAYD VQQDEw02YWU5NDdmNy0zYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ND8E2PaM53xByYBaFrHaxS74+Dny+AXJHDmpmuELLjcchXSVM6WwSrsQuZi fPyT5FQUMVx9fgufCUlFAexxOZeOFcWnXnjshLQqEbsQYMQB8DKjV4EuoJQ1hHm+ sxLUV3t8Yey/anBhsT7JVLV5P6LdlOP4tjtM59+r7GBL8IC14NEqzhXzNsDFaOj3 FdMeQ6+zikXru8nVbnMjP8K2+iBNndYZGnMarIpk8vwkncej7Fa+wu//0by9Zir5 udZCTpP8ghUzzq09Br0XZ/wkqTpZVjhbQFM+elsU2J7sERq/uCnZys6VEbWJE6XM alrLrkmAQ9dU1hMuP7TWmD197wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpaz9D6 P4YrhMLla2LdC9bpCKPGMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnNWGvLUjC49b6uE825E/U3UqjzHuQzjr1yyS4rjLzKdIkQnc7uQqSjBCDYGc 7r7QFcizaHBe04ffwSoODqCl0ET6llF+ZwKNdKCkPJzYCbN9dlKVvwlDA7yfMB7d pjmj41Up1UugGaoE1zrmArgDFDZ3p/hMJjGmrhejghd4b5ONwtgCsA4513n61nNM jkywEPiK6TeJtSeVgKQ8wE9FFQqa0BrLxXj46rSTILhOWkZHb5fj2WpnF4E69PW7 5h0N8Z9X7gad1f2Uw0GmG5pWtG3g4uXUyOwVw7zIXRSIhcRa5YyrL64ZGP1PhPC5 lBcJ6FAzxVefafm3lfOkuHzZWw== -----END CERTIFICATE-----Generated at Thu Nov 5 02:52:09 2026 by rpki-client