$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft File: tDpaYNRoBqaf_vfGdiGexLqLo20.mft (raw, json) Hash identifier: OI4C6DGmj30ydyR8P5KK+Vju+x+BAIakzdcwlUjtqzI= Subject key identifier: F7:D7:8D:1A:74:40:DF:DE:FE:AB:43:0E:12:B7:9E:F2:93:17:B9:67 Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D Certificate issuer: /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Certificate serial: 2C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft Manifest number: 2C71 Signing time: Sat 10 Oct 2026 15:30:36 +0000 Manifest this update: Sat 10 Oct 2026 15:30:36 +0000 Manifest next update: Sat 17 Oct 2026 15:30:36 +0000 Files and hashes: 1: tDpaYNRoBqaf_vfGdiGexLqLo20.crl (hash: sYaRmdkVoCb4bEpcztBzYp8G816+vopJOVhPahwOyrw=) 2: 43487B18BF1811E9A2C00E63C4F9AE02.roa (hash: HkRF10o7aoI0Wv8xHPaGQ1XjAXcX/MS0Fs88d0uQVd0=) 3: 2815E7D4BF4211E9A93A3957C4F9AE02.roa (hash: uc6e0++QGsUcaAl/ez080qgy7o7+IjlFDBybPJucEhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11419 (0x2c9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Validity Not Before: Oct 10 15:30:36 2026 GMT Not After : Oct 17 15:30:36 2026 GMT Subject: CN=6aca5a1c-772c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0b:c6:86:82:31:f5:fd:d8:b6:86:2e:e5:97: 10:6e:89:6f:b1:38:67:00:50:59:11:b3:cf:ba:61: 08:bb:18:f3:5e:59:3b:7c:d8:98:7b:6e:9d:64:55: 98:02:5c:7c:ad:23:3f:6a:bd:b9:0f:eb:a2:43:c3: 03:d0:c5:b5:b3:57:f9:41:77:1b:fe:c9:f0:69:6a: 26:f5:27:b1:6c:97:08:76:58:5e:bd:1c:4a:46:1e: 6c:b0:85:86:c5:9d:da:4d:c7:94:40:50:db:db:01: 8b:ae:e2:e7:5c:ce:b3:a1:2a:91:14:ec:34:cf:7b: 6d:e9:a5:c9:6c:aa:7a:e8:75:ac:f8:38:64:66:5d: 95:46:fb:81:3e:53:55:3a:8d:96:9b:b6:cb:77:7d: 64:3b:bf:99:07:55:95:bb:30:9b:75:f7:9b:87:14: 7f:b5:42:ff:ef:12:20:13:f8:ba:32:f1:ae:3f:99: d7:e8:c8:c3:e5:91:df:d9:af:15:10:00:4c:06:24: 1e:75:56:0a:d2:3c:c4:ca:3e:af:10:b5:ed:75:7c: e7:3a:2e:e2:84:7b:29:47:05:aa:1f:99:f6:51:e9: 65:02:9f:b1:38:b3:48:a7:85:d4:22:13:1d:95:7e: 6a:4a:b0:bb:93:fa:66:42:2b:a4:82:be:91:66:ce: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D7:8D:1A:74:40:DF:DE:FE:AB:43:0E:12:B7:9E:F2:93:17:B9:67 X509v3 Authority Key Identifier: keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ec:17:96:7d:40:e3:0d:a2:86:9f:29:0a:86:20:88:d9:83: 63:5e:9c:0f:67:eb:68:91:22:b4:b8:a5:e1:b8:71:ca:21:9f: c6:f6:9c:4a:0a:7e:34:9f:bf:88:e5:96:0e:9f:c1:c2:20:fc: 92:c2:70:9d:cc:b6:1e:8c:9a:c3:a4:8c:f5:88:c9:b1:2d:7a: 6e:39:4d:e8:84:39:f0:0d:21:99:00:00:35:bc:ee:a1:56:7c: 4f:d3:47:8b:53:af:16:86:7e:00:f1:d8:52:6e:52:72:49:c9: 35:4c:7f:54:06:a2:82:ef:45:0c:46:2e:71:08:08:8e:cc:d7: 70:0d:92:08:cb:f4:79:a7:b8:8b:12:7c:02:cb:a4:d6:70:f1: 82:8b:52:00:aa:54:21:ad:c8:dc:7d:7b:13:09:b6:7e:33:8e: 42:ba:2d:3d:ac:61:fe:47:65:66:2d:cb:bd:17:6c:69:82:60: b1:24:14:3f:78:ba:39:8a:fb:82:e7:ee:1d:b0:ec:42:66:fd: 04:a6:2b:76:6d:40:3d:cf:fc:9d:1a:e8:33:26:62:bc:76:17: d6:72:e8:3f:94:79:5a:e7:41:a9:c6:5f:d9:26:80:83:39:b7: 6c:f3:12:28:cd:96:48:a0:87:55:22:a4:49:ea:fe:a2:e8:9d: 29:26:8d:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKEI0M0E1QTYwRDQ2ODA2QTY5RkZFRjdDNjc2MjE5RUM0 QkE4QkEzNkQwHhcNMjYxMDEwMTUzMDM2WhcNMjYxMDE3MTUzMDM2WjAYMRYwFAYD VQQDEw02YWNhNWExYy03NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiAvGhoIx9f3YtoYu5ZcQbolvsThnAFBZEbPPumEIuxjzXlk7fNiYe26dZFWY Alx8rSM/ar25D+uiQ8MD0MW1s1f5QXcb/snwaWom9SexbJcIdlhevRxKRh5ssIWG xZ3aTceUQFDb2wGLruLnXM6zoSqRFOw0z3tt6aXJbKp66HWs+DhkZl2VRvuBPlNV Oo2Wm7bLd31kO7+ZB1WVuzCbdfebhxR/tUL/7xIgE/i6MvGuP5nX6MjD5ZHf2a8V EABMBiQedVYK0jzEyj6vELXtdXznOi7ihHspRwWqH5n2UellAp+xOLNIp4XUIhMd lX5qSrC7k/pmQiukgr6RZs7DCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfXjRp0 QN/e/qtDDhK3nvKTF7lnMB8GA1UdIwQYMBaAFLQ6WmDUaAamn/73xnYhnsS6i6Nt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS84RDNFNTRFQUVE NTkxMUUzQjA5MDExOTI1OTExRUEzMi90RHBhWU5Sb0JxYWZfdmZHZGlHZXhMcUxv MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3REcGFZTlJvQnFhZl92ZkdkaUdleExxTG8yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS84RDNFNTRFQUVENTkxMUUzQjA5MDExOTI1OTExRUEzMi90RHBhWU5Sb0Jx YWZfdmZHZGlHZXhMcUxvMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+wXln1A4w2ihp8pCoYgiNmDY16cD2fraJEitLil4bhxyiGfxvacSgp+NJ+/ iOWWDp/BwiD8ksJwncy2Hoyaw6SM9YjJsS16bjlN6IQ58A0hmQAANbzuoVZ8T9NH i1OvFoZ+APHYUm5ScknJNUx/VAaigu9FDEYucQgIjszXcA2SCMv0eae4ixJ8Asuk 1nDxgotSAKpUIa3I3H17Ewm2fjOOQrotPaxh/kdlZi3LvRdsaYJgsSQUP3i6OYr7 gufuHbDsQmb9BKYrdm1APc/8nRroMyZivHYX1nLoP5R5WudBqcZf2SaAgzm3bPMS KM2WSKCHVSKkSer+ouidKSaNQg== -----END CERTIFICATE-----Generated at Sun Oct 11 09:19:53 2026 by rpki-client