$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json) Hash identifier: MaEHRFxK8s0/UnVBt5pfJ5pbhtJyHvQFW4p1tnhAeRU= Subject key identifier: CE:F2:4A:55:20:BA:D6:D6:46:A4:E5:D1:85:F2:85:A5:8A:CA:45:AC Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft Manifest number: 8D Signing time: Fri 09 Oct 2026 08:14:53 +0000 Manifest this update: Fri 09 Oct 2026 08:14:52 +0000 Manifest next update: Fri 16 Oct 2026 08:14:52 +0000 Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: 5o09EA96cngUbbCv1Haj2x9XEkeIZ4oPo1NRjkZafcg=) 2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: Oct 9 08:14:52 2026 GMT Not After : Oct 16 08:14:52 2026 GMT Subject: CN=6ac8a27d-b885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ad:62:4b:ee:b4:ae:1a:ea:30:34:34:25:2e: ec:b4:da:67:fc:88:24:c9:4f:74:30:25:f6:07:88: 10:72:9c:26:fd:7f:d0:c5:56:fc:d5:3a:0e:b5:a5: f8:68:fc:a2:54:87:47:48:ca:73:75:de:5d:b2:7f: 81:1e:08:77:95:42:7a:1b:a9:4d:be:0e:24:ef:4d: c5:0a:6c:46:77:40:ed:cb:83:22:20:87:5c:9e:b7: f0:f5:db:da:00:20:79:a0:79:61:a4:bc:74:38:6c: c9:fc:78:ad:b1:61:4d:99:4d:14:dc:d7:1b:26:17: 2e:c2:e5:60:fc:fb:6c:44:cf:aa:09:b7:c0:a3:b0: 6b:88:ab:8d:50:74:e2:f5:99:32:c9:72:d8:29:b8: f1:44:00:c4:43:9d:bf:1e:b5:3f:b8:72:46:8b:88: 1e:fc:e3:77:4b:fc:90:50:ab:f3:68:c6:9c:e7:0f: 21:68:c3:a7:aa:8f:eb:51:f6:af:1e:dc:5f:c4:d7: f7:5e:da:94:33:6d:63:fc:2f:62:80:78:21:7c:c3: 7a:31:ae:7a:c7:ac:42:57:93:85:a2:da:63:13:35: 0c:5a:36:7c:1d:ca:f7:3d:4f:2e:91:26:93:3d:20: b1:d0:b7:55:17:c7:50:be:3f:1b:19:3a:70:ba:1b: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F2:4A:55:20:BA:D6:D6:46:A4:E5:D1:85:F2:85:A5:8A:CA:45:AC X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:02:e8:68:d2:e4:33:10:b0:10:f6:73:75:f4:fd:32:63:16: f3:b1:40:e7:1c:0f:2a:bc:ac:f6:bb:d4:bc:3f:85:02:75:cb: 88:00:6f:91:a5:a6:8e:74:73:33:cb:37:ba:9e:01:ed:57:35: 63:59:e8:cd:40:09:f2:ee:3c:46:77:c9:f8:6e:f8:36:2b:d7: 1f:d9:3c:6e:cc:4c:5c:8c:04:fc:ab:b4:cf:f6:34:45:8d:ee: 5a:ac:61:1d:79:f3:06:64:f5:bf:f7:a0:79:8f:c8:20:93:8f: 01:ea:40:86:cd:04:3e:d5:83:f1:08:93:a1:a3:5f:4c:2c:a2: a5:d4:e2:d0:3c:8b:63:b1:07:38:c1:58:20:39:b5:50:fa:ac: 72:a6:25:ab:1c:59:85:33:54:a3:ea:1d:84:13:2e:47:3c:d7: 42:c7:5f:ce:c9:89:9d:c4:78:09:02:71:20:22:93:0b:7a:0d: b3:12:4c:4e:e5:23:b2:08:c0:7f:30:65:d2:07:ed:21:e2:55: 56:a6:81:0e:91:44:35:e2:da:6f:7b:4d:57:65:a2:75:62:7c: 11:f0:8b:52:06:92:d3:14:23:a0:fd:6e:43:11:14:a4:83:69: d3:95:57:0d:51:86:6b:1b:43:a6:54:cd:ec:ff:0f:06:57:21: 44:7f:5d:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0NDExMTAvBgNVBAUTKDMxNkQ4OTY0N0YwRDBDQjA2QjM3MzIwNzhBNDIzMEFG MTE1NjUzMzQwHhcNMjYxMDA5MDgxNDUyWhcNMjYxMDE2MDgxNDUyWjAYMRYwFAYD VQQDEw02YWM4YTI3ZC1iODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA461iS+60rhrqMDQ0JS7stNpn/IgkyU90MCX2B4gQcpwm/X/QxVb81ToOtaX4 aPyiVIdHSMpzdd5dsn+BHgh3lUJ6G6lNvg4k703FCmxGd0Dty4MiIIdcnrfw9dva ACB5oHlhpLx0OGzJ/HitsWFNmU0U3NcbJhcuwuVg/PtsRM+qCbfAo7BriKuNUHTi 9ZkyyXLYKbjxRADEQ52/HrU/uHJGi4ge/ON3S/yQUKvzaMac5w8haMOnqo/rUfav HtxfxNf3XtqUM21j/C9igHghfMN6Ma56x6xCV5OFotpjEzUMWjZ8Hcr3PU8ukSaT PSCx0LdVF8dQvj8bGTpwuhvtNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7ySlUg utbWRqTl0YXyhaWKykWsMB8GA1UdIwQYMBaAFDFtiWR/DQywazcyB4pCMK8RVlM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ0MS9FMDgxQTYwQUVF OUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy9NVzJKWkg4TkRMQnJOeklIaWtJd3J4RldV elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ0MS9FMDgxQTYwQUVFOUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy9NVzJKWkg4TkRM QnJOeklIaWtJd3J4RldVelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfgLoaNLkMxCwEPZzdfT9MmMW87FA5xwPKrys9rvUvD+FAnXLiABvkaWmjnRz M8s3up4B7Vc1Y1nozUAJ8u48RnfJ+G74NivXH9k8bsxMXIwE/Ku0z/Y0RY3uWqxh HXnzBmT1v/egeY/IIJOPAepAhs0EPtWD8QiToaNfTCyipdTi0DyLY7EHOMFYIDm1 UPqscqYlqxxZhTNUo+odhBMuRzzXQsdfzsmJncR4CQJxICKTC3oNsxJMTuUjsgjA fzBl0gftIeJVVqaBDpFENeLab3tNV2WidWJ8EfCLUgaS0xQjoP1uQxEUpINp05VX DVGGaxtDplTN7P8PBlchRH9d7g== -----END CERTIFICATE-----Generated at Fri Oct 9 22:46:00 2026 by rpki-client