$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: bV0gOzzJ9BusYJSAjbx0TT4jwbyaLo4VwAoS/T7OaBc= Subject key identifier: 2C:04:61:B9:1F:37:F0:5E:DA:40:7A:EE:01:05:76:44:97:22:97:BD Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 01EA Signing time: Tue 13 Oct 2026 04:25:04 +0000 Manifest this update: Tue 13 Oct 2026 04:25:04 +0000 Manifest next update: Tue 20 Oct 2026 04:25:04 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: kAkltcO9/P3K11FwbX1AtmVwiiluaA0uwvOeJIADTUo=) 2: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=) 3: E8AC04B286F311F1B8F66003A7EE528E.roa (hash: gdGgY10s0aC8Do46TFQ8bG2KR+XSS6EIIPnk5BDXjnI=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 04:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Oct 13 04:25:04 2026 GMT Not After : Oct 20 04:25:04 2026 GMT Subject: CN=6acdb2a0-e637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:fd:36:06:df:60:b3:fb:87:b2:f6:cc:a3: 26:21:09:82:83:2d:21:4f:13:2a:7b:af:8d:e6:a8: cf:4c:be:b5:d6:c9:7d:e3:32:f1:a8:39:98:0b:fc: e7:2e:28:c8:b6:7d:60:19:63:82:39:c5:17:d5:a1: 9e:24:b7:6a:89:2d:69:34:66:0b:1a:bc:e0:0a:f3: a9:40:c9:b3:d0:be:2f:b6:d5:a6:d4:e6:44:d0:f2: 61:73:fd:ec:9f:0e:94:a9:bf:aa:f1:7c:a6:a4:a0: 9e:86:90:3b:27:29:95:9c:ee:38:b1:42:be:e3:4e: dd:29:99:4d:6d:93:8f:22:ab:62:4f:0a:ef:38:e4: 8c:ae:cb:18:e0:46:5b:a5:92:25:ec:9f:4f:ed:34: 6e:5f:13:df:d2:d0:a8:f5:db:6e:39:26:94:fe:48: 37:16:35:58:e7:6c:b4:49:57:cd:a1:5a:a4:a3:d1: b1:a7:6a:99:a3:67:e9:6a:fc:d8:20:fb:60:97:60: fc:ab:9c:14:38:3f:5b:e1:6f:88:34:62:fe:30:8f: d5:ac:2c:3d:62:2a:16:65:98:de:54:ba:d5:09:27: 3b:05:24:34:05:88:94:4b:ae:8c:ea:a9:1c:a6:52: a2:6d:45:81:23:8a:f5:41:ad:d9:54:59:af:c3:20: 7d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:04:61:B9:1F:37:F0:5E:DA:40:7A:EE:01:05:76:44:97:22:97:BD X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f3:fa:40:9f:88:21:97:2a:4c:db:da:b5:4b:d2:d2:e2:ab: c9:a5:84:e9:e4:34:32:0f:a4:51:fe:4f:60:0a:3f:da:7e:0e: e4:c8:01:d6:b0:5d:5d:a5:96:00:1f:fc:ba:c4:01:49:40:9e: 0b:24:3e:dc:e2:db:50:e7:63:aa:e0:c1:11:84:20:06:c2:8e: 03:ff:17:21:7f:24:5a:ac:6e:8a:59:48:c1:c6:f3:14:c1:7a: 3a:25:ab:bb:17:1a:e1:d5:73:3d:82:56:08:bc:4d:5c:4b:c9: a2:26:60:87:74:52:0c:f3:e6:3e:52:ce:51:13:5a:80:e4:2f: 85:81:a2:7d:e9:32:58:88:c0:1c:d1:1c:3e:47:1a:90:9e:3d: f5:9c:13:14:c6:c8:a4:60:de:21:2f:a1:f0:a9:38:a4:c7:d3: 63:14:38:08:43:0f:85:5b:c0:c6:c3:f6:8a:92:b9:e1:d8:c3: 7d:51:6e:25:65:5c:1b:39:df:65:c8:b8:40:52:b5:d7:96:27: a6:8e:dd:0e:88:f0:2f:8d:dd:b7:24:84:9b:49:58:4f:f6:1e: 82:c2:89:b3:10:1e:ff:66:57:b1:51:2f:0f:3a:d1:0f:a2:b0: 79:f2:ef:51:bf:4a:4e:bd:b7:c7:87:12:ab:7b:5e:ca:4e:be: 91:d7:81:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjYxMDEzMDQyNTA0WhcNMjYxMDIwMDQyNTA0WjAYMRYwFAYD VQQDEw02YWNkYjJhMC1lNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7P9NgbfYLP7h7L2zKMmIQmCgy0hTxMqe6+N5qjPTL611sl94zLxqDmYC/zn LijItn1gGWOCOcUX1aGeJLdqiS1pNGYLGrzgCvOpQMmz0L4vttWm1OZE0PJhc/3s nw6Uqb+q8XympKCehpA7JymVnO44sUK+407dKZlNbZOPIqtiTwrvOOSMrssY4EZb pZIl7J9P7TRuXxPf0tCo9dtuOSaU/kg3FjVY52y0SVfNoVqko9Gxp2qZo2fpavzY IPtgl2D8q5wUOD9b4W+INGL+MI/VrCw9YioWZZjeVLrVCSc7BSQ0BYiUS66M6qkc plKibUWBI4r1Qa3ZVFmvwyB96wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwEYbkf N/Be2kB67gEFdkSXIpe9MB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/P6QJ+IIZcqTNvatUvS0uKryaWE6eQ0Mg+kUf5PYAo/2n4O5MgB1rBdXaWW AB/8usQBSUCeCyQ+3OLbUOdjquDBEYQgBsKOA/8XIX8kWqxuillIwcbzFMF6OiWr uxca4dVzPYJWCLxNXEvJoiZgh3RSDPPmPlLOURNagOQvhYGifekyWIjAHNEcPkca kJ499ZwTFMbIpGDeIS+h8Kk4pMfTYxQ4CEMPhVvAxsP2ipK54djDfVFuJWVcGznf Zci4QFK115Ynpo7dDojwL43dtySEm0lYT/YegsKJsxAe/2ZXsVEvDzrRD6KwefLv Ub9KTr23x4cSq3teyk6+kdeB2w== -----END CERTIFICATE-----Generated at Tue Oct 13 18:44:00 2026 by rpki-client