$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft File: -rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft (raw, json) Hash identifier: QUtXAm0BEq/ezKAcl/PH7kkb0tfYeR7pV12LoXbP+AM= Subject key identifier: 7F:60:D9:53:5A:78:B1:7E:3C:00:A0:9D:1F:50:5E:51:48:97:FC:31 Authority key identifier: FA:B1:1C:D0:E7:E6:58:C0:8E:99:7C:F1:95:4D:CA:9C:10:C8:D7:24 Certificate issuer: /CN=A91FAD99/serialNumber=FAB11CD0E7E658C08E997CF1954DCA9C10C8D724 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft Manifest number: 17 Signing time: Sun 11 Oct 2026 09:41:19 +0000 Manifest this update: Sun 11 Oct 2026 09:41:19 +0000 Manifest next update: Sun 18 Oct 2026 09:41:19 +0000 Files and hashes: 1: -rEc0OfmWMCOmXzxlU3KnBDI1yQ.crl (hash: GJTquyloWqCWDdzooTGi1Ndnmvuw7KAlro69cMcsGOs=) 2: 2E58EDD0A4F011F19025BAB06B11F970.roa (hash: 2ocGI8kGqmVxj84NUkACI9xBvegH5llIIlxG7IvKFX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.crl rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD99, serialNumber=FAB11CD0E7E658C08E997CF1954DCA9C10C8D724 Validity Not Before: Oct 11 09:41:19 2026 GMT Not After : Oct 18 09:41:19 2026 GMT Subject: CN=6acb59bf-0081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:db:23:e5:67:d7:64:b2:36:3a:ac:26:66: 3d:75:44:f3:23:08:c5:15:9c:66:dc:04:e9:fe:48: b6:f3:8a:0a:fe:22:23:2a:3d:1a:09:4d:5d:74:97: 73:89:6f:74:d6:44:24:09:02:eb:74:37:b6:c6:e8: 85:18:36:9d:8e:d4:a5:29:cb:c3:a2:87:d9:dd:ac: eb:a6:94:09:43:8b:8a:f1:dc:c7:2b:37:a1:b5:a9: de:1f:66:81:f6:63:e8:90:e7:68:8a:7f:3a:f9:2b: 91:70:5c:dd:6d:2b:82:95:65:a5:1b:98:a8:ee:1d: e3:d6:80:52:d6:81:41:1a:50:e5:23:a8:5e:f1:ea: 4f:69:9f:bf:7f:a4:b2:e3:82:d7:ca:0c:b1:d4:de: e2:f3:a9:aa:3a:6e:61:4c:ae:e7:13:5a:14:c4:4d: 74:1f:c1:25:ae:42:ff:9b:03:34:6c:92:da:1b:fa: 97:47:ee:c8:d8:ec:7e:c6:cf:c0:a9:04:e1:03:34: db:91:32:ee:f9:5f:f4:00:7c:dd:51:d5:7c:ba:d7: 1d:b8:77:b9:49:26:0c:26:81:0e:7c:d0:5e:4b:33: 31:e0:cb:cd:28:23:67:88:07:bf:27:fb:34:41:e4: 4e:15:35:c3:18:0f:52:a2:34:6c:88:2d:f9:f8:d6: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:60:D9:53:5A:78:B1:7E:3C:00:A0:9D:1F:50:5E:51:48:97:FC:31 X509v3 Authority Key Identifier: keyid:FA:B1:1C:D0:E7:E6:58:C0:8E:99:7C:F1:95:4D:CA:9C:10:C8:D7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e7:28:9a:b6:9e:21:10:6f:70:a2:13:a3:f5:dc:22:c0:53: cf:28:b5:66:43:4e:96:a1:01:ed:42:92:2d:14:48:a5:de:6b: f2:e1:6e:53:6c:5f:f5:6d:66:6e:a9:ed:85:2b:ab:19:3d:ed: 01:ef:ae:f6:77:f2:ea:9a:5b:e7:a3:0a:b0:4f:d2:0e:e2:04: 07:77:40:45:6e:6f:7d:0f:d2:81:20:36:28:4d:d5:ff:c9:dd: b5:09:d8:9d:dc:0d:86:fd:8c:48:52:36:a7:2f:8d:3c:0d:bf: f6:0d:1a:34:8e:0a:fa:ca:8a:b6:09:4c:b3:57:7e:35:d3:84: 65:ee:0c:84:ae:5e:76:c1:c4:cb:80:06:44:aa:45:6a:65:3d: 8b:8d:22:56:d6:33:05:24:54:ae:60:ea:34:92:b1:04:ba:99: a6:f0:0f:36:cd:0d:a0:0e:b6:37:62:b7:10:07:77:51:8f:8f: b5:d3:fc:a0:09:98:d2:e0:04:d9:50:0e:40:91:b7:02:10:2e: f5:97:a4:5c:1b:f5:cf:4d:64:c6:2a:28:b0:b7:b9:bd:7c:fc: 92:2c:af:ae:72:89:99:8a:f6:bc:7b:a7:05:e6:9d:8e:08:12: 48:10:74:d2:42:6e:68:52:44:de:0d:de:84:e3:b1:b8:97:43: 6a:1a:ef:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUQ5OTExMC8GA1UEBRMoRkFCMTFDRDBFN0U2NThDMDhFOTk3Q0YxOTU0RENBOUMx MEM4RDcyNDAeFw0yNjEwMTEwOTQxMTlaFw0yNjEwMTgwOTQxMTlaMBgxFjAUBgNV BAMTDTZhY2I1OWJmLTAwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGfdsj5WfXZLI2OqwmZj11RPMjCMUVnGbcBOn+SLbzigr+IiMqPRoJTV10l3OJ b3TWRCQJAut0N7bG6IUYNp2O1KUpy8Oih9ndrOumlAlDi4rx3McrN6G1qd4fZoH2 Y+iQ52iKfzr5K5FwXN1tK4KVZaUbmKjuHePWgFLWgUEaUOUjqF7x6k9pn79/pLLj gtfKDLHU3uLzqao6bmFMrucTWhTETXQfwSWuQv+bAzRsktob+pdH7sjY7H7Gz8Cp BOEDNNuRMu75X/QAfN1R1Xy61x24d7lJJgwmgQ580F5LMzHgy80oI2eIB78n+zRB 5E4VNcMYD1KiNGyILfn41uZFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf2DZU1p4 sX48AKCdH1BeUUiX/DEwHwYDVR0jBBgwFoAU+rEc0OfmWMCOmXzxlU3KnBDI1yQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBRDk5LzU4QUJEREM2QTRF QzExRjE5M0U0MUIwRDZCMTFGOTcwLy1yRWMwT2ZtV01DT21YenhsVTNLbkJESTF5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXJFYzBPZm1XTUNPbVh6eGxVM0tuQkRJMXlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB RDk5LzU4QUJEREM2QTRFQzExRjE5M0U0MUIwRDZCMTFGOTcwLy1yRWMwT2ZtV01D T21YenhsVTNLbkJESTF5US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA15yiatp4hEG9wohOj9dwiwFPPKLVmQ06WoQHtQpItFEil3mvy4W5TbF/1bWZu qe2FK6sZPe0B7672d/LqmlvnowqwT9IO4gQHd0BFbm99D9KBIDYoTdX/yd21Cdid 3A2G/YxIUjanL408Db/2DRo0jgr6yoq2CUyzV34104Rl7gyErl52wcTLgAZEqkVq ZT2LjSJW1jMFJFSuYOo0krEEupmm8A82zQ2gDrY3YrcQB3dRj4+10/ygCZjS4ATZ UA5AkbcCEC71l6RcG/XPTWTGKiiwt7m9fPySLK+ucomZiva8e6cF5p2OCBJIEHTS Qm5oUkTeDd6E47G4l0NqGu+5 -----END CERTIFICATE-----Generated at Mon Oct 12 20:42:47 2026 by rpki-client