$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft File: pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft (raw, json) Hash identifier: 2KMfVJ6EgtqxylO25ECSZBFWkDBGKactTlpwWDNHJYQ= Subject key identifier: A2:17:D6:98:F2:C7:AA:7B:D0:3C:37:ED:50:2E:E3:D9:E4:6D:7A:5B Authority key identifier: A4:64:23:F7:F9:C3:D1:72:EA:1B:D4:E5:48:70:E0:D1:77:C8:3F:9A Certificate issuer: /CN=A91FE50D/serialNumber=A46423F7F9C3D172EA1BD4E54870E0D177C83F9A Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft Manifest number: 1D Signing time: Fri 09 Oct 2026 09:44:12 +0000 Manifest this update: Fri 09 Oct 2026 09:44:11 +0000 Manifest next update: Fri 16 Oct 2026 09:44:11 +0000 Files and hashes: 1: pGQj9_nD0XLqG9TlSHDg0XfIP5o.crl (hash: b69Fz8P/ATdPBRzc+cKwfKVOcSOsSPi+6frenSopTfs=) 2: 1B5E44FC9AA311F18B8864883E11F970.roa (hash: NxNm6oazSdpRh6axfmesg9/w4othsFM0hiBYDwhgf2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.crl rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE50D, serialNumber=A46423F7F9C3D172EA1BD4E54870E0D177C83F9A Validity Not Before: Oct 9 09:44:11 2026 GMT Not After : Oct 16 09:44:11 2026 GMT Subject: CN=6ac8b76c-1234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:54:f5:6e:24:54:98:91:a3:d0:f6:13:96: f9:ae:f6:ff:30:35:99:ff:87:15:cf:ee:c7:a0:7d: ff:d9:75:0f:e8:fc:b0:60:98:e3:ac:09:e3:a7:bb: dc:26:06:f8:ca:d5:b3:ee:85:c9:00:b7:d0:f4:07: 43:3d:57:59:53:14:b8:84:7a:e2:72:e2:8a:5c:27: 58:6b:5a:2a:c6:58:c5:24:d6:17:59:cf:55:d3:aa: 8f:28:9e:5c:91:bf:28:db:64:cb:66:47:7d:6f:5e: bc:48:8f:af:e1:86:e8:6b:34:5c:4d:f2:4b:0c:a0: 0f:0b:99:37:f5:f6:06:7e:bf:fa:0e:df:b2:24:4a: b1:65:4a:c0:d6:dc:ec:82:3b:a9:71:48:9c:f2:af: a2:26:75:d6:1e:e1:35:70:43:90:38:6c:58:eb:c3: e3:bf:3c:56:70:36:61:d0:e0:5c:70:76:63:60:8a: c7:cd:fa:5a:31:dd:6b:a8:71:ab:90:b6:31:3d:ca: fb:b8:07:53:cb:13:c3:92:cd:7a:bd:bb:49:24:15: 94:ef:c2:75:b3:b2:0e:60:35:1d:1d:86:51:46:18: 3e:4c:04:92:ed:54:39:e0:50:fd:96:ec:93:6e:0c: 8a:80:ca:c2:66:29:12:34:53:a4:87:76:93:4e:f3: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:17:D6:98:F2:C7:AA:7B:D0:3C:37:ED:50:2E:E3:D9:E4:6D:7A:5B X509v3 Authority Key Identifier: keyid:A4:64:23:F7:F9:C3:D1:72:EA:1B:D4:E5:48:70:E0:D1:77:C8:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:78:86:2a:ee:4c:5a:7a:87:20:7a:2b:ba:33:0e:8d:fa:18: 9f:67:8d:f1:1f:05:f7:53:62:3c:91:35:76:f8:f4:38:50:cb: 81:fd:94:e5:94:9f:b3:97:07:cb:14:7f:cd:99:ac:52:20:a3: e1:20:f0:b0:3f:a5:db:1e:7f:26:03:65:73:29:65:82:49:4d: 5e:38:c0:e7:d0:ad:d2:42:74:05:a5:a0:73:5d:26:aa:1e:09: 61:a4:90:12:b4:25:7f:8a:0c:dc:c5:bf:58:1e:0c:b0:f8:f5: ad:97:d5:fb:91:70:d1:ee:e7:e2:df:2f:f1:b8:a0:9d:5e:e7: d7:4c:8b:f2:e5:db:35:53:74:68:53:d2:99:bf:e0:48:06:6b: 21:ed:cf:3c:b5:dd:c3:dc:2d:63:13:5f:04:26:9b:8c:5d:0f: 7a:48:7b:fb:01:59:11:9f:38:52:62:a8:7a:7f:a0:11:b3:5a: 68:05:ea:c4:8b:26:c7:9a:c5:53:f4:a2:9a:25:62:98:9b:13: 80:7f:33:99:76:e7:e8:29:2a:9f:18:f2:5f:54:c5:bc:e7:66: 63:e2:67:44:97:3e:8b:52:9c:d8:5e:41:fd:aa:45:0e:4a:b3: 1f:54:b9:d4:53:15:12:ae:52:bc:63:b2:60:9a:9f:5c:76:0e: 43:c6:d5:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTUwRDExMC8GA1UEBRMoQTQ2NDIzRjdGOUMzRDE3MkVBMUJENEU1NDg3MEUwRDE3 N0M4M0Y5QTAeFw0yNjEwMDkwOTQ0MTFaFw0yNjEwMTYwOTQ0MTFaMBgxFjAUBgNV BAMTDTZhYzhiNzZjLTEyMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Y1T1biRUmJGj0PYTlvmu9v8wNZn/hxXP7segff/ZdQ/o/LBgmOOsCeOnu9wm BvjK1bPuhckAt9D0B0M9V1lTFLiEeuJy4opcJ1hrWirGWMUk1hdZz1XTqo8onlyR vyjbZMtmR31vXrxIj6/hhuhrNFxN8ksMoA8LmTf19gZ+v/oO37IkSrFlSsDW3OyC O6lxSJzyr6ImddYe4TVwQ5A4bFjrw+O/PFZwNmHQ4FxwdmNgisfN+lox3WuocauQ tjE9yvu4B1PLE8OSzXq9u0kkFZTvwnWzsg5gNR0dhlFGGD5MBJLtVDngUP2W7JNu DIqAysJmKRI0U6SHdpNO817DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUohfWmPLH qnvQPDftUC7j2eRtelswHwYDVR0jBBgwFoAUpGQj9/nD0XLqG9TlSHDg0XfIP5ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNTBELzM3RTUwOEMyOUE5 RTExRjFBNkE3QzZFOTNDMTFGOTcwL3BHUWo5X25EMFhMcUc5VGxTSERnMFhmSVA1 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEdRajlfbkQwWExxRzlUbFNIRGcwWGZJUDVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NTBELzM3RTUwOEMyOUE5RTExRjFBNkE3QzZFOTNDMTFGOTcwL3BHUWo5X25EMFhM cUc5VGxTSERnMFhmSVA1by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxeIYq7kxaeocgeiu6Mw6N+hifZ43xHwX3U2I8kTV2+PQ4UMuB/ZTllJ+zlwfL FH/NmaxSIKPhIPCwP6XbHn8mA2VzKWWCSU1eOMDn0K3SQnQFpaBzXSaqHglhpJAS tCV/igzcxb9YHgyw+PWtl9X7kXDR7ufi3y/xuKCdXufXTIvy5ds1U3RoU9KZv+BI Bmsh7c88td3D3C1jE18EJpuMXQ96SHv7AVkRnzhSYqh6f6ARs1poBerEiybHmsVT 9KKaJWKYmxOAfzOZdufoKSqfGPJfVMW852Zj4mdElz6LUpzYXkH9qkUOSrMfVLnU UxUSrlK8Y7Jgmp9cdg5DxtXb -----END CERTIFICATE-----Generated at Sat Oct 10 00:15:07 2026 by rpki-client