$ rpki-client -vvvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: qTkUZjzmRmcjA1/DQINEHFathdHQqlElBPzMyixAu8I= Subject key identifier: 70:D9:8F:0B:82:F1:D7:97:50:D3:E4:88:D0:90:B9:3B:38:4B:86:43 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 08DB Signing time: Mon 12 Oct 2026 20:33:22 +0000 Manifest this update: Mon 12 Oct 2026 20:33:21 +0000 Manifest next update: Mon 19 Oct 2026 20:33:21 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: QXelKPBiT7PcBOgRcogSVQfz+VVMWRN+wqf8Dh+1AXA=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: h8w/oRabDFzHFUZZQz0f2z/FRWd7Jq2xtW0buGwOh1U=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: nPuGU4dIjV5NcDfw4+iA+iIUzRsqHity9f8+08+b7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 20:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Oct 12 20:33:21 2026 GMT Not After : Oct 19 20:33:21 2026 GMT Subject: CN=6acd4412-37ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:a7:c8:fe:68:b7:f0:e2:f9:ed:6b:1e:46: df:ff:53:f8:fd:6c:48:dc:69:a1:8b:2c:6a:fb:ad: 29:1a:eb:7b:3e:20:9c:0c:f0:b6:74:5d:ca:48:17: 6d:43:30:7b:0d:69:a2:3a:d2:d5:ea:cd:bc:1d:3c: 45:f4:eb:50:07:bf:9d:7c:7e:2f:d9:88:1a:14:ff: ec:ae:c8:67:7f:af:17:05:8a:9e:fc:89:75:15:78: 68:bb:41:f6:27:15:63:34:91:09:bc:07:8d:f9:d8: 1f:7d:8b:fd:9e:90:90:b0:60:d7:ec:a9:c7:67:06: 17:70:0a:0d:d8:6a:56:11:2a:15:c6:8d:44:8e:04: df:4f:21:bf:57:19:2e:37:37:ea:04:24:e4:97:e4: 98:6d:87:c9:aa:d0:6f:bd:ca:09:9d:36:01:b1:b1: 83:8e:ef:c1:7e:fd:8f:38:a8:a8:cb:c3:90:31:57: ec:e7:6a:c9:1e:a3:2a:cc:e4:53:6a:09:95:ab:32: 2f:7f:8f:4d:6d:57:93:12:e5:16:97:cd:33:81:93: 21:23:ac:ef:8a:50:1d:94:14:97:e5:23:a0:f3:49: 7a:db:7d:10:36:b6:91:14:2e:05:7c:de:e4:73:ab: 42:a1:aa:fa:53:98:16:00:50:3e:71:8d:1c:ff:a2: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D9:8F:0B:82:F1:D7:97:50:D3:E4:88:D0:90:B9:3B:38:4B:86:43 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:72:3b:b4:00:ba:43:8c:8b:4c:16:94:49:b8:6f:51:8c:10: 25:e3:e9:3c:d2:9b:4b:7d:54:e2:3d:0b:8e:c3:8b:83:39:2b: f2:23:70:53:e3:2f:33:29:ab:29:76:64:c7:32:ae:73:22:94: 0d:ad:bb:70:f6:2e:cd:81:02:50:fe:4c:e8:e2:4b:63:7b:b9: 84:e2:9d:c5:dc:b6:bd:6e:26:12:2a:44:38:fa:de:de:b4:be: fd:31:4e:e0:7f:35:9a:32:94:cb:82:88:7b:6e:88:a7:62:35: b1:f6:75:a0:f8:f4:f8:b3:ae:34:32:86:f8:1d:2a:6a:9a:80: d6:27:bf:94:f4:42:08:72:35:74:35:60:50:ad:72:26:89:78: d9:c6:c9:2c:ae:05:9b:77:11:90:4a:1a:e8:fd:8d:37:56:5e: ce:a9:c1:3b:03:07:83:ff:63:72:5a:e2:3f:07:8e:52:d4:ad: 3b:a5:06:dc:97:b5:bc:64:86:6e:a9:9c:b4:4d:d6:7e:ba:df: ae:91:fc:62:c7:7f:15:ce:c9:b2:4c:01:3e:cd:bc:cf:42:8c: b3:ac:10:8d:64:9a:f6:17:5d:95:79:51:da:0f:02:30:d6:6f: 57:fc:32:95:47:be:5c:92:d6:29:36:92:a5:28:64:1b:70:b1: b1:cd:c6:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjYxMDEyMjAzMzIxWhcNMjYxMDE5MjAzMzIxWjAYMRYwFAYD VQQDEw02YWNkNDQxMi0zN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnV6nyP5ot/Di+e1rHkbf/1P4/WxI3Gmhiyxq+60pGut7PiCcDPC2dF3KSBdt QzB7DWmiOtLV6s28HTxF9OtQB7+dfH4v2YgaFP/srshnf68XBYqe/Il1FXhou0H2 JxVjNJEJvAeN+dgffYv9npCQsGDX7KnHZwYXcAoN2GpWESoVxo1EjgTfTyG/Vxku NzfqBCTkl+SYbYfJqtBvvcoJnTYBsbGDju/Bfv2POKioy8OQMVfs52rJHqMqzORT agmVqzIvf49NbVeTEuUWl80zgZMhI6zvilAdlBSX5SOg80l6230QNraRFC4FfN7k c6tCoar6U5gWAFA+cY0c/6LkdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDZjwuC 8deXUNPkiNCQuTs4S4ZDMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPHI7tAC6Q4yLTBaUSbhvUYwQJePpPNKbS31U4j0LjsOLgzkr8iNwU+MvMymr KXZkxzKucyKUDa27cPYuzYECUP5M6OJLY3u5hOKdxdy2vW4mEipEOPre3rS+/TFO 4H81mjKUy4KIe26Ip2I1sfZ1oPj0+LOuNDKG+B0qapqA1ie/lPRCCHI1dDVgUK1y Jol42cbJLK4Fm3cRkEoa6P2NN1ZezqnBOwMHg/9jclriPweOUtStO6UG3Je1vGSG bqmctE3WfrrfrpH8Ysd/Fc7JskwBPs28z0KMs6wQjWSa9hddlXlR2g8CMNZvV/wy lUe+XJLWKTaSpShkG3Cxsc3GKA== -----END CERTIFICATE-----Generated at Tue Oct 13 23:37:59 2026 by rpki-client