$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft File: V2i_S72Luw3lwVz_jwqRSKCyLtU.mft (raw, json) Hash identifier: zN+ZvM6HWtkAchFtPHZWHP93xX2nfZ8hUT89uyFXfts= Subject key identifier: 9D:7B:DF:FE:EE:D6:D3:10:E7:B2:59:23:FB:25:61:66:FB:35:E2:27 Authority key identifier: 57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5 Certificate issuer: /CN=A91538E7/serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft Manifest number: A3 Signing time: Sat 10 Oct 2026 20:39:54 +0000 Manifest this update: Sat 10 Oct 2026 20:39:54 +0000 Manifest next update: Sat 17 Oct 2026 20:39:54 +0000 Files and hashes: 1: V2i_S72Luw3lwVz_jwqRSKCyLtU.crl (hash: 2hWPjRJztl7qhYCuWl1KXnjkmI43bWqGl0HBiQjwl/4=) 2: CEDA6062150911F1B271807B1E3D8C67.roa (hash: 5+Y9YzSMax1GuLcAhCIgRYvQ+xj/kl1boUJm7Dh+PIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5 Validity Not Before: Oct 10 20:39:54 2026 GMT Not After : Oct 17 20:39:54 2026 GMT Subject: CN=6acaa29a-d96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:49:9f:3e:71:9b:a5:23:8a:72:a1:a9:64:a3: 6d:83:51:19:84:25:d8:cd:12:4c:1c:22:41:bd:72: 18:e5:9e:77:3c:a3:97:f2:92:24:f2:a3:41:83:a2: fc:7a:5b:5e:d4:79:3d:68:bd:46:81:db:94:b8:7c: 5f:02:16:73:79:19:d3:7f:57:b9:bd:7e:c6:d1:96: 8b:e8:26:fb:f7:dc:3b:c1:5b:96:eb:1c:99:0b:94: 55:80:0c:d7:8b:12:cf:4f:5a:1b:2b:7b:35:76:26: 72:27:b0:49:14:69:74:a7:9b:83:26:33:fe:ab:e8: ba:7e:70:b3:49:d8:79:93:d3:75:cd:97:63:68:77: ae:08:21:47:d8:2b:90:2b:27:f6:08:25:30:e5:04: 88:9d:23:d9:ed:72:89:8a:81:a9:33:62:6c:a7:74: 88:dc:ad:08:f1:67:67:b3:f0:1e:ad:07:e1:76:3d: a9:ef:d9:32:0d:20:56:ce:d5:92:af:ff:f0:ef:26: f8:14:7b:d9:cf:d7:e7:d5:12:87:bf:9a:d0:3b:76: 04:86:49:c1:c4:2f:06:56:b1:f0:81:d8:84:f4:eb: 1c:b1:09:c5:6a:d4:bb:da:31:bb:43:45:e6:9b:5a: 8a:74:47:ce:27:ae:a7:24:7c:0c:f1:5d:13:39:a6: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7B:DF:FE:EE:D6:D3:10:E7:B2:59:23:FB:25:61:66:FB:35:E2:27 X509v3 Authority Key Identifier: keyid:57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1d:d6:70:8a:ed:ca:e8:28:70:24:5b:e0:d1:ba:a8:7b:1f: 0d:a7:2c:ed:34:15:3a:8b:7b:3e:70:04:07:19:9f:70:8d:de: 09:91:76:1f:2c:68:85:fc:07:4e:d1:03:f2:df:cd:35:ba:75: 4a:ad:c4:4f:4b:e0:0c:e9:3b:5c:f6:37:bd:59:1d:11:4a:4a: 6b:f0:14:25:7c:6d:08:3e:83:59:4f:41:9c:b0:64:61:b3:fb: 7e:ff:47:68:7f:54:bc:33:6d:6f:6f:a6:e1:d1:d0:2b:3d:cf: 9c:1c:b3:93:bc:eb:c1:c4:41:26:05:c6:4f:7f:39:ea:28:0c: b4:1e:ac:0c:9a:99:77:ac:5c:ad:4a:80:ba:3f:f0:ac:09:16: bb:e2:2f:58:2b:0d:ab:b2:c3:d9:90:34:f0:5b:cf:b3:57:a7: 5a:56:23:3e:dc:ef:00:3b:ed:bb:88:76:6b:e2:ad:d5:ac:4c: 92:5f:0d:23:ad:9f:30:58:be:42:ee:1e:8f:72:cf:64:5a:65: b8:62:e2:ad:16:81:f3:96:b7:db:74:73:04:1c:f6:b8:99:e4: 57:42:1b:61:8d:7b:ae:46:e9:32:f3:34:fe:8e:b7:d8:ea:08: 6b:05:1e:45:85:b1:2b:7c:c9:ca:89:20:ab:6c:0c:5e:05:f5: 7f:18:99:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDU3NjhCRjRCQkQ4QkJCMERFNUMxNUNGRjhGMEE5MTQ4 QTBCMjJFRDUwHhcNMjYxMDEwMjAzOTU0WhcNMjYxMDE3MjAzOTU0WjAYMRYwFAYD VQQDEw02YWNhYTI5YS1kOTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkEmfPnGbpSOKcqGpZKNtg1EZhCXYzRJMHCJBvXIY5Z53PKOX8pIk8qNBg6L8 elte1Hk9aL1GgduUuHxfAhZzeRnTf1e5vX7G0ZaL6Cb799w7wVuW6xyZC5RVgAzX ixLPT1obK3s1diZyJ7BJFGl0p5uDJjP+q+i6fnCzSdh5k9N1zZdjaHeuCCFH2CuQ Kyf2CCUw5QSInSPZ7XKJioGpM2Jsp3SI3K0I8Wdns/AerQfhdj2p79kyDSBWztWS r//w7yb4FHvZz9fn1RKHv5rQO3YEhknBxC8GVrHwgdiE9OscsQnFatS72jG7Q0Xm m1qKdEfOJ66nJHwM8V0TOabZewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ173/7u 1tMQ57JZI/slYWb7NeInMB8GA1UdIwQYMBaAFFdov0u9i7sN5cFc/48KkUigsi7V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy8wMTRDODhGQUUx MDYxMUYwOUNGNkNCMzQ5NkVFNTI4RS9WMmlfUzcyTHV3M2x3VnpfandxUlNLQ3lM dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyL1YyaV9TNzJMdXczbHdWel9qd3FSU0tDeUx0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy8wMTRDODhGQUUxMDYxMUYwOUNGNkNCMzQ5NkVFNTI4RS9WMmlfUzcyTHV3 M2x3VnpfandxUlNLQ3lMdFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABh3WcIrtyugocCRb4NG6qHsfDacs7TQVOot7PnAEBxmfcI3eCZF2HyxohfwH TtED8t/NNbp1Sq3ET0vgDOk7XPY3vVkdEUpKa/AUJXxtCD6DWU9BnLBkYbP7fv9H aH9UvDNtb2+m4dHQKz3PnByzk7zrwcRBJgXGT3856igMtB6sDJqZd6xcrUqAuj/w rAkWu+IvWCsNq7LD2ZA08FvPs1enWlYjPtzvADvtu4h2a+Kt1axMkl8NI62fMFi+ Qu4ej3LPZFpluGLirRaB85a323RzBBz2uJnkV0IbYY17rkbpMvM0/o632OoIawUe RYWxK3zJyokgq2wMXgX1fxiZNg== -----END CERTIFICATE-----Generated at Sun Oct 11 18:22:31 2026 by rpki-client