$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: PvZQe1c0m4SQjGdVLD2kjQS0Q0Cm+fZPQDslUcVxZ4s= Subject key identifier: 98:DF:C4:5B:24:6C:C2:D9:B6:A8:3B:00:0D:56:0E:F5:CD:52:39:8A Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: FF Signing time: Tue 13 Oct 2026 06:53:26 +0000 Manifest this update: Tue 13 Oct 2026 06:53:26 +0000 Manifest next update: Tue 20 Oct 2026 06:53:26 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: vStcw25QwuN9I/L1cXvGsJYfEIaGsnM4Dd7vnQdykHQ=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 06:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Oct 13 06:53:26 2026 GMT Not After : Oct 20 06:53:26 2026 GMT Subject: CN=6acdd566-683d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b1:2c:ca:55:e5:95:1e:d3:b5:c8:29:16:94: 94:1d:13:8e:16:ea:58:97:9f:b0:f5:29:ab:8b:16: c5:76:78:89:a5:60:ee:46:c8:ea:7c:16:74:90:fa: dc:5d:30:3c:fc:54:da:fa:cb:9d:ce:dc:50:a6:6c: ee:d1:e5:b7:69:c6:6b:01:24:45:76:1a:35:6e:56: 7f:21:a6:6a:12:11:bc:ff:d1:0e:69:d9:47:ae:d8: c7:2f:ec:f9:13:a1:0d:50:d1:33:61:c0:7e:e0:6e: dc:82:54:8b:23:9b:59:c3:3e:5e:16:e5:c8:ab:08: da:0a:5a:08:f0:84:77:50:7e:f9:bd:45:ea:2f:1d: f4:c2:9d:07:ab:fc:d2:f8:22:30:cc:d4:70:9b:0c: 4b:a7:1c:3a:f5:6b:0a:8c:a6:c9:d8:28:33:73:a9: 0e:e9:fd:98:03:04:e4:fb:b8:c2:5c:76:9c:68:07: c8:a1:44:cd:8f:67:cd:2f:6f:1a:44:a5:75:58:6d: cb:95:59:ab:8d:69:de:37:ed:60:99:5d:2b:e3:e6: 21:ca:f6:94:2f:a6:da:30:fc:e9:4a:6d:f4:d7:18: f8:ec:09:02:f4:95:f0:c6:11:a0:f5:d5:76:5d:e2: a4:94:cf:57:54:de:13:83:8c:b8:66:8b:22:d0:b1: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DF:C4:5B:24:6C:C2:D9:B6:A8:3B:00:0D:56:0E:F5:CD:52:39:8A X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:66:41:ea:da:2d:c3:f6:7c:3e:01:bb:ba:19:d9:31:92:8c: 7b:ee:ac:ee:ab:9f:c7:38:8f:27:05:75:00:09:b9:36:0f:6f: e0:bb:18:ad:0f:67:ec:66:66:6c:8c:0b:f7:f8:37:e3:da:b4: 2f:11:3b:eb:a2:9a:9b:91:37:b0:da:ee:64:12:70:5b:c7:ab: 8c:e8:c4:f4:61:4d:e1:ec:c6:fb:bb:02:b9:81:65:16:b4:49: 5a:b1:0a:e2:c2:d1:a2:e2:07:10:12:04:b6:67:c9:1d:3e:f7: d5:1a:2c:ce:ff:b0:ef:f1:fa:10:35:60:26:f2:58:b8:45:5d: a9:e8:68:a7:cf:fa:3a:60:97:d5:e4:04:85:96:76:60:83:90: e5:69:ae:bc:88:9c:8e:c9:98:63:08:85:be:42:54:84:86:e4: 04:32:30:0c:f9:81:b4:54:ee:43:62:fc:3a:fc:30:34:71:79: cb:b5:30:66:04:d2:b1:4b:e5:e8:08:e5:38:26:58:54:30:11: 54:af:da:75:ff:17:bc:fb:82:79:17:3c:d4:4c:8f:3f:7d:3b: a1:98:29:f5:8e:02:5c:54:15:d0:6f:f3:ce:ed:a7:81:ab:45: b2:97:93:7f:42:75:26:98:ec:34:99:9f:a6:2e:4c:37:b5:46: b4:ed:5b:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCOUExMTAvBgNVBAUTKEMzRENEOTVBNzI0QUQ2RTNCOTg3NEM2RTRENkIzOUVC Q0UxNDJDRDQwHhcNMjYxMDEzMDY1MzI2WhcNMjYxMDIwMDY1MzI2WjAYMRYwFAYD VQQDEw02YWNkZDU2Ni02ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57EsylXllR7TtcgpFpSUHROOFupYl5+w9SmrixbFdniJpWDuRsjqfBZ0kPrc XTA8/FTa+sudztxQpmzu0eW3acZrASRFdho1blZ/IaZqEhG8/9EOadlHrtjHL+z5 E6ENUNEzYcB+4G7cglSLI5tZwz5eFuXIqwjaCloI8IR3UH75vUXqLx30wp0Hq/zS +CIwzNRwmwxLpxw69WsKjKbJ2Cgzc6kO6f2YAwTk+7jCXHacaAfIoUTNj2fNL28a RKV1WG3LlVmrjWneN+1gmV0r4+YhyvaUL6baMPzpSm301xj47AkC9JXwxhGg9dV2 XeKklM9XVN4Tg4y4Zosi0LG5IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjfxFsk bMLZtqg7AA1WDvXNUjmKMB8GA1UdIwQYMBaAFMPc2VpyStbjuYdMbk1rOevOFCzU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI5QS8yMjdBQzQ4NjQ1 QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1TzVoMHh1VFdzNTY4NFVM TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI5QS8yMjdBQzQ4NjQ1QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1 TzVoMHh1VFdzNTY4NFVMTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF2ZB6totw/Z8PgG7uhnZMZKMe+6s7qufxziPJwV1AAm5Ng9v4LsYrQ9n7GZm bIwL9/g349q0LxE766Kam5E3sNruZBJwW8erjOjE9GFN4ezG+7sCuYFlFrRJWrEK 4sLRouIHEBIEtmfJHT731Roszv+w7/H6EDVgJvJYuEVdqehop8/6OmCX1eQEhZZ2 YIOQ5WmuvIicjsmYYwiFvkJUhIbkBDIwDPmBtFTuQ2L8OvwwNHF5y7UwZgTSsUvl 6AjlOCZYVDARVK/adf8XvPuCeRc81EyPP307oZgp9Y4CXFQV0G/zzu2ngatFspeT f0J1JpjsNJmfpi5MN7VGtO1b9g== -----END CERTIFICATE-----Generated at Tue Oct 13 21:19:35 2026 by rpki-client