$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft File: afotkTN0HoMAQ-tA5A0ivzU4684.mft (raw, json) Hash identifier: +iXsBO75+VA1+4HJVUGM7lvRZN7GprqA8lwS1X4+FZE= Subject key identifier: F6:0F:0B:13:CA:0E:57:95:9B:FF:63:EC:94:3F:03:68:86:FA:75:48 Authority key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE Certificate issuer: /CN=A91CCB81/serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft Manifest number: 87 Signing time: Thu 01 Oct 2026 09:04:13 +0000 Manifest this update: Thu 01 Oct 2026 09:04:12 +0000 Manifest next update: Thu 08 Oct 2026 09:04:12 +0000 Files and hashes: 1: afotkTN0HoMAQ-tA5A0ivzU4684.crl (hash: PS0h2Berqtr0IpporTDR+wtIpoYGI0PaaarGS+/JDgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 09:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Validity Not Before: Oct 1 09:04:12 2026 GMT Not After : Oct 8 09:04:12 2026 GMT Subject: CN=6abe220d-6a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:cf:3c:da:7a:d0:36:81:58:e6:b1:37:c3: 82:04:b4:7f:65:87:be:61:7e:ee:ed:1e:5f:3a:44: db:71:94:2e:f9:e1:dd:dd:19:23:be:e4:b8:17:27: 6b:89:25:67:7f:e0:48:5d:b8:e4:f7:31:f6:bb:6c: f0:11:9b:5b:ee:44:bf:54:f9:83:78:69:00:0c:8a: f4:e9:5d:bf:e2:66:96:99:85:41:b0:38:ef:a0:0a: 55:0c:58:3b:9e:90:80:3b:96:00:ae:2f:b5:8f:b3: fa:24:1c:9f:ec:6e:e9:66:ad:5b:48:42:ea:73:65: 0f:9d:19:b7:10:9d:80:0d:1f:20:31:17:31:7f:ba: ec:7f:00:42:95:cb:e1:61:1c:14:82:69:81:d2:8e: eb:45:dd:88:ec:5c:b3:19:ae:a4:48:5d:7a:cd:c7: 6d:52:df:6d:2e:36:a1:4f:2b:d0:10:c3:54:3c:ba: 78:4e:dc:25:03:da:ec:ba:74:cf:56:21:06:7a:55: 8e:aa:78:03:88:a4:a7:b3:a9:66:55:38:66:23:bf: 2f:01:76:34:56:0c:79:5b:03:02:3a:d0:db:1c:5f: 3e:e7:27:c9:10:cf:6d:f4:88:6c:63:b7:5f:01:2b: 4e:f6:80:f3:aa:9c:0e:62:22:f1:78:05:13:13:2d: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0F:0B:13:CA:0E:57:95:9B:FF:63:EC:94:3F:03:68:86:FA:75:48 X509v3 Authority Key Identifier: keyid:69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:82:d8:0a:0f:dd:36:25:16:e3:dd:3d:00:da:ed:70:79:41: 2d:f8:46:26:99:1d:6d:f8:b7:31:0c:49:9c:dc:1f:4b:7d:da: b6:0d:f6:f5:d3:e4:89:23:77:75:06:fe:da:7d:19:9e:c9:b7: fc:97:e9:19:87:b7:25:68:20:0f:fc:1c:f3:a8:9c:3c:26:59: 39:e6:81:90:e5:f9:84:c8:66:7b:cd:49:ba:f3:f1:d9:1c:73: 19:03:3e:44:9f:b9:33:d9:a2:27:94:c4:b8:43:21:b9:2b:16: ee:90:3a:d6:53:1c:95:86:88:0b:ed:8e:f9:77:97:1f:87:b7: 7e:fc:20:5b:24:dc:5c:fd:fd:71:3c:12:15:1b:0a:cb:31:17: 55:1a:e8:ae:9b:e3:ce:17:b3:e1:8f:08:03:36:76:a0:f9:6f: 64:0d:d7:45:b6:98:3a:e8:9f:7f:81:be:36:8c:c0:73:72:8d: ae:d6:4b:4c:db:a3:5e:50:5f:6b:48:63:21:8a:4e:14:ef:83: 12:ee:3d:62:11:b7:a7:20:87:ca:66:ea:0b:31:06:2e:92:1e: 73:8d:e0:b6:61:c2:50:df:42:ea:c7:d3:cb:75:17:f3:7a:af: 90:1f:76:a7:89:0a:dd:ae:61:c5:d7:69:e6:8f:91:aa:1f:87: 0d:51:6e:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NCODExMTAvBgNVBAUTKDY5RkEyRDkxMzM3NDFFODMwMDQzRUI0MEU0MEQyMkJG MzUzOEVCQ0UwHhcNMjYxMDAxMDkwNDEyWhcNMjYxMDA4MDkwNDEyWjAYMRYwFAYD VQQDEw02YWJlMjIwZC02YTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjEjPPNp60DaBWOaxN8OCBLR/ZYe+YX7u7R5fOkTbcZQu+eHd3RkjvuS4Fydr iSVnf+BIXbjk9zH2u2zwEZtb7kS/VPmDeGkADIr06V2/4maWmYVBsDjvoApVDFg7 npCAO5YAri+1j7P6JByf7G7pZq1bSELqc2UPnRm3EJ2ADR8gMRcxf7rsfwBClcvh YRwUgmmB0o7rRd2I7FyzGa6kSF16zcdtUt9tLjahTyvQEMNUPLp4TtwlA9rsunTP ViEGelWOqngDiKSns6lmVThmI78vAXY0Vgx5WwMCOtDbHF8+5yfJEM9t9IhsY7df AStO9oDzqpwOYiLxeAUTEy1cJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYPCxPK DleVm/9j7JQ/A2iG+nVIMB8GA1UdIwQYMBaAFGn6LZEzdB6DAEPrQOQNIr81OOvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0I4MS8yODYxRTQ5NkY4 NkExMUYwQjRCQkFGM0M0QTZGNTZCQy9hZm90a1ROMEhvTUFRLXRBNUEwaXZ6VTQ2 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fmb3RrVE4wSG9NQVEtdEE1QTBpdnpVNDY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0I4MS8yODYxRTQ5NkY4NkExMUYwQjRCQkFGM0M0QTZGNTZCQy9hZm90a1ROMEhv TUFRLXRBNUEwaXZ6VTQ2ODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU4LYCg/dNiUW4909ANrtcHlBLfhGJpkdbfi3MQxJnNwfS33atg329dPkiSN3 dQb+2n0Znsm3/JfpGYe3JWggD/wc86icPCZZOeaBkOX5hMhme81JuvPx2RxzGQM+ RJ+5M9miJ5TEuEMhuSsW7pA61lMclYaIC+2O+XeXH4e3fvwgWyTcXP39cTwSFRsK yzEXVRrorpvjzhez4Y8IAzZ2oPlvZA3XRbaYOuiff4G+NozAc3KNrtZLTNujXlBf a0hjIYpOFO+DEu49YhG3pyCHymbqCzEGLpIec43gtmHCUN9C6sfTy3UX83qvkB92 p4kK3a5hxddp5o+Rqh+HDVFuXQ== -----END CERTIFICATE-----Generated at Thu Oct 1 19:07:19 2026 by rpki-client