$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json) Hash identifier: q2MFoMzZvXA6i+6bP8fJSQe1MRjnmnkSv6Yf9umVz6s= Subject key identifier: FF:D3:AF:E8:15:1B:EE:34:05:1B:16:EF:0C:8C:7D:AA:0D:3D:8D:A0 Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft Manifest number: 0426 Signing time: Thu 01 Oct 2026 00:39:50 +0000 Manifest this update: Thu 01 Oct 2026 00:39:49 +0000 Manifest next update: Thu 08 Oct 2026 00:39:49 +0000 Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: GfIODCyXxP54LU7ZUDAUj8H4IhfMLRpKWJ0cX8iHio4=) 2: 815A09C645F311F19D4C8BBB9A833773.roa (hash: gXEe/7OkKqUCUDk1lxEeptn1iCrY7lDmXDjXXtgnbdk=) 3: 1B979C223EE411F19E8F25E5B8833773.roa (hash: wi5Jdm400NVVrEhqsCRygJRPgFVgnSFV5lXcRFaVlfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 00:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Validity Not Before: Oct 1 00:39:49 2026 GMT Not After : Oct 8 00:39:49 2026 GMT Subject: CN=6abdabd6-e40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:72:ac:3d:1c:fc:a5:98:de:da:00:34:2b: 9a:17:3d:6c:18:7a:3c:5a:55:c4:da:b1:fe:ea:ca: 47:26:25:cc:85:f5:01:5f:74:a7:5f:a3:cc:89:a0: 28:1c:6e:f9:72:16:7d:91:4c:d7:6a:03:97:c4:d6: e5:a8:73:67:18:60:cc:ac:d2:03:d8:f7:9c:87:ea: 78:75:be:4e:5b:26:a1:7d:1d:2e:ee:74:85:d2:67: ed:98:cb:bf:c5:26:43:76:df:a6:c8:09:5c:6e:56: bf:a5:20:e6:df:02:3d:49:e6:18:ed:44:be:b6:32: f0:82:0b:8d:74:45:62:2f:43:2f:e1:42:2f:25:d1: a7:3f:01:bd:a2:ad:4d:bc:fa:25:89:58:bb:07:fd: 5b:f2:87:d9:b3:ec:fb:d5:29:63:42:23:5a:4b:35: 2a:5e:56:06:f9:55:26:ca:84:ef:b6:bf:ee:52:90: 20:89:59:46:3a:c7:21:27:c7:e7:22:d3:6c:01:09: 5b:15:0a:fc:e2:00:ce:b3:5c:16:fe:39:6b:08:01: 5b:78:b1:3c:47:73:09:ac:f7:36:f3:36:66:4d:43: ac:75:86:80:44:64:b6:f7:ea:6c:b5:dd:55:e5:0d: b1:a7:a7:75:17:ba:d5:68:cd:07:66:10:95:16:1a: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:AF:E8:15:1B:EE:34:05:1B:16:EF:0C:8C:7D:AA:0D:3D:8D:A0 X509v3 Authority Key Identifier: keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f3:6f:54:73:4f:2f:12:dc:20:11:4c:c9:03:d9:df:af:ad: f3:72:ab:e9:4d:2f:15:81:9f:35:f4:35:15:5b:c6:32:01:d6: 0d:b7:eb:35:d5:3f:b4:3b:c2:a4:d7:b0:e5:3e:38:42:bd:b4: 3c:85:88:f0:b3:3e:87:2d:6a:5f:20:6f:77:aa:f8:fc:f7:53: 51:18:cf:38:fb:a7:ad:57:9a:ec:54:13:1d:ad:8a:02:8a:aa: 34:1b:2a:e8:2c:94:23:d0:4d:bd:04:66:86:e3:7d:39:cc:8a: c7:df:75:82:45:2f:e5:03:0e:82:e7:3b:37:47:93:ff:c6:f7: 06:e3:b3:f6:82:ee:d3:ca:51:a2:98:e1:d1:e1:97:b1:19:15: 6a:ab:ea:91:f9:c8:7b:ad:83:e8:13:25:06:ac:c7:7e:b6:cd: fc:d3:9e:d4:a4:d2:7d:f9:b8:69:ee:3a:58:cd:48:8c:81:2d: f7:c4:3c:02:32:3e:ef:81:92:49:5c:3a:5b:f8:59:73:f0:ea: 34:59:fe:83:49:9e:87:4e:db:68:53:54:ba:45:13:fa:4d:eb: 69:3a:61:5a:26:c9:11:9b:40:32:20:b7:ba:0f:0b:ca:7f:69: 54:28:0f:7c:f7:65:72:0d:7a:9c:de:18:46:cc:37:37:e1:ba: fa:e4:f8:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwNTYxMTAvBgNVBAUTKEZBNjdENTMwQTg3MDBBQThFQjdENEY2Q0JFOTY0N0JF NTM3RjVGQ0UwHhcNMjYxMDAxMDAzOTQ5WhcNMjYxMDA4MDAzOTQ5WjAYMRYwFAYD VQQDEw02YWJkYWJkNi1lNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQByrD0c/KWY3toANCuaFz1sGHo8WlXE2rH+6spHJiXMhfUBX3SnX6PMiaAo HG75chZ9kUzXagOXxNblqHNnGGDMrNID2Pech+p4db5OWyahfR0u7nSF0mftmMu/ xSZDdt+myAlcbla/pSDm3wI9SeYY7US+tjLwgguNdEViL0Mv4UIvJdGnPwG9oq1N vPoliVi7B/1b8ofZs+z71SljQiNaSzUqXlYG+VUmyoTvtr/uUpAgiVlGOschJ8fn ItNsAQlbFQr84gDOs1wW/jlrCAFbeLE8R3MJrPc28zZmTUOsdYaARGS29+pstd1V 5Q2xp6d1F7rVaM0HZhCVFhrXtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/Tr+gV G+40BRsW7wyMfaoNPY2gMB8GA1UdIwQYMBaAFPpn1TCocAqo631PbL6WR75Tf1/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA1Ni9ENzAyNjRBQUM5 RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0NxanJmVTlzdnBaSHZsTl9Y ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1tZlZNS2h3Q3FqcmZVOXN2cFpIdmxOX1g4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA1Ni9ENzAyNjRBQUM5RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0Nx anJmVTlzdnBaSHZsTl9YODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQvNvVHNPLxLcIBFMyQPZ36+t83Kr6U0vFYGfNfQ1FVvGMgHWDbfrNdU/tDvC pNew5T44Qr20PIWI8LM+hy1qXyBvd6r4/PdTURjPOPunrVea7FQTHa2KAoqqNBsq 6CyUI9BNvQRmhuN9OcyKx991gkUv5QMOguc7N0eT/8b3BuOz9oLu08pRopjh0eGX sRkVaqvqkfnIe62D6BMlBqzHfrbN/NOe1KTSffm4ae46WM1IjIEt98Q8AjI+74GS SVw6W/hZc/DqNFn+g0meh07baFNUukUT+k3raTphWibJEZtAMiC3ug8Lyn9pVCgP fPdlcg16nN4YRsw3N+G6+uT43g== -----END CERTIFICATE-----Generated at Fri Oct 2 08:34:20 2026 by rpki-client