$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: enHKrCOeNB5DPPX7BvaDpbF5f2gk3fvgBP3pmnCMR0o= Subject key identifier: F1:E3:AB:CD:93:E4:B3:84:52:82:04:B2:7C:6E:A4:D5:96:1F:0E:A6 Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: 01C2 Signing time: Sun 11 Oct 2026 04:26:21 +0000 Manifest this update: Sun 11 Oct 2026 04:26:20 +0000 Manifest next update: Sun 18 Oct 2026 04:26:20 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: PNwI4MC9mJF7+Uej0jpm4ldnXxY9WmDpY7c0I/W6afY=) 2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 0xEtLNXzgQLI5eu4N0PHbVDzi3ImrQGP3QrG+KX9gfw=) 3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: iX2Fa2bKeusUD7e1kk7qEOazrDitQAwWU/vzKbzi2Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: Oct 11 04:26:20 2026 GMT Not After : Oct 18 04:26:20 2026 GMT Subject: CN=6acb0fec-54ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:f6:f2:2b:1c:cf:21:d7:67:68:02:63:bb: 77:46:85:d5:fe:75:88:6d:05:a2:ca:85:7a:d8:16: c8:09:fc:eb:6d:bf:b3:ea:1a:a6:a6:73:53:fe:0a: ce:38:b9:95:1d:45:3b:23:f6:e2:ff:c3:63:1d:0a: 78:13:8e:a5:e8:c6:d5:d5:46:92:1d:47:6a:1d:b1: 17:2c:63:ab:2a:58:90:3f:a2:54:b1:e5:f3:a2:0d: f3:4f:7a:e3:02:d1:fc:6a:fd:bc:e4:3e:5b:26:fa: 01:7d:5f:36:b1:6b:55:c5:5e:e8:f6:a6:bf:2c:4f: b9:6f:6b:af:6e:fc:63:4c:a5:25:6e:34:dd:af:92: e9:0b:ae:f0:12:06:bb:93:df:4f:6a:95:9e:aa:07: d8:0a:30:4c:7f:ac:cb:3f:3d:2c:5b:87:21:f9:c1: f4:ac:0e:cb:08:23:54:f7:a6:a5:25:cb:da:a0:c4: cb:25:f8:3a:9e:22:9a:cf:8f:fa:a7:e6:78:f1:3f: 0b:f1:1c:f8:24:46:be:2e:02:46:d8:9b:47:d7:17: 3e:be:cc:a0:9d:cc:3b:14:33:96:94:c6:cb:48:83: 99:1d:f5:06:e3:28:5d:22:d6:d9:06:ae:c7:5f:a0: bd:77:52:67:bf:3c:ee:59:ee:77:84:85:48:6a:05: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E3:AB:CD:93:E4:B3:84:52:82:04:B2:7C:6E:A4:D5:96:1F:0E:A6 X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:3a:1b:9b:37:d8:33:ff:84:34:0a:23:7b:f6:bb:d1:e0:22: 2f:d1:68:63:bc:00:91:49:73:73:49:33:85:f3:b2:5d:e3:50: bd:83:12:17:bc:0d:a2:e4:35:9b:0a:c5:c1:f1:96:f7:2f:7c: de:f8:cc:b1:59:5c:cd:d3:f7:2d:f0:76:7d:48:50:6f:8a:9b: 59:04:d5:91:a5:38:83:e7:f8:9c:9d:4d:29:69:76:c3:b1:bf: 65:50:10:64:b0:ec:a8:2b:72:f4:c4:c9:c1:e2:c1:75:9f:db: 13:37:d0:d3:c1:df:a8:13:ae:56:47:9f:51:9f:a2:7b:5a:8b: 04:77:46:f4:02:a0:a6:b4:10:d8:e0:47:0c:87:d4:5a:57:0d: 31:32:9e:98:1d:74:ef:fa:e8:7c:72:5c:9a:aa:95:18:b1:3d: dd:fa:16:7d:b3:29:d9:bc:43:eb:95:b1:b6:4c:11:40:ce:1b: e2:94:73:a3:98:bd:1c:2d:fa:a7:cd:fa:bf:c1:fc:a1:0e:f8: d4:1e:7f:48:8e:5d:07:c3:1a:74:7e:10:fb:7b:43:31:03:e2: cb:2d:40:37:3a:5b:ef:42:7d:a6:5a:48:0d:5c:c0:bd:a1:2c: 82:7e:f9:6c:75:a6:e6:e0:4e:f9:0f:f0:cc:40:d8:21:91:63: fd:97:bd:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjYxMDExMDQyNjIwWhcNMjYxMDE4MDQyNjIwWjAYMRYwFAYD VQQDEw02YWNiMGZlYy01NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZn28isczyHXZ2gCY7t3RoXV/nWIbQWiyoV62BbICfzrbb+z6hqmpnNT/grO OLmVHUU7I/bi/8NjHQp4E46l6MbV1UaSHUdqHbEXLGOrKliQP6JUseXzog3zT3rj AtH8av285D5bJvoBfV82sWtVxV7o9qa/LE+5b2uvbvxjTKUlbjTdr5LpC67wEga7 k99PapWeqgfYCjBMf6zLPz0sW4ch+cH0rA7LCCNU96alJcvaoMTLJfg6niKaz4/6 p+Z48T8L8Rz4JEa+LgJG2JtH1xc+vsygncw7FDOWlMbLSIOZHfUG4yhdItbZBq7H X6C9d1JnvzzuWe53hIVIagVFJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHjq82T 5LOEUoIEsnxupNWWHw6mMB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNGQy9DN0IwOTM1NjFENzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNO b0dzUjd6M1N0anllUUhzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkDobmzfYM/+ENAoje/a70eAiL9FoY7wAkUlzc0kzhfOyXeNQvYMSF7wNouQ1 mwrFwfGW9y983vjMsVlczdP3LfB2fUhQb4qbWQTVkaU4g+f4nJ1NKWl2w7G/ZVAQ ZLDsqCty9MTJweLBdZ/bEzfQ08HfqBOuVkefUZ+ie1qLBHdG9AKgprQQ2OBHDIfU WlcNMTKemB107/rofHJcmqqVGLE93foWfbMp2bxD65WxtkwRQM4b4pRzo5i9HC36 p836v8H8oQ741B5/SI5dB8MadH4Q+3tDMQPiyy1ANzpb70J9plpIDVzAvaEsgn75 bHWm5uBO+Q/wzEDYIZFj/Ze9bQ== -----END CERTIFICATE-----Generated at Sun Oct 11 23:46:29 2026 by rpki-client