$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json) Hash identifier: yScL548HiFhW4EoSXn33PBvthhKpJMuqaYwy1fkmfgc= Subject key identifier: B6:32:7A:F0:C3:BE:13:BF:92:C9:6A:CB:2A:30:74:DD:4D:C7:F3:DE Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0F11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft Manifest number: 0F00 Signing time: Tue 06 Oct 2026 17:43:33 +0000 Manifest this update: Tue 06 Oct 2026 17:43:32 +0000 Manifest next update: Tue 13 Oct 2026 17:43:32 +0000 Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: JYKHvgxJoFY1oae7/VdNkxCt0WK1m/qwHBMQA5cv4hs=) 2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: KxaalTuXmVHTC/PqLPVKmWsPS+0d2mZX8XaIQL52HzE=) 3: AFAF715E4F6111F180E0E950C4833773.roa (hash: GsyceID1s8Z+mukTTJfCIBEy3HjQ/O+E/I8IMk9cFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3857 (0xf11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Oct 6 17:43:32 2026 GMT Not After : Oct 13 17:43:32 2026 GMT Subject: CN=6ac53344-95d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:fd:71:22:ab:d6:31:3c:7b:ed:c6:44:ad: b5:3f:dc:82:31:24:3b:55:4e:43:4d:64:ea:c4:e9: 63:75:d5:4a:da:e1:c1:33:21:b6:4e:8d:2f:8c:d7: 38:f2:9c:98:5b:46:9f:9a:29:12:8d:10:dc:12:4f: 93:ea:35:53:6c:f1:41:81:72:cb:fd:95:ef:48:37: de:2a:87:02:e5:2d:5a:7a:7a:d7:ef:64:87:54:7e: f0:8f:3c:5b:39:ac:03:6d:64:09:e1:bb:27:7f:fc: fa:2d:c9:3f:e7:1c:c8:f2:04:90:93:01:0a:b9:17: 13:85:b5:3b:d3:ef:53:48:05:59:03:24:be:d7:21: 84:38:ab:62:9d:09:97:2f:06:55:55:27:65:24:73: 93:c9:f8:9b:a9:e3:8f:e5:f0:fb:ca:9b:44:20:5e: 09:5a:02:39:5b:c7:b9:0d:59:f5:c9:10:a0:1d:2d: 56:0a:05:7a:fb:f3:9b:0d:60:5f:9e:25:f2:b7:62: 31:75:12:f6:ed:dc:9f:71:51:8e:e4:93:1e:ac:01: c4:67:5f:de:4f:32:5b:19:b8:f0:29:bc:eb:3e:e6: ab:2b:41:07:bf:81:67:8b:b5:df:75:81:8a:c9:68: bf:58:bb:73:49:a9:fa:fd:86:27:f2:54:0a:d5:15: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:7A:F0:C3:BE:13:BF:92:C9:6A:CB:2A:30:74:DD:4D:C7:F3:DE X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7d:e6:01:f4:4c:ae:b8:9c:01:07:4e:55:22:46:98:0e:3d: 43:fb:5b:59:e8:2a:f1:f3:e3:82:ba:c2:51:4d:de:ec:19:4d: d2:7d:50:f9:d3:a5:ab:c9:ee:e4:c8:f2:36:53:c0:e1:1b:d6: d0:cb:e1:46:14:31:44:0a:70:e8:3b:93:2c:cb:01:60:3b:19: 8f:3f:64:d2:6e:7e:08:58:fb:9c:e2:0a:e9:e6:05:92:ad:f9: a6:e0:3a:6b:a0:9b:22:68:bb:e4:60:52:a1:f4:a0:3f:3c:1d: 35:c8:61:fd:b3:81:9a:80:4a:e0:c3:35:fb:08:b5:d8:eb:b8: 6b:90:8f:94:cf:9a:5a:bc:d0:3b:d9:ff:d5:dd:6f:e2:0e:78: ad:bd:7d:59:6d:05:78:e0:f6:d5:59:41:9a:00:83:57:6a:97: 8b:cb:65:b7:19:92:85:5a:46:cd:18:4b:8e:a3:19:70:58:b8: a6:57:c2:73:99:a3:9a:dc:51:39:67:a0:a7:e6:d9:b6:b6:78: a3:8a:c9:37:ab:38:40:36:bd:5b:3e:07:ef:59:61:b0:5c:cb: ff:c1:00:e9:11:23:f8:80:3b:5c:e5:90:86:85:2c:95:60:3b: 36:46:12:4a:19:0e:56:9d:60:0d:c4:e0:41:24:90:38:92:7c: 9b:2d:e0:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjYxMDA2MTc0MzMyWhcNMjYxMDEzMTc0MzMyWjAYMRYwFAYD VQQDEw02YWM1MzM0NC05NWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjP9cSKr1jE8e+3GRK21P9yCMSQ7VU5DTWTqxOljddVK2uHBMyG2To0vjNc4 8pyYW0afmikSjRDcEk+T6jVTbPFBgXLL/ZXvSDfeKocC5S1aenrX72SHVH7wjzxb OawDbWQJ4bsnf/z6Lck/5xzI8gSQkwEKuRcThbU70+9TSAVZAyS+1yGEOKtinQmX LwZVVSdlJHOTyfibqeOP5fD7yptEIF4JWgI5W8e5DVn1yRCgHS1WCgV6+/ObDWBf niXyt2IxdRL27dyfcVGO5JMerAHEZ1/eTzJbGbjwKbzrPuarK0EHv4Fni7XfdYGK yWi/WLtzSan6/YYn8lQK1RWs2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYyevDD vhO/kslqyyowdN1Nx/PeMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD RjBvcTBaU0J5VmNEdHk0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMH3mAfRMrricAQdOVSJGmA49Q/tbWegq8fPjgrrCUU3e7BlN0n1Q+dOlq8nu 5MjyNlPA4RvW0MvhRhQxRApw6DuTLMsBYDsZjz9k0m5+CFj7nOIK6eYFkq35puA6 a6CbImi75GBSofSgPzwdNchh/bOBmoBK4MM1+wi12Ou4a5CPlM+aWrzQO9n/1d1v 4g54rb19WW0FeOD21VlBmgCDV2qXi8tltxmShVpGzRhLjqMZcFi4plfCc5mjmtxR OWegp+bZtrZ4o4rJN6s4QDa9Wz4H71lhsFzL/8EA6REj+IA7XOWQhoUslWA7NkYS ShkOVp1gDcTgQSSQOJJ8my3gFA== -----END CERTIFICATE-----Generated at Thu Oct 8 12:49:48 2026 by rpki-client