$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: sAH3ysdQS7TeV2a9viKywlCoa2ATpsIGAXesXWxg67E= Subject key identifier: B3:58:17:26:6A:5F:E7:9C:FD:AA:F6:6B:28:2C:9B:B1:69:05:D0:0D Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 0190 Signing time: Sat 03 Oct 2026 05:07:53 +0000 Manifest this update: Sat 03 Oct 2026 05:07:53 +0000 Manifest next update: Sat 10 Oct 2026 05:07:53 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: j/CopTA5dFlS1yhGE63UYNZOEvvq5kSd8nILlLaXoSU=) 2: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=) 3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Oct 3 05:07:53 2026 GMT Not After : Oct 10 05:07:53 2026 GMT Subject: CN=6ac08da9-85a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:da:74:3f:a6:b5:ba:64:6f:2f:25:73:e7: d2:c0:06:9e:c6:5c:c4:66:55:39:1f:1f:cd:8f:90: 42:e4:6e:f0:5e:b9:d5:d7:db:59:0c:93:04:75:d6: 2f:e7:57:72:cd:0c:a5:a1:b9:57:07:66:f3:8d:17: cd:62:f9:0d:97:3c:20:80:23:8b:b5:46:35:92:af: 20:15:67:50:df:03:d4:c5:4c:11:72:72:55:69:c4: 31:b4:db:d4:86:99:35:2d:b4:a9:54:e4:b2:9d:64: 95:f3:2f:d7:e1:f7:c3:a6:b2:c1:44:36:e8:d0:6f: df:14:9f:91:91:69:06:ff:fe:19:d4:0a:22:4c:1b: 56:f0:eb:c4:02:65:f8:a6:3e:9e:d3:0c:3e:e4:dc: cb:30:68:5e:5d:37:10:d8:d6:29:7d:63:b1:ab:c3: ab:1c:9b:f7:df:1c:9c:6e:5c:a1:18:6f:2c:5d:d8: 27:b9:40:7f:0c:b8:3e:ce:d1:4b:c4:1e:45:79:bc: 8d:13:41:24:ef:4a:d7:59:4b:72:86:f0:fd:93:47: 64:bc:36:95:6a:21:96:63:5b:bd:00:ea:d8:d7:ee: 0f:0d:89:1d:7a:27:47:7e:ce:30:d8:41:1f:10:c7: af:2b:37:a4:35:24:ec:94:4b:71:4d:ec:b0:d0:a1: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:58:17:26:6A:5F:E7:9C:FD:AA:F6:6B:28:2C:9B:B1:69:05:D0:0D X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:8c:23:2b:64:27:24:af:0b:cc:cb:95:bd:5c:cb:48:be: d7:32:2c:fc:66:a2:55:7b:05:1e:e4:e9:41:54:f2:0f:39:3b: 4a:b2:3a:fc:f0:d6:df:ed:19:c9:7c:cb:96:0e:15:87:7e:b7: c3:88:ed:23:aa:85:76:cd:15:f1:02:d5:97:56:71:99:78:21: 48:0d:ca:51:ae:e2:d4:89:41:03:9e:19:76:5e:a2:ac:a2:0e: 32:9b:bb:0c:90:13:49:d8:a0:f8:c4:aa:c7:54:20:78:5e:4f: 60:4c:97:44:ef:fd:24:13:1e:f8:80:d1:e4:56:fa:e3:7c:de: 34:b1:16:57:3e:3e:9f:50:8a:a1:0e:d3:a8:3a:a7:93:f9:57: 1c:e3:66:36:c6:70:d4:aa:08:e9:1b:ab:45:c7:78:b3:7e:07: a1:b0:1e:e6:6c:b2:ab:d0:ef:28:de:ec:15:19:1f:96:6f:bb: 4d:19:35:59:5c:38:98:51:33:7e:d1:ba:5a:dc:d8:36:bb:d1: a8:79:60:ee:2f:24:92:96:e4:fe:4f:22:f8:f1:89:c5:b9:2d: d4:47:2a:15:91:54:5a:d5:7c:58:08:0b:ec:a7:41:8c:59:02: 79:5d:37:ab:c6:30:94:dc:08:42:6a:16:2a:17:f7:5f:4d:7c: 2f:6f:78:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjYxMDAzMDUwNzUzWhcNMjYxMDEwMDUwNzUzWjAYMRYwFAYD VQQDEw02YWMwOGRhOS04NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AfadD+mtbpkby8lc+fSwAaexlzEZlU5Hx/Nj5BC5G7wXrnV19tZDJMEddYv 51dyzQyloblXB2bzjRfNYvkNlzwggCOLtUY1kq8gFWdQ3wPUxUwRcnJVacQxtNvU hpk1LbSpVOSynWSV8y/X4ffDprLBRDbo0G/fFJ+RkWkG//4Z1AoiTBtW8OvEAmX4 pj6e0ww+5NzLMGheXTcQ2NYpfWOxq8OrHJv33xycblyhGG8sXdgnuUB/DLg+ztFL xB5FebyNE0Ek70rXWUtyhvD9k0dkvDaVaiGWY1u9AOrY1+4PDYkdeidHfs4w2EEf EMevKzekNSTslEtxTeyw0KEWEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNYFyZq X+ec/ar2aygsm7FpBdANMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaiGMIytkJySvC8zLlb1cy0i+1zIs/GaiVXsFHuTpQVTyDzk7SrI6/PDW3+0Z yXzLlg4Vh363w4jtI6qFds0V8QLVl1ZxmXghSA3KUa7i1IlBA54Zdl6irKIOMpu7 DJATSdig+MSqx1QgeF5PYEyXRO/9JBMe+IDR5Fb643zeNLEWVz4+n1CKoQ7TqDqn k/lXHONmNsZw1KoI6RurRcd4s34HobAe5myyq9DvKN7sFRkflm+7TRk1WVw4mFEz ftG6WtzYNrvRqHlg7i8kkpbk/k8i+PGJxbkt1EcqFZFUWtV8WAgL7KdBjFkCeV03 q8YwlNwIQmoWKhf3X018L294gQ== -----END CERTIFICATE-----Generated at Sat Oct 3 15:52:10 2026 by rpki-client