$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft File: ciYIDnxlJSNDlihmsxOfAjhyxAI.mft (raw, json) Hash identifier: 58bb7+3Y2O1elDUHsm1uO6WC7cx/Frgow2hGfwtGeO8= Subject key identifier: 72:10:90:7C:68:42:48:59:37:05:CD:B2:79:90:31:B7:35:32:4C:20 Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft Manifest number: 0198 Signing time: Sun 11 Oct 2026 04:54:36 +0000 Manifest this update: Sun 11 Oct 2026 04:54:35 +0000 Manifest next update: Sun 18 Oct 2026 04:54:35 +0000 Files and hashes: 1: ciYIDnxlJSNDlihmsxOfAjhyxAI.crl (hash: uruPCSD/7eqKsbWz2Tc3YtzlJT6RTkLZO8JDX4s6KC8=) 2: C0C401905AE311EF90924C30C4F9AE02.roa (hash: pajsaklPf9gnqE7rNhlxP2QYoQHOLMvlb7QAvI9KQAk=) 3: -8xxWTTnJE42vNiitdoUFVOX8RU.asa (hash: 7XcAz8kDJIblwVgiMXAwVXb9A2Hx8ICB7PKXllxlYCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402 Validity Not Before: Oct 11 04:54:35 2026 GMT Not After : Oct 18 04:54:35 2026 GMT Subject: CN=6acb168b-1aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:ed:da:4d:de:94:9d:89:e9:ae:d7:c3:56: f1:6c:6a:04:03:1c:bd:4d:4c:b7:8a:dc:b8:06:e7: b1:f6:b6:7d:ca:47:1d:d1:2c:f7:31:fa:9e:c2:1a: ce:17:94:09:fb:9e:41:ef:02:e4:34:63:54:65:0e: 5a:cc:cf:58:cb:1f:0b:11:ce:2b:5e:f0:8e:7c:2f: 7c:4f:09:78:2f:e0:f1:53:e4:a3:a8:de:89:1b:87: 58:a6:93:bf:46:72:5f:00:31:b0:39:33:6b:40:12: 9f:04:d0:3d:69:27:49:72:5f:1b:14:5e:33:99:5c: 19:28:4f:fe:b4:56:a9:db:13:86:db:e6:89:d1:32: 66:79:28:2d:06:56:10:24:9a:3f:ae:25:a8:e1:be: ee:b8:58:da:79:ff:27:68:81:47:a1:d8:95:c4:fb: 20:99:0e:d2:4b:c1:48:d3:ff:0f:ff:c5:c1:94:11: 21:b0:05:52:21:2d:c7:1f:53:d3:de:45:35:ef:4b: d9:35:14:47:f6:9f:18:7a:71:fd:06:43:0a:ef:a6: 02:cc:70:8d:f2:81:2a:a8:5f:91:73:76:fb:4a:6d: bd:38:15:60:f6:59:87:3c:93:72:0b:76:30:65:89: c4:be:04:17:67:f2:49:9a:20:1e:dd:65:81:da:d7: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:10:90:7C:68:42:48:59:37:05:CD:B2:79:90:31:B7:35:32:4C:20 X509v3 Authority Key Identifier: keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:b8:da:8b:24:00:57:b0:8e:12:e9:41:39:90:95:bc:fa:36: d2:ea:0c:a1:3f:da:fb:6d:50:1d:93:4e:b7:f4:dc:44:98:1a: d4:9e:cd:8b:16:4c:1e:9d:10:e1:6d:cd:37:32:19:b4:cd:b1: e3:8b:85:64:82:af:aa:55:55:0e:46:2f:6a:ff:74:7b:20:69: fd:b3:6f:8d:54:9f:2a:68:20:f3:bd:4d:e2:f3:70:21:23:90: 48:c5:c0:05:3d:de:da:28:92:17:12:04:ad:43:dd:cc:ba:4a: e7:76:48:f3:f7:3a:23:7d:7c:45:2f:21:35:a0:d7:1c:93:19: fd:c7:53:b4:fb:35:a5:17:25:67:7a:69:a2:2e:28:72:50:4e: 91:6d:b1:cc:a8:9b:a4:38:71:e3:9b:cb:e3:87:56:e5:22:f3: 6c:17:72:18:0b:62:11:66:88:56:8d:bd:ee:48:9d:15:9a:86: 47:c3:51:41:5b:5e:68:11:84:05:f8:fc:67:f1:2d:ca:47:1c: 5b:e7:46:92:36:87:02:f6:99:c4:b0:56:eb:79:09:08:6a:83: 4c:73:d2:f8:df:99:fc:b8:97:38:68:5c:26:c4:ee:52:a6:f7: 94:1f:37:cb:62:de:81:a9:9d:e8:9e:61:30:6a:6b:f9:78:86: f0:d1:ed:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKDcyMjYwODBFN0M2NTI1MjM0Mzk2Mjg2NkIzMTM5RjAy Mzg3MkM0MDIwHhcNMjYxMDExMDQ1NDM1WhcNMjYxMDE4MDQ1NDM1WjAYMRYwFAYD VQQDEw02YWNiMTY4Yi0xYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscrt2k3elJ2J6a7Xw1bxbGoEAxy9TUy3ity4Buex9rZ9ykcd0Sz3MfqewhrO F5QJ+55B7wLkNGNUZQ5azM9Yyx8LEc4rXvCOfC98Twl4L+DxU+SjqN6JG4dYppO/ RnJfADGwOTNrQBKfBNA9aSdJcl8bFF4zmVwZKE/+tFap2xOG2+aJ0TJmeSgtBlYQ JJo/riWo4b7uuFjaef8naIFHodiVxPsgmQ7SS8FI0/8P/8XBlBEhsAVSIS3HH1PT 3kU170vZNRRH9p8YenH9BkMK76YCzHCN8oEqqF+Rc3b7Sm29OBVg9lmHPJNyC3Yw ZYnEvgQXZ/JJmiAe3WWB2tcWNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIQkHxo QkhZNwXNsnmQMbc1MkwgMB8GA1UdIwQYMBaAFHImCA58ZSUjQ5YoZrMTnwI4csQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wREUyM0UxNjVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpTTkRsaWhtc3hPZkFqaHl4 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpWUlEbnhsSlNORGxpaG1zeE9mQWpoeXhBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wREUyM0UxNjVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpT TkRsaWhtc3hPZkFqaHl4QUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyrjaiyQAV7COEulBOZCVvPo20uoMoT/a+21QHZNOt/TcRJga1J7NixZMHp0Q 4W3NNzIZtM2x44uFZIKvqlVVDkYvav90eyBp/bNvjVSfKmgg871N4vNwISOQSMXA BT3e2iiSFxIErUPdzLpK53ZI8/c6I318RS8hNaDXHJMZ/cdTtPs1pRclZ3ppoi4o clBOkW2xzKibpDhx45vL44dW5SLzbBdyGAtiEWaIVo297kidFZqGR8NRQVteaBGE Bfj8Z/EtykccW+dGkjaHAvaZxLBW63kJCGqDTHPS+N+Z/LiXOGhcJsTuUqb3lB83 y2Legamd6J5hMGpr+XiG8NHtGw== -----END CERTIFICATE-----Generated at Sun Oct 11 09:17:49 2026 by rpki-client