$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: Xl5YEH29WK/E50d4/TMOqCJ0Gk5KZK3Bs6u0rFBkvjk= Subject key identifier: BD:3A:C6:61:33:79:35:4F:EE:2D:98:B5:12:4C:54:19:59:1D:2F:8E Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 01E8 Signing time: Fri 09 Oct 2026 04:26:51 +0000 Manifest this update: Fri 09 Oct 2026 04:26:50 +0000 Manifest next update: Fri 16 Oct 2026 04:26:50 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: 1sfjumOaFkv2gVk0FHNdzveztBTBU0fwawNXT2ZcxeI=) 2: E8AC04B286F311F1B8F66003A7EE528E.roa (hash: gdGgY10s0aC8Do46TFQ8bG2KR+XSS6EIIPnk5BDXjnI=) 3: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=) 4: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 04:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Oct 9 04:26:50 2026 GMT Not After : Oct 16 04:26:50 2026 GMT Subject: CN=6ac86d0b-69f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:d7:05:20:90:88:12:67:91:e4:90:fa:11: e1:0f:f5:61:52:06:65:96:23:84:ab:a3:e2:d9:93: 57:b3:be:c7:14:fc:ee:64:14:7f:1e:56:b0:b3:6a: e4:ac:63:8e:85:2d:88:53:3b:b6:d5:8b:9c:75:b1: fb:d9:eb:e7:0c:82:e8:4b:ad:23:81:ff:9f:ff:4d: ff:8f:71:74:e4:17:b4:b9:51:6d:50:26:08:75:fe: d8:5d:2d:19:16:86:d8:f4:af:42:2b:b0:b9:d0:3a: 74:45:35:df:c2:37:7e:53:79:31:10:40:da:dc:d6: a6:77:e3:29:ce:01:64:29:13:fb:e4:69:72:e3:60: 10:26:ec:97:c0:37:66:de:bc:c1:96:b4:fb:fa:01: d5:6d:9a:08:a3:b4:2c:8f:7e:83:27:a7:f7:d2:87: 19:4e:f5:1e:ed:8b:3c:5d:07:13:ad:8d:bb:cb:1b: 5b:5b:f1:e5:aa:a0:8a:56:0e:4a:9d:eb:ca:cb:be: 60:fb:0f:50:54:07:f4:64:74:75:0c:79:6c:f3:48: 38:a8:1c:52:b8:0f:ec:b0:d4:af:72:86:83:76:9b: c8:80:3a:df:1b:a6:b8:c8:e7:73:94:04:37:f8:c2: 4f:24:18:b1:bf:4d:89:3e:7c:24:97:d1:f2:c6:ac: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3A:C6:61:33:79:35:4F:EE:2D:98:B5:12:4C:54:19:59:1D:2F:8E X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:78:93:de:8e:ab:57:d6:52:6f:e9:7c:57:a1:2f:ec:2e:ff: 27:ba:2f:13:70:78:d4:31:7b:a6:5d:8f:3a:07:5a:a5:61:f4: 4d:92:0a:85:27:3c:e2:59:67:72:35:06:2e:f6:42:24:d7:c2: bb:51:ee:ac:5c:b6:ab:98:f6:11:73:84:d0:08:ee:5d:3c:1c: d8:66:9b:d5:24:e3:9c:5f:4b:c8:ee:6c:7a:9c:4c:f2:1e:be: 44:7f:a7:1e:c7:5d:e4:85:b0:f1:1f:7d:18:eb:54:05:2a:a9: 96:27:c4:e2:80:c6:3a:cc:ea:43:55:4b:36:4c:8b:bd:ff:40: 13:83:b9:f8:97:6c:d8:e5:b7:87:8c:b5:09:ca:d3:86:2b:ae: 17:7f:45:d4:0b:cf:72:13:80:14:09:f7:ab:7b:c1:66:41:89: 43:7b:1f:b1:d9:5f:ec:ad:3d:dd:ed:99:fe:23:d2:7e:83:17: 65:71:e3:3d:a1:7c:1d:cd:a4:84:ec:99:7b:4b:36:e7:e0:eb: 8f:8b:08:88:9e:90:a7:06:d5:e2:27:23:98:dd:9b:37:5c:84: 4a:60:56:f4:64:65:f5:64:5e:5e:c8:cd:7d:95:e9:99:55:3f: 3f:30:a7:d4:bb:32:6d:ee:a7:2c:7e:73:20:a4:8b:a1:5f:24: 81:f0:fb:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjYxMDA5MDQyNjUwWhcNMjYxMDE2MDQyNjUwWjAYMRYwFAYD VQQDEw02YWM4NmQwYi02OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgXXBSCQiBJnkeSQ+hHhD/VhUgZlliOEq6Pi2ZNXs77HFPzuZBR/Hlaws2rk rGOOhS2IUzu21YucdbH72evnDILoS60jgf+f/03/j3F05Be0uVFtUCYIdf7YXS0Z FobY9K9CK7C50Dp0RTXfwjd+U3kxEEDa3Namd+MpzgFkKRP75Gly42AQJuyXwDdm 3rzBlrT7+gHVbZoIo7Qsj36DJ6f30ocZTvUe7Ys8XQcTrY27yxtbW/HlqqCKVg5K nevKy75g+w9QVAf0ZHR1DHls80g4qBxSuA/ssNSvcoaDdpvIgDrfG6a4yOdzlAQ3 +MJPJBixv02JPnwkl9HyxqwDXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL06xmEz eTVP7i2YtRJMVBlZHS+OMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdXiT3o6rV9ZSb+l8V6Ev7C7/J7ovE3B41DF7pl2POgdapWH0TZIKhSc84lln cjUGLvZCJNfCu1HurFy2q5j2EXOE0AjuXTwc2Gab1STjnF9LyO5sepxM8h6+RH+n Hsdd5IWw8R99GOtUBSqplifE4oDGOszqQ1VLNkyLvf9AE4O5+Jds2OW3h4y1CcrT hiuuF39F1AvPchOAFAn3q3vBZkGJQ3sfsdlf7K093e2Z/iPSfoMXZXHjPaF8Hc2k hOyZe0s25+Drj4sIiJ6QpwbV4icjmN2bN1yESmBW9GRl9WReXsjNfZXpmVU/PzCn 1Lsybe6nLH5zIKSLoV8kgfD7tg== -----END CERTIFICATE-----Generated at Sat Oct 10 11:34:39 2026 by rpki-client