$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: KSwqzdMikJ+VZQAexZOuNybKFswoG5LlQKU+zP6XddE= Subject key identifier: E8:AD:0A:A5:B9:0A:93:7D:59:07:8B:F7:0D:A1:29:2D:99:5C:6C:54 Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 0770 Signing time: Mon 26 Oct 2026 21:39:36 +0000 Manifest this update: Mon 26 Oct 2026 21:39:36 +0000 Manifest next update: Mon 02 Nov 2026 21:39:36 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: wPgdgtum20sZTtPuJwMIIXzsDwbzCZ/csefQoj8eDvQ=) 2: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: b8Yrg5yhwwS9mUXMLcQ3eIUl5GT4DbquZ+/h34i5hc0=) 3: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 21:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Oct 26 21:39:36 2026 GMT Not After : Nov 2 21:39:36 2026 GMT Subject: CN=6adfc898-9f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:52:73:13:40:02:70:4d:00:94:cd:c1:61: 8c:12:aa:6a:d8:37:e4:5f:66:5a:3a:b1:80:ce:d1: f9:c1:3b:65:2d:2f:25:c8:38:8d:f5:1f:47:3a:e5: 36:a9:2c:85:19:7d:a0:97:e8:e0:c1:4e:c3:30:2f: c0:0d:2a:75:d2:e1:70:70:a1:a1:89:62:77:6c:0c: c7:c0:ae:94:0e:6f:09:c3:ab:3c:a4:e5:7f:d0:99: 81:49:a5:de:ef:be:7f:54:79:73:6c:34:02:95:80: 1b:c7:fb:48:07:ee:55:82:4e:df:dc:c0:37:59:ca: 49:e8:06:84:22:8d:1a:bf:07:58:5d:f2:62:2f:5f: 86:df:45:50:08:2b:41:84:b1:02:8b:34:34:26:a3: 48:9b:ea:30:af:2c:1a:37:9b:50:74:2f:b5:ea:7d: 71:27:c9:82:2e:81:02:fe:ec:3d:44:b2:90:09:10: a0:40:8c:b7:73:f4:60:12:e9:2d:ad:3e:07:f6:29: fe:62:37:50:62:b6:66:1e:0d:09:89:0d:65:73:e3: 9e:d7:8c:b9:26:1a:3c:f8:2c:11:4a:2f:1c:97:3d: 12:cd:2a:b4:c5:f3:e3:89:db:22:93:fc:e5:87:dc: c3:58:52:b9:07:87:cf:71:e3:54:4c:df:01:2a:28: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:0A:A5:B9:0A:93:7D:59:07:8B:F7:0D:A1:29:2D:99:5C:6C:54 X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c4:b9:a1:1d:34:d4:ee:4d:5a:e8:64:7d:01:62:e7:b4:c7: 2c:05:0c:fb:2c:6d:64:fe:73:17:fb:0a:76:5f:a1:c4:a2:30: 2e:3f:fe:e9:b8:c1:7b:8b:72:7b:1c:cc:85:4d:0c:47:37:5b: a3:68:8c:ae:2f:33:b4:8c:c8:5c:4c:8f:5d:69:93:14:06:a0: a3:76:fe:15:8d:ca:0e:cd:1d:7a:8f:ae:75:cf:e6:2b:87:b7: 2c:06:9e:4c:07:5d:aa:87:eb:d1:fb:db:5e:a4:31:65:48:31: a5:2c:fe:18:fa:74:a8:36:17:c4:90:d8:90:33:65:0e:ba:cc: 43:2b:c6:87:78:96:a8:70:cb:48:a9:0d:6a:b1:57:8c:f2:2a: f4:0f:86:3e:0f:3f:65:aa:db:4d:89:6f:ab:9a:a0:ae:42:67: 75:7b:13:c3:1c:18:26:f2:a7:14:57:26:86:62:76:6f:3c:36: d8:49:0f:6e:66:63:12:58:65:96:3d:b0:b5:7d:f3:f3:83:3b: 74:9d:b2:a8:68:16:8b:9d:5f:73:9d:22:ce:73:81:1c:8e:9b: 0d:e6:c9:d5:76:bf:b7:9a:1b:a2:1d:74:2f:26:ad:5f:33:33: b3:3c:9f:5c:12:ff:e2:39:cc:aa:bc:a5:46:44:2b:fa:59:07: 73:b0:f9:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjYxMDI2MjEzOTM2WhcNMjYxMTAyMjEzOTM2WjAYMRYwFAYD VQQDEw02YWRmYzg5OC05ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFhScxNAAnBNAJTNwWGMEqpq2DfkX2ZaOrGAztH5wTtlLS8lyDiN9R9HOuU2 qSyFGX2gl+jgwU7DMC/ADSp10uFwcKGhiWJ3bAzHwK6UDm8Jw6s8pOV/0JmBSaXe 775/VHlzbDQClYAbx/tIB+5Vgk7f3MA3WcpJ6AaEIo0avwdYXfJiL1+G30VQCCtB hLECizQ0JqNIm+owrywaN5tQdC+16n1xJ8mCLoEC/uw9RLKQCRCgQIy3c/RgEukt rT4H9in+YjdQYrZmHg0JiQ1lc+Oe14y5Jho8+CwRSi8clz0SzSq0xfPjidsik/zl h9zDWFK5B4fPceNUTN8BKiiEuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOitCqW5 CpN9WQeL9w2hKS2ZXGxUMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC8S5oR001O5NWuhkfQFi57THLAUM+yxtZP5zF/sKdl+hxKIwLj/+6bjBe4ty exzMhU0MRzdbo2iMri8ztIzIXEyPXWmTFAago3b+FY3KDs0deo+udc/mK4e3LAae TAddqofr0fvbXqQxZUgxpSz+GPp0qDYXxJDYkDNlDrrMQyvGh3iWqHDLSKkNarFX jPIq9A+GPg8/ZarbTYlvq5qgrkJndXsTwxwYJvKnFFcmhmJ2bzw22EkPbmZjElhl lj2wtX3z84M7dJ2yqGgWi51fc50iznOBHI6bDebJ1Xa/t5oboh10LyatXzMzszyf XBL/4jnMqrylRkQr+lkHc7D5NA== -----END CERTIFICATE-----Generated at Wed Oct 28 04:47:14 2026 by rpki-client