$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: mtSp9fKVPRdRmK+zFSVHYPpdB8C+4hvdF83a+jL8XUU= Subject key identifier: AF:6D:D7:A4:6E:6D:C5:30:DC:4E:31:A3:2D:C3:C2:A6:8A:2E:89:10 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 04E4 Signing time: Mon 26 Oct 2026 23:38:29 +0000 Manifest this update: Mon 26 Oct 2026 23:38:29 +0000 Manifest next update: Mon 02 Nov 2026 23:38:29 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: OJ7tXSFaEoywsMvhF9nkSwwPrsSO2L4K558fNCfXJhc=) 2: 0BDDA52C7E4711F1A538061D81A30FBC.roa (hash: WL7M1FpRwrUsyaj0X9ZGaQ0c/XqE32u0/lc5P4wkeOI=) 3: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: VWdUzB6vXIKkRn/XdO/qNXY7fvd6Iad/udykpaussds=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: czE7NJl7/t7hwLc6wB3QFn+FdCDmuyeRfw1z4n513xg=) 5: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /ybLb79FD1QsPf5vPSYHi+deCRb+HGVM3JZtL0Bj/K0=) 6: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: B6+cUUkQlPaj9J4kFZO9C4R2/ipX521sHO4j6bzzqNE=) 7: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: h7on1h70EQUkl7YA2uV3PQ8RC/fzA9+qPqnRbP0SURQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Oct 26 23:38:29 2026 GMT Not After : Nov 2 23:38:29 2026 GMT Subject: CN=6adfe475-25ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:3a:3f:d2:e9:05:40:04:c2:e5:88:75:22: b5:f9:34:51:7f:b9:cc:03:18:17:41:97:97:cc:c3: ec:0a:c2:67:77:07:16:85:57:a7:56:da:ae:a4:b3: 77:1b:26:b8:73:4a:39:f6:2a:fd:b2:3d:c7:c6:63: 0d:a7:5c:7b:4a:9f:14:56:b0:af:43:58:fa:83:7f: fb:f1:6a:72:70:e0:b4:48:5e:9e:36:fb:a7:d3:29: fa:9d:8d:54:5d:11:e0:9b:c6:e8:46:1e:b4:bb:e3: 5c:9c:f0:d0:74:5d:0d:3b:c3:ce:3c:41:64:bf:c8: 1b:61:87:bc:bc:26:e6:3a:a2:32:f1:7a:e0:1a:d1: 73:29:a5:a6:18:61:d1:7d:39:63:65:91:6c:69:33: 84:73:6b:34:81:1b:79:1d:52:f3:2c:90:de:a4:f9: 0c:d1:51:cd:2a:1b:4e:2f:36:1f:d9:b6:de:8c:5b: a8:d7:3a:35:89:90:a6:89:54:ea:33:a6:9b:63:ef: e8:9e:8d:64:02:a8:30:b6:9d:d3:d2:58:bb:dc:53: c6:ba:df:a1:15:9c:2c:fc:9f:75:9b:7b:ff:fc:34: 44:ba:af:76:45:62:a6:14:0c:c9:1b:94:e9:f0:a3: 00:1e:2c:4d:0a:b7:94:84:2c:8a:3d:5a:47:d2:f4: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6D:D7:A4:6E:6D:C5:30:DC:4E:31:A3:2D:C3:C2:A6:8A:2E:89:10 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:95:43:02:b4:1c:8c:78:bc:cf:89:bc:d1:79:c0:32:2a:68: 8a:bb:78:cf:58:52:13:46:43:7f:b4:50:bd:52:cc:50:9f:f6: 16:2b:9f:bc:01:bf:bd:4a:85:88:b4:27:eb:b5:fe:f7:d6:30: f3:18:e1:12:a6:0e:de:1e:a5:d3:a4:4a:06:1d:36:8c:9f:44: f3:e9:36:47:18:92:49:43:b9:6b:91:13:44:64:ca:cd:19:41: b4:44:cc:9d:f7:8b:6f:50:2b:b6:a5:94:e7:15:d8:43:b7:03: 86:5d:c6:4c:89:ca:8f:16:c0:e4:af:a5:47:9d:d5:55:29:72: cd:4a:79:66:df:11:f2:93:30:4c:f0:cb:18:57:43:d5:30:30: c6:c1:9d:9a:c1:7e:28:5d:80:da:cf:9d:0f:4a:1b:ce:b3:2a: f8:65:92:93:f1:55:dd:d5:37:ed:20:2c:e9:21:8a:a8:a7:67: af:38:b9:b6:17:9b:02:cf:d5:35:72:2c:0e:b0:9e:df:24:85: 8c:9e:66:25:fb:41:19:bb:2c:81:c0:12:6b:00:81:f2:a9:e0: 85:56:4e:7d:4e:79:5f:ab:4b:cc:96:40:2c:d2:86:ba:64:eb: c3:e6:55:27:c8:8b:6c:5e:4a:42:81:fa:9b:e2:72:0d:58:bf: 2b:f2:61:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjYxMDI2MjMzODI5WhcNMjYxMTAyMjMzODI5WjAYMRYwFAYD VQQDEw02YWRmZTQ3NS0yNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjo6P9LpBUAEwuWIdSK1+TRRf7nMAxgXQZeXzMPsCsJndwcWhVenVtqupLN3 Gya4c0o59ir9sj3HxmMNp1x7Sp8UVrCvQ1j6g3/78WpycOC0SF6eNvun0yn6nY1U XRHgm8boRh60u+NcnPDQdF0NO8POPEFkv8gbYYe8vCbmOqIy8XrgGtFzKaWmGGHR fTljZZFsaTOEc2s0gRt5HVLzLJDepPkM0VHNKhtOLzYf2bbejFuo1zo1iZCmiVTq M6abY+/ono1kAqgwtp3T0li73FPGut+hFZws/J91m3v//DREuq92RWKmFAzJG5Tp 8KMAHixNCreUhCyKPVpH0vQFTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9t16Ru bcUw3E4xoy3DwqaKLokQMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaZVDArQcjHi8z4m80XnAMipoirt4z1hSE0ZDf7RQvVLMUJ/2FiufvAG/vUqF iLQn67X+99Yw8xjhEqYO3h6l06RKBh02jJ9E8+k2RxiSSUO5a5ETRGTKzRlBtETM nfeLb1ArtqWU5xXYQ7cDhl3GTInKjxbA5K+lR53VVSlyzUp5Zt8R8pMwTPDLGFdD 1TAwxsGdmsF+KF2A2s+dD0obzrMq+GWSk/FV3dU37SAs6SGKqKdnrzi5thebAs/V NXIsDrCe3ySFjJ5mJftBGbssgcASawCB8qnghVZOfU55X6tLzJZALNKGumTrw+ZV J8iLbF5KQoH6m+JyDVi/K/Jhxw== -----END CERTIFICATE-----Generated at Wed Oct 28 05:43:42 2026 by rpki-client