$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json) Hash identifier: 8QZrTTJacpAfi97bnBg9V2jw3UxC7AyeodD91rWQ71U= Subject key identifier: FE:E2:E0:44:92:DD:01:1C:E5:4B:0C:F0:5F:B4:C7:AB:54:E5:E9:5E Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0DF6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft Manifest number: 0DE7 Signing time: Mon 26 Oct 2026 15:32:01 +0000 Manifest this update: Mon 26 Oct 2026 15:32:00 +0000 Manifest next update: Mon 02 Nov 2026 15:32:00 +0000 Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: hvVMrkdcSXDqSFIRIfiXylA+Q6oNYD0X6xXsc1YHDtc=) 2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: H0Q9Dnfcv7v0NLSRVYRS5bV6BNFCWPP9Zw2TMZ3l3UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3574 (0xdf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: Oct 26 15:32:00 2026 GMT Not After : Nov 2 15:32:00 2026 GMT Subject: CN=6adf7271-4c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:03:6d:d8:45:fd:54:1b:25:40:f9:15:58: e6:16:ae:0c:3c:5f:9e:8e:3c:e1:2f:42:34:ff:0f: 74:2f:03:7f:4a:24:3c:79:34:69:c2:27:89:86:f3: a9:9d:cd:90:2f:13:0a:42:02:9b:86:6b:99:02:b7: c2:be:71:3f:d2:c0:ef:a2:2d:07:1d:b4:07:ad:31: 6f:b6:c6:89:bb:f2:d5:f5:54:ca:7c:a1:82:3d:59: 5e:7c:89:07:06:34:04:3f:08:e4:ec:d3:37:73:d2: ef:25:3a:83:f2:ac:9c:05:f5:26:1a:23:33:2d:9e: 99:78:17:92:13:0f:4d:22:c9:d3:9d:45:a4:fe:78: 40:e2:24:43:5c:8f:0c:95:69:f6:f3:58:40:6d:9f: 01:b6:70:f9:74:72:1a:1d:89:49:6a:66:a9:71:29: 6f:28:1c:73:4e:09:57:ed:8b:26:65:1f:7e:90:58: 3b:1b:93:83:18:76:0e:c2:dc:15:44:7b:4e:31:b4: 53:87:6b:aa:e0:34:50:a0:a6:fd:ee:56:c7:7c:d7: d0:02:5c:3a:69:0e:52:aa:d1:72:e3:a6:97:fa:4f: e5:ff:dc:0d:19:0d:00:6a:79:c7:25:16:39:7b:73: 32:8d:79:e8:93:a0:b8:d4:59:d6:fd:70:c5:05:59: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E2:E0:44:92:DD:01:1C:E5:4B:0C:F0:5F:B4:C7:AB:54:E5:E9:5E X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:e4:c9:a6:fd:48:6c:0b:cf:3d:b8:ad:85:9d:47:ef:f4:a7: 85:fa:fc:dc:5b:c4:12:9a:2d:96:ec:d7:ac:d0:1a:e2:a9:14: 56:f3:c9:43:98:26:fb:e5:f8:82:24:79:c9:8a:83:4a:4c:13: 4d:65:62:72:32:30:9e:46:11:ef:bd:53:d4:36:09:5a:5f:a6: 10:47:2c:6e:68:4c:7e:bf:16:82:d0:0a:1d:2f:6b:2c:8c:6f: 3b:71:5f:63:45:83:8f:47:69:02:9e:c7:d8:ba:64:55:80:b1: 3f:9f:2a:98:ca:d5:6b:d6:83:16:75:30:29:2e:a9:17:77:2a: 2f:9a:a2:41:e7:2d:96:48:2b:9c:ad:19:28:b9:0f:a3:f4:06: 94:36:c8:e7:7c:e1:58:28:e2:1d:27:9f:93:d1:36:cf:78:5b: 6d:a0:f2:f7:c5:27:3e:46:29:a8:de:78:e5:51:9e:bd:8d:ae: 5b:b8:4e:4e:e8:b7:ff:1c:42:90:c2:85:8f:72:4b:73:ab:43: 63:03:2d:a8:13:80:25:c5:d2:d0:98:81:15:46:9d:4c:56:ee: 15:ce:a8:a5:1e:5e:d8:35:d7:c5:d8:3f:66:25:15:f2:4e:2d: 67:95:e6:9e:7a:7f:c5:4b:6b:17:16:19:2d:9d:99:f5:78:d5: 2e:8b:06:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjYxMDI2MTUzMjAwWhcNMjYxMTAyMTUzMjAwWjAYMRYwFAYD VQQDEw02YWRmNzI3MS00YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3IDbdhF/VQbJUD5FVjmFq4MPF+ejjzhL0I0/w90LwN/SiQ8eTRpwieJhvOp nc2QLxMKQgKbhmuZArfCvnE/0sDvoi0HHbQHrTFvtsaJu/LV9VTKfKGCPVlefIkH BjQEPwjk7NM3c9LvJTqD8qycBfUmGiMzLZ6ZeBeSEw9NIsnTnUWk/nhA4iRDXI8M lWn281hAbZ8BtnD5dHIaHYlJamapcSlvKBxzTglX7YsmZR9+kFg7G5ODGHYOwtwV RHtOMbRTh2uq4DRQoKb97lbHfNfQAlw6aQ5SqtFy46aX+k/l/9wNGQ0AannHJRY5 e3MyjXnok6C41FnW/XDFBVn6tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7i4ESS 3QEc5UsM8F+0x6tU5eleMB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABuTJpv1IbAvPPbithZ1H7/Snhfr83FvEEpotluzXrNAa4qkUVvPJQ5gm++X4 giR5yYqDSkwTTWVicjIwnkYR771T1DYJWl+mEEcsbmhMfr8WgtAKHS9rLIxvO3Ff Y0WDj0dpAp7H2LpkVYCxP58qmMrVa9aDFnUwKS6pF3cqL5qiQectlkgrnK0ZKLkP o/QGlDbI53zhWCjiHSefk9E2z3hbbaDy98UnPkYpqN545VGevY2uW7hOTui3/xxC kMKFj3JLc6tDYwMtqBOAJcXS0JiBFUadTFbuFc6opR5e2DXXxdg/ZiUV8k4tZ5Xm nnp/xUtrFxYZLZ2Z9XjVLosGkA== -----END CERTIFICATE-----Generated at Wed Oct 28 11:51:40 2026 by rpki-client