$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft File: AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft (raw, json) Hash identifier: 2xOdFpc/ozyVEXnPF03EAXR8OWwBmJclOneIOOqj8ms= Subject key identifier: E5:B2:BB:88:C7:1F:5C:FE:7A:3F:8F:18:39:69:D5:E7:24:C6:55:0B Authority key identifier: 00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4 Certificate issuer: /CN=A9170DF0/serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft Manifest number: 025B Signing time: Sun 25 Oct 2026 02:34:39 +0000 Manifest this update: Sun 25 Oct 2026 02:34:39 +0000 Manifest next update: Sun 01 Nov 2026 02:34:39 +0000 Files and hashes: 1: AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl (hash: E2IjB9fq5k6EluY+1lWICKz9T46DDZdwqIPAcrmf/Es=) 2: B022AC18368811EEB1BFE56AC4F9AE02.roa (hash: ChPU5idLRzFBAUfZXdVDn4ZS21EQnqWVbj2XL7b56XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DF0, serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4 Validity Not Before: Oct 25 02:34:39 2026 GMT Not After : Nov 1 02:34:39 2026 GMT Subject: CN=6add6abf-f6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:c0:ed:8f:60:19:b4:1f:e4:87:13:2c:17: 63:80:5c:11:bf:cb:8a:07:97:a5:c5:23:43:97:71: 47:cf:39:3b:e0:c8:6b:9c:72:e1:89:34:62:2c:4a: 2e:96:fd:40:cc:5d:b6:2c:8a:a1:b3:4f:75:03:32: 77:ca:41:e1:b5:28:06:3a:71:d5:70:1c:f3:15:3d: 03:82:6c:17:e3:dd:e0:7e:d5:99:e7:80:dc:84:65: 7d:0d:88:e1:a9:7f:e0:da:e4:4a:a2:cb:d4:59:f8: 77:86:36:5d:b0:90:a4:89:54:f1:14:03:61:9a:27: da:1f:22:2d:e0:14:ed:6d:80:3f:6f:9f:14:c6:bf: 73:17:00:25:75:52:18:26:e8:b9:a0:18:9e:dd:48: b7:b3:66:cd:a3:ac:d7:f3:c5:57:cd:a9:5b:fa:f2: 6f:b6:e7:a9:3e:e1:bd:95:9a:6e:20:33:5e:d0:a0: 2d:b8:4d:20:fe:11:a2:4e:f8:5f:3e:82:e4:61:59: 4b:e5:e0:7b:87:5e:0b:80:2c:63:01:8e:c8:88:12: 75:9a:2b:c7:a2:eb:27:48:c8:b6:fd:79:74:90:dc: 75:f6:45:11:83:dc:67:c3:e8:59:30:7d:8f:ec:b1: e3:95:ef:db:b6:2c:5a:a9:10:a2:7c:ec:3a:b1:a8: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B2:BB:88:C7:1F:5C:FE:7A:3F:8F:18:39:69:D5:E7:24:C6:55:0B X509v3 Authority Key Identifier: keyid:00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7c:35:78:8f:3f:07:32:f9:8f:b3:83:69:2d:c9:58:c2:12: 81:20:78:4c:08:11:f7:45:7d:68:4c:a4:56:70:b9:28:03:f1: 08:ff:aa:cc:a6:4f:5d:17:ce:9e:85:fe:41:25:8e:90:4e:66: a4:e6:82:ed:58:5c:77:03:d8:6c:53:22:51:4b:3b:2a:fc:bb: 4a:5b:7b:c0:40:6c:9f:51:e2:e4:be:59:7a:64:5a:38:c5:70: d9:e0:7c:ec:6d:c2:4a:d3:b9:e6:bb:7c:b6:4f:1a:7c:28:7c: c9:61:be:b6:c4:88:58:5b:9d:84:b6:33:d0:2d:36:bd:0b:a6: fe:8b:b7:36:58:51:ce:25:7d:e0:37:c7:c3:82:6a:35:8c:bf: ba:5d:57:93:27:af:33:79:3d:a6:ed:36:b5:9c:c2:d0:6a:09: 06:60:b4:39:a3:b0:23:3b:29:cf:0c:1a:36:26:72:ff:32:f4: 3c:88:3a:46:c4:04:9b:d4:1a:56:13:9a:be:cb:f2:17:4d:0f: 59:5e:15:0e:3d:8d:0e:20:78:18:b1:0a:d1:1b:08:91:6c:f6: ec:2a:97:b9:21:98:a3:5e:fd:a5:af:09:6a:2c:6f:dc:5f:46: be:27:18:c2:09:e1:12:a4:a8:6f:6d:2e:fb:02:73:e5:af:46: 6e:4f:dd:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERjAxMTAvBgNVBAUTKDAwMDhFMkVFQkU2QzU1RjI1OTQ5NDlBNDc3Rjg2NzdC RkY0QTdGRTQwHhcNMjYxMDI1MDIzNDM5WhcNMjYxMTAxMDIzNDM5WjAYMRYwFAYD VQQDEw02YWRkNmFiZi1mNmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk/A7Y9gGbQf5IcTLBdjgFwRv8uKB5elxSNDl3FHzzk74MhrnHLhiTRiLEou lv1AzF22LIqhs091AzJ3ykHhtSgGOnHVcBzzFT0DgmwX493gftWZ54DchGV9DYjh qX/g2uRKosvUWfh3hjZdsJCkiVTxFANhmifaHyIt4BTtbYA/b58Uxr9zFwAldVIY Jui5oBie3Ui3s2bNo6zX88VXzalb+vJvtuepPuG9lZpuIDNe0KAtuE0g/hGiTvhf PoLkYVlL5eB7h14LgCxjAY7IiBJ1mivHousnSMi2/Xl0kNx19kURg9xnw+hZMH2P 7LHjle/btixaqRCifOw6sagoKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWyu4jH H1z+ej+PGDlp1eckxlULMB8GA1UdIwQYMBaAFAAI4u6+bFXyWUlJpHf4Z3v/Sn/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MERGMC81REVGQUNGMDM2 NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1ZmSlpTVW1rZF9obmVfOUtm LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FBamk3cjVzVmZKWlNVbWtkX2huZV85S2YtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MERGMC81REVGQUNGMDM2NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1Zm SlpTVW1rZF9obmVfOUtmLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASnw1eI8/BzL5j7ODaS3JWMISgSB4TAgR90V9aEykVnC5KAPxCP+qzKZPXRfO noX+QSWOkE5mpOaC7VhcdwPYbFMiUUs7Kvy7Slt7wEBsn1Hi5L5ZemRaOMVw2eB8 7G3CStO55rt8tk8afCh8yWG+tsSIWFudhLYz0C02vQum/ou3NlhRziV94DfHw4Jq NYy/ul1XkyevM3k9pu02tZzC0GoJBmC0OaOwIzspzwwaNiZy/zL0PIg6RsQEm9Qa VhOavsvyF00PWV4VDj2NDiB4GLEK0RsIkWz27CqXuSGYo179pa8Jaixv3F9GvicY wgnhEqSob20u+wJz5a9Gbk/diQ== -----END CERTIFICATE-----Generated at Mon Oct 26 06:27:37 2026 by rpki-client