$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: evAOZNBm2IeiJWMvNCW1fEouTqvi+SiZ9aK5uug48U0= Subject key identifier: 64:DC:6C:B6:8C:73:A1:AB:31:A5:94:F7:21:9A:BC:70:3F:55:3D:33 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 02A4 Signing time: Sat 17 Oct 2026 02:08:22 +0000 Manifest this update: Sat 17 Oct 2026 02:08:22 +0000 Manifest next update: Sat 24 Oct 2026 02:08:22 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: WFsxE4vvZoeHy9hIqY6aJT/sEprz/9Nuqdmkxzn2uZM=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: bO2Khb7UpFTYk62drwjeihb7yhCn+p7oDMwlC5AtqAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 02:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Oct 17 02:08:22 2026 GMT Not After : Oct 24 02:08:22 2026 GMT Subject: CN=6ad2d896-1be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:43:66:d7:5c:52:b6:63:c1:79:39:7b:eb: 68:7b:fb:64:16:51:f7:f1:9b:af:e7:06:b2:8c:84: a8:8f:79:29:df:f6:bb:c7:32:58:34:a0:c4:6e:2f: 89:f3:54:69:69:b8:8c:5b:30:ab:21:39:c3:ac:6f: 03:ce:04:3a:2d:95:02:0f:77:5b:00:78:0a:9d:51: 43:f9:f2:f4:f5:54:b3:e6:38:4f:5f:be:3f:6f:85: b1:01:91:e7:34:5a:19:be:35:31:dd:a5:9b:59:4c: 3a:50:73:6b:9a:a0:3f:9c:7a:5c:ed:59:e7:44:bc: 50:c3:22:fc:b0:d1:da:70:3b:d3:52:42:43:e6:78: 7b:58:96:da:43:52:cd:88:d2:1c:3b:11:00:7a:52: 5b:64:a3:fc:b4:b0:58:07:78:52:f1:21:7e:1d:96: 69:d3:54:43:f7:23:55:ae:1b:82:e6:fb:e2:11:23: 87:ed:e6:86:09:bf:2e:78:bc:1b:1f:57:e6:58:e3: 17:34:3a:f5:fa:9d:ba:50:f6:85:6b:dd:72:dc:bd: aa:96:7b:da:70:42:b0:1b:02:42:d5:fa:35:cc:51: 04:2f:84:ff:ff:1d:43:f3:34:00:09:15:9d:c4:09: 2f:25:62:2a:18:92:20:62:ea:cf:23:55:6e:bd:ad: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DC:6C:B6:8C:73:A1:AB:31:A5:94:F7:21:9A:BC:70:3F:55:3D:33 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:98:c9:f9:e3:7e:cc:ff:5d:1f:b0:4b:98:6a:bd:d7:f9:5c: 9c:b1:e9:6e:a9:ad:c7:43:79:4f:30:95:1a:4a:12:d6:39:eb: 11:f9:90:11:86:03:1b:d5:c6:f0:2d:44:a3:a5:0e:28:9f:ec: 65:f0:07:6c:72:f2:02:6d:19:06:bc:82:09:49:00:5a:c6:3a: 85:cc:d7:f5:ae:77:f0:d6:b9:f8:c8:4e:7f:51:41:72:3d:d9: 5a:70:b6:9a:6c:ff:fc:68:3c:1c:3e:af:d8:3d:01:89:a5:ef: 61:63:a8:d9:3d:e4:d3:b8:fa:2a:7b:6a:01:7e:4e:9b:95:2e: 5b:3a:61:12:f2:c8:1a:8b:4a:9d:4d:52:65:9d:70:e4:1f:80: 8d:26:3b:6d:5a:4e:29:1f:64:f3:92:c6:43:52:35:13:c6:a3: 33:3b:91:dc:3c:59:d0:c2:58:91:59:2d:7d:ad:dc:3c:1c:cf: 48:7c:ee:58:77:34:18:60:2e:8d:2f:df:fe:c2:20:75:06:16: c9:13:89:4d:73:45:68:7e:8a:59:5b:94:18:d8:02:ef:93:04: f1:b1:b5:57:b6:09:9a:dd:3b:68:b2:08:89:5c:8a:aa:de:7e: df:e3:22:80:31:4e:a4:bd:6e:21:c2:ed:65:97:a3:91:df:6f: 4b:ad:1f:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjYxMDE3MDIwODIyWhcNMjYxMDI0MDIwODIyWjAYMRYwFAYD VQQDEw02YWQyZDg5Ni0xYmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aFDZtdcUrZjwXk5e+toe/tkFlH38Zuv5wayjISoj3kp3/a7xzJYNKDEbi+J 81RpabiMWzCrITnDrG8DzgQ6LZUCD3dbAHgKnVFD+fL09VSz5jhPX74/b4WxAZHn NFoZvjUx3aWbWUw6UHNrmqA/nHpc7VnnRLxQwyL8sNHacDvTUkJD5nh7WJbaQ1LN iNIcOxEAelJbZKP8tLBYB3hS8SF+HZZp01RD9yNVrhuC5vviESOH7eaGCb8ueLwb H1fmWOMXNDr1+p26UPaFa91y3L2qlnvacEKwGwJC1fo1zFEEL4T//x1D8zQACRWd xAkvJWIqGJIgYurPI1Vuva355QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTcbLaM c6GrMaWU9yGavHA/VT0zMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo5jJ+eN+zP9dH7BLmGq91/lcnLHpbqmtx0N5TzCVGkoS1jnrEfmQEYYDG9XG 8C1Eo6UOKJ/sZfAHbHLyAm0ZBryCCUkAWsY6hczX9a538Na5+MhOf1FBcj3ZWnC2 mmz//Gg8HD6v2D0BiaXvYWOo2T3k07j6KntqAX5Om5UuWzphEvLIGotKnU1SZZ1w 5B+AjSY7bVpOKR9k85LGQ1I1E8ajMzuR3DxZ0MJYkVktfa3cPBzPSHzuWHc0GGAu jS/f/sIgdQYWyROJTXNFaH6KWVuUGNgC75ME8bG1V7YJmt07aLIIiVyKqt5+3+Mi gDFOpL1uIcLtZZejkd9vS60f7w== -----END CERTIFICATE-----Generated at Sun Oct 18 08:02:07 2026 by rpki-client