$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft File: 489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json) Hash identifier: HY5Z9FB160lRKj3hYDo2cDRAfqRVOP+A9kICeaYIDv0= Subject key identifier: 6F:F9:6E:56:BC:3E:E9:43:2B:78:98:B8:9A:01:50:24:C7:E9:D8:C4 Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft Manifest number: 03D2 Signing time: Tue 27 Oct 2026 00:26:21 +0000 Manifest this update: Tue 27 Oct 2026 00:26:20 +0000 Manifest next update: Tue 03 Nov 2026 00:26:20 +0000 Files and hashes: 1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: 0ONuDgoN95Qw0TSzGHqt8594XTgHXyqSTSTII6tgPsA=) 2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: WIB+DaMR2Ho4TV5ghi0y5dK6Bf7NomVsRIG38qN6/F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 00:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Validity Not Before: Oct 27 00:26:20 2026 GMT Not After : Nov 3 00:26:20 2026 GMT Subject: CN=6adfefad-b08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:7e:3b:55:6f:07:7c:a1:53:f2:20:09:b5: 42:a5:1b:09:bb:03:a0:33:b8:b5:72:e2:8b:44:4a: f0:01:9c:fc:51:5f:c8:83:05:ca:98:25:bf:99:c1: 50:17:c8:4c:4f:fc:b1:f0:18:45:77:f7:15:4b:54: ff:82:9b:1f:7e:4f:5a:9b:89:58:e4:7e:da:27:31: 81:63:af:81:ae:26:eb:fa:08:e0:e0:13:7a:23:d7: ae:62:43:66:68:ab:8e:0d:f8:9d:70:f0:89:08:e7: 06:c4:51:d0:08:38:0a:49:ba:a2:c0:db:ab:11:da: 0e:ff:83:6a:64:1e:1e:2b:5a:9c:0c:19:44:42:8d: 78:f6:e9:a0:55:ab:14:31:4b:ee:2e:28:29:13:3c: 2a:dc:84:a4:8d:75:f8:ea:f2:ae:90:7f:e9:6b:c3: 8f:7b:dd:4c:78:f2:9f:5f:b1:31:e6:7c:45:dc:62: 1f:99:06:9a:79:3a:b9:22:5c:e2:5a:90:4c:29:ac: 2c:d6:0d:b1:a4:43:ae:cc:d9:26:e2:d8:4e:a3:68: 82:0a:91:bc:c1:59:bd:bb:40:1e:49:f4:d6:6d:b3: 08:5a:ad:24:35:c1:5d:1d:92:ad:1f:78:29:c8:dd: 79:a2:11:60:73:a6:00:49:07:c5:f3:e7:f9:3e:73: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:6E:56:BC:3E:E9:43:2B:78:98:B8:9A:01:50:24:C7:E9:D8:C4 X509v3 Authority Key Identifier: keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:96:09:f7:c5:7e:22:93:b2:a9:f8:6e:cb:ce:25:00:fc:0d: fc:ae:b8:cf:0c:ba:0c:50:72:a4:99:ef:94:e6:0e:05:56:a1: 26:79:ce:bf:91:a0:06:15:6e:0c:5e:47:21:2c:2b:13:d7:1d: b3:20:c3:00:bb:07:dd:f3:ce:7a:9f:ec:6e:38:ff:57:ab:1f: 7e:99:ac:d2:8d:83:fb:48:c4:14:ad:8f:3f:c3:de:d6:e4:3c: 47:46:9d:39:cf:76:53:c6:ce:37:6d:79:f6:cb:ea:ab:a1:7d: 99:be:36:83:40:58:88:4f:b0:d9:27:d0:41:5d:a2:4d:5d:82: d2:8f:75:ee:91:51:c5:1c:47:e3:84:22:b6:38:80:4c:1f:be: 9d:cb:78:94:49:36:b2:8d:48:42:50:07:f7:62:c2:86:08:7b: 7a:d1:31:82:cc:9c:8f:48:4d:3c:65:ed:21:c5:11:5f:ba:15: 5a:a8:1a:80:38:dd:7a:30:35:ff:d4:82:a6:d8:8c:4e:0f:7a: 8c:97:b6:22:67:84:84:aa:6e:69:38:6a:68:69:76:d6:bc:b5: eb:26:5d:90:ef:6d:c6:d3:ad:df:8c:f9:e0:03:22:2d:fd:19: cb:d9:09:1c:8f:6f:f0:3d:6a:e3:34:26:e6:70:5d:b8:26:c0: d6:6d:10:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMDIxMTAvBgNVBAUTKEUzQ0Y0NUY4MDUxMDYzQkJEQjMxN0ZERDE1MTEzMkE5 NDAwNEZENUIwHhcNMjYxMDI3MDAyNjIwWhcNMjYxMTAzMDAyNjIwWjAYMRYwFAYD VQQDEw02YWRmZWZhZC1iMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu95+O1VvB3yhU/IgCbVCpRsJuwOgM7i1cuKLRErwAZz8UV/IgwXKmCW/mcFQ F8hMT/yx8BhFd/cVS1T/gpsffk9am4lY5H7aJzGBY6+Bribr+gjg4BN6I9euYkNm aKuODfidcPCJCOcGxFHQCDgKSbqiwNurEdoO/4NqZB4eK1qcDBlEQo149umgVasU MUvuLigpEzwq3ISkjXX46vKukH/pa8OPe91MePKfX7Ex5nxF3GIfmQaaeTq5Ilzi WpBMKaws1g2xpEOuzNkm4thOo2iCCpG8wVm9u0AeSfTWbbMIWq0kNcFdHZKtH3gp yN15ohFgc6YASQfF8+f5PnODvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/5bla8 PulDK3iYuJoBUCTH6djEMB8GA1UdIwQYMBaAFOPPRfgFEGO72zF/3RURMqlABP1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIwMi8wQUZFQ0E3MEY3 MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3dmJNWF9kRlJFeXFVQUVf VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ4OUYtQVVRWTd2Yk1YX2RGUkV5cVVBRV9Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIwMi8wQUZFQ0E3MEY3MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3 dmJNWF9kRlJFeXFVQUVfVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPpYJ98V+IpOyqfhuy84lAPwN/K64zwy6DFBypJnvlOYOBVahJnnOv5GgBhVu DF5HISwrE9cdsyDDALsH3fPOep/sbjj/V6sffpms0o2D+0jEFK2PP8Pe1uQ8R0ad Oc92U8bON2159svqq6F9mb42g0BYiE+w2SfQQV2iTV2C0o917pFRxRxH44QitjiA TB++nct4lEk2so1IQlAH92LChgh7etExgsycj0hNPGXtIcURX7oVWqgagDjdejA1 /9SCptiMTg96jJe2ImeEhKpuaThqaGl21ry16yZdkO9txtOt34z54AMiLf0Zy9kJ HI9v8D1q4zQm5nBduCbA1m0QKA== -----END CERTIFICATE-----Generated at Thu Oct 29 00:17:03 2026 by rpki-client