$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: GshpetdQAaiJlk6KREaxa1izqm2LeBxusj2goJWDC1M= Subject key identifier: A6:21:01:D8:B4:2C:15:47:52:08:00:A5:B0:93:8B:D4:B8:90:73:8B Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: 0219 Signing time: Wed 28 Oct 2026 22:57:38 +0000 Manifest this update: Wed 28 Oct 2026 22:57:38 +0000 Manifest next update: Wed 04 Nov 2026 22:57:38 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: uCdJvofJ5DECvGc31NkA+UwRaRkQPTaN/JNsCRaz3ic=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: CK9QQVOiiB542PQgUfZIdXYNAnS5iyZdXbxdEf+gFCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: Oct 28 22:57:38 2026 GMT Not After : Nov 4 22:57:38 2026 GMT Subject: CN=6ae27de2-c78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:83:21:95:c0:c4:2f:13:f0:43:14:66:8e: 43:26:c4:1e:eb:9d:22:63:63:c3:39:ca:1c:3a:d7: d3:40:5b:30:a7:7f:de:cd:ad:d2:b4:34:84:7b:76: fe:23:e6:de:dc:e8:ba:4e:ec:bf:b0:d3:53:5d:8b: e6:90:58:4e:40:35:e4:0c:89:f4:47:ab:e6:3d:66: 28:ff:c0:4a:24:0f:18:ed:86:7f:d6:18:f1:94:f5: 9e:6c:fc:56:d3:4f:61:b9:4b:a3:ac:c3:62:0c:14: 06:2d:8d:80:38:08:04:f7:b7:14:b3:49:cc:27:37: 83:7f:de:91:5c:94:9e:3b:2d:9e:15:ff:43:84:bb: d2:8b:64:a7:b6:80:c8:63:32:ee:83:25:39:7e:0e: 63:56:d5:7c:ba:ff:08:88:18:d5:e0:bf:d5:31:41: 9b:01:64:54:60:db:d3:2b:8a:04:7d:8b:ae:35:20: 27:46:ed:a0:d5:d6:be:03:04:7e:b4:1c:e7:b0:a5: cc:3a:9b:c8:be:0f:35:87:10:1a:31:44:43:64:6e: 11:5a:ad:40:f9:86:17:76:70:91:be:bb:ac:40:05: 1e:35:bc:73:e0:6e:3e:3e:6c:c3:44:05:89:04:6f: cf:c6:dc:c7:8d:bb:a4:7b:17:3b:61:d2:e1:ad:51: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:21:01:D8:B4:2C:15:47:52:08:00:A5:B0:93:8B:D4:B8:90:73:8B X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:49:a9:db:76:c9:c0:53:d6:dd:83:b9:8a:a9:0f:13:0b:63: 72:15:ed:01:2d:d7:4e:1e:8b:15:26:f2:24:7b:bd:28:06:6b: 68:ba:c3:82:57:70:56:51:4c:51:60:c5:d4:a2:73:88:01:ce: 9f:18:ca:2e:6c:08:84:e0:ef:21:2c:26:ab:17:07:ec:ba:6c: e2:2f:28:05:be:b3:ac:a1:91:b9:ed:39:64:38:95:56:4f:31: d7:54:b3:e6:c6:9a:30:8b:5c:94:43:61:99:2d:8f:9e:6d:fd: 18:f6:c4:37:37:95:ba:24:d2:dd:3f:39:1e:40:ae:af:64:a6: 31:9f:14:be:bc:7c:14:4f:08:33:7a:b6:31:c6:30:3f:ec:da: 26:b9:7c:70:f5:2d:21:da:65:9a:76:22:75:ab:6d:f0:43:c3: 74:4f:25:74:99:5f:0e:67:74:7e:9e:3f:7a:6f:1d:da:b2:10: 9c:3e:cd:2e:74:bb:ca:67:7b:ab:75:cd:8e:c1:b8:b1:4a:c6: c6:5d:3b:5a:79:51:5f:ce:0a:cd:28:c3:c4:49:6f:c7:3e:41: 54:e4:c7:04:a5:07:14:e4:3a:8f:88:49:6f:b0:7a:bf:ce:73: d1:4b:7a:69:21:28:c5:e1:ba:86:1e:d6:83:0c:1f:52:63:4a: 8e:54:ac:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjYxMDI4MjI1NzM4WhcNMjYxMTA0MjI1NzM4WjAYMRYwFAYD VQQDEw02YWUyN2RlMi1jNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16qDIZXAxC8T8EMUZo5DJsQe650iY2PDOcocOtfTQFswp3/eza3StDSEe3b+ I+be3Oi6Tuy/sNNTXYvmkFhOQDXkDIn0R6vmPWYo/8BKJA8Y7YZ/1hjxlPWebPxW 009huUujrMNiDBQGLY2AOAgE97cUs0nMJzeDf96RXJSeOy2eFf9DhLvSi2SntoDI YzLugyU5fg5jVtV8uv8IiBjV4L/VMUGbAWRUYNvTK4oEfYuuNSAnRu2g1da+AwR+ tBznsKXMOpvIvg81hxAaMURDZG4RWq1A+YYXdnCRvrusQAUeNbxz4G4+PmzDRAWJ BG/PxtzHjbukexc7YdLhrVHRBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYhAdi0 LBVHUggApbCTi9S4kHOLMB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXkmp23bJwFPW3YO5iqkPEwtjchXtAS3XTh6LFSbyJHu9KAZraLrDgldwVlFM UWDF1KJziAHOnxjKLmwIhODvISwmqxcH7Lps4i8oBb6zrKGRue05ZDiVVk8x11Sz 5saaMItclENhmS2Pnm39GPbENzeVuiTS3T85HkCur2SmMZ8Uvrx8FE8IM3q2McYw P+zaJrl8cPUtIdplmnYidatt8EPDdE8ldJlfDmd0fp4/em8d2rIQnD7NLnS7ymd7 q3XNjsG4sUrGxl07WnlRX84KzSjDxElvxz5BVOTHBKUHFOQ6j4hJb7B6v85z0Ut6 aSEoxeG6hh7WgwwfUmNKjlSsVw== -----END CERTIFICATE-----Generated at Thu Oct 29 22:54:48 2026 by rpki-client