$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: seV3hp8zBJ8IBA+/g/Ol9722wjOI8c3q1IMraNcPP58= Subject key identifier: 7B:4A:0E:7C:C9:28:1A:27:60:A7:40:0F:F9:89:5D:55:BF:AD:00:45 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 0232 Signing time: Fri 23 Oct 2026 03:10:49 +0000 Manifest this update: Fri 23 Oct 2026 03:10:48 +0000 Manifest next update: Fri 30 Oct 2026 03:10:48 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: Vlj9g11Dn+quAIalC5deaDzebV8bCWmM7DiffplcEFU=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SzmtgdmOFJZhk9jVTnV/yTe6X6D8nfk0jT/tOuImmRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 03:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: Oct 23 03:10:48 2026 GMT Not After : Oct 30 03:10:48 2026 GMT Subject: CN=6adad038-829d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:b0:ff:2c:4c:81:40:d7:f9:bf:5c:c0:9f: a0:53:10:a5:b5:2f:7c:88:02:bd:af:0d:6b:a4:11: 0b:7f:ad:a2:91:4c:29:c3:0d:56:98:61:86:6b:37: 6a:2e:ae:80:f2:6e:6d:5f:ea:a0:42:2b:6b:a8:92: ea:9a:c1:cc:d0:09:47:9e:42:c6:8b:e2:f1:a8:75: 3b:69:1b:09:48:ca:d8:88:38:b3:c9:35:3b:f9:91: 1e:52:3a:04:50:36:08:cd:3d:c9:d1:b2:19:b4:a2: 65:6e:e8:1d:89:fc:aa:47:98:cb:f3:2c:d7:80:5d: 0b:cd:09:e6:93:de:4a:62:ca:0b:50:14:70:e9:57: 0d:c2:2a:0c:0b:c2:40:91:62:7a:91:94:43:f9:ed: 7b:be:ee:6c:cb:55:1b:b8:43:1a:ac:db:3f:54:5b: 44:e5:be:a9:a5:b0:57:86:cd:cd:0b:9b:1d:8a:7d: b3:a4:72:a4:65:33:f9:da:cc:56:82:64:96:0c:c4: 97:f2:01:60:b2:02:65:6c:77:13:00:be:e2:40:61: 67:d7:39:07:40:c7:2c:61:31:cb:f9:53:39:46:8b: 81:d3:92:5f:1c:d3:85:82:97:02:24:af:e8:36:88: 39:f6:4a:37:4a:38:9d:b0:10:87:05:c2:e3:42:54: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4A:0E:7C:C9:28:1A:27:60:A7:40:0F:F9:89:5D:55:BF:AD:00:45 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:0c:ec:bb:27:5b:39:c7:ae:c1:5a:b7:f8:fa:a6:38:af:0a: a0:7a:f2:6c:6c:23:0f:5b:85:a2:f6:bd:22:1c:2d:7a:26:d6: 62:2f:9e:f6:2c:a5:79:23:c8:82:ac:c2:f0:d3:74:c2:5c:a0: b2:65:89:a7:a0:33:ff:b8:f6:19:e0:80:7a:b6:e2:ea:96:08: 2c:63:f0:1c:fc:92:44:ff:8e:8c:8a:4a:f2:ae:a5:2b:b6:a5: 79:29:ad:9e:7a:51:72:55:49:94:bb:64:f9:38:35:95:4a:32: 9d:f0:a3:26:b1:1c:26:4d:c5:97:c1:81:00:7e:50:87:53:3d: e5:d9:0d:b7:70:7f:56:c4:c0:bb:1b:76:88:0c:1a:a1:07:72: 6b:80:69:20:a6:5a:d4:d8:58:70:e9:14:19:38:dd:70:5c:4f: ab:9d:ec:45:97:62:30:7d:76:26:65:ef:b5:67:7d:04:02:9e: 36:5d:84:fd:3a:9a:ec:1d:ce:5d:44:4e:06:83:dc:ab:68:e7: 26:65:37:54:4f:47:00:63:89:12:d7:fd:13:46:2b:c7:7c:e8: 58:14:f0:3c:ed:a6:4c:84:85:e6:63:4f:5f:3c:50:03:12:7e: 26:6a:01:aa:b6:1d:06:43:6d:d7:f0:2b:96:a7:c5:81:c4:06: 33:90:24:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjYxMDIzMDMxMDQ4WhcNMjYxMDMwMDMxMDQ4WjAYMRYwFAYD VQQDEw02YWRhZDAzOC04MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrqw/yxMgUDX+b9cwJ+gUxCltS98iAK9rw1rpBELf62ikUwpww1WmGGGazdq Lq6A8m5tX+qgQitrqJLqmsHM0AlHnkLGi+LxqHU7aRsJSMrYiDizyTU7+ZEeUjoE UDYIzT3J0bIZtKJlbugdifyqR5jL8yzXgF0LzQnmk95KYsoLUBRw6VcNwioMC8JA kWJ6kZRD+e17vu5sy1UbuEMarNs/VFtE5b6ppbBXhs3NC5sdin2zpHKkZTP52sxW gmSWDMSX8gFgsgJlbHcTAL7iQGFn1zkHQMcsYTHL+VM5RouB05JfHNOFgpcCJK/o Nog59ko3SjidsBCHBcLjQlTKPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtKDnzJ KBonYKdAD/mJXVW/rQBFMB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFQzsuydbOceuwVq3+PqmOK8KoHrybGwjD1uFova9IhwteibWYi+e9iyleSPI gqzC8NN0wlygsmWJp6Az/7j2GeCAerbi6pYILGPwHPySRP+OjIpK8q6lK7aleSmt nnpRclVJlLtk+Tg1lUoynfCjJrEcJk3Fl8GBAH5Qh1M95dkNt3B/VsTAuxt2iAwa oQdya4BpIKZa1NhYcOkUGTjdcFxPq53sRZdiMH12JmXvtWd9BAKeNl2E/Tqa7B3O XUROBoPcq2jnJmU3VE9HAGOJEtf9E0Yrx3zoWBTwPO2mTISF5mNPXzxQAxJ+JmoB qrYdBkNt1/ArlqfFgcQGM5AkJw== -----END CERTIFICATE-----Generated at Fri Oct 23 20:09:10 2026 by rpki-client