$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: A+addhGVrxXTeOGbBt7s+0GhJJJVJ8Rz22SAlc6nk5g= Subject key identifier: EA:5E:54:3D:A0:44:35:36:62:6B:B3:9E:68:06:2C:3E:56:EC:D4:23 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0E42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0E19 Signing time: Mon 26 Oct 2026 17:50:18 +0000 Manifest this update: Mon 26 Oct 2026 17:50:18 +0000 Manifest next update: Mon 02 Nov 2026 17:50:18 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: +vYilKCXTe+T2N4AlfBWPeCaIfz7CW57oncRlp1S+Ic=) 2: 6FA8105A9B0311F1985317765C11F970.roa (hash: 1xRUftsJnRh7sCTB/2X4ITyJ8kMgTy2wBDyMf3YpsK4=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=) 4: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=) 5: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=) 6: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=) 7: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=) 8: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3650 (0xe42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Oct 26 17:50:18 2026 GMT Not After : Nov 2 17:50:18 2026 GMT Subject: CN=6adf92da-1517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b0:9d:0d:75:93:9d:f2:28:a3:7d:f6:e5:6f: 5b:0c:0d:5a:95:9e:82:8f:ab:fb:d2:f3:db:ed:40: 19:b5:ff:0a:a4:48:73:a3:53:7d:c8:9f:85:0b:98: 71:65:06:13:55:08:ad:eb:57:af:03:15:ea:55:4c: 33:cf:5d:47:52:68:b2:9f:6e:2c:cd:2d:38:13:d1: 39:ab:d0:57:01:e0:94:8c:3f:be:2a:6c:76:1b:98: a7:bd:2e:5d:0d:6d:42:b7:f5:4d:6a:c2:32:ca:d7: 0d:ae:dd:5b:12:21:05:a3:48:6d:9b:5c:ff:0f:52: ff:66:08:ce:54:e2:4f:22:4a:ee:24:a5:78:9f:40: bf:16:88:3f:1e:63:92:a2:eb:7d:c4:eb:68:58:56: cf:5d:a0:63:65:62:ea:51:94:5d:f5:e9:55:5e:8f: 2e:b7:81:09:44:c3:9e:bc:a8:9c:04:67:b2:bc:ee: 37:cc:35:84:1f:15:f2:5c:cd:b3:ec:87:bf:75:2e: 4f:f1:1b:03:62:1b:40:00:59:1d:d0:4b:f3:4b:2a: 7b:8c:df:f4:7f:fd:fb:eb:cd:a7:bb:e4:46:ea:32: c3:3c:38:01:2d:4c:49:a5:ee:1b:c9:5b:63:43:c5: c8:17:63:f5:df:1a:95:02:70:8c:2f:1a:15:ae:23: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5E:54:3D:A0:44:35:36:62:6B:B3:9E:68:06:2C:3E:56:EC:D4:23 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ed:7d:04:be:1a:5e:60:1b:f8:d8:8e:30:50:bd:f5:e4:71: 75:d3:d2:15:a7:d6:12:a3:a0:7c:2e:5b:77:a7:59:66:ac:c8: 1c:9c:ae:51:45:21:1f:61:63:4d:23:73:7e:fe:56:0a:6e:ae: f3:af:2b:ed:ef:a0:08:cc:80:8e:56:3b:a2:a1:81:2b:2b:3a: 4e:15:71:8b:cf:7e:16:55:64:ff:ce:fc:ea:42:50:b7:98:a4: 02:aa:6e:68:54:7b:48:6d:e6:3c:13:05:c6:42:98:2a:88:03: 80:24:31:a6:8c:a4:9f:00:7e:68:c7:56:6c:44:59:91:45:a6: f1:09:f4:f9:b0:01:b2:38:c1:2a:8f:af:5b:e8:00:1c:bd:25: f9:65:38:c7:f2:7f:67:81:d8:c4:a6:09:90:43:72:09:1e:fa: f6:b5:77:7d:c2:cd:f3:21:e0:58:88:f4:03:9f:58:1e:31:4b: 73:f2:e6:67:14:28:59:e9:42:a4:56:bd:90:6c:a3:d2:b2:0b: 1f:a4:dc:33:4b:38:03:b9:d9:03:47:9e:5c:b7:0d:8b:ff:d1: fe:4a:89:e3:4e:07:5a:a4:09:57:f8:0f:c4:c3:d9:54:b4:e1: 42:fe:be:c6:d5:be:bf:ee:68:80:e8:9e:70:f1:90:91:13:87: 97:47:0b:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYxMDI2MTc1MDE4WhcNMjYxMTAyMTc1MDE4WjAYMRYwFAYD VQQDEw02YWRmOTJkYS0xNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bCdDXWTnfIoo3325W9bDA1alZ6Cj6v70vPb7UAZtf8KpEhzo1N9yJ+FC5hx ZQYTVQit61evAxXqVUwzz11HUmiyn24szS04E9E5q9BXAeCUjD++Kmx2G5invS5d DW1Ct/VNasIyytcNrt1bEiEFo0htm1z/D1L/ZgjOVOJPIkruJKV4n0C/Fog/HmOS out9xOtoWFbPXaBjZWLqUZRd9elVXo8ut4EJRMOevKicBGeyvO43zDWEHxXyXM2z 7Ie/dS5P8RsDYhtAAFkd0EvzSyp7jN/0f/37682nu+RG6jLDPDgBLUxJpe4byVtj Q8XIF2P13xqVAnCMLxoVriN3xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpeVD2g RDU2YmuznmgGLD5W7NQjMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMe19BL4aXmAb+NiOMFC99eRxddPSFafWEqOgfC5bd6dZZqzIHJyuUUUhH2Fj TSNzfv5WCm6u868r7e+gCMyAjlY7oqGBKys6ThVxi89+FlVk/8786kJQt5ikAqpu aFR7SG3mPBMFxkKYKogDgCQxpoyknwB+aMdWbERZkUWm8Qn0+bABsjjBKo+vW+gA HL0l+WU4x/J/Z4HYxKYJkENyCR769rV3fcLN8yHgWIj0A59YHjFLc/LmZxQoWelC pFa9kGyj0rILH6TcM0s4A7nZA0eeXLcNi//R/kqJ404HWqQJV/gPxMPZVLThQv6+ xtW+v+5ogOiecPGQkROHl0cLMA== -----END CERTIFICATE-----Generated at Tue Oct 27 12:33:26 2026 by rpki-client