$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json) Hash identifier: 9SImLPiTm32leAP4rJypq9xVSjJtbrcZj3xn8zU1ym4= Subject key identifier: 9E:B9:84:90:EB:22:1E:3D:BD:86:37:20:08:01:79:7B:56:B4:11:DC Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Certificate serial: 3622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft Manifest number: 35CD Signing time: Sat 24 Oct 2026 14:22:30 +0000 Manifest this update: Sat 24 Oct 2026 14:22:30 +0000 Manifest next update: Sat 31 Oct 2026 14:22:30 +0000 Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: 2VkD1M7vFRfo0NDAlZm7MpOH+ykTwEOl1jT7ymMdTDo=) 2: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: 7mgw4y6gg1SBlVNEQHsCERtFq1CWUXWcJo30iKspb4c=) 3: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: K3NPwS93LI39vDCydod4QMQz06LNTlu8HQCmLQ09JU0=) 4: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: yIdjqnTmZ+HqSiiYs29cxCLQvArNG95hY2OgROFWMog=) 5: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: G3AZcfArLBgVhuokmF/dQxJk3out8og0ZVXYVtVJ8gU=) 6: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: vOyegaR5JJSUQOjhLZ6HxjzSX6xypEzpGZlpHWRdUcE=) 7: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: mRHLmD+WT0k5/h+bHDnrdCDBqIL+VXOXAAhCSmlrQck=) 8: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: guwFqD3altsZHbc1dAy4+jYBLpjvPALMbPm6i0aYzrc=) 9: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: cYXAizbDFkYc4+qxaI9fGjQHetEUsCO8dm+QjI7b2mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13858 (0x3622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Validity Not Before: Oct 24 14:22:30 2026 GMT Not After : Oct 31 14:22:30 2026 GMT Subject: CN=6adcbf26-01d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:98:28:7a:e3:5c:d5:d7:cf:9a:56:a2:ea: ac:a2:78:0b:24:03:de:5c:ae:5e:15:f8:1e:6e:67: 96:3d:73:f6:c6:81:6f:76:fc:a7:bf:b0:ca:51:d9: 4d:39:4e:26:4e:d1:1b:1e:a4:e1:d0:ee:b0:42:74: e3:6b:14:30:66:3c:b0:10:fa:d8:94:b8:ea:88:0c: 52:25:92:5c:36:96:01:41:56:71:a5:a6:40:26:e3: 26:be:d1:c7:dd:39:e0:06:a9:c3:24:38:a4:07:f8: ef:bb:5f:a4:6e:59:85:9d:c6:00:30:74:60:1c:9f: 13:b9:ee:ff:0c:eb:d5:99:74:48:00:e6:34:b0:d1: 3a:d1:23:3c:83:5f:39:ad:06:46:fd:d9:28:e3:b0: 0c:26:98:dd:95:da:9b:b1:3f:61:b9:01:3a:9f:04: e9:ec:76:7e:d3:ff:9a:6a:0d:cc:aa:1e:44:26:5a: 07:28:03:df:8d:c0:bb:53:d0:e6:93:27:3f:ef:08: 25:1e:f5:ea:fc:d5:60:21:0f:15:a9:88:99:5f:cf: 33:c8:f1:d9:af:7c:72:f5:b4:3f:4b:91:30:bf:42: 17:3a:dc:b3:b9:5d:84:79:b9:42:bc:f1:3c:2f:fb: d0:71:fb:5b:9e:cc:4b:94:21:1a:4c:00:04:ba:a0: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B9:84:90:EB:22:1E:3D:BD:86:37:20:08:01:79:7B:56:B4:11:DC X509v3 Authority Key Identifier: keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:51:d7:78:a9:10:96:14:f4:c2:a2:a6:10:9c:08:06:09:e6: 15:fe:40:c4:ed:19:2f:b2:39:d8:31:15:dd:a0:e1:47:81:dc: 09:68:d3:1e:8a:d2:72:4d:6f:fd:6e:91:6f:49:ea:28:60:ce: d2:e6:7d:da:28:7a:1c:90:bd:74:46:8d:9f:bf:a4:42:f0:71: f0:88:c3:1d:02:df:80:68:55:60:7b:16:c2:26:e2:5f:c6:e2: ac:49:2f:75:82:4c:be:71:4a:b8:f4:95:17:40:bf:8d:1e:67: 70:ee:e5:72:63:1b:e5:79:24:ea:a9:94:6d:3c:ef:d0:63:57: 80:cc:c4:bf:d4:02:36:88:17:a8:2a:93:14:1b:9d:8f:18:76: c0:4d:f6:53:e0:da:e0:03:c7:de:74:e7:c9:97:42:90:0b:91: f6:e5:3a:44:36:0b:0a:7a:b1:85:e4:6e:89:1e:ca:80:5f:74: ef:52:82:b7:5c:9e:ff:e6:96:cf:20:8e:9a:f1:84:f2:82:79: 8b:bf:e2:67:3c:91:64:59:3e:8d:f0:78:b7:0b:fd:25:e3:2e: fc:c1:b1:c3:1b:d1:41:a2:cf:4f:99:97:05:23:23:3e:1f:17: 2b:43:bb:81:c7:73:79:3e:76:4e:92:54:c4:f8:d4:1e:15:22: 39:ab:9b:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG NzMzQTJGMUEwHhcNMjYxMDI0MTQyMjMwWhcNMjYxMDMxMTQyMjMwWjAYMRYwFAYD VQQDEw02YWRjYmYyNi0wMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o+YKHrjXNXXz5pWouqsongLJAPeXK5eFfgebmeWPXP2xoFvdvynv7DKUdlN OU4mTtEbHqTh0O6wQnTjaxQwZjywEPrYlLjqiAxSJZJcNpYBQVZxpaZAJuMmvtHH 3TngBqnDJDikB/jvu1+kblmFncYAMHRgHJ8Tue7/DOvVmXRIAOY0sNE60SM8g185 rQZG/dko47AMJpjdldqbsT9huQE6nwTp7HZ+0/+aag3Mqh5EJloHKAPfjcC7U9Dm kyc/7wglHvXq/NVgIQ8VqYiZX88zyPHZr3xy9bQ/S5Ewv0IXOtyzuV2EeblCvPE8 L/vQcftbnsxLlCEaTAAEuqAN3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ65hJDr Ih49vYY3IAgBeXtWtBHcMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzVCMC80MEM4RDVBNjFEODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNx MEttX21TVm9PNjczTTZMeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmFHXeKkQlhT0wqKmEJwIBgnmFf5AxO0ZL7I52DEV3aDhR4HcCWjTHorSck1v /W6Rb0nqKGDO0uZ92ih6HJC9dEaNn7+kQvBx8IjDHQLfgGhVYHsWwibiX8birEkv dYJMvnFKuPSVF0C/jR5ncO7lcmMb5Xkk6qmUbTzv0GNXgMzEv9QCNogXqCqTFBud jxh2wE32U+Da4APH3nTnyZdCkAuR9uU6RDYLCnqxheRuiR7KgF9071KCt1ye/+aW zyCOmvGE8oJ5i7/iZzyRZFk+jfB4twv9JeMu/MGxwxvRQaLPT5mXBSMjPh8XK0O7 gcdzeT52TpJUxPjUHhUiOaubGg== -----END CERTIFICATE-----Generated at Mon Oct 26 10:57:49 2026 by rpki-client