$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: ePK5tBgz0bcIfNBHjAG1VEslQJZ8RfxD7zvgvbD0ss0= Subject key identifier: E5:C7:24:89:D8:7B:E6:55:FD:92:26:C4:D1:C1:BF:8E:BD:E4:90:F1 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 0A68 Signing time: Mon 26 Oct 2026 19:45:16 +0000 Manifest this update: Mon 26 Oct 2026 19:45:16 +0000 Manifest next update: Mon 02 Nov 2026 19:45:16 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: 5k1GyNEvJevcmseu1IjSZN/Ri14lD83mO8Md2iMFcPM=) 2: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: 1IEjJ30lw69ZEHMKoLQ8EMNLbhqzITtfEQNas8rt+9s=) 3: 35E2088CDEDC11F09573FB8A516F56BC.roa (hash: Pkdcinjik27aP1313/FsgkfOJBBKQKn1ifEErEuk2l8=) 4: 0FD0ED72DEDF11F085D204E3526F56BC.roa (hash: pTLqg59yg6AHQtWauJEh8VBOaMqkkf2a1JioyqursTM=) 5: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: G0vU5JVbCZyLk1wSOWyQBhOy8mR2nS22Z/eltaU886M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2733 (0xaad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Oct 26 19:45:16 2026 GMT Not After : Nov 2 19:45:16 2026 GMT Subject: CN=6adfadcc-23d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:44:87:26:a3:d3:e6:8e:c9:80:67:66:dd: 9b:4d:78:33:e8:ea:10:48:1d:02:03:45:fa:b6:25: 33:f3:38:4e:fb:b0:c2:fe:b7:f0:80:53:b6:b1:38: 74:b0:7c:56:46:de:c2:30:27:44:06:f1:28:83:aa: 1a:33:63:c8:e0:c5:c1:d6:b9:9d:4b:bd:a1:1f:b2: 57:f1:04:9f:08:66:81:e2:ad:4b:ca:fc:9f:0f:aa: b0:a3:1e:23:98:49:a2:70:11:47:1d:8d:0a:53:6f: 13:09:3a:79:c0:86:51:18:c4:bf:d4:16:1a:d1:93: 26:81:b5:e4:f1:b7:5c:33:c2:8f:b7:c2:a3:69:29: 30:0b:87:c0:c7:aa:95:f6:98:a1:8a:52:7d:68:6b: 44:a9:e4:5b:91:b0:11:eb:88:f2:2e:33:d1:1e:1d: f1:d1:8a:a5:f0:bb:cc:60:f9:c0:1c:cb:96:9d:4f: 67:a8:da:b2:a1:92:49:b7:30:cd:a7:05:84:c3:5e: 36:b9:37:a0:d1:98:b2:3c:8b:89:7f:9f:16:6c:31: d9:ec:f3:56:03:00:9e:41:d4:11:c5:4e:a5:53:b8: 95:7d:fc:c1:2f:ca:a8:a8:9c:71:5b:49:5a:7f:d5: 8b:95:90:9a:0a:6a:07:53:0d:15:d2:b9:3b:cf:ba: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C7:24:89:D8:7B:E6:55:FD:92:26:C4:D1:C1:BF:8E:BD:E4:90:F1 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:6b:df:3c:6b:4e:0a:94:10:00:e9:a0:cb:b0:fb:9c:17: f9:a3:c9:64:08:05:11:a4:bd:de:f7:32:61:8d:a5:b1:e9:90: e8:e1:7c:43:11:e8:74:d6:c0:3f:1e:fb:50:7c:43:f1:0f:81: 1b:b5:6e:f8:c8:58:90:e7:60:c1:ef:87:43:6e:59:49:8c:95: c3:f4:2d:7b:c4:49:b8:9f:e9:34:e3:c5:c1:b1:35:92:e3:0a: a9:21:bb:5a:eb:de:66:3f:3b:39:fe:f3:07:ff:5a:b8:3b:78: 47:5f:c4:d4:61:bf:f5:19:84:0e:c0:11:73:eb:e6:e3:ba:3b: 22:3d:74:20:16:f8:49:de:f5:29:f7:37:4b:2d:32:57:3a:6f: 4c:57:20:a5:28:3c:83:b9:b2:95:43:d0:74:44:70:4c:4a:8f: cd:7c:12:d7:55:62:0e:84:e2:bc:05:cd:33:a1:a0:56:b0:85: bd:37:b8:d5:06:bc:25:d3:ea:5c:77:fe:e6:2c:f9:da:26:87: 35:ad:fb:2d:95:0d:5d:9c:44:67:10:e1:5d:cd:60:71:ea:b0: 34:f2:ec:6e:24:a7:d9:7d:4d:cb:7f:21:c7:33:07:11:0a:eb: 5f:5d:66:49:58:73:fa:19:dc:ec:b1:41:5e:03:a3:02:05:8c: 07:4f:75:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjYxMDI2MTk0NTE2WhcNMjYxMTAyMTk0NTE2WjAYMRYwFAYD VQQDEw02YWRmYWRjYy0yM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhgZEhyaj0+aOyYBnZt2bTXgz6OoQSB0CA0X6tiUz8zhO+7DC/rfwgFO2sTh0 sHxWRt7CMCdEBvEog6oaM2PI4MXB1rmdS72hH7JX8QSfCGaB4q1LyvyfD6qwox4j mEmicBFHHY0KU28TCTp5wIZRGMS/1BYa0ZMmgbXk8bdcM8KPt8KjaSkwC4fAx6qV 9pihilJ9aGtEqeRbkbAR64jyLjPRHh3x0Yql8LvMYPnAHMuWnU9nqNqyoZJJtzDN pwWEw142uTeg0ZiyPIuJf58WbDHZ7PNWAwCeQdQRxU6lU7iVffzBL8qoqJxxW0la f9WLlZCaCmoHUw0V0rk7z7rmXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXHJInY e+ZV/ZImxNHBv4695JDxMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaUlr3zxrTgqUEADpoMuw+5wX+aPJZAgFEaS93vcyYY2lsemQ6OF8QxHodNbA Px77UHxD8Q+BG7Vu+MhYkOdgwe+HQ25ZSYyVw/Qte8RJuJ/pNOPFwbE1kuMKqSG7 WuveZj87Of7zB/9auDt4R1/E1GG/9RmEDsARc+vm47o7Ij10IBb4Sd71Kfc3Sy0y VzpvTFcgpSg8g7mylUPQdERwTEqPzXwS11ViDoTivAXNM6GgVrCFvTe41Qa8JdPq XHf+5iz52iaHNa37LZUNXZxEZxDhXc1gceqwNPLsbiSn2X1Ny38hxzMHEQrrX11m SVhz+hnc7LFBXgOjAgWMB091Nw== -----END CERTIFICATE-----Generated at Tue Oct 27 15:55:11 2026 by rpki-client