$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: SOYkVfP6stO2XSYlEntiWl15X5VbKrCX6hPQTx18CKc= Subject key identifier: BE:10:14:8A:23:7E:72:06:5C:16:2F:55:9D:E3:B2:FE:DD:5F:B1:8D Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 026A Signing time: Tue 27 Oct 2026 02:16:48 +0000 Manifest this update: Tue 27 Oct 2026 02:16:48 +0000 Manifest next update: Tue 03 Nov 2026 02:16:48 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: 04D67aFo2AbNPS+Mmlk5h5L+0/lHZTj1Wl0aQaWSyw4=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: BKPtg7HeDu7JSoWpyLKk1keMXR9Vj+kENI1xPmqvGCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Oct 27 02:16:48 2026 GMT Not After : Nov 3 02:16:48 2026 GMT Subject: CN=6ae00990-9b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:59:f7:d0:ab:61:45:d2:f0:f8:f8:b7:9d: 65:5f:09:cc:9e:9e:25:e8:a2:0c:31:9e:ad:df:90: 7e:ef:84:6a:36:33:2c:ef:95:f1:3f:6a:71:da:18: 52:bd:f6:af:af:f4:0f:34:c5:72:5a:f5:c3:e5:56: ed:7c:4b:6a:6c:3a:4b:e2:4f:d1:32:8d:6d:5b:2f: 5a:f4:0e:25:8f:c8:74:47:cd:af:4b:3d:04:20:76: 7d:58:9d:79:52:82:ba:c4:8c:fc:01:e8:ad:e3:2d: a2:41:12:54:60:43:d7:b9:1a:74:8e:a7:07:24:57: 3e:a5:a2:ba:06:83:73:ca:9e:40:86:fd:ad:e3:4d: 99:a2:bd:05:97:f5:4a:be:1f:66:ae:49:3b:61:18: a0:95:b0:72:8a:ec:22:fd:be:43:89:54:48:1c:dc: 2c:bd:15:b8:de:0e:66:9a:a7:78:16:54:ed:f8:c1: bb:5b:b0:7c:b5:95:57:ac:b8:93:43:b9:f2:27:8f: c5:9d:4f:a5:ac:4c:d8:ea:f7:ed:22:dc:f6:5e:5b: b2:1a:23:0a:91:1d:e9:ab:31:a8:5a:1a:80:97:13: 61:85:68:fe:95:31:39:5a:82:fb:8f:96:88:9c:97: 52:cc:36:0e:09:b2:37:0c:e4:7c:4c:df:8d:69:4f: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:10:14:8A:23:7E:72:06:5C:16:2F:55:9D:E3:B2:FE:DD:5F:B1:8D X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:90:2c:99:66:dc:3c:d6:2c:a2:72:7d:6e:e7:b4:f8:d6:a2: 1a:e3:5e:23:a1:e2:be:fb:3d:90:4c:b7:66:3f:87:8a:14:b2: bb:00:da:a4:a0:d6:e4:4e:4f:9f:93:bd:55:13:38:c0:16:dc: b5:57:1c:6b:61:c9:30:95:73:63:74:6a:0f:18:75:b0:9a:b7: 4c:54:8c:e1:05:b6:16:54:78:c6:fe:78:87:28:f2:b0:89:6f: 34:21:7c:8e:1e:07:75:48:cb:e3:95:d9:6b:48:70:57:54:1b: 64:f0:5b:c2:9c:04:4a:8d:c5:b6:c1:96:d5:e2:d1:2c:ed:70: ab:a3:45:85:eb:ab:d9:48:ca:0e:ee:c4:aa:89:66:56:d2:51: b8:52:c3:df:f9:d1:64:1c:7c:93:db:5a:c0:87:9b:94:c8:89: 67:67:92:3e:86:c6:20:ee:08:73:4d:a2:30:10:80:45:84:01: 8c:1c:34:28:02:4b:11:31:4e:9d:03:8f:1e:7c:a8:59:52:56: 98:bb:44:08:6d:b9:df:3f:04:94:0b:fd:23:03:5c:e2:a3:3a: c2:b0:a7:cb:98:89:d4:3a:1a:c1:b6:d8:7a:39:14:e3:7b:8b: b4:34:03:02:0c:97:08:0e:ea:e5:83:39:9e:b9:21:dd:69:a6: c8:9f:f5:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjYxMDI3MDIxNjQ4WhcNMjYxMTAzMDIxNjQ4WjAYMRYwFAYD VQQDEw02YWUwMDk5MC05YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDFZ99CrYUXS8Pj4t51lXwnMnp4l6KIMMZ6t35B+74RqNjMs75XxP2px2hhS vfavr/QPNMVyWvXD5VbtfEtqbDpL4k/RMo1tWy9a9A4lj8h0R82vSz0EIHZ9WJ15 UoK6xIz8Aeit4y2iQRJUYEPXuRp0jqcHJFc+paK6BoNzyp5Ahv2t402Zor0Fl/VK vh9mrkk7YRiglbByiuwi/b5DiVRIHNwsvRW43g5mmqd4FlTt+MG7W7B8tZVXrLiT Q7nyJ4/FnU+lrEzY6vftItz2XluyGiMKkR3pqzGoWhqAlxNhhWj+lTE5WoL7j5aI nJdSzDYOCbI3DOR8TN+NaU9T3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4QFIoj fnIGXBYvVZ3jsv7dX7GNMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtJAsmWbcPNYsonJ9bue0+NaiGuNeI6Hivvs9kEy3Zj+HihSyuwDapKDW5E5P n5O9VRM4wBbctVcca2HJMJVzY3RqDxh1sJq3TFSM4QW2FlR4xv54hyjysIlvNCF8 jh4HdUjL45XZa0hwV1QbZPBbwpwESo3FtsGW1eLRLO1wq6NFheur2UjKDu7Eqolm VtJRuFLD3/nRZBx8k9tawIeblMiJZ2eSPobGIO4Ic02iMBCARYQBjBw0KAJLETFO nQOPHnyoWVJWmLtECG253z8ElAv9IwNc4qM6wrCny5iJ1DoawbbYejkU43uLtDQD AgyXCA7q5YM5nrkh3WmmyJ/1wQ== -----END CERTIFICATE-----Generated at Wed Oct 28 16:29:46 2026 by rpki-client