$ rpki-client -vvvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: ISn/Gt4WL8fiDfkDVs2TqeuANx1RRrOF9tFOW6wiusI= Subject key identifier: CC:2B:AB:4B:21:CA:05:9B:47:4B:59:E2:46:9A:4A:B2:5D:1C:F8:C8 Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 19B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 19A8 Signing time: Wed 28 Oct 2026 16:26:39 +0000 Manifest this update: Wed 28 Oct 2026 16:26:38 +0000 Manifest next update: Wed 04 Nov 2026 16:26:38 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: 6TvyURhnZWcIrMgCdwsUUDXo+r2IdcDkHWydVcQI9Xw=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: jJwP90lV+q6WXhwVY0B4Efvs4u3oObXh+KWbb3d4U00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 16:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6579 (0x19b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: Oct 28 16:26:38 2026 GMT Not After : Nov 4 16:26:38 2026 GMT Subject: CN=6ae2223e-9ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:a6:61:ad:39:e1:9a:6f:8f:77:8b:ea:14: 22:b0:df:32:e5:2a:2d:58:90:e2:36:60:e7:5c:bb: a7:89:e3:f5:f4:fb:73:4e:25:27:79:58:94:98:32: d0:33:02:83:13:f4:50:1a:f5:05:e4:db:37:13:bd: 10:bc:c9:ad:3e:4c:c1:17:41:6e:7c:ee:0c:49:ef: 78:ea:56:26:2d:a0:a8:ce:a3:3a:c2:6d:96:f0:0e: 03:aa:55:bb:cd:e9:50:08:a3:4e:da:2b:c1:e0:25: fb:98:19:eb:c6:6a:9b:bc:cd:e5:66:c9:1f:fa:ed: 4a:40:90:81:65:be:1f:1a:91:d0:7f:5a:e2:0d:65: 43:18:a0:67:be:22:09:49:dd:f3:5b:ac:e0:8b:a8: 3b:f8:26:16:3a:2d:8a:05:47:f0:16:e3:36:b9:2a: 7b:e2:4d:fa:d3:fc:39:58:62:a1:90:e1:d9:22:76: 02:c9:55:8e:dd:8a:ab:9f:a7:9e:04:9e:d9:f7:c6: 9d:06:a5:fb:99:1d:42:53:30:36:c6:7f:70:b9:8a: e2:24:16:e2:9e:4d:ef:ab:4c:c8:e1:0f:cf:3a:8f: 32:8b:9a:08:5e:59:53:ca:63:c5:21:3e:44:14:fd: 50:54:e9:5f:d2:7a:3c:d7:db:7c:98:7a:bf:08:01: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2B:AB:4B:21:CA:05:9B:47:4B:59:E2:46:9A:4A:B2:5D:1C:F8:C8 X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:27:97:6b:97:49:93:c0:70:0c:e8:4d:e9:a8:ab:21:ad:a1: 19:af:4f:2f:2c:48:d4:43:ef:21:e6:3e:6f:6a:e7:1a:c4:0d: c3:61:c7:7d:bf:53:01:8b:57:ca:2c:24:25:a7:d2:b5:7a:e6: 8f:1c:52:9d:ed:03:5b:05:d9:9a:7c:63:fb:a4:39:cb:38:dc: 27:71:db:df:c9:ec:65:50:49:93:a8:52:3c:cb:ea:71:bc:5a: dd:7a:fa:4e:04:b3:d3:f4:fd:2c:9e:64:8c:c5:d5:6b:88:31: d1:44:95:8a:e9:a2:5f:e0:49:6a:ff:21:6c:99:03:4f:db:91: 77:fd:5e:ea:de:74:06:af:f5:c0:12:e2:d8:23:9d:a5:79:77: 57:9d:80:b7:b4:6f:1b:58:d6:5a:f8:d2:8d:9e:87:73:8b:f8: eb:31:0f:90:0f:03:24:e9:bf:9b:48:00:2f:a1:a7:e8:13:4c: 35:b7:4a:a1:a0:c1:be:c5:d4:97:dd:c9:e9:15:db:e4:ab:3a: 03:d5:a4:97:21:9d:61:76:90:ba:4b:e4:e7:51:c4:83:a3:b3: 7d:c3:3a:07:15:e6:27:a0:18:87:20:2d:52:1f:9e:f4:44:43: 13:a1:0e:15:59:ae:c9:d5:96:9a:56:cb:ab:14:1d:5c:c0:c6: e3:8e:21:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjYxMDI4MTYyNjM4WhcNMjYxMTA0MTYyNjM4WjAYMRYwFAYD VQQDEw02YWUyMjIzZS05YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytumYa054Zpvj3eL6hQisN8y5SotWJDiNmDnXLunieP19PtzTiUneViUmDLQ MwKDE/RQGvUF5Ns3E70QvMmtPkzBF0FufO4MSe946lYmLaCozqM6wm2W8A4DqlW7 zelQCKNO2ivB4CX7mBnrxmqbvM3lZskf+u1KQJCBZb4fGpHQf1riDWVDGKBnviIJ Sd3zW6zgi6g7+CYWOi2KBUfwFuM2uSp74k360/w5WGKhkOHZInYCyVWO3Yqrn6ee BJ7Z98adBqX7mR1CUzA2xn9wuYriJBbink3vq0zI4Q/POo8yi5oIXllTymPFIT5E FP1QVOlf0no819t8mHq/CAFIbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwrq0sh ygWbR0tZ4kaaSrJdHPjIMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOyeXa5dJk8BwDOhN6airIa2hGa9PLyxI1EPvIeY+b2rnGsQNw2HHfb9TAYtX yiwkJafStXrmjxxSne0DWwXZmnxj+6Q5yzjcJ3Hb38nsZVBJk6hSPMvqcbxa3Xr6 TgSz0/T9LJ5kjMXVa4gx0USViumiX+BJav8hbJkDT9uRd/1e6t50Bq/1wBLi2COd pXl3V52At7RvG1jWWvjSjZ6Hc4v46zEPkA8DJOm/m0gAL6Gn6BNMNbdKoaDBvsXU l93J6RXb5Ks6A9WklyGdYXaQukvk51HEg6OzfcM6BxXmJ6AYhyAtUh+e9ERDE6EO FVmuydWWmlbLqxQdXMDG444h+Q== -----END CERTIFICATE-----Generated at Thu Oct 29 01:55:06 2026 by rpki-client