$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: bH0EXbCHGPHFnCq02o/Te1U6vpW8vqHOusEGlOtNg1k= Subject key identifier: 48:9E:C0:BE:4B:5E:56:BA:F3:10:5A:CD:3B:ED:B4:4E:D0:2A:5F:AE Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 064B Signing time: Wed 28 Oct 2026 22:52:07 +0000 Manifest this update: Wed 28 Oct 2026 22:52:06 +0000 Manifest next update: Wed 04 Nov 2026 22:52:06 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: F0ojqGHsYytbzJ7T6GcnLLCREda8NUzmrVPVJ3E6v/Q=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: YDIYwh8IZsocldDrNfzej1ZrNQO57DlnoJZAAXQRlpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Oct 28 22:52:06 2026 GMT Not After : Nov 4 22:52:06 2026 GMT Subject: CN=6ae27c97-2f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:b5:74:0f:9d:8c:0d:95:f0:9a:ce:05:94: 63:4b:d1:52:b1:f1:ad:61:f2:84:74:d9:1b:dc:04: da:e7:c8:42:14:aa:f4:df:a5:1a:08:f5:11:41:4a: 50:dd:f1:9b:8f:31:34:50:f5:d5:2b:07:25:b2:fa: c4:a5:89:5e:b2:26:5a:dd:e7:1e:67:27:49:01:41: 85:3a:76:f9:1d:2a:bf:0a:97:12:b9:78:a3:81:4d: 40:36:1a:10:e8:80:1a:56:ef:1a:e9:67:df:59:2c: 46:fb:34:65:1b:aa:44:e0:dc:92:5c:4c:0f:5a:82: e3:18:f0:f6:51:43:de:82:53:8c:a5:8f:51:3f:43: fb:3d:17:95:6d:80:7b:35:9a:c8:90:c9:b9:58:03: 2c:b1:85:52:a8:4c:37:31:b0:ed:6a:ce:bd:ca:6a: a9:ab:2c:d1:55:74:7c:b2:a3:68:2d:9a:95:19:0a: ef:8e:4f:68:93:b4:c1:72:e8:ff:a7:29:ac:29:51: b0:3b:f2:6a:c8:13:bd:8c:f1:56:6b:d5:48:ee:bc: e2:24:cb:2d:4d:ec:62:93:72:59:8b:73:0c:aa:c4: e3:b0:79:66:5f:dc:4d:40:b4:d7:44:97:57:32:40: 2a:d9:09:46:86:6f:cb:a7:9b:de:bf:26:6c:b1:65: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9E:C0:BE:4B:5E:56:BA:F3:10:5A:CD:3B:ED:B4:4E:D0:2A:5F:AE X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:2b:12:ea:bc:58:68:68:76:fb:26:ba:8d:c7:1e:d6:a8:a5: 8e:92:cd:12:f1:b0:8b:77:fc:a9:6c:9f:34:a5:f7:0a:4b:8e: 76:d2:72:74:14:ed:36:5e:a1:41:8f:e3:07:3c:56:24:75:ea: 29:f1:8e:cf:dc:85:7a:18:4e:ce:09:20:dd:a2:34:6b:9f:4b: 5d:ed:6a:c4:6e:37:7f:39:85:21:39:7f:03:1a:ff:60:1d:96: 10:90:cd:09:7f:ac:e5:79:97:2b:01:58:2a:f8:f6:2f:60:08: 99:35:0a:29:75:20:78:e2:4c:dc:52:6d:13:88:91:7f:25:f7: ad:64:6a:23:8a:6c:54:71:6a:43:73:82:7a:a8:5e:fc:34:e0: 22:55:00:96:c2:27:7b:00:98:34:81:00:7e:1c:f3:64:ec:16: 67:f8:35:8d:27:a2:93:37:f6:fc:06:68:96:db:26:c2:6c:9d: 4e:73:c6:2b:1c:c3:a4:d6:a6:d8:15:a8:a4:cc:7c:81:00:47: 58:0f:a0:7c:eb:c9:44:56:33:b8:f9:eb:b7:a4:83:64:b9:8c: 4b:27:49:03:9f:9e:a3:ea:41:eb:ed:34:38:8f:c9:b1:fb:2d: 88:3c:1d:07:bc:7f:f9:51:82:77:47:87:a9:be:77:e0:d8:2a: ba:7f:ca:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjYxMDI4MjI1MjA2WhcNMjYxMTA0MjI1MjA2WjAYMRYwFAYD VQQDEw02YWUyN2M5Ny0yZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC61dA+djA2V8JrOBZRjS9FSsfGtYfKEdNkb3ATa58hCFKr036UaCPURQUpQ 3fGbjzE0UPXVKwclsvrEpYlesiZa3eceZydJAUGFOnb5HSq/CpcSuXijgU1ANhoQ 6IAaVu8a6WffWSxG+zRlG6pE4NySXEwPWoLjGPD2UUPeglOMpY9RP0P7PReVbYB7 NZrIkMm5WAMssYVSqEw3MbDtas69ymqpqyzRVXR8sqNoLZqVGQrvjk9ok7TBcuj/ pymsKVGwO/JqyBO9jPFWa9VI7rziJMstTexik3JZi3MMqsTjsHlmX9xNQLTXRJdX MkAq2QlGhm/Lp5vevyZssWUQ2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiewL5L Xla68xBazTvttE7QKl+uMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2SsS6rxYaGh2+ya6jcce1qiljpLNEvGwi3f8qWyfNKX3CkuOdtJydBTtNl6h QY/jBzxWJHXqKfGOz9yFehhOzgkg3aI0a59LXe1qxG43fzmFITl/Axr/YB2WEJDN CX+s5XmXKwFYKvj2L2AImTUKKXUgeOJM3FJtE4iRfyX3rWRqI4psVHFqQ3OCeqhe /DTgIlUAlsInewCYNIEAfhzzZOwWZ/g1jSeikzf2/AZoltsmwmydTnPGKxzDpNam 2BWopMx8gQBHWA+gfOvJRFYzuPnrt6SDZLmMSydJA5+eo+pB6+00OI/JsfstiDwd B7x/+VGCd0eHqb534Ngqun/Kbw== -----END CERTIFICATE-----Generated at Fri Oct 30 18:09:56 2026 by rpki-client