$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json) Hash identifier: rAwUriBwRoEZn57Rfz4ZiPQc7/FjSk/10pZRPITCxNU= Subject key identifier: 81:82:2B:4D:69:5A:7F:D4:A1:57:64:C2:6D:28:E9:E1:77:5B:FF:DF Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft Manifest number: 022C Signing time: Tue 03 Nov 2026 03:30:25 +0000 Manifest this update: Tue 03 Nov 2026 03:30:25 +0000 Manifest next update: Tue 10 Nov 2026 03:30:25 +0000 Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: 7E6gtza8oX9qncqkyNdrwbihGk4vbXjcaRg9Dl75ZAM=) 2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: hou+c7BsoKfVisvEwRZh9uWs6LCWRU5zcufZlx3RZD4=) 3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 03:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: Nov 3 03:30:25 2026 GMT Not After : Nov 10 03:30:25 2026 GMT Subject: CN=6ae95551-7ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:86:67:25:c2:b6:18:c0:f9:e3:07:a6:88: 3b:15:49:f1:cf:6f:e0:7b:b6:20:ea:81:f7:a7:36: 9f:04:05:83:be:53:b8:74:c4:f8:47:2f:d8:76:80: 3a:35:16:bb:ff:ec:59:b9:99:97:27:8d:73:26:40: 05:6b:d2:5f:0e:3b:5d:ba:c1:91:f5:e5:e5:d3:9a: 4f:20:03:64:4e:59:88:20:5b:63:80:1a:40:95:fd: 2d:1b:81:a8:6a:1d:68:33:c6:2a:59:c1:a3:bc:a9: 2d:cc:95:5d:16:c2:c0:9f:75:1a:31:98:0e:aa:68: 74:71:a6:b9:c0:e6:ba:68:ed:ee:16:31:b0:19:8f: 9f:67:1a:0f:dd:4c:91:aa:b9:c5:31:9c:92:dc:de: 6c:b4:97:00:2c:92:2c:90:88:f1:8a:04:cb:da:fc: 2d:61:22:e3:60:30:b5:18:a5:d3:74:1b:5d:53:2d: 05:86:8b:79:94:17:b5:e6:9f:ab:5d:09:47:33:34: 78:bc:c5:e6:bf:52:73:fd:8a:10:a8:b6:ab:e9:14: cf:fe:ce:e4:b7:2d:01:ad:68:a1:29:62:67:49:69: ee:be:a8:b5:0e:f4:c5:17:d9:f0:b0:30:54:08:e3: 1d:f1:17:d1:83:23:c7:1b:0b:8e:14:ba:fb:1b:62: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:82:2B:4D:69:5A:7F:D4:A1:57:64:C2:6D:28:E9:E1:77:5B:FF:DF X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b8:3e:ce:26:b4:47:31:7f:65:1a:ba:de:89:b2:1c:c5:67: 27:2d:81:99:76:35:c3:d1:02:45:d6:ce:d9:c9:99:f6:fd:b1: ce:fa:c3:d3:97:4e:34:dc:67:1c:73:65:f5:05:66:1c:44:01: c6:77:57:21:1d:c0:6d:b1:b2:7f:1d:38:be:bf:7f:9e:83:88: d6:8e:a8:25:50:cc:30:d6:67:4d:11:19:e2:84:e2:63:ea:b3: f4:db:80:bb:c9:88:32:5a:42:c8:a1:57:43:a1:5d:08:e6:8f: 23:f9:57:cc:33:fb:04:72:c3:1b:98:15:ab:33:5d:b8:4b:79: 98:00:02:da:c6:7b:07:ba:f9:0b:77:1a:34:38:88:86:b2:4c: 10:d4:bc:bf:d7:ca:65:8e:75:64:d5:4a:41:6e:8f:55:93:74: dc:c6:43:6c:0e:a7:c7:00:48:58:b2:5f:a6:72:ea:31:a7:84: aa:8b:1e:01:ab:83:66:a8:1c:4e:60:65:26:c0:85:79:04:3a: f3:73:bc:ec:6f:37:5f:8d:31:d9:2d:a9:ea:9f:ee:11:ab:da: f4:43:bb:94:93:c1:61:73:7f:03:97:e9:37:db:a2:a4:3e:44: 22:0b:1c:d0:40:b2:6d:43:5e:34:91:33:97:d3:7c:a2:0f:67: 57:81:03:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE QjVCNjY3OTEwHhcNMjYxMTAzMDMzMDI1WhcNMjYxMTEwMDMzMDI1WjAYMRYwFAYD VQQDEw02YWU5NTU1MS03ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbaGZyXCthjA+eMHpog7FUnxz2/ge7Yg6oH3pzafBAWDvlO4dMT4Ry/YdoA6 NRa7/+xZuZmXJ41zJkAFa9JfDjtdusGR9eXl05pPIANkTlmIIFtjgBpAlf0tG4Go ah1oM8YqWcGjvKktzJVdFsLAn3UaMZgOqmh0caa5wOa6aO3uFjGwGY+fZxoP3UyR qrnFMZyS3N5stJcALJIskIjxigTL2vwtYSLjYDC1GKXTdBtdUy0Fhot5lBe15p+r XQlHMzR4vMXmv1Jz/YoQqLar6RTP/s7kty0BrWihKWJnSWnuvqi1DvTFF9nwsDBU COMd8RfRgyPHGwuOFLr7G2IFfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGCK01p Wn/UoVdkwm0o6eF3W//fMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv WTNqRWF6NmRyWHpiVzJaNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf7g+zia0RzF/ZRq63omyHMVnJy2BmXY1w9ECRdbO2cmZ9v2xzvrD05dONNxn HHNl9QVmHEQBxndXIR3AbbGyfx04vr9/noOI1o6oJVDMMNZnTREZ4oTiY+qz9NuA u8mIMlpCyKFXQ6FdCOaPI/lXzDP7BHLDG5gVqzNduEt5mAAC2sZ7B7r5C3caNDiI hrJMENS8v9fKZY51ZNVKQW6PVZN03MZDbA6nxwBIWLJfpnLqMaeEqoseAauDZqgc TmBlJsCFeQQ683O87G83X40x2S2p6p/uEava9EO7lJPBYXN/A5fpN9uipD5EIgsc 0ECybUNeNJEzl9N8og9nV4EDpA== -----END CERTIFICATE-----Generated at Thu Nov 5 05:29:19 2026 by rpki-client