$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: e+x8XJiIoOtOO2ic1rZqwqYi/D8QfuxJqIaAbXrzHE8= Subject key identifier: 7D:F9:53:3D:83:DF:2A:D7:DB:3A:E1:09:F1:50:B3:30:79:22:81:86 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 0225 Signing time: Sat 31 Oct 2026 03:51:04 +0000 Manifest this update: Sat 31 Oct 2026 03:51:03 +0000 Manifest next update: Sat 07 Nov 2026 03:51:03 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: HCBJ0m5oYxDtCQ9RG7GhrQxnzeLxiDQRR/aI5/Mkp5A=) 2: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 4oHbORB0SMPTkXV6U83MEI4qE6E4vZSfCXE+0kDgGKk=) 3: A2C289B63B0E11F1ABA6C37BA3833773.roa (hash: /Hd0cywK1rFoam4L9ZRoogCKeqKKdKrO5vobZ/6UBnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 03:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Oct 31 03:51:03 2026 GMT Not After : Nov 7 03:51:03 2026 GMT Subject: CN=6ae565a8-d802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:38:ba:80:d5:4e:77:98:d2:b9:6f:d7:28: e6:15:49:a7:98:27:72:b2:9b:45:27:5f:ef:8d:90: 9f:ac:3a:03:dc:d6:5d:fe:0d:ee:6d:86:ed:51:3b: 8a:10:74:36:a9:c5:e9:8a:48:59:18:39:27:72:7b: 52:17:c0:ea:bd:f2:a1:28:5f:6d:09:b3:2d:eb:13: ea:e8:61:c2:68:7a:b9:6a:99:09:87:c9:7f:90:e7: d5:b4:d8:7c:20:11:32:8a:d8:13:77:c8:71:a4:4b: ea:48:d3:6f:d0:10:7e:82:f7:4e:a4:a4:8f:99:87: 16:ef:c1:bf:a2:5d:96:99:52:24:09:83:1c:bd:d0: 85:50:a6:df:41:18:df:d9:b1:2a:ea:92:30:b3:cf: 0b:b8:55:d6:2e:b2:cc:22:3b:5d:bc:a2:c6:0b:9e: 2f:66:f6:2f:04:e3:03:b7:3d:c8:a9:78:39:50:13: f7:42:6d:3e:35:45:2c:cc:99:90:14:b0:38:66:c1: f2:9e:21:29:ba:8c:91:9a:5c:f8:b1:2e:5a:aa:9e: 04:b9:3e:b1:28:98:44:97:95:b7:06:57:44:81:42: 8c:20:f8:7f:ad:ee:1a:b4:ca:ff:6f:a5:cb:d3:72: a3:ad:1b:49:49:97:6b:a9:64:9f:3a:52:15:3a:51: 19:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F9:53:3D:83:DF:2A:D7:DB:3A:E1:09:F1:50:B3:30:79:22:81:86 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e6:eb:b5:42:44:96:77:c8:8a:45:80:6c:04:58:90:f1:01: 84:98:4b:0b:61:36:56:6f:5b:49:2b:48:0d:00:82:e5:cf:a3: 96:14:f5:8b:74:c6:0f:43:e5:bb:6f:72:8b:d6:57:e3:72:a3: 99:6f:e9:6e:38:06:62:de:60:f9:a3:06:a9:c0:b7:dc:ad:b4: 83:3e:ec:20:3e:97:3b:19:69:d4:82:37:f5:16:35:72:58:c1: 9d:4b:99:69:ce:ca:81:e8:9d:5b:82:00:a1:97:25:1f:9c:82: 5c:db:3c:1f:f9:32:10:cf:43:bd:fa:5f:7c:4e:ec:88:22:d4: 05:60:d7:d9:b2:46:ce:ca:9e:08:d4:af:a3:e9:c6:2a:4a:b5: 7f:0d:40:a5:71:c9:bb:42:19:38:7d:15:e8:1a:da:51:0b:68: bc:04:ff:50:26:26:d4:ac:4f:d2:25:2f:3c:93:82:45:f5:0d: 5e:fa:24:a2:e0:e6:ba:bf:d1:ac:77:f5:27:5c:0d:bd:f3:b5: ec:bd:b8:52:84:6f:65:f1:12:18:30:a3:2b:e5:64:16:7f:58: 7a:6d:80:1a:ee:ba:86:2a:e7:a3:ea:40:05:78:58:d6:75:ff: 1d:6f:36:90:34:7a:3c:79:8d:81:81:e9:01:03:b9:9c:99:5b: 80:1c:5c:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjYxMDMxMDM1MTAzWhcNMjYxMTA3MDM1MTAzWjAYMRYwFAYD VQQDEw02YWU1NjVhOC1kODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1Q4uoDVTneY0rlv1yjmFUmnmCdysptFJ1/vjZCfrDoD3NZd/g3ubYbtUTuK EHQ2qcXpikhZGDkncntSF8DqvfKhKF9tCbMt6xPq6GHCaHq5apkJh8l/kOfVtNh8 IBEyitgTd8hxpEvqSNNv0BB+gvdOpKSPmYcW78G/ol2WmVIkCYMcvdCFUKbfQRjf 2bEq6pIws88LuFXWLrLMIjtdvKLGC54vZvYvBOMDtz3IqXg5UBP3Qm0+NUUszJmQ FLA4ZsHyniEpuoyRmlz4sS5aqp4EuT6xKJhEl5W3BldEgUKMIPh/re4atMr/b6XL 03KjrRtJSZdrqWSfOlIVOlEZEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH35Uz2D 3yrX2zrhCfFQszB5IoGGMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ+brtUJElnfIikWAbARYkPEBhJhLC2E2Vm9bSStIDQCC5c+jlhT1i3TGD0Pl u29yi9ZX43KjmW/pbjgGYt5g+aMGqcC33K20gz7sID6XOxlp1II39RY1cljBnUuZ ac7KgeidW4IAoZclH5yCXNs8H/kyEM9DvfpffE7siCLUBWDX2bJGzsqeCNSvo+nG Kkq1fw1ApXHJu0IZOH0V6BraUQtovAT/UCYm1KxP0iUvPJOCRfUNXvokouDmur/R rHf1J1wNvfO17L24UoRvZfESGDCjK+VkFn9Yem2AGu66hirno+pABXhY1nX/HW82 kDR6PHmNgYHpAQO5nJlbgBxccA== -----END CERTIFICATE-----Generated at Sun Nov 1 01:52:50 2026 by rpki-client