$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json) Hash identifier: r6pWteJ5M/fJcadXuOMaXPkfneoa2ZRa4MHLO4Qlo7Y= Subject key identifier: 78:30:B2:C6:B8:E8:91:1C:48:95:0F:18:F8:C7:04:2F:AB:A6:D5:A7 Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft Manifest number: CA Signing time: Mon 19 Oct 2026 07:34:08 +0000 Manifest this update: Mon 19 Oct 2026 07:34:07 +0000 Manifest next update: Mon 26 Oct 2026 07:34:07 +0000 Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: S0bJqiONIVCIi1BB5aJG3yVmvE3eqK+qLCD/loKA0w0=) 2: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: yPnbO5JoFroPGcO/FNlQHH93ap4ee9CNWxH6ZNSq9ts=) 3: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: 1OXipBNzxtYp5UB0W5xX43Nvc/1EDv2/MhW+bGOdQcs=) 4: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: raMlWqDhjQC1kyKcLB1NtSmvdSNAXI5T6+IpnIwsYFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 07:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Oct 19 07:34:07 2026 GMT Not After : Oct 26 07:34:07 2026 GMT Subject: CN=6ad5c7f0-c7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:b6:23:dc:fd:57:80:fd:8e:13:09:87:7d: 4b:bf:0c:df:ae:df:3b:d5:96:63:cc:30:71:f0:ef: c7:7e:12:06:ed:89:21:b0:a1:67:9a:2a:dc:e4:24: 19:14:b8:df:a5:c9:27:98:4d:2b:36:82:8b:06:a1: fe:a7:35:4a:6f:bb:06:8d:55:57:5d:ac:84:12:da: 49:f7:d7:dc:45:55:f5:13:88:87:c6:a7:40:b1:a1: 44:61:50:f7:73:11:ff:68:fa:fe:12:c7:2a:b1:b6: 26:d9:2e:1b:4a:45:08:75:35:a4:6e:58:47:26:42: c6:b8:f6:a6:f5:28:1b:dd:85:f7:09:83:ea:5a:7a: bb:3a:c7:14:61:26:98:8d:b2:7b:fd:bb:c9:68:02: aa:53:c4:3a:6f:90:2d:c3:7d:1a:43:dc:49:18:f7: 51:7f:df:8f:12:50:c2:b9:c1:a6:bd:c8:94:91:92: c7:bf:03:ec:27:50:40:7e:98:0f:f5:dc:73:9e:8f: 75:9c:dd:0f:ac:7b:45:60:f6:e8:64:0d:0e:db:ae: b5:72:82:78:cc:df:78:e2:ce:09:bd:76:22:67:80: e8:7d:5e:db:25:29:e1:e2:f3:ab:bb:9a:e4:27:77: 39:71:03:de:b7:56:4f:40:48:8b:14:9d:fe:2c:cf: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:30:B2:C6:B8:E8:91:1C:48:95:0F:18:F8:C7:04:2F:AB:A6:D5:A7 X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7e:76:78:64:7d:05:3c:07:98:71:7b:29:9d:76:4d:8c:8e: cf:9f:9f:4f:e2:07:86:65:6a:73:6f:cd:e8:19:82:2a:c2:ae: b1:5e:b2:55:01:64:d7:f4:26:e2:3a:19:06:54:dc:77:d9:ab: ca:0d:f8:75:7c:33:bd:3f:27:42:00:92:a1:39:29:de:10:2d: c2:12:76:35:d3:9b:77:d1:6b:b3:cb:b9:f6:3d:84:7b:3a:59: 82:a8:3c:d7:f2:46:f0:e9:e0:38:bb:50:3a:39:8c:4e:a5:0f: 9e:6a:73:61:3b:86:97:64:6c:17:6b:63:c9:e4:78:f3:46:7e: 88:20:41:76:29:3c:d1:fc:6f:f4:e1:ab:f4:3c:14:c8:6e:0c: 0e:6f:f7:13:5c:2d:af:4f:83:f7:8b:2f:95:14:46:9c:6f:40: 81:c0:9a:7b:14:97:2b:75:68:e8:c3:a8:d7:c2:fa:df:57:9b: 11:2a:ee:72:43:ea:da:df:73:6a:23:5d:29:9b:9d:25:75:9f: 1d:e3:70:ee:d6:24:91:ae:3d:59:21:c2:fe:28:af:fb:75:b9: 2a:b3:fe:e4:18:d6:54:56:a4:83:4d:c7:bd:88:6a:e4:1b:c1: bc:61:e9:83:58:a6:45:2e:10:72:22:49:e1:15:df:a0:21:56: ff:1e:33:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxQ0ExMTAvBgNVBAUTKEFGOENEQ0U2RUQ0Mjc3RUNGQjBGREE4ODJBRDQ3NDky REU4NThGQjYwHhcNMjYxMDE5MDczNDA3WhcNMjYxMDI2MDczNDA3WjAYMRYwFAYD VQQDEw02YWQ1YzdmMC1jN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniS2I9z9V4D9jhMJh31Lvwzfrt871ZZjzDBx8O/HfhIG7YkhsKFnmirc5CQZ FLjfpcknmE0rNoKLBqH+pzVKb7sGjVVXXayEEtpJ99fcRVX1E4iHxqdAsaFEYVD3 cxH/aPr+EscqsbYm2S4bSkUIdTWkblhHJkLGuPam9Sgb3YX3CYPqWnq7OscUYSaY jbJ7/bvJaAKqU8Q6b5Atw30aQ9xJGPdRf9+PElDCucGmvciUkZLHvwPsJ1BAfpgP 9dxzno91nN0PrHtFYPboZA0O2661coJ4zN944s4JvXYiZ4DofV7bJSnh4vOru5rk J3c5cQPet1ZPQEiLFJ3+LM+ZWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHgwssa4 6JEcSJUPGPjHBC+rptWnMB8GA1UdIwQYMBaAFK+M3ObtQnfs+w/aiCrUdJLehY+2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFDQS8yREY1QkI4MEFC MzAxMUYwOEZDMEM5NDhDNEY5QUUwMi9yNHpjNXUxQ2QtejdEOXFJS3RSMGt0NkZq N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFDQS8yREY1QkI4MEFCMzAxMUYwOEZDMEM5NDhDNEY5QUUwMi9yNHpjNXUxQ2Qt ejdEOXFJS3RSMGt0NkZqN1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOX52eGR9BTwHmHF7KZ12TYyOz5+fT+IHhmVqc2/N6BmCKsKusV6yVQFk1/Qm 4joZBlTcd9mryg34dXwzvT8nQgCSoTkp3hAtwhJ2NdObd9Frs8u59j2EezpZgqg8 1/JG8OngOLtQOjmMTqUPnmpzYTuGl2RsF2tjyeR480Z+iCBBdik80fxv9OGr9DwU yG4MDm/3E1wtr0+D94svlRRGnG9AgcCaexSXK3Vo6MOo18L631ebESruckPq2t9z aiNdKZudJXWfHeNw7tYkka49WSHC/iiv+3W5KrP+5BjWVFakg03HvYhq5BvBvGHp g1imRS4QciJJ4RXfoCFW/x4zuA== -----END CERTIFICATE-----Generated at Tue Oct 20 08:11:17 2026 by rpki-client