$ rpki-client -vvvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: EEeZeMKm8+N2TfxTgYf+FSq3pF+INswfMhQCPcY6G2w= Subject key identifier: F2:94:E9:01:B7:26:C8:64:B4:86:E4:E4:5C:AF:DC:8B:F8:30:6E:58 Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: 018F Signing time: Wed 21 Oct 2026 05:12:53 +0000 Manifest this update: Wed 21 Oct 2026 05:12:52 +0000 Manifest next update: Wed 28 Oct 2026 05:12:52 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: nfjXkaOSvKAON0yS4um6jrwLs+iI6INZMp4glAywBaE=) 2: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=) 3: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: MzzziUvdgBRD34K13czjAKz5Qa4KFePNv6ZSJaDtfDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Oct 21 05:12:52 2026 GMT Not After : Oct 28 05:12:52 2026 GMT Subject: CN=6ad849d5-1968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:e4:bb:b4:03:34:46:f2:af:67:01:bc:86: f9:1c:a1:1c:9c:0c:63:58:f1:72:d3:3d:1d:50:8e: 87:18:31:f8:10:f2:94:03:f1:b6:ad:86:7d:cc:86: 66:5e:46:f8:18:74:c9:96:d8:d2:6f:98:7e:9b:96: 1e:3e:5c:7f:c2:c5:7d:7d:93:1d:0a:01:fb:e7:a9: c9:3f:ea:e0:73:50:6a:84:60:cf:dd:20:c2:3b:be: 99:8d:f1:fb:1b:fc:dc:bb:b0:df:db:34:7f:a9:97: d4:5e:90:53:56:d2:b9:d4:58:aa:3e:6c:f2:18:8e: cf:ca:d5:23:64:24:ef:a4:d9:50:46:8d:b3:84:93: 61:62:15:4c:64:9d:13:72:25:b3:56:a8:56:1b:fd: 4c:1e:8f:7a:00:98:f0:93:5c:e2:9b:d0:de:39:5b: 99:19:38:f7:33:51:9b:4d:9f:c6:82:7c:8d:ce:f3: 4b:9f:6a:8b:73:7b:6c:77:4a:79:ff:bf:71:8e:0e: fb:4e:da:96:9a:7a:d5:16:34:c0:cf:79:cb:8a:fb: 61:c1:39:b0:4e:6a:90:8b:cc:d2:cf:02:b2:dd:e2: 04:1f:ba:26:0e:fb:e6:5c:fb:45:23:8a:f3:bc:38: 58:d8:86:c0:b8:95:21:95:ca:1b:09:86:a9:d5:8a: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:94:E9:01:B7:26:C8:64:B4:86:E4:E4:5C:AF:DC:8B:F8:30:6E:58 X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e9:b3:6d:39:3c:fe:73:51:36:77:9d:f8:5a:bd:ee:f0:23: 65:e3:60:66:03:9b:b2:9a:0e:65:80:be:5b:ab:bb:95:7d:6e: f9:d2:e3:93:fa:0b:6b:25:34:7c:96:1b:e9:1a:87:a2:ea:36: 14:cf:30:6a:f7:8e:f8:d6:e9:93:1a:83:23:0f:96:5a:a5:0c: 22:f8:46:34:41:61:c9:10:65:ab:66:7b:2f:92:92:83:5d:a7: cc:87:c2:b6:8c:64:b2:60:9c:f0:44:5a:fd:2d:a5:48:bc:84: 8c:b4:b0:37:07:a7:b0:23:8e:d6:3a:c8:0a:44:54:40:17:6a: 75:19:d2:aa:cf:18:3e:31:22:0e:e6:f1:4b:9a:ff:64:2e:30: 90:d4:38:82:e4:1b:01:ad:b2:d1:96:6f:58:2c:5c:d8:b0:71: 85:3d:d7:1f:5a:75:1f:da:4d:34:1d:34:35:c9:45:a4:0d:f5: f5:b8:bc:7a:a8:6b:4f:6d:20:f5:72:d6:ce:6d:fd:ae:c7:1e: 2a:41:22:cf:cd:cb:c9:cc:61:41:9b:c8:c2:e9:be:08:97:02: 6a:07:1c:dc:52:5e:d0:38:fc:84:5a:39:d1:5c:70:d8:3c:4f: c5:93:58:79:36:f3:7e:57:ff:89:52:b8:47:d8:00:c4:87:ce: ad:00:69:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjYxMDIxMDUxMjUyWhcNMjYxMDI4MDUxMjUyWjAYMRYwFAYD VQQDEw02YWQ4NDlkNS0xOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvunku7QDNEbyr2cBvIb5HKEcnAxjWPFy0z0dUI6HGDH4EPKUA/G2rYZ9zIZm Xkb4GHTJltjSb5h+m5YePlx/wsV9fZMdCgH756nJP+rgc1BqhGDP3SDCO76ZjfH7 G/zcu7Df2zR/qZfUXpBTVtK51FiqPmzyGI7PytUjZCTvpNlQRo2zhJNhYhVMZJ0T ciWzVqhWG/1MHo96AJjwk1zim9DeOVuZGTj3M1GbTZ/GgnyNzvNLn2qLc3tsd0p5 /79xjg77TtqWmnrVFjTAz3nLivthwTmwTmqQi8zSzwKy3eIEH7omDvvmXPtFI4rz vDhY2IbAuJUhlcobCYap1YqB9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKU6QG3 JshktIbk5Fyv3Iv4MG5YMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGumzbTk8/nNRNned+Fq97vAjZeNgZgObspoOZYC+W6u7lX1u+dLjk/oLayU0 fJYb6RqHouo2FM8waveO+NbpkxqDIw+WWqUMIvhGNEFhyRBlq2Z7L5KSg12nzIfC toxksmCc8ERa/S2lSLyEjLSwNwensCOO1jrICkRUQBdqdRnSqs8YPjEiDubxS5r/ ZC4wkNQ4guQbAa2y0ZZvWCxc2LBxhT3XH1p1H9pNNB00NclFpA319bi8eqhrT20g 9XLWzm39rsceKkEiz83LycxhQZvIwum+CJcCagcc3FJe0Dj8hFo50Vxw2DxPxZNY eTbzflf/iVK4R9gAxIfOrQBpmA== -----END CERTIFICATE-----Generated at Thu Oct 22 12:00:12 2026 by rpki-client