$ rpki-client -vvvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: 1Sldx5HoHU71oJ/rixhGeWiZEtg/02E40kLKGLWfp1Y= Subject key identifier: 08:0C:90:21:2E:F4:28:D8:F7:26:F1:00:28:AE:41:FB:B1:82:EC:B7 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7EAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 4941 Signing time: Sat 31 Oct 2026 17:02:28 +0000 Manifest this update: Sat 31 Oct 2026 17:02:27 +0000 Manifest next update: Sat 07 Nov 2026 17:02:27 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: LHwPoajlitfDRuXVVap6RBYZ+oiiwSbSU4gkRFo8yP8=) 2: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: BQdV6ndcECrItHdc1IEW8WyLJSqfh/iCl7ffuQz9nnQ=) 3: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: qG1F9oSfTBN5NOm4LXLgIPHtejfdqzXmcuKvzt+5uSQ=) 4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: 1NJm7ZOzu65GXUg/3DBxh7cNb5VPBWgXao2O9h+yjbY=) 5: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: cSJqj5g48JTcjBcGFsAbqitb62jbctH5OWGGZ2nY5TY=) 6: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: GCPP3Zkeb88CMAM4ecp19R2oGr0s67YLKK0lItldtcI=) 7: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: 9nTKPawfGHtPhjNOmWn8l90W8nDxOehnoaoOT9irCWw=) 8: 2DE2AC2669E311F18E29D967A047A888.roa (hash: y0np8i3XvwHRXGyvtfQ1quYALwf4BO+BBv/DSGvYscU=) 9: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: EARXDyWWNkzvluDdghdjO0DJ2CbqIZ55pIns0B024Rg=) 10: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: /V12Eqf620PvsHyjHjC7SsTrYWKzvxlGrdEZ3jISFaE=) 11: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: VBI4G1ovmwOYXsiKsWVJkf1feKjFHnDDeRgP+rbu+5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 17:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32431 (0x7eaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Oct 31 17:02:27 2026 GMT Not After : Nov 7 17:02:27 2026 GMT Subject: CN=6ae61f24-71aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:57:fc:8a:d4:48:49:51:72:f4:20:1c:2f: de:f0:00:60:4e:05:e3:dc:dd:4e:a9:60:1c:32:09: e2:b2:26:3d:59:97:75:3f:ff:72:a5:d5:22:1f:28: 13:5f:f1:75:0f:43:b9:02:c4:dc:27:27:6d:2d:1e: 8e:cb:3d:d0:35:98:75:a6:dd:30:61:85:41:15:72: 58:e5:6e:be:0d:c1:38:82:02:10:aa:1a:10:ec:1b: ed:65:98:ba:11:20:9b:e2:4e:4b:ec:7f:21:5d:70: a5:cc:2d:51:bc:9a:9e:a7:f5:ed:d0:56:fa:6a:e6: 26:4a:8c:f4:1f:78:85:d7:cb:36:1a:45:01:f9:10: ed:85:54:c2:00:c9:1d:f4:c0:20:87:53:5e:f5:62: f2:e6:cb:cc:69:54:8f:7a:06:d7:62:3f:7b:94:15: 49:0a:cf:5c:55:eb:d5:b7:f5:05:b3:62:2c:64:91: fa:e3:fd:50:a9:17:eb:41:e6:03:26:1e:a0:e2:38: 66:40:bd:0a:a0:6d:18:b6:86:28:d3:4d:53:34:c7: 0c:05:5e:63:ba:b3:8e:2a:38:33:b3:11:e4:4f:fb: 80:c7:37:4e:f7:3d:a4:93:9c:78:49:81:83:ae:0c: 09:c9:26:8b:dd:fa:bc:92:60:16:77:06:a5:35:b9: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:90:21:2E:F4:28:D8:F7:26:F1:00:28:AE:41:FB:B1:82:EC:B7 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:66:95:64:e1:7c:9e:34:9a:2d:e2:78:d8:ca:94:90:5b:d8: fc:91:6b:06:99:e4:8a:65:2e:12:e2:bd:51:d1:50:c6:2a:a0: ba:8e:74:85:51:a2:c4:95:44:c0:2e:05:fa:89:47:de:db:d9: bf:ca:61:94:02:9b:65:1b:1a:19:00:96:46:17:aa:9f:77:f4: 36:0f:63:e7:0c:c9:8d:a6:88:f9:dd:4e:36:13:0b:f4:53:de: bd:d0:a2:29:de:ac:0e:3c:4b:0d:f6:8b:ed:0f:d6:00:40:a9: 94:42:d7:73:f8:49:c3:28:c9:dd:bc:d3:7e:03:67:70:3a:f7: 3e:53:d1:18:c4:3b:d1:65:09:53:2e:cb:cd:fa:64:dd:9a:c5: 3e:99:b5:7b:a4:02:b3:11:c3:ef:88:2a:f0:72:24:4e:a6:51: af:91:f2:82:3e:34:8d:57:41:1f:eb:46:1b:e3:3a:9c:a0:78: 30:bb:86:c0:48:0a:1b:7c:5b:c7:d3:58:ac:e2:5c:eb:98:e8: 48:1b:2c:b2:87:ca:67:af:d8:ed:b0:c3:d7:76:e9:a3:6e:37: 2f:05:39:28:45:c3:60:62:b6:18:81:9b:c4:f4:c0:5c:b9:b4: 31:8d:7b:39:38:eb:3f:f6:fd:14:cb:63:4b:fc:13:8d:44:86: 23:6f:bd:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICfq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjYxMDMxMTcwMjI3WhcNMjYxMTA3MTcwMjI3WjAYMRYwFAYD VQQDEw02YWU2MWYyNC03MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPtX/IrUSElRcvQgHC/e8ABgTgXj3N1OqWAcMgnisiY9WZd1P/9ypdUiHygT X/F1D0O5AsTcJydtLR6Oyz3QNZh1pt0wYYVBFXJY5W6+DcE4ggIQqhoQ7BvtZZi6 ESCb4k5L7H8hXXClzC1RvJqep/Xt0Fb6auYmSoz0H3iF18s2GkUB+RDthVTCAMkd 9MAgh1Ne9WLy5svMaVSPegbXYj97lBVJCs9cVevVt/UFs2IsZJH64/1QqRfrQeYD Jh6g4jhmQL0KoG0YtoYo001TNMcMBV5jurOOKjgzsxHkT/uAxzdO9z2kk5x4SYGD rgwJySaL3fq8kmAWdwalNbn/RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgMkCEu 9CjY9ybxACiuQfuxguy3MB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmaVZOF8njSaLeJ42MqUkFvY/JFrBpnkimUuEuK9UdFQxiqguo50hVGixJVE wC4F+olH3tvZv8phlAKbZRsaGQCWRheqn3f0Ng9j5wzJjaaI+d1ONhML9FPevdCi Kd6sDjxLDfaL7Q/WAECplELXc/hJwyjJ3bzTfgNncDr3PlPRGMQ70WUJUy7Lzfpk 3ZrFPpm1e6QCsxHD74gq8HIkTqZRr5Hygj40jVdBH+tGG+M6nKB4MLuGwEgKG3xb x9NYrOJc65joSBsssofKZ6/Y7bDD13bpo243LwU5KEXDYGK2GIGbxPTAXLm0MY17 OTjrP/b9FMtjS/wTjUSGI2+9gA== -----END CERTIFICATE-----Generated at Sat Oct 31 23:53:26 2026 by rpki-client