$ rpki-client -vvvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json) Hash identifier: rPMqMonHW/qoQJ+NeW/t2s95eDTD4cga56vQbxTJ2w4= Subject key identifier: FD:96:6C:AF:37:86:17:03:73:34:F3:C5:41:D5:94:F4:12:68:25:FC Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft Manifest number: 022D Signing time: Tue 27 Oct 2026 03:00:43 +0000 Manifest this update: Tue 27 Oct 2026 03:00:43 +0000 Manifest next update: Tue 03 Nov 2026 03:00:43 +0000 Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: IYLaVcJEI9HDiH1xR4NVbWtZmXLbHNCkiVJl/FX7RWU=) 2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=) 3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: Oct 27 03:00:43 2026 GMT Not After : Nov 3 03:00:43 2026 GMT Subject: CN=6ae013db-b32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:fd:ee:30:0a:2d:e3:7f:79:76:75:f6:ed: 77:1d:1f:ba:db:fa:3c:10:08:b0:5b:37:36:00:21: 42:f8:0e:35:3a:17:b7:02:fc:b6:1d:82:37:92:64: 99:c7:65:eb:8a:29:b6:9f:04:e9:0c:c0:82:fa:d7: 80:43:32:b0:67:d6:de:7a:0f:94:79:8a:ce:50:cb: 61:e6:76:92:dd:26:53:84:ce:dc:c1:f8:0b:9e:fd: e8:e2:6a:88:ba:7f:8d:af:e3:77:c2:51:64:a7:03: 26:53:8a:45:c9:a0:50:82:f2:e9:7b:41:54:f5:75: 54:9f:6f:03:91:ec:17:d6:01:ef:af:88:39:27:66: fd:ae:91:5b:79:b5:a8:0b:b0:2f:bc:df:61:02:9d: 5c:1f:03:29:18:64:be:d9:4a:6c:d8:f4:49:70:6f: 8b:08:a6:a2:7f:45:a7:52:ce:45:91:07:1e:c5:78: e4:6f:4c:93:23:0e:ca:20:e7:d5:e0:44:bc:f7:96: b6:d5:dd:e4:66:28:2b:8f:a5:e7:aa:36:dc:74:be: 89:7b:4b:d9:40:cb:c5:ae:35:73:89:63:fa:9c:e5: 5e:81:be:bb:db:4f:b2:1d:bc:83:f0:fd:67:bf:68: eb:a5:57:3a:d5:89:5a:f0:a3:ae:fc:72:2a:14:e5: 75:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:96:6C:AF:37:86:17:03:73:34:F3:C5:41:D5:94:F4:12:68:25:FC X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:8e:43:e9:b8:41:ef:70:88:16:63:f2:83:9e:c1:f6:10:5e: 30:4a:a1:4c:ec:3b:d8:73:27:7f:b4:98:f6:33:7f:1f:b0:5b: 39:05:b3:fe:83:be:9f:d9:18:f2:d5:ca:27:d4:65:d9:ff:02: 0c:ff:19:3e:a4:fa:21:1c:1d:32:d7:74:73:a3:61:e5:f5:b8: c8:f6:4d:5d:92:0f:66:9e:e3:60:2b:6d:d3:69:c3:e2:4a:9a: b2:0a:9b:ec:47:46:6d:d1:11:6c:ec:2b:52:b5:d3:ca:39:68: bf:de:b8:3b:25:93:7d:f2:40:00:85:ca:13:84:24:8b:4d:ea: db:5e:b6:52:aa:2d:0a:5a:39:a3:84:1b:26:66:4a:b8:fa:d9: 00:3d:f2:0c:f0:56:12:5f:9f:4b:f5:b0:0b:e9:95:38:a0:b7: 3f:21:c2:50:73:b2:ad:48:1c:a2:79:77:cd:d1:f6:ee:2a:0a: f5:f8:92:7f:8f:6f:a1:c5:3e:3f:6b:e3:4c:70:4c:67:7f:73: e5:4d:8c:b9:d2:21:7a:0b:7b:80:c6:53:97:a4:a8:ad:da:a6: 43:97:09:3a:71:5e:94:27:2d:68:ac:f0:b6:b7:a3:6e:9b:4d: 0a:2f:ee:57:b0:97:78:a1:91:2c:4d:52:98:7d:cf:8d:e4:36: c3:33:4e:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3 ODEzNTYzNjIwHhcNMjYxMDI3MDMwMDQzWhcNMjYxMTAzMDMwMDQzWjAYMRYwFAYD VQQDEw02YWUwMTNkYi1iMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0397jAKLeN/eXZ19u13HR+62/o8EAiwWzc2ACFC+A41Ohe3Avy2HYI3kmSZ x2Xriim2nwTpDMCC+teAQzKwZ9beeg+UeYrOUMth5naS3SZThM7cwfgLnv3o4mqI un+Nr+N3wlFkpwMmU4pFyaBQgvLpe0FU9XVUn28DkewX1gHvr4g5J2b9rpFbebWo C7AvvN9hAp1cHwMpGGS+2Ups2PRJcG+LCKaif0WnUs5FkQcexXjkb0yTIw7KIOfV 4ES895a21d3kZigrj6XnqjbcdL6Je0vZQMvFrjVziWP6nOVegb6720+yHbyD8P1n v2jrpVc61Yla8KOu/HIqFOV1qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2WbK83 hhcDczTzxUHVlPQSaCX8MB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i UFlDUDk2WUtDTGg0RTFZMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANY5D6bhB73CIFmPyg57B9hBeMEqhTOw72HMnf7SY9jN/H7BbOQWz/oO+n9kY 8tXKJ9Rl2f8CDP8ZPqT6IRwdMtd0c6Nh5fW4yPZNXZIPZp7jYCtt02nD4kqasgqb 7EdGbdERbOwrUrXTyjlov964OyWTffJAAIXKE4Qki03q2162UqotClo5o4QbJmZK uPrZAD3yDPBWEl+fS/WwC+mVOKC3PyHCUHOyrUgconl3zdH27ioK9fiSf49vocU+ P2vjTHBMZ39z5U2MudIhegt7gMZTl6SordqmQ5cJOnFelCctaKzwtrejbptNCi/u V7CXeKGRLE1SmH3PjeQ2wzNOGA== -----END CERTIFICATE-----Generated at Tue Oct 27 08:28:29 2026 by rpki-client