$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft File: mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json) Hash identifier: suNJvt7awZacLVpWlFT6qsa5Z2g4Q5sjTa/7VIxpEao= Subject key identifier: BF:12:78:EC:64:98:69:C4:E5:F3:E2:02:20:36:08:DA:9B:68:91:70 Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 Certificate issuer: /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft Manifest number: 035D Signing time: Sun 25 Oct 2026 00:52:49 +0000 Manifest this update: Sun 25 Oct 2026 00:52:48 +0000 Manifest next update: Sun 01 Nov 2026 00:52:48 +0000 Files and hashes: 1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: IzRFzOGaQX9QDT8JGxW8w+Yj/RuTAEnIGPe4s+NJgaM=) 2: E79D93681C1F11F1B2DF50D0313D8C67.roa (hash: W4I4DorhQtZcnS22ft48DnGQCDVeftj54k6lXf7w3f0=) 3: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: HIwqlmntoeFwo+S7UDebJJRPpqNaEv4Pryk7jDC+0qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 00:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Validity Not Before: Oct 25 00:52:48 2026 GMT Not After : Nov 1 00:52:48 2026 GMT Subject: CN=6add52e0-f78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:ed:c7:9c:b1:de:e9:34:15:55:cf:8d:d9: 4f:e3:f3:11:0f:e5:7c:a3:c7:c7:c9:77:ad:fa:6c: 02:42:e0:4f:31:99:04:8b:5e:e5:47:ed:a0:eb:6c: 66:82:84:4a:1a:f8:20:5f:5b:43:f4:27:07:89:9e: 34:02:7d:2a:56:c8:ba:52:f3:10:62:b6:e2:91:4e: 57:9d:58:41:78:18:14:22:f2:87:f5:b7:fc:d2:11: 41:93:e8:e7:20:bc:63:97:44:da:48:fd:d8:fa:e2: 86:d3:bf:d8:5a:88:83:7f:83:ae:1e:f7:5c:7d:f3: 11:c0:1d:1c:a2:75:3d:4d:59:9a:7e:11:c5:72:3d: d4:e5:f8:9e:85:50:ae:a2:09:23:6d:c8:02:11:ad: b0:6f:54:05:83:63:57:61:0a:70:95:d0:19:ac:25: 4a:7a:8a:d4:86:36:65:0d:6f:fc:66:6e:ae:5e:36: a8:f4:8a:c8:2e:2d:21:d0:10:2e:83:38:2e:88:40: b1:df:f8:62:3c:a6:70:24:b1:52:38:4f:37:74:cc: b9:8f:51:06:16:5d:74:33:dc:7f:b1:b8:2e:38:b2: e3:39:3a:31:15:1f:08:89:57:7c:25:cc:85:4a:60: 6b:83:96:13:d2:59:7b:57:cc:24:a5:ee:0b:aa:9c: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:12:78:EC:64:98:69:C4:E5:F3:E2:02:20:36:08:DA:9B:68:91:70 X509v3 Authority Key Identifier: keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:15:3d:ea:2a:ac:8b:01:12:a9:09:5a:b0:2d:d3:97:39:e2: c8:f0:1d:b5:0f:3c:f6:0c:63:dd:66:35:29:f1:47:51:5a:14: bf:80:1b:92:1c:30:5b:8d:5a:8c:84:56:31:3c:d5:93:5b:87: 49:f1:6e:d9:b9:4d:97:27:c5:05:e5:91:fe:e8:57:b6:16:1d: 7c:d0:28:a7:9d:95:e7:5b:c3:95:88:fd:bc:1c:f8:19:b0:24: d2:4f:be:1d:41:8a:3d:b6:da:91:48:fc:16:89:38:15:e2:49: f8:56:80:9b:fd:94:e5:8a:3c:4c:90:7b:3d:48:67:18:35:b4: d6:ba:dc:77:b3:a6:50:6c:58:0c:91:8a:6a:a7:5c:02:14:3e: 6d:85:dd:57:56:5c:08:18:1b:19:04:07:f5:4c:28:be:98:c2: 79:77:d4:74:56:0e:18:0f:6e:76:b5:47:11:9b:10:6a:b4:f9: 01:0b:81:b5:32:ed:45:c8:e1:eb:25:76:4d:81:19:0c:ad:76: ff:9a:dc:c0:5d:ff:ad:39:3f:18:6f:ba:3f:5f:aa:51:d9:65: ea:e4:30:12:7b:84:c8:94:07:55:fc:ef:bb:68:5b:e4:9c:0d: 68:30:f6:ab:92:a7:9b:80:37:18:ee:c6:a6:5a:6c:6c:92:a0: 49:b6:cf:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3 MDZDODA2NzIwHhcNMjYxMDI1MDA1MjQ4WhcNMjYxMTAxMDA1MjQ4WjAYMRYwFAYD VQQDEw02YWRkNTJlMC1mNzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAke3tx5yx3uk0FVXPjdlP4/MRD+V8o8fHyXet+mwCQuBPMZkEi17lR+2g62xm goRKGvggX1tD9CcHiZ40An0qVsi6UvMQYrbikU5XnVhBeBgUIvKH9bf80hFBk+jn ILxjl0TaSP3Y+uKG07/YWoiDf4OuHvdcffMRwB0conU9TVmafhHFcj3U5fiehVCu ogkjbcgCEa2wb1QFg2NXYQpwldAZrCVKeorUhjZlDW/8Zm6uXjao9IrILi0h0BAu gzguiECx3/hiPKZwJLFSOE83dMy5j1EGFl10M9x/sbguOLLjOToxFR8IiVd8JcyF SmBrg5YT0ll7V8wkpe4Lqpz7jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8SeOxk mGnE5fPiAiA2CNqbaJFwMB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO NGd5VHpBUWJoYUZ3YklCbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIhU96iqsiwESqQlasC3TlzniyPAdtQ889gxj3WY1KfFHUVoUv4AbkhwwW41a jIRWMTzVk1uHSfFu2blNlyfFBeWR/uhXthYdfNAop52V51vDlYj9vBz4GbAk0k++ HUGKPbbakUj8Fok4FeJJ+FaAm/2U5Yo8TJB7PUhnGDW01rrcd7OmUGxYDJGKaqdc AhQ+bYXdV1ZcCBgbGQQH9UwovpjCeXfUdFYOGA9udrVHEZsQarT5AQuBtTLtRcjh 6yV2TYEZDK12/5rcwF3/rTk/GG+6P1+qUdll6uQwEnuEyJQHVfzvu2hb5JwNaDD2 q5Knm4A3GO7GplpsbJKgSbbP3A== -----END CERTIFICATE-----Generated at Mon Oct 26 21:19:38 2026 by rpki-client