$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft File: xWV5UwnochSM0g3isqQ807IEwlE.mft (raw, json) Hash identifier: T0Qge3/uKAl8nlv+jB2da7l4tt9daszhNtcXIvXHs00= Subject key identifier: 26:EF:40:F5:A8:34:D5:06:59:ED:10:44:7B:A9:C1:05:79:45:A9:1A Authority key identifier: C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51 Certificate issuer: /CN=A913AB2B/serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft Manifest number: 4A Signing time: Thu 29 Oct 2026 09:11:01 +0000 Manifest this update: Thu 29 Oct 2026 09:11:00 +0000 Manifest next update: Thu 05 Nov 2026 09:11:00 +0000 Files and hashes: 1: xWV5UwnochSM0g3isqQ807IEwlE.crl (hash: LctSKErfwDipXmXUii3cGu0ccecxKE1Oo2DY5f+ZD3A=) 2: C2308ADC6E2111F18E37985672A30FBC.roa (hash: wptdMLkGYWCREgeRbFIexsWdbeobaprWrt9rh5ES8yE=) 3: E58C711C6E2111F189BF576272A30FBC.roa (hash: 2KzEYDFnfXibar/cKmNE28FNWE3E+aAr6Na8gmkWSTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AB2B, serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251 Validity Not Before: Oct 29 09:11:00 2026 GMT Not After : Nov 5 09:11:00 2026 GMT Subject: CN=6ae30da5-14b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:ce:50:c5:32:57:de:8c:3b:cc:19:43:59: 81:fb:ed:a5:f2:b3:ae:e0:9f:00:ec:cd:ec:95:5f: 8d:a3:36:de:5d:b6:35:5a:23:e6:ea:77:3f:c7:8e: 44:94:53:bb:6c:81:b4:ca:f3:24:e9:46:e9:fd:48: 70:53:5f:8e:80:8f:84:48:cb:16:e9:db:24:6b:6b: 65:ce:f9:65:5a:89:84:04:7d:24:88:e9:8e:5f:e2: b7:aa:e2:25:df:b9:c7:85:83:9f:4e:57:4a:f4:3a: 9c:e3:93:ee:86:14:cd:3e:30:b4:99:b5:a0:8d:a2: 89:f8:51:7c:9f:66:fc:1a:1c:76:e8:8e:6b:fe:f6: 83:91:69:4d:c7:54:f4:8b:2a:0c:a1:ca:86:ef:f1: df:d3:65:1b:76:00:cc:ab:0c:58:b3:47:20:62:02: b6:b1:f8:7a:7f:73:3c:7b:0d:0f:dc:99:b5:f1:bb: 5c:dd:dd:b0:23:a1:4f:bc:5c:32:84:f5:7f:20:9e: d8:0e:23:68:56:a0:2f:69:d4:a9:2d:16:d6:11:32: 2b:20:89:4e:b8:3f:76:6b:3b:c4:71:24:e6:8c:d7: ba:80:ed:fc:13:53:cb:ec:dc:bf:29:64:52:34:0a: 72:c4:b5:1f:6f:d8:59:5d:03:49:57:8f:ab:da:61: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EF:40:F5:A8:34:D5:06:59:ED:10:44:7B:A9:C1:05:79:45:A9:1A X509v3 Authority Key Identifier: keyid:C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:57:39:5c:2e:ac:c3:ed:cc:bf:e5:59:80:8b:c4:ea:a1:e7: b4:73:f7:b5:8d:ba:f5:90:db:c9:ac:79:65:12:bf:9c:aa:79: ae:6b:b8:3a:ef:c2:97:c6:7b:7b:eb:7c:33:7d:a6:37:e6:b5: bb:c5:7f:0e:15:e1:fd:54:5c:b7:83:03:d6:15:af:cf:d7:e9: 92:cf:f1:e6:a9:f3:db:57:15:58:e1:f3:1c:f6:01:76:38:4f: ee:26:6b:d0:39:9a:f1:f0:33:54:a5:dd:c6:1e:25:a4:f5:ca: 31:54:12:5e:97:55:d6:1f:97:6c:e3:c0:79:e9:81:2c:22:41: 69:87:0c:58:3e:59:41:83:90:bd:c5:88:54:9e:b9:36:79:b9: d0:e0:05:22:80:81:8a:a9:8f:27:12:4c:24:30:e1:cc:cf:3b: ec:35:e3:b8:b1:c6:ee:d4:dd:61:5b:08:8b:39:a8:51:9e:0b: 30:5c:86:9e:9b:a3:dd:e3:53:d6:86:30:2c:9b:81:3e:20:8f: 8b:31:00:b6:5d:31:a4:96:cf:4a:36:04:7e:b4:3e:35:c8:47: c9:6c:1d:3f:e1:48:b7:e2:ae:bb:2c:6a:31:41:2b:a7:87:4b: 7d:88:11:86:15:47:4a:d3:87:1b:f6:22:71:26:cd:00:64:6b: fc:8a:ae:65 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QUIyQjExMC8GA1UEBRMoQzU2NTc5NTMwOUU4NzIxNDhDRDIwREUyQjJBNDNDRDNC MjA0QzI1MTAeFw0yNjEwMjkwOTExMDBaFw0yNjExMDUwOTExMDBaMBgxFjAUBgNV BAMTDTZhZTMwZGE1LTE0YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc4c5QxTJX3ow7zBlDWYH77aXys67gnwDszeyVX42jNt5dtjVaI+bqdz/HjkSU U7tsgbTK8yTpRun9SHBTX46Aj4RIyxbp2yRra2XO+WVaiYQEfSSI6Y5f4req4iXf uceFg59OV0r0Opzjk+6GFM0+MLSZtaCNoon4UXyfZvwaHHbojmv+9oORaU3HVPSL Kgyhyobv8d/TZRt2AMyrDFizRyBiArax+Hp/czx7DQ/cmbXxu1zd3bAjoU+8XDKE 9X8gntgOI2hWoC9p1KktFtYRMisgiU64P3ZrO8RxJOaM17qA7fwTU8vs3L8pZFI0 CnLEtR9v2FldA0lXj6vaYf63AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJu9A9ag0 1QZZ7RBEe6nBBXlFqRowHwYDVR0jBBgwFoAUxWV5UwnochSM0g3isqQ807IEwlEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBQjJCLzQ5QzE5RjQ4Njcy MTExRjE4REQyNDgyMTc2NDdBODg4L3hXVjVVd25vY2hTTTBnM2lzcVE4MDdJRXds RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveFdWNVV3bm9jaFNNMGczaXNxUTgwN0lFd2xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB QjJCLzQ5QzE5RjQ4NjcyMTExRjE4REQyNDgyMTc2NDdBODg4L3hXVjVVd25vY2hT TTBnM2lzcVE4MDdJRXdsRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjVzlcLqzD7cy/5VmAi8Tqoee0c/e1jbr1kNvJrHllEr+cqnmua7g678KXxnt7 63wzfaY35rW7xX8OFeH9VFy3gwPWFa/P1+mSz/HmqfPbVxVY4fMc9gF2OE/uJmvQ OZrx8DNUpd3GHiWk9coxVBJel1XWH5ds48B56YEsIkFphwxYPllBg5C9xYhUnrk2 ebnQ4AUigIGKqY8nEkwkMOHMzzvsNeO4scbu1N1hWwiLOahRngswXIaem6Pd41PW hjAsm4E+II+LMQC2XTGkls9KNgR+tD41yEfJbB0/4Ui34q67LGoxQSunh0t9iBGG FUdK04cb9iJxJs0AZGv8iq5l -----END CERTIFICATE-----Generated at Thu Oct 29 13:57:49 2026 by rpki-client