$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json) Hash identifier: Vfc1OF2DwfR8e0hoVUqCkGoZ1uwSV3uVPMD8MtP7X0I= Subject key identifier: 12:A5:A0:E4:2C:F4:2C:DA:42:B1:1D:FA:29:63:F9:DE:86:75:4A:D8 Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Certificate serial: 1087 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft Manifest number: 1068 Signing time: Sat 24 Oct 2026 17:22:11 +0000 Manifest this update: Sat 24 Oct 2026 17:22:11 +0000 Manifest next update: Sat 31 Oct 2026 17:22:11 +0000 Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: n+AYOJFnCLncHjkrToqXlpzmDbyHid+V+1Da3YeWAiw=) 2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: bkUKZUvS9EpDP9RLJvv2KmtwT7u1XsXfDuKXS1HnRaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 17:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4231 (0x1087) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Validity Not Before: Oct 24 17:22:11 2026 GMT Not After : Oct 31 17:22:11 2026 GMT Subject: CN=6adce943-5047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:50:68:b6:ee:3e:f7:cc:5c:d3:73:7c:d4: ff:86:e9:ad:76:d3:9c:ec:49:44:93:3f:2e:1f:d0: e4:25:c1:c5:86:ee:c0:d6:ca:ac:4d:e1:2c:73:75: 7b:97:f3:af:d9:55:83:e2:b1:8d:4a:3f:6f:9b:0e: 13:ff:c6:d2:2a:cd:44:77:45:7e:58:85:68:d1:0d: b3:ca:6b:c8:ea:cd:ac:81:17:4b:8e:54:98:5b:15: d0:f1:87:65:43:22:b5:d8:b9:4a:52:82:6b:be:86: a8:f7:24:00:46:0b:5d:f4:40:1c:bc:1a:e2:49:88: 72:80:f5:5b:d4:b8:ca:dd:84:54:65:88:70:08:ff: 29:76:64:1e:5c:d3:04:32:0e:a7:fe:69:9f:e6:e6: d1:77:0b:05:19:4a:37:11:b5:be:60:50:63:f2:6c: 32:ea:61:33:27:10:f5:ac:a1:e3:74:2b:61:45:a0: 0a:1b:41:b0:e8:12:a3:f3:75:d1:76:e3:07:17:99: d6:b9:da:13:03:f3:00:ae:89:49:e6:18:39:4a:c1: 6e:46:1a:ab:2a:01:3b:ae:51:79:b8:0e:60:71:95: e9:6b:45:41:d8:9a:f3:dc:44:af:ce:2a:02:c9:77: 7f:0e:8c:b3:29:06:62:e5:7c:b7:73:c8:92:ec:ec: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A5:A0:E4:2C:F4:2C:DA:42:B1:1D:FA:29:63:F9:DE:86:75:4A:D8 X509v3 Authority Key Identifier: keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:44:1d:32:53:ba:c5:fb:0e:22:76:4e:df:19:9c:0e:fa:bc: f4:3b:f9:9c:68:a1:c6:00:3a:f4:5c:2a:1a:a9:08:e8:38:0b: ec:cb:1c:71:05:28:b7:c9:6b:c3:11:8f:3a:87:2b:c6:16:ff: 19:86:e4:34:8d:42:55:61:02:23:44:7e:b7:77:42:4a:77:43: 9d:5f:2a:c5:f3:84:57:fc:ad:2e:9e:78:c8:60:7f:c1:0b:de: d7:cc:e6:4d:89:9d:e6:2e:c5:35:51:6b:3f:5e:e5:f6:72:36: 6b:b0:e8:e3:e2:76:be:98:02:12:c2:03:17:fe:72:be:2e:34: 0e:f8:13:4f:c9:25:16:7c:5d:2d:75:55:f1:bd:47:76:7e:45: ee:c9:a7:dc:2a:cb:3a:0d:84:f6:74:8a:25:a6:48:d8:74:59: fd:81:4c:83:ea:37:11:a6:e9:80:f9:77:cc:b9:60:c7:33:6b: e1:85:11:5f:f3:9d:22:8c:83:eb:21:81:48:4c:01:94:74:c0: 13:c5:9d:7e:c2:2b:1c:4c:c4:d7:df:c7:5f:f8:c5:5a:e7:dc: 63:89:11:c6:79:11:01:76:ed:ab:85:80:60:99:2a:56:eb:d3: 37:33:5c:c4:4f:06:12:99:34:ec:73:37:77:3a:ea:99:9f:1f: 5b:27:33:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB RkNERUMzRTIwHhcNMjYxMDI0MTcyMjExWhcNMjYxMDMxMTcyMjExWjAYMRYwFAYD VQQDEw02YWRjZTk0My01MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/tQaLbuPvfMXNNzfNT/humtdtOc7ElEkz8uH9DkJcHFhu7A1sqsTeEsc3V7 l/Ov2VWD4rGNSj9vmw4T/8bSKs1Ed0V+WIVo0Q2zymvI6s2sgRdLjlSYWxXQ8Ydl QyK12LlKUoJrvoao9yQARgtd9EAcvBriSYhygPVb1LjK3YRUZYhwCP8pdmQeXNME Mg6n/mmf5ubRdwsFGUo3EbW+YFBj8mwy6mEzJxD1rKHjdCthRaAKG0Gw6BKj83XR duMHF5nWudoTA/MArolJ5hg5SsFuRhqrKgE7rlF5uA5gcZXpa0VB2Jrz3ESvzioC yXd/DoyzKQZi5Xy3c8iS7OzaUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKloOQs 9CzaQrEd+ilj+d6GdUrYMB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkYxRS9EQkIyQkY2NjZFNkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMy cTNOckpWTllaMW12emV3LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb0QdMlO6xfsOInZO3xmcDvq89Dv5nGihxgA69FwqGqkI6DgL7MsccQUot8lr wxGPOocrxhb/GYbkNI1CVWECI0R+t3dCSndDnV8qxfOEV/ytLp54yGB/wQve18zm TYmd5i7FNVFrP17l9nI2a7Do4+J2vpgCEsIDF/5yvi40DvgTT8klFnxdLXVV8b1H dn5F7smn3CrLOg2E9nSKJaZI2HRZ/YFMg+o3EabpgPl3zLlgxzNr4YURX/OdIoyD 6yGBSEwBlHTAE8WdfsIrHEzE19/HX/jFWufcY4kRxnkRAXbtq4WAYJkqVuvTNzNc xE8GEpk07HM3dzrqmZ8fWyczSg== -----END CERTIFICATE-----Generated at Mon Oct 26 20:39:45 2026 by rpki-client