$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json) Hash identifier: FUgJImVXx4jya6had/1dv9i7jJhL/Yppfd6B9b3dL0s= Subject key identifier: C6:D3:E2:B8:A7:CA:BF:A6:0A:48:48:38:CC:3B:B2:B7:CA:D1:DB:CC Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft Manifest number: 0857 Signing time: Wed 28 Oct 2026 21:12:25 +0000 Manifest this update: Wed 28 Oct 2026 21:12:24 +0000 Manifest next update: Wed 04 Nov 2026 21:12:24 +0000 Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: xxSqD+5eBNcNsnMtKpALNrSSzuSFI5OhWOL68J0/CoI=) 2: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=) 3: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=) 4: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Validity Not Before: Oct 28 21:12:24 2026 GMT Not After : Nov 4 21:12:24 2026 GMT Subject: CN=6ae26539-8a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:68:9b:53:fb:5c:ca:75:b5:cf:e1:e8:ee: 6b:97:04:52:ae:a7:71:b8:6c:5f:0c:ac:2a:8a:0e: 57:e7:84:81:e8:05:3e:fa:76:a8:07:3a:4d:49:86: 84:f7:e4:00:46:bc:ef:99:c5:05:5f:29:41:e0:9b: e1:90:1c:7b:35:d0:62:20:73:0c:d8:83:8a:a1:57: a3:60:d9:1a:72:1a:3d:84:8f:88:fa:4a:b4:eb:1c: 30:51:55:2d:3f:e1:9b:09:e2:31:98:4e:19:2e:7f: c9:7f:9c:a9:20:f6:5f:be:b1:a3:5c:25:c4:5c:fe: a5:fd:ba:48:98:71:f7:f1:8a:3f:c8:3b:7d:2d:63: 94:5d:5d:63:3e:4b:34:7c:91:2f:86:88:cc:15:e0: 7d:e0:10:3f:62:cd:f4:47:a1:ab:82:1e:a6:a0:0b: 78:0c:e6:c8:ed:15:24:d6:50:71:27:ec:e6:83:27: 2d:fd:61:97:9b:3e:5e:7c:ab:bb:82:e4:b6:3f:ff: a0:43:50:88:d5:2e:7b:ae:01:9b:3a:90:7b:7e:63: ca:ae:2c:df:08:32:5d:db:a7:47:44:0b:aa:f5:92: e7:97:15:35:ae:d6:5a:98:ad:79:c7:62:de:0c:43: f6:e8:34:7f:dc:a0:cf:43:2a:36:0b:b7:8f:d2:de: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D3:E2:B8:A7:CA:BF:A6:0A:48:48:38:CC:3B:B2:B7:CA:D1:DB:CC X509v3 Authority Key Identifier: keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:af:20:68:95:dd:9a:4d:66:dd:0d:01:d2:90:e6:54:84:e5: 45:f1:47:2b:c8:c4:d0:80:6d:d9:0c:5c:15:76:6a:c5:0c:71: 75:f3:50:6b:e8:ce:1b:d8:9c:db:ce:c4:08:af:b1:af:56:88: 28:16:e6:88:c8:95:0a:8b:b8:76:d5:0e:55:94:13:9d:1c:06: 8b:ef:5e:fe:49:09:bb:0d:f0:a4:2d:35:dc:60:cb:3a:d3:54: 7a:0a:22:b6:d2:0f:d8:aa:34:68:de:45:be:44:f1:5a:81:bf: a7:5b:30:b2:82:ff:30:b5:a9:3d:bb:67:b3:de:d1:cd:18:6b: 44:78:05:df:1e:38:2e:6b:77:2c:46:8d:da:01:cc:a4:30:b4: 87:cb:e4:25:79:e8:e5:af:57:94:d6:f0:43:53:08:01:09:32: fd:86:3e:e8:86:f2:d1:99:7a:4f:69:9b:5f:30:a7:1e:c4:cb: ae:4f:35:de:c7:23:6e:36:de:f6:b9:55:7c:8d:88:39:bd:4b: ec:0c:ae:4c:72:3a:c4:de:3b:ee:1d:f0:76:ec:1d:6f:1a:af: 54:13:76:1f:f2:fe:96:0c:0a:25:a0:83:91:29:65:8a:e4:c7: 7d:c5:7f:53:e3:3b:82:ad:02:06:c5:a0:28:b0:69:17:cc:96: f8:30:06:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE2MjAxMTAvBgNVBAUTKDAzNjY4QTIxRjBGMDFGMDZCMjc0RkQ4OENDOUUwQTZF ODNENTVGODUwHhcNMjYxMDI4MjExMjI0WhcNMjYxMTA0MjExMjI0WjAYMRYwFAYD VQQDEw02YWUyNjUzOS04YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CJom1P7XMp1tc/h6O5rlwRSrqdxuGxfDKwqig5X54SB6AU++naoBzpNSYaE 9+QARrzvmcUFXylB4JvhkBx7NdBiIHMM2IOKoVejYNkacho9hI+I+kq06xwwUVUt P+GbCeIxmE4ZLn/Jf5ypIPZfvrGjXCXEXP6l/bpImHH38Yo/yDt9LWOUXV1jPks0 fJEvhojMFeB94BA/Ys30R6Grgh6moAt4DObI7RUk1lBxJ+zmgyct/WGXmz5efKu7 guS2P/+gQ1CI1S57rgGbOpB7fmPKrizfCDJd26dHRAuq9ZLnlxU1rtZamK15x2Le DEP26DR/3KDPQyo2C7eP0t5IRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbT4rin yr+mCkhIOMw7srfK0dvMMB8GA1UdIwQYMBaAFANmiiHw8B8GsnT9iMyeCm6D1V+F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTYyMC8yMTk4MTZBQTI5 M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3YXlkUDJJeko0S2JvUFZY NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyYUtJZkR3SHdheWRQMkl6SjRLYm9QVlg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTYyMC8yMTk4MTZBQTI5M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3 YXlkUDJJeko0S2JvUFZYNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA068gaJXdmk1m3Q0B0pDmVITlRfFHK8jE0IBt2QxcFXZqxQxxdfNQa+jOG9ic 287ECK+xr1aIKBbmiMiVCou4dtUOVZQTnRwGi+9e/kkJuw3wpC013GDLOtNUegoi ttIP2Ko0aN5FvkTxWoG/p1swsoL/MLWpPbtns97RzRhrRHgF3x44Lmt3LEaN2gHM pDC0h8vkJXno5a9XlNbwQ1MIAQky/YY+6Iby0Zl6T2mbXzCnHsTLrk813scjbjbe 9rlVfI2IOb1L7AyuTHI6xN477h3wduwdbxqvVBN2H/L+lgwKJaCDkSlliuTHfcV/ U+M7gq0CBsWgKLBpF8yW+DAGvQ== -----END CERTIFICATE-----Generated at Fri Oct 30 04:08:22 2026 by rpki-client