$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json) Hash identifier: rTH2Jrg45Wzsq8kLDvz6VExlX8/lBMQ1/7X+McZA0o0= Subject key identifier: 54:55:E4:5F:8C:A1:EB:65:4A:00:B9:8F:AB:34:6C:69:5F:9A:68:A4 Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft Manifest number: 0856 Signing time: Mon 26 Oct 2026 20:59:19 +0000 Manifest this update: Mon 26 Oct 2026 20:59:18 +0000 Manifest next update: Mon 02 Nov 2026 20:59:18 +0000 Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: F703lOXhyMxirZQr7upOIoRSzy5ODxIR3OH6gjpDypE=) 2: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=) 3: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=) 4: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 20:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Validity Not Before: Oct 26 20:59:18 2026 GMT Not After : Nov 2 20:59:18 2026 GMT Subject: CN=6adfbf27-2281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:51:6d:8d:c1:56:95:9c:59:ab:a2:1e:10: 57:39:5d:bc:13:21:96:3f:69:f9:d2:89:b3:26:3b: 92:6e:39:3c:de:b3:47:bf:1d:49:29:98:b5:a8:85: b2:37:4c:32:95:13:f8:76:1c:fe:2a:c4:5e:e7:54: d5:a8:db:95:17:b2:ed:fa:b0:69:8c:51:e3:3e:a2: 5a:e6:0f:85:36:44:4f:52:87:cb:af:c4:95:14:af: 62:14:cc:f5:e4:38:d2:e0:30:3d:53:35:f0:b5:78: 2f:fb:2c:8c:8c:89:51:51:9d:57:6d:1c:aa:c7:c1: a3:31:14:04:a0:cb:af:0d:7f:d9:1e:7e:d8:c4:b0: 21:a3:08:ee:c9:c1:e9:3a:7c:12:5a:6f:7f:ae:c6: 68:b4:b1:a2:c9:8e:85:0c:fb:36:ce:22:ed:62:bc: 0a:09:6f:62:37:c2:31:19:e3:d2:d3:a1:68:42:fa: 6e:86:e8:18:7f:f7:cc:8e:8f:b9:67:53:b2:f8:a4: ee:65:50:f8:4e:e7:3d:25:21:39:50:ba:01:90:37: 4c:1c:4d:89:76:c2:bd:44:20:10:8f:a3:ef:89:9b: 86:ca:55:6e:3c:4a:bb:f9:97:dc:25:58:6a:25:e5: ea:42:9c:ab:c7:1a:3a:f1:29:fc:36:ce:ad:18:8a: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:55:E4:5F:8C:A1:EB:65:4A:00:B9:8F:AB:34:6C:69:5F:9A:68:A4 X509v3 Authority Key Identifier: keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:29:87:62:f3:a3:cb:da:16:fd:f5:fb:b9:b8:52:7f:cc:cf: 0c:ad:bc:b5:11:c9:87:11:1a:95:e1:2e:ca:d4:b2:0a:78:38: b2:47:1e:4d:fe:53:2d:69:0d:4b:02:15:4b:33:5d:ef:46:a2: 56:81:96:55:71:f5:6f:35:af:75:74:f5:d0:31:f6:41:e3:3e: f6:8c:dc:25:c1:8c:7d:20:0d:60:d9:50:94:c5:c3:16:4d:92: b7:97:67:f9:17:2d:58:a4:60:92:f5:90:56:f2:5d:8f:df:6f: 81:5e:56:f9:d2:ab:de:2d:34:d9:47:b1:3d:d3:aa:79:85:14: 41:fc:9b:5b:69:e6:a5:18:97:d7:eb:02:6a:0a:ef:53:aa:a5: ab:e7:8f:80:2d:4c:0a:d9:25:bb:99:9c:9b:8d:b1:a7:16:60: ac:a9:1e:b2:3d:7f:9b:c5:f5:3b:56:bd:b1:2f:b9:e6:74:b3: 8f:9e:03:b0:0e:40:c5:91:30:38:c6:85:6d:4d:62:c1:9c:44: cc:29:99:a6:35:b9:5c:ea:0a:1e:e4:e2:0b:03:aa:0a:dc:72: a6:da:98:c1:01:3d:30:68:48:ab:2a:c1:fc:38:b8:06:25:6a: 6b:7a:24:3d:30:d5:81:ac:d6:f7:e1:35:17:0a:de:fb:4f:46: 6f:d8:e5:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE2MjAxMTAvBgNVBAUTKDAzNjY4QTIxRjBGMDFGMDZCMjc0RkQ4OENDOUUwQTZF ODNENTVGODUwHhcNMjYxMDI2MjA1OTE4WhcNMjYxMTAyMjA1OTE4WjAYMRYwFAYD VQQDEw02YWRmYmYyNy0yMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAFRbY3BVpWcWauiHhBXOV28EyGWP2n50omzJjuSbjk83rNHvx1JKZi1qIWy N0wylRP4dhz+KsRe51TVqNuVF7Lt+rBpjFHjPqJa5g+FNkRPUofLr8SVFK9iFMz1 5DjS4DA9UzXwtXgv+yyMjIlRUZ1XbRyqx8GjMRQEoMuvDX/ZHn7YxLAhowjuycHp OnwSWm9/rsZotLGiyY6FDPs2ziLtYrwKCW9iN8IxGePS06FoQvpuhugYf/fMjo+5 Z1Oy+KTuZVD4Tuc9JSE5ULoBkDdMHE2JdsK9RCAQj6PviZuGylVuPEq7+ZfcJVhq JeXqQpyrxxo68Sn8Ns6tGIoEMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRV5F+M oetlSgC5j6s0bGlfmmikMB8GA1UdIwQYMBaAFANmiiHw8B8GsnT9iMyeCm6D1V+F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTYyMC8yMTk4MTZBQTI5 M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3YXlkUDJJeko0S2JvUFZY NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyYUtJZkR3SHdheWRQMkl6SjRLYm9QVlg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTYyMC8yMTk4MTZBQTI5M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3 YXlkUDJJeko0S2JvUFZYNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSmHYvOjy9oW/fX7ubhSf8zPDK28tRHJhxEaleEuytSyCng4skceTf5TLWkN SwIVSzNd70aiVoGWVXH1bzWvdXT10DH2QeM+9ozcJcGMfSANYNlQlMXDFk2St5dn +RctWKRgkvWQVvJdj99vgV5W+dKr3i002UexPdOqeYUUQfybW2nmpRiX1+sCagrv U6qlq+ePgC1MCtklu5mcm42xpxZgrKkesj1/m8X1O1a9sS+55nSzj54DsA5AxZEw OMaFbU1iwZxEzCmZpjW5XOoKHuTiCwOqCtxyptqYwQE9MGhIqyrB/Di4BiVqa3ok PTDVgazW9+E1Fwre+09Gb9jlSQ== -----END CERTIFICATE-----Generated at Wed Oct 28 22:23:35 2026 by rpki-client