$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft File: 320AK7yrolDSrmtEVOPL_WfSx-o.mft (raw, json) Hash identifier: 8tLsqA+0EO9RZGke2M/iIRdg2gg5rlMHsY+HXNSidyc= Subject key identifier: 17:E0:D0:6A:7D:93:32:62:F5:56:EF:4D:47:50:21:B9:C8:E6:59:5B Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Certificate serial: 0AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft Manifest number: 0A96 Signing time: Sat 24 Oct 2026 19:33:33 +0000 Manifest this update: Sat 24 Oct 2026 19:33:33 +0000 Manifest next update: Sat 31 Oct 2026 19:33:33 +0000 Files and hashes: 1: 320AK7yrolDSrmtEVOPL_WfSx-o.crl (hash: ejD1hSWaaKBPGtu5Y4qlSp+neQMRHrBOa2jPSj7Bm28=) 2: 7DE46976ACCD11F19F8398F66811F970.roa (hash: XT10HnbwUVbbFgnv8FA0dmR71IX7J1lqbdxu9hRhOx8=) 3: DB7F68169BC411F1A594B11D5711F970.roa (hash: MzOblxL2EO6eoY/hF+w+6TErc2kgqiCc+Od6pRCAPt0=) 4: 7EF7457CACCD11F19F8398F66811F970.roa (hash: 05+3hZWGor2rz0Kju646oiaVDVscsIH6UNvSgbt/8ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 19:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Validity Not Before: Oct 24 19:33:33 2026 GMT Not After : Oct 31 19:33:33 2026 GMT Subject: CN=6add080d-bd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:10:73:2f:ec:fb:d8:a0:61:30:c5:f6:c8: 34:a4:52:7f:19:fc:26:29:72:d2:0c:9e:f6:14:5b: 73:da:19:cc:c0:cb:c0:26:30:aa:d0:10:45:b2:8d: fe:c5:bd:67:9d:ca:c6:45:09:8f:8b:26:40:81:b9: 71:fe:d1:a7:5a:67:e5:1a:41:b0:6e:f9:70:bc:a8: a8:5b:83:ed:4c:cd:8e:f0:19:e2:20:fa:e9:68:32: 14:a6:76:d7:5c:49:11:39:9c:09:02:76:dd:8e:1b: 42:0e:04:c9:5e:e1:42:50:e8:eb:06:27:2e:26:1e: 9c:13:61:a5:2e:03:65:d5:2a:18:7a:bf:b8:f2:fa: 9b:99:3d:cf:f4:ba:23:c2:71:32:65:83:52:98:e9: dc:d3:de:27:f6:22:13:09:e0:b4:e1:ff:ba:27:db: 91:1c:9c:15:92:07:be:94:d5:eb:e4:50:63:45:f4: a9:02:6d:9a:1a:e8:35:e5:b2:74:11:a1:4c:94:1f: af:37:de:de:47:c4:c6:44:5e:4e:33:fa:33:35:ff: ef:9e:25:84:b9:03:cf:13:d3:29:7b:83:e9:1a:cb: 27:3c:97:a7:76:09:d4:42:6e:87:dc:fb:e6:96:68: 98:12:bc:04:78:0d:0b:83:e3:8a:60:b5:50:2a:06: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E0:D0:6A:7D:93:32:62:F5:56:EF:4D:47:50:21:B9:C8:E6:59:5B X509v3 Authority Key Identifier: keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:59:81:65:b2:8f:9c:c2:49:91:91:35:17:22:65:88:4a:2a: 39:32:b2:22:16:c4:60:e8:84:38:36:31:3d:9d:53:72:f8:0f: 9d:c0:95:a7:b7:31:1d:86:de:11:75:1d:12:d4:29:7c:66:e2: 0b:0c:4d:74:2c:de:d4:86:ee:2b:02:cf:db:82:15:91:49:8f: c2:3a:d3:6e:fa:5f:67:2d:88:25:c6:c6:36:fc:fd:07:cd:03: 9e:ec:0e:db:64:f2:95:77:93:d0:31:ff:49:56:04:0d:4a:80: 9b:da:5a:f1:32:39:9f:0e:a9:a8:ed:ae:45:9e:a4:3b:e1:a4: d0:47:88:66:a9:ac:c1:bc:0f:dc:23:7f:c8:e6:61:55:c6:a9: 68:36:ad:b9:94:53:fb:9f:7f:3e:22:ba:cb:46:16:15:86:66: 3b:5f:d7:06:94:07:dd:e3:2a:59:98:1c:8d:b0:be:03:a1:fc: b1:20:60:3e:3d:b3:d8:4c:80:01:64:b4:e4:fd:a8:64:f0:5d: ad:ba:84:60:ff:f9:ff:0c:59:d5:d1:7b:63:61:96:7c:fa:d1: 81:78:d5:98:70:f8:f2:02:8f:ea:9a:dd:1a:ba:1b:35:71:9f: 32:08:98:91:fa:77:56:cd:34:3f:0e:02:5d:a5:bb:b0:0e:6b: ef:18:34:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNERTIxMTAvBgNVBAUTKERGNkQwMDJCQkNBQkEyNTBEMkFFNkI0NDU0RTNDQkZE NjdEMkM3RUEwHhcNMjYxMDI0MTkzMzMzWhcNMjYxMDMxMTkzMzMzWjAYMRYwFAYD VQQDEw02YWRkMDgwZC1iZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPwQcy/s+9igYTDF9sg0pFJ/GfwmKXLSDJ72FFtz2hnMwMvAJjCq0BBFso3+ xb1nncrGRQmPiyZAgblx/tGnWmflGkGwbvlwvKioW4PtTM2O8BniIPrpaDIUpnbX XEkROZwJAnbdjhtCDgTJXuFCUOjrBicuJh6cE2GlLgNl1SoYer+48vqbmT3P9Loj wnEyZYNSmOnc094n9iITCeC04f+6J9uRHJwVkge+lNXr5FBjRfSpAm2aGug15bJ0 EaFMlB+vN97eR8TGRF5OM/ozNf/vniWEuQPPE9Mpe4PpGssnPJendgnUQm6H3Pvm lmiYErwEeA0Lg+OKYLVQKgYKAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfg0Gp9 kzJi9VbvTUdQIbnI5llbMB8GA1UdIwQYMBaAFN9tACu8q6JQ0q5rRFTjy/1n0sfq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RFMi9EMjE4REQ1MjhF OTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9sRFNybXRFVk9QTF9XZlN4 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMyMEFLN3lyb2xEU3JtdEVWT1BMX1dmU3gtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RFMi9EMjE4REQ1MjhFOTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9s RFNybXRFVk9QTF9XZlN4LW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdlmBZbKPnMJJkZE1FyJliEoqOTKyIhbEYOiEODYxPZ1TcvgPncCVp7cxHYbe EXUdEtQpfGbiCwxNdCze1IbuKwLP24IVkUmPwjrTbvpfZy2IJcbGNvz9B80DnuwO 22TylXeT0DH/SVYEDUqAm9pa8TI5nw6pqO2uRZ6kO+Gk0EeIZqmswbwP3CN/yOZh VcapaDatuZRT+59/PiK6y0YWFYZmO1/XBpQH3eMqWZgcjbC+A6H8sSBgPj2z2EyA AWS05P2oZPBdrbqEYP/5/wxZ1dF7Y2GWfPrRgXjVmHD48gKP6prdGrobNXGfMgiY kfp3Vs00Pw4CXaW7sA5r7xg0fw== -----END CERTIFICATE-----Generated at Mon Oct 26 12:29:42 2026 by rpki-client