$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft File: aIdCVFR7NLOvid21tI0CAj9Xrhc.mft (raw, json) Hash identifier: +g6H+RYfC56QJOMhBkyW7JWrYSZeZJeqauOAbVOy01Y= Subject key identifier: 71:FC:49:56:94:2C:52:C8:51:77:B7:E5:9E:B3:5F:E6:6E:5E:C2:67 Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Certificate serial: 0E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft Manifest number: 0E26 Signing time: Tue 20 Oct 2026 17:52:43 +0000 Manifest this update: Tue 20 Oct 2026 17:52:42 +0000 Manifest next update: Tue 27 Oct 2026 17:52:42 +0000 Files and hashes: 1: aIdCVFR7NLOvid21tI0CAj9Xrhc.crl (hash: 4O6eKLIZXlch57R2zYjTmLD0LsTK4qkgkZhxR5p1ZF0=) 2: 3CB0977C608811F1B5BB4F7F6F47A888.roa (hash: obvUvp1oAFlcd8oLgkACJL5wq5dkzfXfQHSgoe/uzAw=) 3: 0198539E94F311EA9429BF86C4F9AE02.roa (hash: x6WdVTtqXyzo1or27OKiZdwiQ6/5q3EEmbhvmI/FqvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 17:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3636 (0xe34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Validity Not Before: Oct 20 17:52:42 2026 GMT Not After : Oct 27 17:52:42 2026 GMT Subject: CN=6ad7aa6b-02b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:6a:7e:10:b0:bc:bb:52:a5:df:b3:d8:f7: 9c:c6:f0:ad:54:03:ec:5a:08:df:26:f9:9a:5e:f5: fb:8c:cc:8a:86:65:f9:76:ac:24:4a:bd:16:23:61: 76:78:09:19:81:67:5c:c4:2f:db:c5:af:38:15:8b: 9b:77:f5:16:8b:76:98:15:87:0a:f1:85:43:21:cd: 5f:1f:66:7d:0f:d1:bf:97:29:b8:b9:40:0e:69:0d: c4:44:dc:1c:c2:2c:19:ac:e9:d8:43:4d:cd:d7:7c: 89:c6:b5:8d:59:84:b0:a2:c2:83:08:b1:92:b5:83: b9:c6:68:02:62:ed:31:b2:7c:5a:98:64:66:6e:8c: 95:f5:c1:d3:13:1d:59:70:43:33:d5:bb:d8:ef:d7: 4b:36:3f:34:7d:30:02:f6:3a:97:e0:df:f4:72:48: 02:e8:39:19:46:f1:fe:c6:84:2d:42:b9:13:fb:74: 60:c9:53:a0:cf:e9:09:d2:b1:44:c4:7d:90:fa:11: dd:88:34:73:11:78:87:26:4a:66:5f:f6:18:05:e5: a7:76:c2:e2:a6:89:ff:28:bf:36:b5:29:7a:de:99: d5:d4:d1:11:92:24:c4:3e:22:2e:63:7d:39:63:2d: b4:73:8b:c3:cf:90:a9:1d:3b:9c:7d:19:f2:2c:5d: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FC:49:56:94:2C:52:C8:51:77:B7:E5:9E:B3:5F:E6:6E:5E:C2:67 X509v3 Authority Key Identifier: keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:df:91:01:e7:bf:79:18:e5:d5:4f:8d:b4:77:11:46:83:73: 9d:32:ce:91:b8:33:22:c0:0b:a4:fa:2c:e5:2d:8f:f7:04:59: f2:13:d1:41:16:d3:51:8f:e0:7c:3a:16:30:f6:6f:72:cf:0d: bb:75:6a:46:95:ed:37:18:2c:31:86:76:b3:8b:d7:dd:4d:96: b3:1e:5e:74:0b:05:7f:0b:9e:44:7b:a0:d0:a9:b2:0d:e7:b3: 60:ef:b0:1e:26:c2:88:17:79:4b:b2:2a:4a:14:6d:8b:99:88: c1:b7:d5:d6:03:8a:72:90:f3:98:26:02:8b:eb:6d:89:7b:0f: ad:34:eb:1e:57:9c:e3:96:2a:20:dc:de:d4:85:8d:13:7c:02: 99:25:a0:09:c8:d2:85:a7:c1:41:a5:8d:54:7d:05:79:9c:96: 2b:db:d8:40:0f:ab:fc:cb:7c:d1:ee:28:c1:fd:d0:70:a0:c3: d1:e7:f4:5b:41:bb:b8:01:ec:bc:23:59:1f:37:50:4b:94:cf: a0:c0:14:58:43:0e:4a:99:09:7d:5d:fe:30:ac:e9:43:fc:83: 63:3c:e4:44:ab:c9:72:ac:92:b9:b2:4a:a0:10:8a:af:9a:92: e9:5f:50:ff:58:61:c4:b7:eb:92:be:0f:c4:5c:7c:f5:f8:34: 71:56:4d:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTIxMTAvBgNVBAUTKDY4ODc0MjU0NTQ3QjM0QjNBRjg5RERCNUI0OEQwMjAy M0Y1N0FFMTcwHhcNMjYxMDIwMTc1MjQyWhcNMjYxMDI3MTc1MjQyWjAYMRYwFAYD VQQDEw02YWQ3YWE2Yi0wMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/xqfhCwvLtSpd+z2PecxvCtVAPsWgjfJvmaXvX7jMyKhmX5dqwkSr0WI2F2 eAkZgWdcxC/bxa84FYubd/UWi3aYFYcK8YVDIc1fH2Z9D9G/lym4uUAOaQ3ERNwc wiwZrOnYQ03N13yJxrWNWYSwosKDCLGStYO5xmgCYu0xsnxamGRmboyV9cHTEx1Z cEMz1bvY79dLNj80fTAC9jqX4N/0ckgC6DkZRvH+xoQtQrkT+3RgyVOgz+kJ0rFE xH2Q+hHdiDRzEXiHJkpmX/YYBeWndsLipon/KL82tSl63pnV1NERkiTEPiIuY305 Yy20c4vDz5CpHTucfRnyLF3ayQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHH8SVaU LFLIUXe35Z6zX+ZuXsJnMB8GA1UdIwQYMBaAFGiHQlRUezSzr4ndtbSNAgI/V64X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1Mi8xRDRCNDRFRURC NkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05MT3ZpZDIxdEkwQ0FqOVhy aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJZENWRlI3TkxPdmlkMjF0STBDQWo5WHJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ1Mi8xRDRCNDRFRURCNkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05M T3ZpZDIxdEkwQ0FqOVhyaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAN+RAee/eRjl1U+NtHcRRoNznTLOkbgzIsALpPos5S2P9wRZ8hPRQRbTUY/g fDoWMPZvcs8Nu3VqRpXtNxgsMYZ2s4vX3U2Wsx5edAsFfwueRHug0KmyDeezYO+w HibCiBd5S7IqShRti5mIwbfV1gOKcpDzmCYCi+ttiXsPrTTrHlec45YqINze1IWN E3wCmSWgCcjShafBQaWNVH0FeZyWK9vYQA+r/Mt80e4owf3QcKDD0ef0W0G7uAHs vCNZHzdQS5TPoMAUWEMOSpkJfV3+MKzpQ/yDYzzkRKvJcqySubJKoBCKr5qS6V9Q /1hhxLfrkr4PxFx89fg0cVZNFw== -----END CERTIFICATE-----Generated at Wed Oct 21 17:04:26 2026 by rpki-client