$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: 543N64h2UNEpCqGEySbjiDaoFTPvAD2pD55qhktVi8M= Subject key identifier: 40:39:0C:28:80:89:47:64:55:FB:D9:3C:9A:94:D9:25:DA:F4:31:B0 Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 02ED Signing time: Thu 29 Oct 2026 01:28:59 +0000 Manifest this update: Thu 29 Oct 2026 01:28:58 +0000 Manifest next update: Thu 05 Nov 2026 01:28:58 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: OYDNgE3GFfX552sW5JGyoL+3ojdUX6G+M/gDnBR6jIA=) 2: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=) 3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=) 4: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Oct 29 01:28:58 2026 GMT Not After : Nov 5 01:28:58 2026 GMT Subject: CN=6ae2a15a-d3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:7f:37:f7:47:05:28:b8:6c:44:3e:e7:c7: b1:4c:f7:44:3e:e2:8c:ec:df:72:8e:2c:18:0d:43: 86:af:49:6d:ca:34:d2:6e:43:b7:2d:9f:fc:cc:e7: bc:ee:70:ac:24:58:b4:0b:85:a8:f8:35:25:01:a8: 9a:fb:35:b1:a7:8a:0d:05:31:63:da:f7:ba:6e:93: b3:e3:eb:ce:4d:e9:67:57:f3:ef:d8:8e:80:35:9c: f7:98:26:e3:f5:6e:1c:aa:29:a3:b2:e0:67:e0:11: f3:61:b8:a7:bf:71:34:b1:5c:de:8e:07:b8:0c:3c: 31:a6:4b:02:a4:34:6e:cb:2c:5d:cd:68:d3:f8:7e: 69:1b:ba:b0:35:1b:9d:2e:43:a5:92:2c:01:39:fc: 52:1e:d8:06:e4:ab:ec:ce:f3:17:d0:b1:a2:8b:ae: d7:e2:8e:18:45:c9:a9:ee:68:58:34:ec:a6:f4:3a: 1e:90:c8:a0:14:ce:d4:f5:52:f5:37:0e:13:01:e4: b2:4d:8e:af:64:e1:19:92:22:38:a4:f0:dd:2e:3f: 68:e0:d2:4c:56:89:0a:bc:92:16:5f:20:92:9a:06: 8b:01:c7:09:bb:77:85:e9:c3:cf:fa:4b:66:c2:18: ad:16:30:45:8c:1e:08:df:e6:d5:2d:95:f9:2f:8d: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:39:0C:28:80:89:47:64:55:FB:D9:3C:9A:94:D9:25:DA:F4:31:B0 X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:04:9f:48:0a:83:96:d7:79:72:17:b9:c4:e9:a1:bc:76:19: 83:42:c3:e1:ae:c3:bd:16:4a:26:61:f5:34:bf:dd:62:e6:97: c1:14:6a:b9:8c:57:1b:b5:a3:27:c0:7c:25:9f:e2:05:44:b3: ae:cc:06:ca:73:ff:1c:16:5a:cd:be:72:9e:af:b6:a2:c1:6e: 51:36:92:8e:d4:98:5e:3d:98:18:b3:75:4b:6a:4c:67:1b:c9: 2e:11:4c:e1:be:df:05:de:35:cb:b9:e5:3a:07:fe:c3:b7:8c: 93:20:01:a4:05:72:ac:ed:41:da:ed:04:14:64:2e:f0:91:55: 6a:69:7e:7a:60:c1:5f:7e:b9:f2:b2:0e:f5:d4:85:cc:a3:50: 97:91:aa:11:03:85:47:7c:90:09:a9:b5:2d:cf:70:ab:01:d3: f4:49:80:5e:99:fa:ed:98:df:d6:32:8c:b6:d6:48:59:2b:39: 6b:fc:0f:84:99:b8:a9:fe:71:c9:67:3f:ab:18:9c:e4:55:b7: ab:92:37:99:9c:67:1b:13:49:81:5b:b0:1c:97:ad:25:3c:22: 44:48:87:ee:dd:14:d6:59:5c:e1:29:7a:00:10:3f:7c:84:4b: b4:68:db:f3:39:42:6e:86:fb:10:e1:cf:78:aa:a6:06:41:09: ad:d7:4a:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjYxMDI5MDEyODU4WhcNMjYxMTA1MDEyODU4WjAYMRYwFAYD VQQDEw02YWUyYTE1YS1kM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTp/N/dHBSi4bEQ+58exTPdEPuKM7N9yjiwYDUOGr0ltyjTSbkO3LZ/8zOe8 7nCsJFi0C4Wo+DUlAaia+zWxp4oNBTFj2ve6bpOz4+vOTelnV/Pv2I6ANZz3mCbj 9W4cqimjsuBn4BHzYbinv3E0sVzejge4DDwxpksCpDRuyyxdzWjT+H5pG7qwNRud LkOlkiwBOfxSHtgG5KvszvMX0LGii67X4o4YRcmp7mhYNOym9DoekMigFM7U9VL1 Nw4TAeSyTY6vZOEZkiI4pPDdLj9o4NJMVokKvJIWXyCSmgaLAccJu3eF6cPP+ktm whitFjBFjB4I3+bVLZX5L40P2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEA5DCiA iUdkVfvZPJqU2SXa9DGwMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOgSfSAqDltd5che5xOmhvHYZg0LD4a7DvRZKJmH1NL/dYuaXwRRquYxXG7Wj J8B8JZ/iBUSzrswGynP/HBZazb5ynq+2osFuUTaSjtSYXj2YGLN1S2pMZxvJLhFM 4b7fBd41y7nlOgf+w7eMkyABpAVyrO1B2u0EFGQu8JFVaml+emDBX3658rIO9dSF zKNQl5GqEQOFR3yQCam1Lc9wqwHT9EmAXpn67Zjf1jKMttZIWSs5a/wPhJm4qf5x yWc/qxic5FW3q5I3mZxnGxNJgVuwHJetJTwiREiH7t0U1llc4Sl6ABA/fIRLtGjb 8zlCbob7EOHPeKqmBkEJrddKnQ== -----END CERTIFICATE-----Generated at Thu Oct 29 10:59:09 2026 by rpki-client