$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: E+mrUnAvVCIyMHji1eesSJfoV3NepKqUlpoBFA+Es1o= Subject key identifier: 84:FF:A4:79:DD:81:88:DF:DC:C9:BD:A3:64:72:FF:46:98:33:3B:72 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 08DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 08CD Signing time: Mon 26 Oct 2026 20:30:07 +0000 Manifest this update: Mon 26 Oct 2026 20:30:06 +0000 Manifest next update: Mon 02 Nov 2026 20:30:06 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: VIQaukxw8T791QtTR2o6E8xRObvwDZGaqN7l1hVguuk=) 2: B08421401D2C11F1AC765BFB153D8C67.roa (hash: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU=) 3: 137DD3E8E60C11F0A18B1E57676F56BC.roa (hash: uV78r469K9kpBYYycBaJqz/OEoI2cFdGsz5vaAFm0kA=) 4: 8FB8171E1D2C11F18BD061F8153D8C67.roa (hash: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo=) 5: DFBB127A1FD911F18338B27E3F3D8C67.roa (hash: /SYY7WeR+aA+gbxGrf5qM5FajASTqqxf81wX3CNIlA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 20:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2266 (0x8da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Oct 26 20:30:06 2026 GMT Not After : Nov 2 20:30:06 2026 GMT Subject: CN=6adfb84f-624c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:be:50:b3:79:c3:a9:35:18:2e:65:a8:26: 04:2b:8c:8c:3f:50:13:53:5b:9c:fa:a9:cd:6a:02: f7:10:3a:d5:7b:db:26:b6:61:b6:6a:df:29:1d:7d: 77:ab:4b:c1:87:cf:91:41:55:88:8d:03:86:8d:c6: 36:c5:20:ae:9a:75:9f:b4:71:c0:13:f4:56:71:78: 8f:43:71:88:ce:9b:c7:ba:89:ef:2f:14:95:c6:52: 62:04:b1:04:51:c9:6b:92:b4:dd:7b:41:aa:65:2b: c9:a3:75:f5:39:a2:e3:46:2a:68:42:b9:69:4a:4c: 07:7e:eb:aa:e8:12:c9:e3:42:41:3b:ec:8d:cf:e9: 3f:11:93:b6:5a:99:70:39:0a:15:f0:07:28:ed:ee: 88:f8:a6:4b:66:59:39:0c:c3:d4:4b:35:50:ed:63: 64:42:97:4a:d4:24:b6:b5:b4:a8:78:5a:93:0d:44: 58:7a:99:a5:a8:1b:20:fc:83:f9:e9:01:c8:ac:44: c7:8a:cf:6c:e2:ae:4f:ab:81:cd:64:4e:38:ef:8a: ff:26:9f:90:aa:98:4a:fa:1c:8a:db:d5:77:bf:d2: e6:2a:65:16:bc:9b:dd:5b:ce:8c:a8:92:1f:02:c8: 0e:1b:05:52:ed:b3:5a:06:d9:1f:7f:69:f3:d5:05: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FF:A4:79:DD:81:88:DF:DC:C9:BD:A3:64:72:FF:46:98:33:3B:72 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d2:19:58:36:a7:2d:00:b2:5c:dc:de:e7:70:a8:b4:d9:a3: 24:39:2f:9d:b6:5b:5f:d3:c5:22:b6:a9:0c:a2:06:52:4c:4b: fd:4c:69:84:ff:e7:80:9a:8c:c2:42:cb:04:db:95:40:07:36: 53:e4:f2:ca:23:a1:fe:45:ef:8d:15:10:31:52:a0:06:01:5e: aa:2f:0d:8a:90:aa:1b:16:c8:78:e0:bf:87:13:ea:47:66:6c: dd:7d:b2:55:fa:06:8c:f7:a9:c1:49:7b:54:34:a4:d3:f7:fd: a7:91:a2:70:0e:0a:49:f2:51:28:87:90:b0:9c:d2:b9:67:cd: b6:cb:7d:88:16:bf:cd:ab:55:fc:d0:46:84:5e:cb:c6:4c:86: b3:8b:9a:e9:3c:03:cf:db:41:57:23:86:eb:52:5c:0e:12:a9: d0:06:6a:fd:cc:37:11:b7:95:90:3e:55:03:54:83:36:a3:e1: cf:c2:1f:c4:8b:91:bf:9d:01:2a:dd:04:ac:f0:a2:cf:21:23: 75:83:69:7f:ef:99:e4:4b:f7:fe:b1:2e:7f:2a:b3:6f:d9:c0: 91:9b:8d:ac:de:66:73:83:ac:be:17:89:d4:bd:e6:e1:73:e5: 5c:47:28:4c:78:48:c3:46:74:28:43:38:68:7a:22:db:1a:e1: 8b:df:a6:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjYxMDI2MjAzMDA2WhcNMjYxMTAyMjAzMDA2WjAYMRYwFAYD VQQDEw02YWRmYjg0Zi02MjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgjm+ULN5w6k1GC5lqCYEK4yMP1ATU1uc+qnNagL3EDrVe9smtmG2at8pHX13 q0vBh8+RQVWIjQOGjcY2xSCumnWftHHAE/RWcXiPQ3GIzpvHuonvLxSVxlJiBLEE UclrkrTde0GqZSvJo3X1OaLjRipoQrlpSkwHfuuq6BLJ40JBO+yNz+k/EZO2Wplw OQoV8Aco7e6I+KZLZlk5DMPUSzVQ7WNkQpdK1CS2tbSoeFqTDURYepmlqBsg/IP5 6QHIrETHis9s4q5Pq4HNZE4474r/Jp+QqphK+hyK29V3v9LmKmUWvJvdW86MqJIf AsgOGwVS7bNaBtkff2nz1QVXAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIT/pHnd gYjf3Mm9o2Ry/0aYMztyMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKNIZWDanLQCyXNze53CotNmjJDkvnbZbX9PFIrapDKIGUkxL/UxphP/ngJqM wkLLBNuVQAc2U+TyyiOh/kXvjRUQMVKgBgFeqi8NipCqGxbIeOC/hxPqR2Zs3X2y VfoGjPepwUl7VDSk0/f9p5GicA4KSfJRKIeQsJzSuWfNtst9iBa/zatV/NBGhF7L xkyGs4ua6TwDz9tBVyOG61JcDhKp0AZq/cw3EbeVkD5VA1SDNqPhz8IfxIuRv50B Kt0ErPCizyEjdYNpf++Z5Ev3/rEufyqzb9nAkZuNrN5mc4OsvheJ1L3m4XPlXEco THhIw0Z0KEM4aHoi2xrhi9+mMA== -----END CERTIFICATE-----Generated at Wed Oct 28 18:47:16 2026 by rpki-client