$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json) Hash identifier: HpXMHZ0NkFhO8VreqEDagtbiOwebRyARumMWxuGRWKM= Subject key identifier: 1D:D2:53:59:58:03:19:29:50:73:AC:98:3C:20:DB:E4:46:CB:2C:0A Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft Manifest number: 05C1 Signing time: Sat 24 Oct 2026 23:02:24 +0000 Manifest this update: Sat 24 Oct 2026 23:02:24 +0000 Manifest next update: Sat 31 Oct 2026 23:02:24 +0000 Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: XQd8mCVZtTwGr92b1Xrar5Tph7J5U0VekYOAhgo196g=) 2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: y8fOQUHUEDgFmtL9MQBSGb81f+TiCWn3yini6uVHoSM=) 3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: qi4jN4NH1cHfCHOBZAPI1Wv+ZZRVyRsB2Qs3k377dDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Oct 24 23:02:24 2026 GMT Not After : Oct 31 23:02:24 2026 GMT Subject: CN=6add3900-dc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:ce:a0:e6:3b:c8:7d:32:a4:4a:4c:c5:e8: 64:f2:cc:42:30:c8:47:c5:4d:f2:69:3d:d7:c6:2b: d9:04:66:13:44:90:32:4f:91:ee:13:82:4b:09:48: bd:8f:0d:03:c0:6c:96:45:04:2a:8d:e5:c7:ef:92: 62:f9:c3:bb:9b:5a:72:0b:70:24:34:8e:ec:ce:21: d5:05:ff:9e:bb:b5:b8:be:59:c3:34:5e:86:2c:2e: 88:2f:e6:90:e6:7d:09:44:c7:4a:79:70:32:25:db: cf:1d:5e:59:f3:74:e3:40:2e:ce:8c:32:79:fe:f9: b9:82:9d:e8:7f:f4:de:33:bf:e5:43:47:4f:a4:4b: 90:ef:6c:6b:90:43:3a:fe:2e:ad:a4:dc:29:a5:b6: 66:06:00:fd:43:15:88:5b:90:02:3f:e8:76:7b:53: dd:d4:fc:6a:f6:56:de:e7:4f:e2:b8:b1:ec:e4:f8: a5:f2:f2:6d:01:7d:ac:71:e9:0c:bd:59:f1:55:7a: 0e:99:e0:7f:9a:37:2f:91:84:80:86:77:53:6e:fd: bd:51:1c:65:1c:05:bb:7b:76:18:d9:f8:73:79:a4: 12:49:83:45:38:0b:b3:4f:65:0f:89:52:b3:e4:83: 73:f9:c1:50:8b:4f:e5:49:7a:1f:aa:ac:22:8b:16: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D2:53:59:58:03:19:29:50:73:AC:98:3C:20:DB:E4:46:CB:2C:0A X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a8:bd:33:22:91:e5:7e:11:cf:dc:8f:db:16:3a:aa:de:7a: b3:87:a0:4b:b4:a5:21:43:5a:e5:d1:c6:3f:e8:fb:34:48:33: 59:3e:cb:a3:e1:90:a3:de:40:c3:8e:03:3e:f5:72:b9:1b:b5: 2c:5d:9d:f1:a7:8f:c7:fc:57:aa:e4:ab:a6:21:88:af:58:85: a1:38:66:ac:f9:96:23:c9:d8:a1:b7:70:4c:e4:0e:4b:da:25: e7:43:c7:4c:91:20:a2:36:51:23:fc:d4:91:ac:b5:4a:c4:f3: d8:b2:51:25:61:6b:86:cd:35:9b:7e:bc:4f:83:9b:f1:cd:b7: d1:f4:33:21:4e:c7:aa:16:15:2c:ca:df:ee:54:22:91:2a:ce: a7:35:07:49:c3:e2:41:06:0f:8c:9a:87:9c:1b:48:7c:16:9c: eb:3d:d2:85:ea:80:14:d6:5b:7f:bc:a2:50:56:be:10:e0:d9: 5e:38:4b:a9:99:97:72:02:e6:a6:ce:2c:53:5b:6b:3f:37:18: ff:4b:4e:3e:73:0e:9a:74:cd:27:9d:6f:15:d8:c3:56:6d:36: 27:9c:67:31:d7:30:7e:bf:71:79:d8:99:0c:76:c6:69:2c:73: de:d1:c4:4f:33:6b:f8:98:41:98:8b:50:fe:b7:fb:59:6e:27: 60:37:60:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjYxMDI0MjMwMjI0WhcNMjYxMDMxMjMwMjI0WjAYMRYwFAYD VQQDEw02YWRkMzkwMC1kYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ebOoOY7yH0ypEpMxehk8sxCMMhHxU3yaT3XxivZBGYTRJAyT5HuE4JLCUi9 jw0DwGyWRQQqjeXH75Ji+cO7m1pyC3AkNI7sziHVBf+eu7W4vlnDNF6GLC6IL+aQ 5n0JRMdKeXAyJdvPHV5Z83TjQC7OjDJ5/vm5gp3of/TeM7/lQ0dPpEuQ72xrkEM6 /i6tpNwppbZmBgD9QxWIW5ACP+h2e1Pd1Pxq9lbe50/iuLHs5Pil8vJtAX2scekM vVnxVXoOmeB/mjcvkYSAhndTbv29URxlHAW7e3YY2fhzeaQSSYNFOAuzT2UPiVKz 5INz+cFQi0/lSXofqqwiixaNGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3SU1lY AxkpUHOsmDwg2+RGyywKMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNFRi9DNDAxOUQyNDJDMTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4 VmNRcDFBaGE2MnotQnJ6Z0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOai9MyKR5X4Rz9yP2xY6qt56s4egS7SlIUNa5dHGP+j7NEgzWT7Lo+GQo95A w44DPvVyuRu1LF2d8aePx/xXquSrpiGIr1iFoThmrPmWI8nYobdwTOQOS9ol50PH TJEgojZRI/zUkay1SsTz2LJRJWFrhs01m368T4Ob8c230fQzIU7HqhYVLMrf7lQi kSrOpzUHScPiQQYPjJqHnBtIfBac6z3SheqAFNZbf7yiUFa+EODZXjhLqZmXcgLm ps4sU1trPzcY/0tOPnMOmnTNJ51vFdjDVm02J5xnMdcwfr9xediZDHbGaSxz3tHE TzNr+JhBmItQ/rf7WW4nYDdg8Q== -----END CERTIFICATE-----Generated at Mon Oct 26 11:15:04 2026 by rpki-client