$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: r9SH2s7NcHThd1madXFEGJzaL5KoRd7rpQRQnuI6V4k= Subject key identifier: 9E:49:66:EC:11:DA:49:15:3B:1A:2A:CB:AA:DD:19:94:15:63:E3:5D Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 0306 Signing time: Tue 27 Oct 2026 01:17:44 +0000 Manifest this update: Tue 27 Oct 2026 01:17:43 +0000 Manifest next update: Tue 03 Nov 2026 01:17:43 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: Eqa24l2as6f+OGHzmNKn+jV1ots8z6tC2anHO3eyZ3g=) 2: 946E7D7C660E11F192F6B2999847A888.roa (hash: UPxwASkRaCM0BmW/75/VdGF2qprJhUWAyXmzhw5bK/Y=) 3: 7CA6F1307B7911F1827C4FFF64A30FBC.roa (hash: Tq9vsCWRXkvNtDkZddfWUPe9BltG2TgKGlmV/arRNXY=) 4: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: hEDDBmqy+g3mjjmXrYH6est6UxbODSRokkdRBGwdWwU=) 5: 6121C23230AC11F08C150767C4F9AE02.roa (hash: ql7HqZquAr8Z2RwRKCcdgaigOpq48VyYBqN4A7YQqcU=) 6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: LvzFZJPcWbboIZyMcvq7oiMq8P9XXU2SZUanebQgAx4=) 7: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: /o4SLgeuUU9OSfiAD7UJtOCCqvNSUtLbtPYkogIfFeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Oct 27 01:17:43 2026 GMT Not After : Nov 3 01:17:43 2026 GMT Subject: CN=6adffbb8-b9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:32:95:00:13:71:1a:f9:01:69:6f:2b:c1: e6:6f:00:38:36:bf:bb:c4:b5:ba:89:76:17:9f:1f: eb:3d:57:86:9f:a1:79:44:06:a0:08:5a:02:b3:c5: 19:45:23:66:cf:ef:d7:c0:10:dd:29:fe:04:f6:c2: b5:14:7c:90:87:8b:18:26:47:7e:b1:fa:ff:8c:57: 12:3b:84:cb:43:66:f0:49:58:9c:2b:63:09:96:dd: a2:76:73:19:dc:45:12:68:24:86:26:71:72:ec:85: c4:64:47:fe:d5:48:b7:67:20:d0:f1:40:5a:38:d1: 18:f6:f5:1c:66:78:11:69:11:e4:9c:f2:e2:9d:46: cb:89:f7:ae:a7:2b:00:ff:a6:28:56:25:f5:68:4f: ae:f3:dc:2b:a3:23:e2:46:45:3a:c9:bf:98:b8:92: 9a:2a:2d:c4:08:21:46:b7:e5:86:0e:b5:a7:8e:9b: 00:8b:45:1e:7a:f4:70:3e:01:d2:a8:73:49:c7:0d: cc:b5:0c:6f:d1:d6:88:c7:f2:0f:a3:57:a9:34:36: 71:4c:a4:ec:91:50:23:ec:60:26:ae:7c:53:74:43: 99:19:dd:5e:39:af:41:52:cc:d0:2b:d2:9d:26:91: 36:e1:32:63:53:35:cf:39:d7:85:31:8f:13:8d:7d: 68:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:49:66:EC:11:DA:49:15:3B:1A:2A:CB:AA:DD:19:94:15:63:E3:5D X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:38:ab:fc:fc:8b:a5:e9:4b:9d:d8:59:d0:ec:a8:8b:5f:71: cb:05:f8:d6:e3:46:0b:95:86:61:91:52:a2:25:c9:21:17:e7: 89:e2:93:bf:83:66:9d:d4:ba:3d:bd:48:cd:d6:e9:bd:b5:57: cb:83:cc:a1:50:2f:83:2c:e5:61:cc:e1:45:af:4c:54:06:09: b0:74:c7:41:71:f7:b0:68:a9:fe:32:31:c5:73:88:85:5e:35: 71:1a:62:e5:ab:a2:eb:5a:53:20:1d:e6:cf:32:ed:76:be:ce: 30:97:dc:df:ff:7d:e4:61:ab:75:76:1c:1f:e7:8d:a8:ec:01: 1a:51:46:6e:c0:96:87:1e:14:26:89:18:4a:36:9a:91:af:db: 99:83:b4:bc:9b:b6:7a:48:6f:2c:6f:25:ed:14:2b:32:09:85: a5:d6:7c:1e:35:af:22:7b:31:83:cf:02:e0:d5:ff:31:a8:73: 8b:9a:14:3e:06:69:2b:cb:5e:69:93:fc:31:45:4d:7e:82:2c: ef:e3:f1:cf:39:58:ad:25:03:8a:d9:fc:58:d9:20:18:c2:6c: 22:6a:3b:45:5e:b2:82:8a:02:e3:6a:79:d5:d6:5d:a2:44:7f: 1d:c6:03:07:78:e2:d1:41:da:94:02:54:c2:18:97:9a:22:86: 5e:da:a9:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjYxMDI3MDExNzQzWhcNMjYxMTAzMDExNzQzWjAYMRYwFAYD VQQDEw02YWRmZmJiOC1iOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHoylQATcRr5AWlvK8HmbwA4Nr+7xLW6iXYXnx/rPVeGn6F5RAagCFoCs8UZ RSNmz+/XwBDdKf4E9sK1FHyQh4sYJkd+sfr/jFcSO4TLQ2bwSVicK2MJlt2idnMZ 3EUSaCSGJnFy7IXEZEf+1Ui3ZyDQ8UBaONEY9vUcZngRaRHknPLinUbLifeupysA /6YoViX1aE+u89wroyPiRkU6yb+YuJKaKi3ECCFGt+WGDrWnjpsAi0UeevRwPgHS qHNJxw3MtQxv0daIx/IPo1epNDZxTKTskVAj7GAmrnxTdEOZGd1eOa9BUszQK9Kd JpE24TJjUzXPOdeFMY8TjX1o6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5JZuwR 2kkVOxoqy6rdGZQVY+NdMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWzir/PyLpelLndhZ0Oyoi19xywX41uNGC5WGYZFSoiXJIRfnieKTv4NmndS6 Pb1IzdbpvbVXy4PMoVAvgyzlYczhRa9MVAYJsHTHQXH3sGip/jIxxXOIhV41cRpi 5aui61pTIB3mzzLtdr7OMJfc3/995GGrdXYcH+eNqOwBGlFGbsCWhx4UJokYSjaa ka/bmYO0vJu2ekhvLG8l7RQrMgmFpdZ8HjWvInsxg88C4NX/Mahzi5oUPgZpK8te aZP8MUVNfoIs7+PxzzlYrSUDitn8WNkgGMJsImo7RV6ygooC42p51dZdokR/HcYD B3ji0UHalAJUwhiXmiKGXtqpSA== -----END CERTIFICATE-----Generated at Wed Oct 28 16:33:57 2026 by rpki-client