$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft File: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json) Hash identifier: 4aD8GAsnJypW8dWUwE+wbj9QVt8o6oXiGy+6I9GrZL0= Subject key identifier: C8:ED:F4:60:8F:91:E8:0C:11:96:6C:2B:B1:CE:D5:DA:7E:C2:3E:79 Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft Manifest number: A8 Signing time: Sat 31 Oct 2026 07:44:42 +0000 Manifest this update: Sat 31 Oct 2026 07:44:41 +0000 Manifest next update: Sat 07 Nov 2026 07:44:41 +0000 Files and hashes: 1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: ZAOwgCOdueG01oSPsm+bnM8BQ/vVlibxorAhQPENKzI=) 2: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: ZKCQjdago1KprBkMVdzOhlrm6rDSw/wNal8SzmwglEA=) 3: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: c9KXGFBUEAhMxd6F/BpLXSZoY9CxETEfzOzJpxwZ6lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 07:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Validity Not Before: Oct 31 07:44:41 2026 GMT Not After : Nov 7 07:44:41 2026 GMT Subject: CN=6ae59c6a-3b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:04:46:97:68:cc:01:47:8f:1b:06:9f:c0: 02:08:3d:fe:19:49:46:ba:73:62:5f:9b:cb:d2:aa: dd:7c:74:57:c1:51:ce:21:2e:28:e7:bd:84:10:a9: e6:f2:76:05:28:a2:48:e7:b6:58:ef:02:28:dd:0e: 22:25:41:a9:44:a5:35:31:a4:3c:78:2a:b4:8d:a5: 7d:dd:6c:f1:69:b7:b8:a5:6f:b0:38:b0:0d:ea:ae: 2a:67:9d:de:41:71:d1:19:f3:ac:0d:d5:a7:bf:22: c1:8f:5d:ae:3e:76:82:3b:3a:71:b9:39:8d:ae:cb: df:76:90:78:56:44:6d:7b:7d:80:52:3e:45:0a:b9: 38:59:e3:65:bf:73:ec:0c:f2:aa:4a:a1:69:b5:14: cb:94:39:84:52:22:d2:e6:70:c6:60:f2:8c:61:41: f4:b2:fc:7f:6d:1a:0b:43:db:a8:ad:cf:6d:93:f6: 8d:14:7c:f5:49:67:4d:3f:07:30:ae:fc:3d:2d:c3: 07:9f:5f:d1:31:49:26:2f:0c:db:ae:c4:52:1a:d2: 7c:8b:1a:f3:bc:d6:ee:34:90:07:f3:6f:48:d2:b5: 0b:4f:a6:73:de:da:b4:9c:d4:84:c1:f2:b7:c3:bb: 61:95:50:52:0a:2f:3b:24:a6:37:1c:89:41:13:83: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:ED:F4:60:8F:91:E8:0C:11:96:6C:2B:B1:CE:D5:DA:7E:C2:3E:79 X509v3 Authority Key Identifier: keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b1:fe:5d:d4:73:e8:0d:60:fe:a3:09:99:73:7c:5b:44:d8: 19:93:55:6b:d8:03:19:03:81:9f:d1:b5:4d:c0:1c:1a:e9:dd: 20:fe:24:43:3d:b2:25:14:db:85:1e:29:f4:2c:48:15:e3:5e: 73:e8:c7:6e:1f:d7:17:4e:41:80:ce:95:55:42:47:23:9a:fc: ae:44:ad:4f:1e:67:aa:09:0b:e4:22:e4:b5:0a:77:15:31:57: 63:92:92:e7:9d:fe:f5:b0:4c:8b:2a:52:31:9b:d3:44:7b:b0: 60:ef:42:51:74:1d:cf:bf:43:d0:d6:5c:12:1e:52:87:a5:00: 6b:1f:81:97:17:53:ed:bb:88:dc:9d:39:14:6d:b0:75:27:66: 69:01:d6:1e:2d:58:84:19:94:4b:27:89:dc:c9:a5:df:27:8c: a9:aa:da:e4:88:87:87:8c:32:aa:7e:e2:66:e8:a9:e3:21:b5: 49:3a:4b:ab:bb:58:4f:70:be:50:be:53:09:0e:5a:4a:d7:7e: 63:86:f2:3f:18:d9:e9:8a:ed:8d:5b:00:80:5b:ea:00:72:49: e8:01:2e:65:ee:19:b5:90:99:96:b3:dd:3f:e4:af:87:a4:97: 7e:69:f2:d0:f6:5a:ca:c6:18:97:6d:f3:56:fc:5a:f2:1e:1c: 04:0f:dc:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJFOEUxMTAvBgNVBAUTKERCMDg4N0UyNUNDMEQwQ0Y3Njg4REI1RERERjQxOTY1 MzJDRDQ3QTYwHhcNMjYxMDMxMDc0NDQxWhcNMjYxMTA3MDc0NDQxWjAYMRYwFAYD VQQDEw02YWU1OWM2YS0zYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD4ERpdozAFHjxsGn8ACCD3+GUlGunNiX5vL0qrdfHRXwVHOIS4o572EEKnm 8nYFKKJI57ZY7wIo3Q4iJUGpRKU1MaQ8eCq0jaV93Wzxabe4pW+wOLAN6q4qZ53e QXHRGfOsDdWnvyLBj12uPnaCOzpxuTmNrsvfdpB4VkRte32AUj5FCrk4WeNlv3Ps DPKqSqFptRTLlDmEUiLS5nDGYPKMYUH0svx/bRoLQ9uorc9tk/aNFHz1SWdNPwcw rvw9LcMHn1/RMUkmLwzbrsRSGtJ8ixrzvNbuNJAH829I0rULT6Zz3tq0nNSEwfK3 w7thlVBSCi87JKY3HIlBE4NThQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjt9GCP kegMEZZsK7HO1dp+wj55MB8GA1UdIwQYMBaAFNsIh+JcwNDPdojbXd30GWUyzUem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkU4RS80OUM3NzQ4OEUx NDYxMUYwOTE2NEUwQTg3MTZGNTZCQy8yd2lINGx6QTBNOTJpTnRkM2ZRWlpUTE5S NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJ3aUg0bHpBME05MmlOdGQzZlFaWlRMTlI2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkU4RS80OUM3NzQ4OEUxNDYxMUYwOTE2NEUwQTg3MTZGNTZCQy8yd2lINGx6QTBN OTJpTnRkM2ZRWlpUTE5SNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKrH+XdRz6A1g/qMJmXN8W0TYGZNVa9gDGQOBn9G1TcAcGundIP4kQz2yJRTb hR4p9CxIFeNec+jHbh/XF05BgM6VVUJHI5r8rkStTx5nqgkL5CLktQp3FTFXY5KS 553+9bBMiypSMZvTRHuwYO9CUXQdz79D0NZcEh5Sh6UAax+BlxdT7buI3J05FG2w dSdmaQHWHi1YhBmUSyeJ3Mml3yeMqara5IiHh4wyqn7iZuip4yG1STpLq7tYT3C+ UL5TCQ5aStd+Y4byPxjZ6YrtjVsAgFvqAHJJ6AEuZe4ZtZCZlrPdP+Svh6SXfmny 0PZaysYYl23zVvxa8h4cBA/c2g== -----END CERTIFICATE-----Generated at Sun Nov 1 03:08:59 2026 by rpki-client