$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: yttY7l3HuV95TwieMaOKJ8B7F1aF6VRf49JT7K0yUNI= Subject key identifier: BD:7E:0C:AF:20:47:56:48:85:06:86:C3:D5:6F:51:F7:A1:86:CA:39 Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0D5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0D20 Signing time: Mon 26 Oct 2026 18:23:12 +0000 Manifest this update: Mon 26 Oct 2026 18:23:12 +0000 Manifest next update: Mon 02 Nov 2026 18:23:12 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: pmyR0CZt6eWWpwpD1iUa9c/3sjLr4bGPnhsos117e4w=) 2: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: ApbUgdUH10Pdfa6lJVrc4XPCGZcLshELo3PIV/SWLXw=) 3: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: 2VeVxpw4IPzgEibTNEjoXK/Qy1fd2SwF+0DbU+sMNRg=) 4: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: HqADfJ6PQAnaMYUSVaYaC1tzBINlqpUjolFi7987BYY=) 5: 183DE570057A11EC822F230EC4F9AE02.roa (hash: KDCY6i/WJ6l1BoCfZqKbKmaeWQcqDHXYwIFR4N1iXXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3423 (0xd5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Oct 26 18:23:12 2026 GMT Not After : Nov 2 18:23:12 2026 GMT Subject: CN=6adf9a90-fe0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:5b:29:c7:8a:15:d1:b7:03:cc:20:ca:29: 98:41:df:79:39:f9:4f:78:d4:0b:5e:eb:54:a3:5d: a5:71:ca:97:5a:68:5d:1b:31:dc:30:cb:8f:70:f3: 56:b7:5d:ec:45:15:99:d8:e1:f5:c0:03:46:fa:16: 20:1b:6e:20:94:3b:ca:7d:e0:6d:d7:82:66:44:bf: 3a:7c:22:c8:ab:ee:24:a1:2d:b5:e8:bd:8e:c4:48: 88:4a:96:40:a7:df:51:53:88:e3:3c:bd:07:bb:12: a3:e9:4d:e7:5e:b0:b8:3d:33:8c:4b:91:50:ff:dd: f5:69:bc:88:02:80:05:c5:22:45:0c:d8:95:28:9c: 17:83:65:db:c5:5f:a7:73:b9:91:12:e1:36:4a:97: 3b:b2:7c:e3:d4:15:04:8f:5b:8f:ff:84:41:bd:bd: 7d:54:75:a7:c1:4b:0b:8f:6a:35:1b:34:40:2b:0f: 53:ea:9d:1f:c5:dc:02:84:8b:ed:5f:df:31:ec:17: 37:20:e3:9d:6c:2a:05:26:4b:a4:63:c2:4a:a0:55: dd:2a:7c:bf:f1:de:24:64:4e:89:7a:33:bb:46:2d: 12:cc:4c:b2:a7:7c:a8:2a:01:00:c7:d0:3e:22:01: 52:6c:f5:06:79:af:4b:0b:01:c1:6a:38:b8:ee:43: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7E:0C:AF:20:47:56:48:85:06:86:C3:D5:6F:51:F7:A1:86:CA:39 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:9f:5f:1f:8e:09:75:50:d5:84:a5:ab:97:e8:4f:1e:fb:78: 29:f8:0a:99:d1:26:b5:39:a4:7b:c2:b1:c8:88:ee:86:da:dd: aa:fc:e1:e3:d3:b7:ee:8b:42:9f:f1:78:68:5d:1b:23:10:80: f2:ca:eb:1e:e3:2d:00:7b:25:a9:55:93:72:c5:82:5c:a8:b4: c2:c3:65:62:c4:84:8b:54:83:d0:25:a8:b0:9b:7d:e8:66:72: 7f:65:2b:ba:78:5c:20:78:2f:27:19:0e:7c:d4:b5:43:a6:62: 4d:21:e3:95:11:0e:c9:df:4c:57:d0:03:38:ce:f9:59:a8:d3: 0b:3e:58:61:2d:30:31:12:4a:73:52:de:aa:df:09:6b:ae:28: b0:57:3e:16:c0:03:25:85:7b:f3:19:70:c3:db:d1:51:5a:d5: e3:a0:5a:38:79:e2:fa:36:ec:42:68:06:16:ea:7b:77:e5:59: 44:26:ec:3e:8d:6b:c3:f3:16:49:74:ed:a4:85:28:db:d8:d4: f2:61:26:48:1b:81:30:18:ce:61:86:5c:f0:ef:22:35:86:ed: 88:d0:ec:03:e7:1f:4a:83:31:14:7d:55:8f:b1:83:fa:22:b3: bb:2c:6f:0e:14:1b:a2:00:5f:56:74:81:f0:ba:0a:d9:49:f2: 74:d5:f7:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjYxMDI2MTgyMzEyWhcNMjYxMTAyMTgyMzEyWjAYMRYwFAYD VQQDEw02YWRmOWE5MC1mZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2dbKceKFdG3A8wgyimYQd95OflPeNQLXutUo12lccqXWmhdGzHcMMuPcPNW t13sRRWZ2OH1wANG+hYgG24glDvKfeBt14JmRL86fCLIq+4koS216L2OxEiISpZA p99RU4jjPL0HuxKj6U3nXrC4PTOMS5FQ/931abyIAoAFxSJFDNiVKJwXg2XbxV+n c7mREuE2Spc7snzj1BUEj1uP/4RBvb19VHWnwUsLj2o1GzRAKw9T6p0fxdwChIvt X98x7Bc3IOOdbCoFJkukY8JKoFXdKny/8d4kZE6JejO7Ri0SzEyyp3yoKgEAx9A+ IgFSbPUGea9LCwHBaji47kPLBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1+DK8g R1ZIhQaGw9VvUfehhso5MB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJ9fH44JdVDVhKWrl+hPHvt4KfgKmdEmtTmke8KxyIjuhtrdqvzh49O37otC n/F4aF0bIxCA8srrHuMtAHslqVWTcsWCXKi0wsNlYsSEi1SD0CWosJt96GZyf2Ur unhcIHgvJxkOfNS1Q6ZiTSHjlREOyd9MV9ADOM75WajTCz5YYS0wMRJKc1Leqt8J a64osFc+FsADJYV78xlww9vRUVrV46BaOHni+jbsQmgGFup7d+VZRCbsPo1rw/MW SXTtpIUo29jU8mEmSBuBMBjOYYZc8O8iNYbtiNDsA+cfSoMxFH1Vj7GD+iKzuyxv DhQbogBfVnSB8LoK2UnydNX3dQ== -----END CERTIFICATE-----Generated at Tue Oct 27 16:59:36 2026 by rpki-client