$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft File: U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft (raw, json) Hash identifier: 7aSl7aFPkF71HIfZHVMJFu6x9YRLTv1An3ESk/lje64= Subject key identifier: D0:AE:0D:2C:82:D5:42:E2:18:35:7D:91:A4:37:E9:0C:8A:91:D6:B5 Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B Certificate issuer: /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft Manifest number: 020B Signing time: Tue 27 Oct 2026 03:22:33 +0000 Manifest this update: Tue 27 Oct 2026 03:22:33 +0000 Manifest next update: Tue 03 Nov 2026 03:22:33 +0000 Files and hashes: 1: U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl (hash: 9DIa6ppyEAqDqN9NOpgwZRBIttr3VS1OziFqz8XnIrc=) 2: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (hash: w99PgfgQdaKiDqqq1ZXJsjJYVLkyPFxl1fD6GlPrkc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B Validity Not Before: Oct 27 03:22:33 2026 GMT Not After : Nov 3 03:22:33 2026 GMT Subject: CN=6ae018f9-e879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c7:5e:d1:e4:cc:a6:9e:25:d9:0b:b7:9b:a3: 84:cd:a7:75:0b:41:36:1c:a6:b2:74:46:fa:2b:99: 53:66:17:78:18:12:c7:19:5c:9c:9a:48:77:c8:2d: 56:1e:c8:e4:bc:4e:c4:00:e0:3c:7c:21:76:35:50: 0f:76:06:37:e2:79:49:19:46:d8:8e:02:90:7a:43: 38:6c:79:b5:a7:82:bc:b0:db:74:3c:55:75:16:90: 3e:37:fb:5f:66:91:c8:bb:e7:87:04:7c:05:e6:33: b7:26:d1:24:ec:54:73:1c:fd:e1:78:6d:0e:f1:bf: 27:f4:40:a5:71:b6:bd:91:95:3d:fd:e1:22:40:9d: c3:85:2e:c7:02:ad:e0:75:00:df:e3:6c:f9:41:25: 3c:6f:bf:bf:51:9a:ac:5e:97:1a:51:ac:8a:b5:e9: 52:a2:93:ea:e4:4a:05:2d:cb:95:59:1b:99:e8:7f: f3:ad:5a:c6:76:b7:d5:f4:b0:18:47:17:2f:e7:61: a2:ae:75:b8:f9:9c:4f:7c:0a:0a:2a:2f:ab:c9:dd: 64:ef:4c:71:ad:c9:3e:f8:cb:24:3c:cd:75:d1:8f: 47:76:c5:9a:98:00:4e:af:19:15:6c:db:25:97:04: 96:79:eb:9c:e9:2e:7e:7e:95:72:e1:b8:88:4a:6c: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AE:0D:2C:82:D5:42:E2:18:35:7D:91:A4:37:E9:0C:8A:91:D6:B5 X509v3 Authority Key Identifier: keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:49:d5:5d:65:cd:aa:b4:67:69:58:fd:30:a6:5e:60:55:13: df:39:8b:43:42:b6:1b:c7:de:44:5f:8a:69:84:3f:74:a3:0a: 1e:23:df:c3:30:d1:2a:8f:fc:a5:c5:00:4a:2f:e1:df:a9:35: bd:a6:60:d5:c8:96:0f:e1:cc:bb:73:20:94:05:b5:b2:a7:af: 8a:3d:ca:40:46:25:d1:b1:03:96:4a:c8:aa:97:49:cd:ed:4a: 96:23:d0:a6:0f:40:68:5a:80:46:1c:16:56:e6:11:bd:55:64: b1:08:b0:c1:27:b0:77:c0:17:f5:13:22:35:04:cc:71:9f:72: 7a:43:fc:36:5c:13:b8:86:e6:de:1a:c7:54:fc:cd:3e:cc:b3: 7a:17:b1:60:6c:0f:05:d9:96:6f:05:06:40:1c:88:4a:59:ff: 2a:25:bf:73:76:1c:63:b5:4e:32:be:ef:e4:a7:7e:b7:23:6c: 99:9f:f1:5c:1b:96:a6:79:bc:bb:71:1c:f2:3c:bf:11:f8:4b: 0e:0b:64:10:15:07:b8:37:83:fa:b9:63:72:0f:df:fd:28:ec: 77:e7:d1:09:82:9e:12:4e:6d:61:47:ec:58:a1:1f:fd:b4:9d: 71:16:5c:d2:ec:48:f8:ba:da:f9:95:e5:29:0e:88:9c:ff:c1: 54:dd:05:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwNzAxMTAvBgNVBAUTKDUzOUJCNzZDOEE0Mzc5QTRERTM5OUMwNTJEMzhDMUI0 NTNBNjZGMUIwHhcNMjYxMDI3MDMyMjMzWhcNMjYxMTAzMDMyMjMzWjAYMRYwFAYD VQQDEw02YWUwMThmOS1lODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98de0eTMpp4l2Qu3m6OEzad1C0E2HKaydEb6K5lTZhd4GBLHGVycmkh3yC1W HsjkvE7EAOA8fCF2NVAPdgY34nlJGUbYjgKQekM4bHm1p4K8sNt0PFV1FpA+N/tf ZpHIu+eHBHwF5jO3JtEk7FRzHP3heG0O8b8n9EClcba9kZU9/eEiQJ3DhS7HAq3g dQDf42z5QSU8b7+/UZqsXpcaUayKtelSopPq5EoFLcuVWRuZ6H/zrVrGdrfV9LAY Rxcv52GirnW4+ZxPfAoKKi+ryd1k70xxrck++MskPM110Y9HdsWamABOrxkVbNsl lwSWeeuc6S5+fpVy4biISmw29QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCuDSyC 1ULiGDV9kaQ36QyKkda1MB8GA1UdIwQYMBaAFFObt2yKQ3mk3jmcBS04wbRTpm8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84OUM1NTk3Q0JD MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi9VNXUzYklwRGVhVGVPWndGTFRqQnRGT21i eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U1dTNiSXBEZWFUZU9ad0ZMVGpCdEZPbWJ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA3MC84OUM1NTk3Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi9VNXUzYklwRGVh VGVPWndGTFRqQnRGT21ieHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbEnVXWXNqrRnaVj9MKZeYFUT3zmLQ0K2G8feRF+KaYQ/dKMKHiPfwzDRKo/8 pcUASi/h36k1vaZg1ciWD+HMu3MglAW1sqevij3KQEYl0bEDlkrIqpdJze1KliPQ pg9AaFqARhwWVuYRvVVksQiwwSewd8AX9RMiNQTMcZ9yekP8NlwTuIbm3hrHVPzN PsyzehexYGwPBdmWbwUGQByISln/KiW/c3YcY7VOMr7v5Kd+tyNsmZ/xXBuWpnm8 u3Ec8jy/EfhLDgtkEBUHuDeD+rljcg/f/Sjsd+fRCYKeEk5tYUfsWKEf/bSdcRZc 0uxI+Lra+ZXlKQ6InP/BVN0FbQ== -----END CERTIFICATE-----Generated at Tue Oct 27 13:02:45 2026 by rpki-client