$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: T9mzWrFOpny3flYyglKTWBwH69WGik8kicwsOEDEkrE= Subject key identifier: 8A:C0:34:15:F8:1C:12:1E:14:21:F1:E5:F9:E3:1E:3F:49:75:73:F3 Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 016D Signing time: Wed 21 Oct 2026 05:32:38 +0000 Manifest this update: Wed 21 Oct 2026 05:32:38 +0000 Manifest next update: Wed 28 Oct 2026 05:32:38 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: 8O+l8/LdzIbP7L/PqpKb8DNUy/ntC+4M6zpjUsYFr0c=) 2: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=) 3: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=) 4: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 05:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Oct 21 05:32:38 2026 GMT Not After : Oct 28 05:32:38 2026 GMT Subject: CN=6ad84e76-9fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:c0:72:08:1b:6d:99:a8:fd:80:2d:2c:7f: c3:8c:f9:c4:e9:fe:11:b5:72:24:02:48:07:47:ea: 26:5e:55:31:dd:2a:27:67:9d:f6:bf:a4:13:ab:f0: aa:26:5f:19:e0:18:98:34:13:1f:6b:c7:a6:98:77: 83:50:55:5e:5b:54:6d:f0:97:1b:e0:e7:de:84:cd: b5:13:c2:7d:54:61:b5:c5:ed:f0:40:b4:c6:56:38: dc:2e:36:b5:1f:c0:22:c3:45:68:cd:e6:d5:c1:ea: 59:9f:c4:39:7b:ec:f2:ca:91:b6:43:87:3a:ce:55: bd:0e:f0:ac:02:09:3c:51:d2:b6:45:f7:7d:86:4f: b1:c5:7c:4e:0a:92:13:77:d2:5d:1b:dd:d2:39:38: 99:2b:9b:b6:76:ef:ad:cc:98:2e:0a:73:ee:04:91: 7d:59:29:d3:b7:9c:83:50:6e:b1:a4:3e:8a:30:8d: 5d:fc:aa:11:fc:82:9e:51:3e:ab:ff:88:65:eb:e6: 33:60:22:49:58:69:ac:db:02:89:f4:8f:c5:89:a6: a9:8e:ca:b2:fb:2a:ae:40:90:dc:ab:2d:d6:d7:3b: 88:a7:64:84:33:99:0e:c9:00:4a:90:3a:f2:14:0f: 0c:46:d7:7c:84:c7:24:b1:8f:f1:0c:b1:49:3a:96: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C0:34:15:F8:1C:12:1E:14:21:F1:E5:F9:E3:1E:3F:49:75:73:F3 X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:44:f2:53:c5:61:dd:b6:e0:e1:46:47:2e:1a:82:c0:da:78: d2:42:c9:d2:c3:80:20:28:97:09:9e:c2:be:64:41:ed:9a:7b: ce:4a:e5:5d:49:79:f2:87:53:8a:18:9a:13:0c:42:0e:65:4a: a8:6b:62:cc:ad:1b:dc:6c:b9:6d:57:f6:a1:4a:95:c4:78:5a: 94:c9:0c:d3:b0:e7:c4:49:f6:c9:c6:e1:94:6b:5d:e5:6e:35: 1b:3c:1d:3a:d1:f2:42:76:7f:0e:3d:d8:de:c3:e5:0a:0f:f2: fd:57:6d:c6:9e:95:70:64:13:11:55:94:91:70:ab:a6:19:9b: 74:4e:9f:87:56:1d:e8:71:d9:fa:ec:ea:34:f8:d7:a5:ca:d7: c4:02:8f:fe:5a:be:1d:51:6c:85:4a:65:7b:4a:48:05:11:0a: 3e:f3:4d:38:ad:94:d5:33:6b:f6:85:5f:85:be:df:63:68:2d: 73:be:63:43:9f:bc:1e:c4:67:d4:3d:26:9e:9f:c5:66:31:bf: 54:bb:a2:03:01:d2:a8:66:fe:9b:23:e0:8b:01:7b:dc:15:b8: aa:9f:20:e4:ed:38:8a:ae:03:75:89:c7:56:6b:99:79:51:ef: 37:c3:c9:83:69:52:1d:b7:7b:b7:ec:fd:1b:08:e8:86:d4:1a: 85:4a:68:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjYxMDIxMDUzMjM4WhcNMjYxMDI4MDUzMjM4WjAYMRYwFAYD VQQDEw02YWQ4NGU3Ni05ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCfAcggbbZmo/YAtLH/DjPnE6f4RtXIkAkgHR+omXlUx3SonZ532v6QTq/Cq Jl8Z4BiYNBMfa8emmHeDUFVeW1Rt8Jcb4OfehM21E8J9VGG1xe3wQLTGVjjcLja1 H8Aiw0VozebVwepZn8Q5e+zyypG2Q4c6zlW9DvCsAgk8UdK2Rfd9hk+xxXxOCpIT d9JdG93SOTiZK5u2du+tzJguCnPuBJF9WSnTt5yDUG6xpD6KMI1d/KoR/IKeUT6r /4hl6+YzYCJJWGms2wKJ9I/Fiaapjsqy+yquQJDcqy3W1zuIp2SEM5kOyQBKkDry FA8MRtd8hMcksY/xDLFJOpbs2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrANBX4 HBIeFCHx5fnjHj9JdXPzMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVETyU8Vh3bbg4UZHLhqCwNp40kLJ0sOAICiXCZ7CvmRB7Zp7zkrlXUl58odT ihiaEwxCDmVKqGtizK0b3Gy5bVf2oUqVxHhalMkM07DnxEn2ycbhlGtd5W41Gzwd OtHyQnZ/Dj3Y3sPlCg/y/Vdtxp6VcGQTEVWUkXCrphmbdE6fh1Yd6HHZ+uzqNPjX pcrXxAKP/lq+HVFshUple0pIBREKPvNNOK2U1TNr9oVfhb7fY2gtc75jQ5+8HsRn 1D0mnp/FZjG/VLuiAwHSqGb+myPgiwF73BW4qp8g5O04iq4DdYnHVmuZeVHvN8PJ g2lSHbd7t+z9GwjohtQahUpocg== -----END CERTIFICATE-----Generated at Fri Oct 23 07:18:46 2026 by rpki-client