$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: HWPWv7K/mm90VGe4YvbTr57wt2ADoZ0NLRFOg0Iu6Rs= Subject key identifier: F3:09:EB:72:23:25:3C:04:1B:B9:BE:E0:F0:1D:64:91:72:11:32:D5 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 0263 Signing time: Sun 11 Oct 2026 02:50:33 +0000 Manifest this update: Sun 11 Oct 2026 02:50:33 +0000 Manifest next update: Sun 18 Oct 2026 02:50:33 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: Unzpkx39i6CRX9vAA2QpUituSTi8Pbd01VEMG+9ZwEM=) 2: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: IquZlt5lfhcsaKAcex7emT9MmUtyhWwyhAr1ZZXgoW8=) 3: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: APhmcXAzZIhCLyKa4vEtY9uKqyvDEiwnjzZDypho3ks=) 4: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: FIImGW7D3wQcguwVtZ5iJ7aLvUHChQOr5SwPoXHVfUQ=) 5: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: 49k7hYKPHCdkEplr/vlCkM9fSpbYLX28P/Rt2uYRTiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Oct 11 02:50:33 2026 GMT Not After : Oct 18 02:50:33 2026 GMT Subject: CN=6acaf979-d491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f3:59:9f:26:cb:dd:c6:ac:3d:46:b7:6e:60: ad:fe:06:42:54:1e:22:18:9b:5d:87:76:7a:38:84: fb:f1:80:24:91:8b:ab:ec:a9:f2:1e:96:52:58:95: d3:2f:37:64:9d:8e:fc:0e:47:62:23:b2:ba:26:29: df:9a:9c:c1:5a:dd:9a:a7:0f:12:fb:38:c6:cb:bb: 56:ae:eb:82:6e:7f:ce:30:fd:a1:87:78:46:99:d1: 6a:71:69:b2:5d:f5:03:36:70:1c:a3:d5:ec:9e:a7: bd:3c:15:76:92:d4:76:c9:4c:08:0e:1e:23:c6:58: 1c:4b:28:e7:b9:94:bd:f5:a7:89:0f:04:0f:61:f5: 83:b0:52:15:ef:aa:7c:ee:6c:49:ec:28:57:cd:44: 87:73:bb:91:fe:e6:0c:ce:82:46:8f:49:66:a1:be: 31:10:3a:cf:54:44:57:12:72:35:e8:c4:af:4b:6c: 1c:ed:05:50:24:84:86:aa:8e:c5:e8:04:fb:86:15: a1:79:e2:5e:84:04:ef:57:da:8c:53:07:16:4e:a7: 98:81:e4:94:7a:cd:f4:74:76:fc:d9:2e:ab:25:4c: e8:44:d7:25:87:15:6c:fa:fc:f2:ae:e4:c0:15:be: f3:a3:dc:07:3d:77:45:bf:fd:65:e8:f4:4b:45:ad: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:09:EB:72:23:25:3C:04:1B:B9:BE:E0:F0:1D:64:91:72:11:32:D5 X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:2f:f1:cd:c1:d8:a9:cb:66:e9:c1:b3:12:3d:8c:b4:dd:92: e8:fd:d3:7a:63:96:a8:b9:d6:36:e9:59:ff:20:61:29:21:9c: 5f:81:98:f4:65:31:44:d9:18:03:f7:b0:db:0d:2d:a0:c8:2d: 0c:18:06:bb:0a:a6:56:64:ce:ba:ed:2c:da:bd:4c:96:d9:02: 30:05:a1:a8:f7:4b:8a:01:41:62:c0:4c:b3:90:54:25:e9:e6: 2e:9f:cf:4d:19:ac:e5:62:52:1c:bb:e5:c4:3b:03:09:6c:21: 86:48:e8:f3:c4:39:c5:25:f0:e9:13:6a:65:17:07:3a:7c:53: 40:14:c8:30:9c:19:b3:ab:a0:ed:c8:d9:44:2e:76:ed:70:9d: ef:94:cf:26:d8:04:86:fd:19:a2:01:33:92:96:b2:87:9c:70: 95:78:be:9d:e7:9d:c2:dc:f4:81:08:09:d7:1d:80:8e:36:48: 32:2b:a5:5a:5d:9a:c6:70:01:35:1f:eb:eb:bc:65:b9:2a:98: 59:fa:3a:9a:81:d6:1f:3f:30:d7:a2:54:dc:fd:9c:c2:2c:a7: 77:ab:1e:b0:72:fe:9b:10:89:7d:e7:4f:68:e1:54:85:18:f3: 0c:d0:33:db:0c:29:a2:c3:b5:34:6c:7b:77:ed:32:b2:04:dd: db:3e:44:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjYxMDExMDI1MDMzWhcNMjYxMDE4MDI1MDMzWjAYMRYwFAYD VQQDEw02YWNhZjk3OS1kNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/NZnybL3casPUa3bmCt/gZCVB4iGJtdh3Z6OIT78YAkkYur7KnyHpZSWJXT LzdknY78DkdiI7K6JinfmpzBWt2apw8S+zjGy7tWruuCbn/OMP2hh3hGmdFqcWmy XfUDNnAco9Xsnqe9PBV2ktR2yUwIDh4jxlgcSyjnuZS99aeJDwQPYfWDsFIV76p8 7mxJ7ChXzUSHc7uR/uYMzoJGj0lmob4xEDrPVERXEnI16MSvS2wc7QVQJISGqo7F 6AT7hhWheeJehATvV9qMUwcWTqeYgeSUes30dHb82S6rJUzoRNclhxVs+vzyruTA Fb7zo9wHPXdFv/1l6PRLRa3ZnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMJ63Ij JTwEG7m+4PAdZJFyETLVMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsy/xzcHYqctm6cGzEj2MtN2S6P3TemOWqLnWNulZ/yBhKSGcX4GY9GUxRNkY A/ew2w0toMgtDBgGuwqmVmTOuu0s2r1MltkCMAWhqPdLigFBYsBMs5BUJenmLp/P TRms5WJSHLvlxDsDCWwhhkjo88Q5xSXw6RNqZRcHOnxTQBTIMJwZs6ug7cjZRC52 7XCd75TPJtgEhv0ZogEzkpayh5xwlXi+needwtz0gQgJ1x2AjjZIMiulWl2axnAB NR/r67xluSqYWfo6moHWHz8w16JU3P2cwiynd6sesHL+mxCJfedPaOFUhRjzDNAz 2wwposO1NGx7d+0ysgTd2z5EZg== -----END CERTIFICATE-----Generated at Mon Oct 12 12:25:43 2026 by rpki-client