$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: XMyp/gD76yqGdcUCH1DNA9f7qUPl9sH7uAVdToD+jRc= Subject key identifier: 60:AF:60:96:16:6C:A8:DC:E3:58:98:4B:EE:BB:A7:6A:56:B5:2C:1F Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 0587 Signing time: Wed 28 Oct 2026 23:28:34 +0000 Manifest this update: Wed 28 Oct 2026 23:28:33 +0000 Manifest next update: Wed 04 Nov 2026 23:28:33 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: RBt/kSFNn53DHPrNL1YJDdbDV109TpKQO+CDVsg1Ou4=) 2: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: TqigQrM56YIrHnpm0cKW5rrtAXNlTI/PvPTRZSz/p8A=) 3: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: pZC0bFljxbSt/xAAnpAH8YDzTQVHbkwSa3MfUSj8PuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 23:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1431 (0x597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Oct 28 23:28:33 2026 GMT Not After : Nov 4 23:28:33 2026 GMT Subject: CN=6ae28522-1626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:80:82:f3:43:4d:4b:a9:b2:4f:6a:78:8d: ab:87:3c:cd:89:d8:dc:cf:b8:d6:75:4a:a4:a9:5b: 43:08:38:7c:0f:65:1b:26:db:91:54:d4:2c:7a:0f: f5:7b:36:b9:43:b0:14:29:e1:2e:45:ec:5f:c8:00: b3:a3:5e:74:b5:4a:fe:7a:42:f4:29:21:70:02:84: 6f:27:d9:52:9c:81:9f:fa:4e:a6:aa:0a:c4:d8:59: 50:0d:03:79:d9:b0:86:e4:d6:a2:f1:50:49:6e:49: 8d:74:c7:20:e0:f0:bc:fe:45:42:ef:54:2e:22:16: 1d:c8:cf:31:56:07:ff:05:61:8f:52:39:2b:7b:db: 27:dd:1c:4d:0e:da:b4:b7:46:ca:de:0e:0f:af:46: 6b:ec:34:06:94:cd:e6:95:b0:2d:cf:c9:8c:c0:82: 1b:84:b6:01:ec:64:a0:a1:7b:ff:c3:66:2b:ba:fd: 13:22:b3:8c:27:32:34:7b:4d:eb:13:61:31:5d:e7: 88:3c:99:98:6e:a2:2d:0a:26:cb:bb:d1:b8:30:f0: b2:0a:8a:e1:50:43:82:99:de:a9:ad:21:28:67:ef: 7e:36:51:a9:be:a2:a1:cd:64:47:07:90:57:62:bf: a1:1c:bc:c5:df:1b:f2:69:13:40:3c:e6:25:fe:99: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AF:60:96:16:6C:A8:DC:E3:58:98:4B:EE:BB:A7:6A:56:B5:2C:1F X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:af:0d:55:08:45:80:df:e0:46:0a:20:11:30:f1:34:15:3d: a2:d4:bd:2f:90:4d:e4:23:8b:38:9e:8a:40:e9:9a:72:0f:d2: 21:17:28:dc:7f:01:f1:a4:a2:55:7c:7a:0d:bd:2c:b4:ff:63: cd:68:03:d0:1e:a9:23:7e:a2:ad:a6:c8:b2:e4:43:cb:12:7e: 39:c8:b9:39:a8:bf:9b:02:45:da:f7:5d:56:80:f2:d3:aa:4c: cf:a5:38:4d:60:7a:75:a5:da:81:fc:36:f8:20:e6:a0:d7:84: b6:77:9c:34:29:fa:d5:ee:87:24:64:fe:e9:de:90:ca:1a:02: b9:b5:ce:e6:ea:b3:b9:29:d5:59:48:22:c8:70:07:48:de:86: 37:da:92:f4:41:6a:9e:0a:2e:7d:b8:4d:8d:57:61:31:90:0e: 69:84:ef:4e:a5:0e:96:95:1e:27:d0:ff:50:fc:c4:fa:45:ad: 90:16:5a:5c:0c:e6:de:db:30:3c:8c:95:bf:b9:cc:01:98:b9: 25:d1:f9:d8:b7:f9:61:d9:c1:c3:81:ec:11:02:6b:10:18:07: 94:3e:cf:a8:fa:39:fe:98:2d:03:f0:d4:c3:f3:69:d3:f7:0d: 0d:c9:8c:16:ec:b0:8d:b8:63:38:ed:b9:f5:d2:40:e9:ff:71: ad:48:f7:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjYxMDI4MjMyODMzWhcNMjYxMTA0MjMyODMzWjAYMRYwFAYD VQQDEw02YWUyODUyMi0xNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLGAgvNDTUupsk9qeI2rhzzNidjcz7jWdUqkqVtDCDh8D2UbJtuRVNQseg/1 eza5Q7AUKeEuRexfyACzo150tUr+ekL0KSFwAoRvJ9lSnIGf+k6mqgrE2FlQDQN5 2bCG5Nai8VBJbkmNdMcg4PC8/kVC71QuIhYdyM8xVgf/BWGPUjkre9sn3RxNDtq0 t0bK3g4Pr0Zr7DQGlM3mlbAtz8mMwIIbhLYB7GSgoXv/w2Yruv0TIrOMJzI0e03r E2ExXeeIPJmYbqItCibLu9G4MPCyCorhUEOCmd6prSEoZ+9+NlGpvqKhzWRHB5BX Yr+hHLzF3xvyaRNAPOYl/pkTuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGCvYJYW bKjc41iYS+67p2pWtSwfMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIK8NVQhFgN/gRgogETDxNBU9otS9L5BN5COLOJ6KQOmacg/SIRco3H8B8aSi VXx6Db0stP9jzWgD0B6pI36irabIsuRDyxJ+Oci5Oai/mwJF2vddVoDy06pMz6U4 TWB6daXagfw2+CDmoNeEtnecNCn61e6HJGT+6d6QyhoCubXO5uqzuSnVWUgiyHAH SN6GN9qS9EFqngoufbhNjVdhMZAOaYTvTqUOlpUeJ9D/UPzE+kWtkBZaXAzm3tsw PIyVv7nMAZi5JdH52Lf5YdnBw4HsEQJrEBgHlD7PqPo5/pgtA/DUw/Np0/cNDcmM FuywjbhjOO259dJA6f9xrUj3fQ== -----END CERTIFICATE-----Generated at Fri Oct 30 18:05:00 2026 by rpki-client