$ rpki-client -vvvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json) Hash identifier: WqtnwaUQBXq1VZ6BGM4tyCLGTMpF+jC9bYCez5BWpoo= Subject key identifier: 8E:9B:00:FF:F8:AB:E7:4D:CF:0C:46:03:39:86:73:A0:E0:6E:D3:46 Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft Manifest number: 01D1 Signing time: Thu 29 Oct 2026 04:13:06 +0000 Manifest this update: Thu 29 Oct 2026 04:13:05 +0000 Manifest next update: Thu 05 Nov 2026 04:13:05 +0000 Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: QKnaNHJyLuqQxxxqB32lU2IPMNNEZ6T1u4kUVC6nGvE=) 2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: rTmYP4vftuu9LnK2M6aljj2neyfU2VajOjI+M4V6OzA=) 3: gtTtBpyXuhrVn0rKTqX8ZAJIiYs.asa (hash: i6Ei0mkxTuk/Vn+KWhIs0U7VkLFpXl06SGma6YDkuRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 04:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Validity Not Before: Oct 29 04:13:05 2026 GMT Not After : Nov 5 04:13:05 2026 GMT Subject: CN=6ae2c7d2-9e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:5d:36:2d:dd:e1:b7:11:0f:5e:de:4d:72: 76:10:1b:5c:4f:72:47:86:bd:2d:b7:4c:41:37:62: bc:63:c5:8e:c7:0f:3a:fb:34:f5:85:fd:4a:5a:05: b7:f4:20:ce:f4:27:63:76:8a:81:17:de:9f:59:65: 87:a9:bd:7a:34:b0:68:85:72:e7:af:40:43:90:c0: f1:42:d7:a6:67:97:5d:60:74:d7:d8:fd:8a:77:a7: ea:92:33:10:70:29:52:9d:a9:25:ed:87:88:ee:5f: c0:f7:18:ab:37:c3:94:3f:12:e5:ed:40:7a:b8:fd: c4:b0:6a:ad:42:96:bf:b4:80:33:08:db:68:ba:81: 29:ca:6f:c4:4b:dc:a8:9f:33:71:62:9e:a6:9d:8b: 69:6d:90:9e:71:ec:16:92:e2:9d:08:3a:1e:04:38: 07:9a:34:2d:76:8c:4a:b1:60:b7:aa:fc:65:eb:ea: f2:e4:8b:28:41:61:e5:a3:f0:18:b4:a3:36:07:67: 3a:98:70:f2:ec:4b:46:23:68:0b:27:1c:d4:09:c5: b3:69:cf:4c:e1:e9:c5:8b:f1:2b:a9:2f:40:da:3d: 8d:2f:59:57:81:9f:26:e8:ab:13:2c:89:bc:df:31: 29:dd:11:5e:33:73:b3:59:f9:af:d1:66:c4:86:a3: a3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9B:00:FF:F8:AB:E7:4D:CF:0C:46:03:39:86:73:A0:E0:6E:D3:46 X509v3 Authority Key Identifier: keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b5:53:91:47:e9:6a:49:05:14:cf:b7:26:ec:83:35:78:5c: 1e:21:0d:40:1b:08:3d:e2:f5:70:05:22:55:b0:4e:6f:4c:4e: eb:3f:c4:6b:aa:02:67:cb:19:c1:cc:1f:00:d9:49:93:97:34: db:db:c6:01:13:ee:29:3f:e1:c8:8d:a7:3a:21:5b:0b:aa:93: 1f:97:e4:5b:9a:b9:8a:21:c5:0a:77:bf:51:00:d0:17:f6:7a: 21:47:9c:3f:76:7b:f6:79:85:77:df:33:7f:b3:19:39:fd:d8: b1:3a:41:64:3d:87:2d:d9:7a:d3:b2:f0:2d:17:ff:8a:56:cd: 41:a9:00:ca:63:29:66:1e:7a:33:30:28:9b:d3:3e:c2:84:99: 1e:e8:88:5f:f6:b6:0e:90:8b:97:ef:51:5b:1d:e0:cc:2d:c2: f3:49:83:de:50:51:2c:f7:cb:62:57:6b:05:e6:bf:f8:99:54: 24:b1:2c:e7:32:aa:02:36:07:51:a0:04:02:b5:ee:04:33:7b: a0:1c:13:78:14:13:a0:6c:7c:12:db:5c:80:5d:bc:7e:d0:10: 37:43:b8:55:81:78:27:de:5a:83:cc:be:dc:2b:d2:cb:4f:07: 06:f7:4a:40:20:c9:9c:09:08:22:01:b8:a5:da:15:e0:40:cb: 52:a2:26:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD RjkwQTg1NUUwHhcNMjYxMDI5MDQxMzA1WhcNMjYxMTA1MDQxMzA1WjAYMRYwFAYD VQQDEw02YWUyYzdkMi05ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNFdNi3d4bcRD17eTXJ2EBtcT3JHhr0tt0xBN2K8Y8WOxw86+zT1hf1KWgW3 9CDO9CdjdoqBF96fWWWHqb16NLBohXLnr0BDkMDxQtemZ5ddYHTX2P2Kd6fqkjMQ cClSnakl7YeI7l/A9xirN8OUPxLl7UB6uP3EsGqtQpa/tIAzCNtouoEpym/ES9yo nzNxYp6mnYtpbZCecewWkuKdCDoeBDgHmjQtdoxKsWC3qvxl6+ry5IsoQWHlo/AY tKM2B2c6mHDy7EtGI2gLJxzUCcWzac9M4enFi/ErqS9A2j2NL1lXgZ8m6KsTLIm8 3zEp3RFeM3OzWfmv0WbEhqOjwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6bAP/4 q+dNzwxGAzmGc6DgbtNGMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4 QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC dDhsLU5KQXByeF9Qa0toVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7VTkUfpakkFFM+3JuyDNXhcHiENQBsIPeL1cAUiVbBOb0xO6z/Ea6oCZ8sZ wcwfANlJk5c029vGARPuKT/hyI2nOiFbC6qTH5fkW5q5iiHFCne/UQDQF/Z6IUec P3Z79nmFd98zf7MZOf3YsTpBZD2HLdl607LwLRf/ilbNQakAymMpZh56MzAom9M+ woSZHuiIX/a2DpCLl+9RWx3gzC3C80mD3lBRLPfLYldrBea/+JlUJLEs5zKqAjYH UaAEArXuBDN7oBwTeBQToGx8EttcgF28ftAQN0O4VYF4J95ag8y+3CvSy08HBvdK QCDJnAkIIgG4pdoV4EDLUqImZA== -----END CERTIFICATE-----Generated at Thu Oct 29 13:18:03 2026 by rpki-client