$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json) Hash identifier: 2kpxr8OY7dkq8Vqv/dZMgNVyg6/p31nhSYtkg5I0yjE= Subject key identifier: 90:5F:1C:AF:6F:83:E3:E5:55:88:B7:50:45:4C:17:59:B3:D4:0F:CE Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft Manifest number: 02F1 Signing time: Tue 27 Oct 2026 01:04:28 +0000 Manifest this update: Tue 27 Oct 2026 01:04:27 +0000 Manifest next update: Tue 03 Nov 2026 01:04:27 +0000 Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: 19R35LyKRuPmcaf0gAhtkUsbY+JywhPaaz54NpW8uc0=) 2: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=) 3: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: 18O7Lp0T09zqzj1uz2UvboEJEAG8f//RjAML5YNM31g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Validity Not Before: Oct 27 01:04:27 2026 GMT Not After : Nov 3 01:04:27 2026 GMT Subject: CN=6adff89c-ba84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:71:11:75:9d:d0:6d:18:f9:13:13:ed:30:1a: 13:18:67:8f:63:72:63:6e:a9:72:56:86:67:33:29: 1a:06:7f:b2:a3:54:bf:00:41:61:47:16:8c:8e:56: ac:6e:df:d0:d0:f8:a6:3b:92:3a:ea:fd:89:c3:40: 2b:7d:7a:e8:ae:57:dc:f6:87:25:ed:a0:86:b3:a0: 39:cc:dc:52:f7:bb:50:a2:a1:7a:59:bc:5a:6f:cc: 5e:2c:68:d6:7d:86:14:d9:9f:c5:52:f6:38:32:62: aa:2b:c3:8c:d2:3a:80:8e:3a:34:1c:fd:ba:d5:db: 54:0f:95:c8:be:e4:ea:77:ef:ca:08:4b:78:fb:1b: f4:91:08:0b:24:d8:e5:4f:1e:45:b1:6f:42:5a:90: 96:4d:a4:42:e6:19:63:a2:13:bc:a6:be:8c:f6:8c: 94:84:90:22:27:24:98:d4:b5:b1:be:5b:cc:8c:c5: a9:5f:60:5b:9c:cb:f7:fa:6d:f7:73:12:dc:72:ec: bb:d8:b3:7f:4c:8f:0e:81:e1:d2:f8:fb:e3:1a:f3: 9e:d0:68:af:2f:93:66:e9:67:94:dc:ec:32:d5:ad: bd:d0:7e:26:ca:2c:c2:89:ce:52:71:0e:9c:74:5d: 35:41:e5:4d:f5:ae:3f:0d:3e:04:03:33:74:d3:3d: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5F:1C:AF:6F:83:E3:E5:55:88:B7:50:45:4C:17:59:B3:D4:0F:CE X509v3 Authority Key Identifier: keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c4:b2:44:42:4f:53:20:49:06:79:ab:75:d7:99:78:89:12: 86:42:4a:d4:b8:c5:cd:42:cc:a3:fc:41:c7:a4:2f:61:f3:17: f1:a7:ac:b5:ec:e4:5c:1b:b5:2a:ea:c3:8a:b8:43:f0:4f:48: 8f:82:ec:9a:e4:d0:fb:5c:9e:b4:e7:e7:9d:82:4c:3c:60:45: c4:44:5e:db:bd:2c:e5:55:45:8e:4d:24:35:2a:fc:df:40:8a: b6:ff:64:99:e6:b3:ef:fd:ed:a0:58:ad:ce:22:64:10:3d:2f: 5a:55:d2:60:9f:b5:aa:8e:6a:e9:66:72:66:b9:f7:44:97:80: 02:ee:f5:77:42:85:3f:0a:42:35:d3:b7:f7:8d:80:03:85:b7: 79:79:ea:04:bc:2c:62:05:cd:31:da:6b:18:ed:1c:1d:59:0a: 74:77:b1:d1:6d:1e:2a:55:fa:f5:52:a9:a5:a8:89:d1:bf:68: 25:aa:ec:ad:1c:14:f6:a2:05:9e:5e:a5:a4:6a:b0:0e:4d:6d: ea:54:04:4e:a9:3d:f8:a6:3b:93:4d:66:aa:f7:75:a8:b7:82: 28:85:13:cc:b9:39:8d:81:2c:8c:c1:a9:9f:70:f7:9c:39:34: 38:f1:e1:41:32:c1:33:14:dd:40:b1:ef:a9:75:d6:39:be:e9: ea:27:ca:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx NTAwQURDNzYwHhcNMjYxMDI3MDEwNDI3WhcNMjYxMTAzMDEwNDI3WjAYMRYwFAYD VQQDEw02YWRmZjg5Yy1iYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nERdZ3QbRj5ExPtMBoTGGePY3JjbqlyVoZnMykaBn+yo1S/AEFhRxaMjlas bt/Q0PimO5I66v2Jw0ArfXrorlfc9ocl7aCGs6A5zNxS97tQoqF6Wbxab8xeLGjW fYYU2Z/FUvY4MmKqK8OM0jqAjjo0HP261dtUD5XIvuTqd+/KCEt4+xv0kQgLJNjl Tx5FsW9CWpCWTaRC5hljohO8pr6M9oyUhJAiJySY1LWxvlvMjMWpX2BbnMv3+m33 cxLccuy72LN/TI8OgeHS+PvjGvOe0GivL5Nm6WeU3Owy1a290H4myizCic5ScQ6c dF01QeVN9a4/DT4EAzN00z278wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBfHK9v g+PlVYi3UEVMF1mz1A/OMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB SXhzc1N4TklHLUVWQUszSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL8SyREJPUyBJBnmrddeZeIkShkJK1LjFzULMo/xBx6QvYfMX8aestezkXBu1 KurDirhD8E9Ij4LsmuTQ+1yetOfnnYJMPGBFxERe270s5VVFjk0kNSr830CKtv9k meaz7/3toFitziJkED0vWlXSYJ+1qo5q6WZyZrn3RJeAAu71d0KFPwpCNdO3942A A4W3eXnqBLwsYgXNMdprGO0cHVkKdHex0W0eKlX69VKppaiJ0b9oJarsrRwU9qIF nl6lpGqwDk1t6lQETqk9+KY7k01mqvd1qLeCKIUTzLk5jYEsjMGpn3D3nDk0OPHh QTLBMxTdQLHvqXXWOb7p6ifKtA== -----END CERTIFICATE-----Generated at Tue Oct 27 15:51:31 2026 by rpki-client