$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: mKZ9tc/G5ztlbHPbIVHOGpsClvYIC6Zg487M7FF2SCI= Subject key identifier: 64:14:83:10:0D:D2:EC:DC:D2:D8:81:98:8C:65:56:5F:9C:4D:B1:7D Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0ABB Signing time: Wed 28 Oct 2026 19:42:57 +0000 Manifest this update: Wed 28 Oct 2026 19:42:57 +0000 Manifest next update: Wed 04 Nov 2026 19:42:57 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: NASSaAmdcvasnd6n2p3LCaLPSDbKayZ4aYSyDr1DKgk=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Oct 28 19:42:57 2026 GMT Not After : Nov 4 19:42:57 2026 GMT Subject: CN=6ae25041-0d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:c4:a8:50:e3:51:b1:14:a5:58:f7:ec:b6: c1:b1:46:7c:49:16:29:68:a5:15:e1:6d:25:6b:b8: 64:49:31:ae:59:8b:12:4d:7e:5d:28:7f:10:32:72: a0:8a:58:87:c5:e8:62:b1:90:90:5f:27:c3:70:d3: 24:d0:62:17:60:be:03:04:dd:8d:ef:28:d0:3d:04: 09:94:48:20:f4:be:31:8f:01:a8:d3:70:c6:7b:dc: 8f:52:96:c5:db:b8:e2:47:d8:59:70:20:08:bf:eb: c1:d5:63:1a:29:c3:e8:88:d6:15:0c:ef:94:61:6c: e1:56:f9:4a:eb:7c:a0:26:e6:2d:30:8f:fc:aa:a4: 6a:6b:36:6a:57:46:e1:00:02:0d:e6:82:79:49:66: b5:3e:c6:88:1e:f9:9f:aa:3b:72:2b:6d:dd:de:0a: 08:73:67:c0:41:f1:99:b9:2c:aa:d5:8c:dc:11:7f: d9:1d:28:ce:2b:a2:e1:ba:0c:d6:89:a1:8f:59:04: 37:4e:85:d6:9b:19:be:6e:77:81:bb:9e:e0:bf:d4: e5:80:f6:ab:2d:87:60:86:0c:96:ab:4f:ed:f8:30: 2e:40:b4:7b:53:a0:4b:ff:48:4f:68:d7:de:48:96: 8a:41:6e:e9:8e:1a:2d:24:13:46:cc:5d:a5:64:24: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:14:83:10:0D:D2:EC:DC:D2:D8:81:98:8C:65:56:5F:9C:4D:B1:7D X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:df:f2:0a:57:c6:25:4b:92:66:c0:c1:04:41:76:40:c9:ea: 4c:36:c6:1d:0a:30:ab:99:92:d9:77:38:47:47:e9:5a:20:67: 90:1e:09:fc:8e:ad:0b:f7:ad:4b:2c:f3:e4:d4:54:84:37:09: 3b:d9:13:d4:73:ae:6b:2f:98:94:6a:92:4b:60:09:a5:eb:6d: 50:de:8f:93:98:4a:25:5d:a7:27:ef:0d:d9:df:d3:a4:f4:d5: 39:1b:4f:73:20:40:11:64:16:51:13:b7:7b:32:e2:b9:89:09: cc:09:c1:49:07:e7:66:20:ce:c2:13:88:63:75:46:b7:b7:3f: c6:9f:57:a0:43:12:59:a1:36:4a:29:68:86:be:13:6c:d4:5e: e7:e8:4a:64:8d:99:41:03:ba:d5:94:d0:d5:4e:05:aa:96:a3: b2:93:3a:ac:21:ea:ea:4e:05:7b:57:34:7a:a6:c5:34:35:15: 11:8d:e7:f8:fa:14:5a:af:50:e1:8d:96:f9:bf:f5:1a:05:52: b1:45:55:1f:60:c5:8b:1b:84:d1:e3:f1:10:b6:4d:e6:4f:f7: 2b:89:f2:42:92:4e:33:e9:6e:72:e7:45:16:a2:4a:45:00:95: 6a:b5:a2:21:6d:d2:b1:27:06:8b:16:f3:35:14:c8:1e:d5:85: da:f9:6d:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYxMDI4MTk0MjU3WhcNMjYxMTA0MTk0MjU3WjAYMRYwFAYD VQQDEw02YWUyNTA0MS0wZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjQ3EqFDjUbEUpVj37LbBsUZ8SRYpaKUV4W0la7hkSTGuWYsSTX5dKH8QMnKg iliHxehisZCQXyfDcNMk0GIXYL4DBN2N7yjQPQQJlEgg9L4xjwGo03DGe9yPUpbF 27jiR9hZcCAIv+vB1WMaKcPoiNYVDO+UYWzhVvlK63ygJuYtMI/8qqRqazZqV0bh AAIN5oJ5SWa1PsaIHvmfqjtyK23d3goIc2fAQfGZuSyq1YzcEX/ZHSjOK6LhugzW iaGPWQQ3ToXWmxm+bneBu57gv9TlgParLYdghgyWq0/t+DAuQLR7U6BL/0hPaNfe SJaKQW7pjhotJBNGzF2lZCRvNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQUgxAN 0uzc0tiBmIxlVl+cTbF9MB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdd/yClfGJUuSZsDBBEF2QMnqTDbGHQowq5mS2Xc4R0fpWiBnkB4J/I6tC/et Syzz5NRUhDcJO9kT1HOuay+YlGqSS2AJpettUN6Pk5hKJV2nJ+8N2d/TpPTVORtP cyBAEWQWURO3ezLiuYkJzAnBSQfnZiDOwhOIY3VGt7c/xp9XoEMSWaE2Silohr4T bNRe5+hKZI2ZQQO61ZTQ1U4FqpajspM6rCHq6k4Fe1c0eqbFNDUVEY3n+PoUWq9Q 4Y2W+b/1GgVSsUVVH2DFixuE0ePxELZN5k/3K4nyQpJOM+lucudFFqJKRQCVarWi IW3SsScGixbzNRTIHtWF2vltVQ== -----END CERTIFICATE-----Generated at Thu Oct 29 13:48:53 2026 by rpki-client