$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: ZVj1Yp9poKybBKSkGDKnTOZvoulD0ULz+AxwKjv1tbQ= Subject key identifier: E0:D5:FA:2A:2C:1B:12:CE:10:18:F7:41:5B:5A:9F:F0:1C:5E:4A:BF Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 049A Signing time: Mon 26 Oct 2026 23:56:24 +0000 Manifest this update: Mon 26 Oct 2026 23:56:23 +0000 Manifest next update: Mon 02 Nov 2026 23:56:23 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: Nn3tMm28sQXxhkNN1drXGN6Zlg0ibTTkevGziIscLLc=) 2: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: Xwopv44IWtrA47h99nFS1HcICRmL98rRNkBLnVkufOs=) 3: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: W4goqtPYzyLcCdBI7xc2Qn8MqCV+FsXgvw4MFdwTxhk=) 4: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: htWOUsGCluqo+bDLkY52m9kGHamjAwjskMqRyVdOAVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Oct 26 23:56:23 2026 GMT Not After : Nov 2 23:56:23 2026 GMT Subject: CN=6adfe8a7-dd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:46:b2:fa:d2:58:d5:d2:37:2e:0a:d2:66: a1:5f:ea:8a:2d:8f:e2:ef:e1:a3:21:3e:c6:73:d2: 96:f7:99:57:4b:21:e9:4e:d5:71:aa:6d:76:12:84: fb:4e:9a:f3:8b:85:99:5f:b9:a5:3d:76:78:2e:46: 9a:98:eb:77:d5:f1:88:4d:b1:26:5f:bf:ab:4a:d0: 3c:61:a9:82:6f:c4:b0:27:19:76:be:08:73:12:3b: c5:4c:cb:50:4a:9b:7c:60:b0:6c:e2:e3:bd:00:45: 42:f8:64:ee:b8:c7:a0:ef:98:58:24:ca:93:41:c9: bf:33:94:31:6f:af:3d:c7:b4:1e:7b:03:f7:87:65: 4d:4f:ae:eb:37:3e:d4:04:b8:aa:4c:33:e9:0e:c7: a7:ab:ce:0f:b0:e8:13:df:f7:aa:14:dd:e5:37:76: a8:a0:87:72:27:fa:d6:4d:1f:d2:d8:8e:f8:de:3c: 77:17:52:fe:66:45:ce:9b:4d:b5:06:c8:f7:cb:00: f0:45:37:2e:8f:8d:19:7b:7d:8f:c9:5a:26:47:40: c4:8b:4f:be:00:bc:45:25:de:bf:86:17:25:34:01: 35:e3:99:82:3a:f8:79:dd:82:10:1d:1a:3c:38:be: 4d:a5:d9:1c:3b:48:ee:7b:67:2d:89:87:9d:df:56: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:FA:2A:2C:1B:12:CE:10:18:F7:41:5B:5A:9F:F0:1C:5E:4A:BF X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f8:97:ab:1c:96:83:42:bc:2f:09:68:d0:9a:d4:92:3d:58: e9:99:4e:9d:ad:0b:f2:2d:f3:da:36:c0:d2:a6:bf:3c:2d:d1: 6f:37:f3:9b:b2:65:e6:e4:59:f1:ed:93:86:7f:26:95:b4:59: 8a:17:e3:6e:81:90:5a:6a:8e:2f:3c:fa:93:65:68:ad:c8:8c: 95:cc:db:21:96:f5:b5:14:4a:bb:4b:ac:5b:10:68:93:da:1d: 96:fd:1d:f2:fb:e8:2b:80:2a:83:04:c3:76:3d:fb:25:e4:35: 30:37:de:f8:60:9a:25:d2:ea:d1:cf:54:95:d8:5b:23:f2:cc: d9:d6:e0:d7:73:fd:38:43:6b:4f:d6:ec:9d:e7:75:29:ab:2a: bd:a4:ed:cf:1b:0b:bd:be:0d:ac:79:83:86:ff:50:4c:48:e3: bc:bb:4a:58:2a:97:be:c9:d5:80:35:8c:d6:cb:61:96:50:f2: 6e:48:9c:32:93:6b:cd:24:40:f9:bd:ff:8b:f2:68:34:e8:17: d8:3a:ef:df:49:b8:de:4c:c6:f1:24:f8:67:fe:15:cd:3c:9c: 88:9e:f6:c1:15:dc:2b:a9:9f:31:1f:a4:fc:a4:bd:9f:6c:7d: 8d:7c:5f:68:68:64:bd:3d:97:c0:b4:42:7f:aa:b3:9d:19:4d: 81:03:e2:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjYxMDI2MjM1NjIzWhcNMjYxMTAyMjM1NjIzWjAYMRYwFAYD VQQDEw02YWRmZThhNy1kZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LRGsvrSWNXSNy4K0mahX+qKLY/i7+GjIT7Gc9KW95lXSyHpTtVxqm12EoT7 Tprzi4WZX7mlPXZ4LkaamOt31fGITbEmX7+rStA8YamCb8SwJxl2vghzEjvFTMtQ Spt8YLBs4uO9AEVC+GTuuMeg75hYJMqTQcm/M5Qxb689x7QeewP3h2VNT67rNz7U BLiqTDPpDsenq84PsOgT3/eqFN3lN3aooIdyJ/rWTR/S2I743jx3F1L+ZkXOm021 Bsj3ywDwRTcuj40Ze32PyVomR0DEi0++ALxFJd6/hhclNAE145mCOvh53YIQHRo8 OL5NpdkcO0jue2ctiYed31ZIXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODV+ios GxLOEBj3QVtan/AcXkq/MB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABfiXqxyWg0K8Lwlo0JrUkj1Y6ZlOna0L8i3z2jbA0qa/PC3Rbzfzm7Jl5uRZ 8e2Thn8mlbRZihfjboGQWmqOLzz6k2VorciMlczbIZb1tRRKu0usWxBok9odlv0d 8vvoK4AqgwTDdj37JeQ1MDfe+GCaJdLq0c9UldhbI/LM2dbg13P9OENrT9bsned1 KasqvaTtzxsLvb4NrHmDhv9QTEjjvLtKWCqXvsnVgDWM1sthllDybkicMpNrzSRA +b3/i/JoNOgX2Drv30m43kzG8ST4Z/4VzTyciJ72wRXcK6mfMR+k/KS9n2x9jXxf aGhkvT2XwLRCf6qznRlNgQPijA== -----END CERTIFICATE-----Generated at Wed Oct 28 23:06:17 2026 by rpki-client