$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft File: 33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json) Hash identifier: fYaf/lRC3RaRU2w69DM4oOO/JLcQj373bcnTQqJNxDo= Subject key identifier: 36:1E:C5:A4:3C:AC:6B:32:C2:8B:BD:9F:6E:3A:C0:00:D2:A8:77:55 Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft Manifest number: 0287 Signing time: Sun 25 Oct 2026 02:17:44 +0000 Manifest this update: Sun 25 Oct 2026 02:17:44 +0000 Manifest next update: Sun 01 Nov 2026 02:17:44 +0000 Files and hashes: 1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: tPLK3Fpr6LCJ2ENDA0hqsHhBQbQtmoqGxq1yO0NH1bk=) 2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: X6nIJKrPOsKF/xBNNQOCxuWrhRZQbFDhttqReRf2IsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Validity Not Before: Oct 25 02:17:44 2026 GMT Not After : Nov 1 02:17:44 2026 GMT Subject: CN=6add66c8-0798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:97:1b:86:91:04:86:69:82:62:ee:68:b8: b7:55:00:c4:20:d2:2b:09:d9:39:ce:d3:be:7b:6f: 03:bc:70:e3:1f:f3:bd:44:0d:6b:72:65:d3:f9:18: 74:3c:d3:d8:27:68:f1:44:ce:64:bf:2b:26:bb:34: d7:60:83:55:8f:7a:cb:82:24:c0:82:a9:b7:dc:91: 77:90:d8:0a:9d:b7:f6:db:55:ee:9d:18:0e:f9:32: b9:4a:dc:bd:91:da:5c:b7:36:f9:4f:30:74:9b:3a: 17:6c:d5:89:e3:93:3c:d3:01:40:9a:9b:7b:49:4d: 31:60:34:29:8d:f0:d2:9a:31:b6:74:64:a2:17:8a: 3f:2c:39:79:51:62:9e:e3:68:e2:20:77:84:c5:ba: 3c:a0:f5:f2:5d:a3:9d:77:fd:6d:12:b4:6c:2d:08: e3:bf:18:9b:c6:fd:d7:d8:8c:3c:b0:97:b2:cf:51: 18:71:66:56:76:cd:4f:f7:fe:b3:37:ae:8e:55:93: 63:89:fd:86:73:1d:b2:f7:9d:65:89:ca:47:cb:70: 08:38:ac:3c:94:9d:e4:bd:da:cb:d3:c8:1b:78:36: ea:f0:59:ee:06:3d:4c:23:b9:46:29:6b:b5:8f:2c: 84:8f:0f:bf:1b:1c:a7:ad:4d:51:56:cf:27:80:77: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:C5:A4:3C:AC:6B:32:C2:8B:BD:9F:6E:3A:C0:00:D2:A8:77:55 X509v3 Authority Key Identifier: keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:69:04:e3:be:ae:3b:b9:56:2c:20:94:ee:4d:ab:cf:58: ca:d7:e7:6e:ce:67:f5:6b:35:95:2b:66:b6:7a:33:7b:0a:b7: 70:9c:0d:a8:8b:9e:41:71:ba:85:7c:e9:6e:69:27:e4:04:47: 05:55:fb:c4:f3:0d:cf:34:ad:02:f7:69:4a:7c:73:71:3f:9e: 93:4d:af:22:e4:78:0e:14:97:d3:6d:c4:5c:0e:35:47:d0:ba: d5:98:d6:3f:39:9c:56:7a:89:44:34:85:d0:05:6c:06:43:8f: c9:f6:b7:40:90:16:8d:c8:2c:b5:b8:b0:ae:0a:2f:96:f6:47: b1:c3:4e:1f:c7:21:5e:1d:9e:cc:90:ab:f0:07:88:29:fd:85: fb:33:c2:1f:c2:a6:ea:1f:fb:0d:e9:67:99:4d:04:ef:e9:71: 80:09:b4:48:e5:5b:0a:b3:cb:26:ee:6c:2d:c1:2f:29:35:db: 4f:3b:79:23:4a:06:02:97:bf:68:94:68:1c:da:73:a2:46:e9: c8:d0:9f:10:0e:e5:b6:10:55:d4:8c:3c:ce:ad:43:61:cc:5e: b7:a7:a9:85:32:ed:06:72:41:f0:eb:a3:bc:cf:a8:5f:ad:00: 03:9c:48:40:fd:4a:05:25:06:2f:0f:a2:7c:65:b0:c2:b2:9b: d6:51:fb:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG OTg5RTQyRjIwHhcNMjYxMDI1MDIxNzQ0WhcNMjYxMTAxMDIxNzQ0WjAYMRYwFAYD VQQDEw02YWRkNjZjOC0wNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJiXG4aRBIZpgmLuaLi3VQDEINIrCdk5ztO+e28DvHDjH/O9RA1rcmXT+Rh0 PNPYJ2jxRM5kvysmuzTXYINVj3rLgiTAgqm33JF3kNgKnbf221XunRgO+TK5Sty9 kdpctzb5TzB0mzoXbNWJ45M80wFAmpt7SU0xYDQpjfDSmjG2dGSiF4o/LDl5UWKe 42jiIHeExbo8oPXyXaOdd/1tErRsLQjjvxibxv3X2Iw8sJeyz1EYcWZWds1P9/6z N66OVZNjif2Gcx2y951licpHy3AIOKw8lJ3kvdrL08gbeDbq8FnuBj1MI7lGKWu1 jyyEjw+/GxynrU1RVs8ngHcjcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYexaQ8 rGsywou9n246wADSqHdVMB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS81NUM4MDNDQTA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0 TW1zLTFIeU9TbDM1aWVRdkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdmRpBOO+rju5ViwglO5Nq89Yytfnbs5n9Ws1lStmtnozewq3cJwNqIueQXG6 hXzpbmkn5ARHBVX7xPMNzzStAvdpSnxzcT+ek02vIuR4DhSX023EXA41R9C61ZjW PzmcVnqJRDSF0AVsBkOPyfa3QJAWjcgstbiwrgovlvZHscNOH8chXh2ezJCr8AeI Kf2F+zPCH8Km6h/7DelnmU0E7+lxgAm0SOVbCrPLJu5sLcEvKTXbTzt5I0oGApe/ aJRoHNpzokbpyNCfEA7lthBV1Iw8zq1DYcxet6ephTLtBnJB8OujvM+oX60AA5xI QP1KBSUGLw+ifGWwwrKb1lH7rg== -----END CERTIFICATE-----Generated at Tue Oct 27 00:50:59 2026 by rpki-client