$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft File: 33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json) Hash identifier: eun6GJ9lV3aclPLQ7FfxJvjRpMOdSS/fd011w4DycbA= Subject key identifier: 32:9A:A3:F6:C8:39:65:CF:E0:50:73:7B:07:0D:B4:65:76:1E:CF:2D Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft Manifest number: 0288 Signing time: Tue 27 Oct 2026 02:08:41 +0000 Manifest this update: Tue 27 Oct 2026 02:08:40 +0000 Manifest next update: Tue 03 Nov 2026 02:08:40 +0000 Files and hashes: 1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: /243fW8sglKXK80Qh4985XGjU/ZnAWUT3jqCv++GLC8=) 2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: X6nIJKrPOsKF/xBNNQOCxuWrhRZQbFDhttqReRf2IsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 02:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Validity Not Before: Oct 27 02:08:40 2026 GMT Not After : Nov 3 02:08:40 2026 GMT Subject: CN=6ae007a9-9783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:b1:6c:fb:dd:34:1f:d3:a7:4e:8e:cb:55: 79:6f:66:a1:2d:43:d0:f4:28:35:a8:f6:1c:a5:b4: e9:51:c7:1e:62:02:86:dc:7d:9a:d3:e6:fb:38:77: 16:90:59:48:a5:7c:f2:0f:51:c3:74:69:f2:35:9b: 58:b5:6c:b1:1d:72:a6:a1:07:35:19:e2:3e:cf:cb: 21:a1:62:b0:c8:1d:00:aa:e4:3f:58:84:f9:d5:15: 31:64:e5:5a:1a:cf:d4:90:54:f4:8a:d0:83:e5:35: 03:10:1f:6e:b5:60:a2:1c:82:f9:cd:c5:31:9e:96: 1b:92:4c:4c:5c:15:47:0e:a3:b7:67:b8:69:65:06: cd:80:74:e1:b6:4d:b6:ed:e5:16:9c:91:fa:2a:7d: c5:99:36:9a:06:64:6a:08:e4:39:fa:38:ba:07:17: 3f:18:7b:81:59:17:91:ef:09:3f:90:c2:db:f7:a3: a1:6e:e0:2c:f1:14:aa:f9:53:af:7d:4c:aa:af:99: a2:1c:df:51:e6:53:25:ac:4c:ea:39:e3:9c:d9:56: 9d:c4:ba:73:4a:a2:99:31:55:05:82:be:78:fd:9f: b6:d7:cc:ce:d6:9d:b7:4f:4c:da:e4:c7:af:e0:a2: 28:2c:fb:64:4e:58:15:6b:57:4c:b6:63:a7:9f:54: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9A:A3:F6:C8:39:65:CF:E0:50:73:7B:07:0D:B4:65:76:1E:CF:2D X509v3 Authority Key Identifier: keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:b2:dc:88:76:ef:6c:4b:2d:26:32:d3:55:bf:b2:f5:59:7f: 7e:41:bc:26:e6:0d:a7:0c:21:93:4f:71:03:95:42:00:7e:ff: 12:6b:c4:c8:1b:07:fe:5f:41:bb:26:a3:e0:ca:f8:2c:d9:87: 27:e4:00:04:37:90:56:01:9e:d5:21:59:05:18:de:2b:f8:48: 3a:33:b1:26:56:77:20:32:e5:77:96:35:8b:93:fd:e5:81:c8: 5e:8f:b0:6b:1e:60:9d:8d:23:b1:66:56:09:23:a8:8a:d6:36: cf:9b:be:92:04:a9:25:6b:f2:30:93:74:d4:85:56:aa:b4:ef: 1d:48:28:25:f1:3c:82:7e:0a:f9:9e:1d:d5:08:81:27:5e:45: 70:53:43:6c:83:38:64:89:a9:b1:c6:15:83:65:0c:d5:e1:1b: 2d:28:f1:95:7e:88:0c:9d:23:96:f0:d7:70:db:60:91:1d:d5: 0e:4a:ca:60:9e:4d:55:16:b7:b4:57:a1:0e:a0:de:c1:72:3e: 4d:78:ce:2d:6a:3a:04:56:1c:bf:d7:0b:b2:6e:46:92:0d:a7: 5c:41:e8:01:53:b4:b4:b3:44:75:29:ed:7f:8f:3e:f8:fa:51: cf:9d:9d:01:92:1e:88:97:59:f3:0a:71:82:0d:86:f4:03:f7: 4d:29:fe:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG OTg5RTQyRjIwHhcNMjYxMDI3MDIwODQwWhcNMjYxMTAzMDIwODQwWjAYMRYwFAYD VQQDEw02YWUwMDdhOS05NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl2xbPvdNB/Tp06Oy1V5b2ahLUPQ9Cg1qPYcpbTpUcceYgKG3H2a0+b7OHcW kFlIpXzyD1HDdGnyNZtYtWyxHXKmoQc1GeI+z8shoWKwyB0AquQ/WIT51RUxZOVa Gs/UkFT0itCD5TUDEB9utWCiHIL5zcUxnpYbkkxMXBVHDqO3Z7hpZQbNgHThtk22 7eUWnJH6Kn3FmTaaBmRqCOQ5+ji6Bxc/GHuBWReR7wk/kMLb96OhbuAs8RSq+VOv fUyqr5miHN9R5lMlrEzqOeOc2VadxLpzSqKZMVUFgr54/Z+218zO1p23T0za5Mev 4KIoLPtkTlgVa1dMtmOnn1TExwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKao/bI OWXP4FBzewcNtGV2Hs8tMB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS81NUM4MDNDQTA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0 TW1zLTFIeU9TbDM1aWVRdkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxrLciHbvbEstJjLTVb+y9Vl/fkG8JuYNpwwhk09xA5VCAH7/EmvEyBsH/l9B uyaj4Mr4LNmHJ+QABDeQVgGe1SFZBRjeK/hIOjOxJlZ3IDLld5Y1i5P95YHIXo+w ax5gnY0jsWZWCSOoitY2z5u+kgSpJWvyMJN01IVWqrTvHUgoJfE8gn4K+Z4d1QiB J15FcFNDbIM4ZImpscYVg2UM1eEbLSjxlX6IDJ0jlvDXcNtgkR3VDkrKYJ5NVRa3 tFehDqDewXI+TXjOLWo6BFYcv9cLsm5Gkg2nXEHoAVO0tLNEdSntf48++PpRz52d AZIeiJdZ8wpxgg2G9AP3TSn+bQ== -----END CERTIFICATE-----Generated at Tue Oct 27 16:34:45 2026 by rpki-client