$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: PZ+4Vyz2mCuVSnYjmzPhxzX70XFczXnIJhSEL+1rqw0= Subject key identifier: FD:79:CE:B0:69:DB:DD:59:7C:F5:CA:78:B6:44:29:D9:F3:8E:62:7C Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 0505 Signing time: Sat 24 Oct 2026 23:38:00 +0000 Manifest this update: Sat 24 Oct 2026 23:37:59 +0000 Manifest next update: Sat 31 Oct 2026 23:37:59 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: /XfkWwMIXST+bv/eXy+itfAG9LJHFzeJaM91aebRJ9k=) 2: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: mocm69lqZdjVVtWbDT8lrUYvlh6Uzdf4NnBQ902rsro=) 3: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M/opGFmlb9jaN3RmTRwWVxME38lrA5KzlqcKDnyMekw=) 4: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: bzANKnbyeKHQq6L/luZgy8RCyHrFKy2/gJCau298tQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Oct 24 23:37:59 2026 GMT Not After : Oct 31 23:37:59 2026 GMT Subject: CN=6add4158-92a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:b9:a0:3d:6f:d3:77:92:fe:13:57:17:e6: 9c:5a:39:44:86:94:80:28:a1:65:28:50:75:61:6b: f1:d5:16:e8:db:08:10:46:30:f6:d8:1f:4d:a5:33: 5f:a3:f3:fa:61:ca:8a:ab:18:db:ed:71:0b:f2:6d: 12:c8:81:d3:f9:73:94:01:54:bf:46:a7:83:44:a3: ec:e2:27:43:e5:27:dc:65:0d:7e:58:19:ad:3f:5a: 9e:96:eb:bf:f3:8f:a1:b6:fb:dc:9f:00:ea:08:49: cd:b2:43:a9:3f:3a:55:67:70:42:b5:b9:9c:29:99: 90:18:dd:a1:06:c3:2e:37:5e:26:6e:86:0a:eb:ff: 03:21:61:5d:83:02:a5:5b:de:31:ab:7b:aa:36:cb: dd:ff:6c:17:09:5d:44:28:5a:57:30:a2:7c:b0:7f: a7:7c:a4:08:1b:49:d5:6b:5e:f1:19:53:c3:51:89: 0e:48:40:13:b1:55:09:5c:1c:01:33:d6:e2:9a:aa: 47:35:36:ab:a4:92:0a:ee:41:dc:94:18:69:d9:99: 7e:c3:61:8e:21:61:f9:7c:71:f5:b8:ea:cd:bc:17: e5:43:de:1e:d5:d3:08:40:5c:bd:a8:11:72:d2:49: 6f:e3:fb:80:c5:04:55:26:5f:42:1f:e7:84:69:41: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:79:CE:B0:69:DB:DD:59:7C:F5:CA:78:B6:44:29:D9:F3:8E:62:7C X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:38:4e:54:df:41:46:f8:3d:80:ba:bf:1e:b5:4a:bd:80:8f: da:a2:d0:56:02:b1:5d:0e:b8:2a:42:f9:6b:39:82:47:2a:5b: dd:25:c0:2f:1d:31:9a:49:85:b2:48:15:68:75:c4:33:07:a1: 47:45:18:1c:0b:22:aa:99:db:89:f1:b6:cd:9d:67:ca:97:1d: a7:e2:3c:9b:5e:c7:06:18:97:ac:e4:06:97:b2:64:47:94:45: 92:51:71:a9:2e:e0:99:50:c4:d9:ca:f4:ee:32:fe:13:f7:02: 58:2f:be:af:97:e0:f4:2a:56:40:a0:80:97:44:7d:cc:2a:2a: da:1e:ae:02:c4:7b:bc:e8:60:c6:c6:5a:8b:50:58:ad:95:0a: c5:7a:2c:37:1e:25:d6:62:1c:23:bc:87:23:58:61:d0:1e:e8: 6d:a7:24:1e:9a:10:52:83:eb:5b:13:1a:7e:71:2b:53:34:cf: 31:84:9f:81:73:f8:95:54:2a:55:24:11:f2:ec:61:d5:a9:ab: c3:d0:16:a0:6a:ce:f4:a1:1f:04:3f:04:13:0c:ea:df:64:c9: d6:b7:b6:7f:d0:69:ad:0e:b9:73:f0:0c:f6:53:9a:8b:8f:e7: 2e:17:0a:b9:ac:b8:37:05:50:d0:58:98:38:2b:f6:ab:8e:64: 5b:0c:9b:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjYxMDI0MjMzNzU5WhcNMjYxMDMxMjMzNzU5WjAYMRYwFAYD VQQDEw02YWRkNDE1OC05MmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zm5oD1v03eS/hNXF+acWjlEhpSAKKFlKFB1YWvx1Rbo2wgQRjD22B9NpTNf o/P6YcqKqxjb7XEL8m0SyIHT+XOUAVS/RqeDRKPs4idD5SfcZQ1+WBmtP1qeluu/ 84+htvvcnwDqCEnNskOpPzpVZ3BCtbmcKZmQGN2hBsMuN14mboYK6/8DIWFdgwKl W94xq3uqNsvd/2wXCV1EKFpXMKJ8sH+nfKQIG0nVa17xGVPDUYkOSEATsVUJXBwB M9bimqpHNTarpJIK7kHclBhp2Zl+w2GOIWH5fHH1uOrNvBflQ94e1dMIQFy9qBFy 0klv4/uAxQRVJl9CH+eEaUHMywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP15zrBp 291ZfPXKeLZEKdnzjmJ8MB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbjhOVN9BRvg9gLq/HrVKvYCP2qLQVgKxXQ64KkL5azmCRypb3SXALx0xmkmF skgVaHXEMwehR0UYHAsiqpnbifG2zZ1nypcdp+I8m17HBhiXrOQGl7JkR5RFklFx qS7gmVDE2cr07jL+E/cCWC++r5fg9CpWQKCAl0R9zCoq2h6uAsR7vOhgxsZai1BY rZUKxXosNx4l1mIcI7yHI1hh0B7obackHpoQUoPrWxMafnErUzTPMYSfgXP4lVQq VSQR8uxh1amrw9AWoGrO9KEfBD8EEwzq32TJ1re2f9BprQ65c/AM9lOai4/nLhcK uay4NwVQ0FiYOCv2q45kWwybIw== -----END CERTIFICATE-----Generated at Mon Oct 26 11:18:59 2026 by rpki-client