$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft File: LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json) Hash identifier: H7fOMN46MAVlsSf47zrc43bbjTbHsfulTfGWdhn9mJk= Subject key identifier: 41:11:3E:CB:06:E9:F4:05:B2:3C:29:60:48:CC:F0:CA:7D:4B:99:36 Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft Manifest number: 034A Signing time: Tue 27 Oct 2026 00:49:19 +0000 Manifest this update: Tue 27 Oct 2026 00:49:19 +0000 Manifest next update: Tue 03 Nov 2026 00:49:19 +0000 Files and hashes: 1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: 9SxW+IsBwQ60Im13dQrBiQIBlv+4YJjy6kKaMbua1Zs=) 2: B2D7FC4EA39D11F1B4F7754D4411F970.roa (hash: teuQoAGK0QvhhfPPm5rBMYWO1aEcU1nB5hIfx3+5PAs=) 3: B409E49CA39D11F1B4F7754D4411F970.roa (hash: GzaCZWp1dndFD7g7emTXpIICurmoortE6hD0cpGMniI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 00:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Validity Not Before: Oct 27 00:49:19 2026 GMT Not After : Nov 3 00:49:19 2026 GMT Subject: CN=6adff50f-96ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:c4:c8:ce:4d:cb:1f:7f:aa:a1:df:f2:4a: 3b:f1:6f:0d:d1:41:31:51:b7:2a:ca:8f:32:7b:e8: 2c:98:9e:89:a8:07:dc:b0:f2:b0:ef:ac:af:8f:2c: 08:55:de:b1:4c:ea:c1:a6:8a:78:ca:bd:72:2d:3c: 56:0c:1d:2a:8d:cf:95:c1:d6:56:62:e3:ad:e4:58: d4:08:ed:81:ed:43:c8:10:00:83:e4:b4:e6:d4:5f: d2:80:b0:78:4e:b3:7b:48:22:2d:c7:d2:a2:d4:4c: ab:ec:44:e5:06:8f:a9:21:50:f9:91:3a:1e:c9:25: bc:8b:03:f8:1f:25:81:b6:2c:da:71:95:d3:eb:e8: 5a:dc:c6:a2:52:47:2e:03:48:6f:02:2d:d3:cb:96: 62:ae:06:a7:02:a5:8e:14:66:5c:9f:30:19:c1:79: ce:1d:3f:88:88:d1:f6:24:f5:ff:53:de:82:cb:39: ac:14:6a:21:2c:bb:c6:f0:70:5f:cf:34:b7:ee:5c: 54:4b:7e:3c:16:2e:3c:55:42:c8:ea:8e:bd:38:6d: 85:4f:66:7e:b8:54:e9:fe:28:1d:01:20:fb:3d:f9: ba:fd:f0:6b:3b:a0:05:4f:f1:5f:0c:f9:c2:9e:86: 8e:86:0a:50:fc:ec:8c:10:f4:e0:28:07:42:f7:6d: a7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:11:3E:CB:06:E9:F4:05:B2:3C:29:60:48:CC:F0:CA:7D:4B:99:36 X509v3 Authority Key Identifier: keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b4:66:cb:97:4c:29:61:4b:82:71:00:7c:1e:2e:d9:27:05: fa:32:22:2d:89:d8:f8:e7:52:9a:64:d1:25:b9:58:a9:97:0d: fd:09:5c:4f:51:ed:67:fd:dd:ba:df:84:93:b0:c6:90:66:e5: fb:79:cc:d7:66:ef:77:da:4f:7d:93:ef:27:48:3e:16:42:b5: 08:3b:ea:2d:10:5a:7c:25:8b:9b:96:40:73:9d:a5:80:a7:99: 67:f4:c1:4e:12:6d:b0:36:9d:9d:be:18:5e:72:ba:01:c6:86: 47:83:3a:4e:a9:61:07:76:55:77:11:82:4c:4e:b6:95:23:c7: 4a:db:6b:a0:36:aa:d8:23:3d:2d:bf:0f:c4:d1:65:97:65:05: 49:2d:d4:26:56:13:88:53:d9:2c:43:55:39:1a:6b:3d:aa:4a: dd:3b:61:b0:7d:55:26:b3:26:46:72:9f:32:76:22:ad:ca:74: 2a:25:e1:d0:9e:7f:f2:43:1f:8c:0a:a5:55:0b:7b:48:00:a2: 20:c9:b4:e2:bf:ae:e2:d1:f8:b7:ee:fc:3a:4c:62:56:1e:33: 9e:87:a2:ff:74:61:3b:af:f1:3e:6f:81:30:99:9f:98:d7:b3: 82:4a:b7:4b:60:69:0c:11:45:60:2e:4d:4f:cb:43:1f:19:88: 93:5e:cf:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBOEYxMTAvBgNVBAUTKDJDRTA4NEUwMURBQzZCNEQ2MzQ5MzhENzZDRUFEQTU5 NjM1NUJENTMwHhcNMjYxMDI3MDA0OTE5WhcNMjYxMTAzMDA0OTE5WjAYMRYwFAYD VQQDEw02YWRmZjUwZi05NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IvEyM5Nyx9/qqHf8ko78W8N0UExUbcqyo8ye+gsmJ6JqAfcsPKw76yvjywI Vd6xTOrBpop4yr1yLTxWDB0qjc+VwdZWYuOt5FjUCO2B7UPIEACD5LTm1F/SgLB4 TrN7SCItx9Ki1Eyr7ETlBo+pIVD5kToeySW8iwP4HyWBtizacZXT6+ha3MaiUkcu A0hvAi3Ty5ZirganAqWOFGZcnzAZwXnOHT+IiNH2JPX/U96CyzmsFGohLLvG8HBf zzS37lxUS348Fi48VULI6o69OG2FT2Z+uFTp/igdASD7Pfm6/fBrO6AFT/FfDPnC noaOhgpQ/OyMEPTgKAdC922nwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEERPssG 6fQFsjwpYEjM8Mp9S5k2MB8GA1UdIwQYMBaAFCzghOAdrGtNY0k412zq2lljVb1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE4Ri9FM0EzNUJCNDI0 MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2EwMWpTVGpYYk9yYVdXTlZ2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPQ0U0QjJzYTAxalNUalhiT3JhV1dOVnZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE4Ri9FM0EzNUJCNDI0MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2Ew MWpTVGpYYk9yYVdXTlZ2Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlrRmy5dMKWFLgnEAfB4u2ScF+jIiLYnY+OdSmmTRJblYqZcN/QlcT1HtZ/3d ut+Ek7DGkGbl+3nM12bvd9pPfZPvJ0g+FkK1CDvqLRBafCWLm5ZAc52lgKeZZ/TB ThJtsDadnb4YXnK6AcaGR4M6TqlhB3ZVdxGCTE62lSPHSttroDaq2CM9Lb8PxNFl l2UFSS3UJlYTiFPZLENVORprPapK3TthsH1VJrMmRnKfMnYircp0KiXh0J5/8kMf jAqlVQt7SACiIMm04r+u4tH4t+78OkxiVh4znoei/3RhO6/xPm+BMJmfmNezgkq3 S2BpDBFFYC5NT8tDHxmIk17PjA== -----END CERTIFICATE-----Generated at Tue Oct 27 05:59:45 2026 by rpki-client