$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: X4d5oMcyIrwjVPlapB+oDt35c5mDxgEXtj8fj/S0ITE= Subject key identifier: 94:C6:C5:7F:C9:B2:37:56:69:F6:C5:5A:B9:57:04:16:9E:D1:A7:F4 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: 010A Signing time: Sun 25 Oct 2026 06:37:57 +0000 Manifest this update: Sun 25 Oct 2026 06:37:56 +0000 Manifest next update: Sun 01 Nov 2026 06:37:56 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: mAfc/AiGMFFgE4FcjZCDmOhLSQ/RXlFPmq1B0cpT9zU=) 2: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=) 3: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 06:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Oct 25 06:37:56 2026 GMT Not After : Nov 1 06:37:56 2026 GMT Subject: CN=6adda3c5-073e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:92:f9:23:ad:4f:84:ad:af:ea:06:17:f1: 85:df:e0:1a:88:cf:44:69:90:f1:53:de:69:0b:cb: c0:3a:69:24:48:c0:b5:89:9c:07:d6:85:dd:1e:55: e8:98:98:f9:9d:6f:7c:2b:83:07:7e:73:69:58:52: a4:b6:d7:7a:c8:bc:48:5f:cf:c9:fc:ca:54:da:75: a4:6d:47:8d:2c:ce:7d:2e:ce:e0:4d:6e:d9:67:64: 08:80:d5:12:1f:7d:25:15:49:10:52:45:93:8b:b3: e2:27:0d:47:c4:8f:9d:b2:ed:d1:06:7f:d7:5b:a9: 03:8a:c4:b2:5e:5c:92:8d:1c:a0:ba:f3:a3:89:a2: 21:f8:47:e4:5c:a2:a3:a1:d6:0a:fd:67:84:be:14: 50:67:f5:f7:f2:cf:7a:08:06:a4:27:bb:ae:fb:ca: a9:8b:4f:e3:47:1c:3e:89:b4:f6:eb:ed:4a:5b:d7: 89:6c:36:d4:c6:31:00:8d:ea:29:0f:ba:80:e6:62: c1:72:4d:fd:20:b7:fe:ad:d2:4a:47:17:bc:5e:1f: d6:0e:f8:60:1f:32:70:f6:ed:b7:4c:4d:3b:5c:7b: f6:1c:64:bf:2c:f8:49:77:45:c0:76:a9:20:95:bd: fa:32:f1:b5:4d:0a:4e:39:e0:6c:93:0d:84:a0:ad: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C6:C5:7F:C9:B2:37:56:69:F6:C5:5A:B9:57:04:16:9E:D1:A7:F4 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e9:41:89:27:c1:77:6b:91:7c:71:a4:ca:df:6d:31:aa:e1: bc:e6:b5:5f:60:72:5a:53:61:b0:61:4b:95:2c:5f:51:47:50: 42:73:95:31:e2:bd:30:fe:c0:53:41:01:f1:66:d9:52:de:ab: 8b:41:e7:78:cf:ec:51:3c:8f:6f:2a:59:01:1f:07:b9:80:a6: 93:a9:04:34:eb:9c:39:52:f2:14:eb:54:83:f1:f3:b5:44:f0: a2:db:6f:b8:c3:d0:48:c6:f9:50:83:4f:45:3b:da:a6:7a:63: f9:e9:45:1b:d0:dd:c2:a3:c4:23:30:37:e0:6e:b1:54:0f:45: 2b:64:de:30:b5:26:11:c9:2d:4c:f4:7f:35:a4:00:6b:10:10: ee:2e:a3:d4:5d:c4:39:41:cf:99:79:b5:24:e4:84:4f:b0:d6: e2:2b:34:0c:c6:1b:bf:92:5c:af:f8:4d:55:53:5b:a6:88:a2: 9e:7d:b9:2d:1e:e6:24:e3:10:3c:82:5d:f3:7e:04:e3:45:4a: a3:77:db:5d:0e:25:de:41:d4:6c:39:86:e8:24:be:ee:68:7d: 67:41:12:d4:26:40:28:f5:d4:05:c0:83:4a:1e:04:69:ca:4e: 8b:31:b4:4a:f4:0e:9a:a7:99:75:8e:1d:8c:59:cc:fe:be:fc: e2:0a:56:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx NzZFQUU5MzMwHhcNMjYxMDI1MDYzNzU2WhcNMjYxMTAxMDYzNzU2WjAYMRYwFAYD VQQDEw02YWRkYTNjNS0wNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr2S+SOtT4Str+oGF/GF3+AaiM9EaZDxU95pC8vAOmkkSMC1iZwH1oXdHlXo mJj5nW98K4MHfnNpWFKkttd6yLxIX8/J/MpU2nWkbUeNLM59Ls7gTW7ZZ2QIgNUS H30lFUkQUkWTi7PiJw1HxI+dsu3RBn/XW6kDisSyXlySjRyguvOjiaIh+EfkXKKj odYK/WeEvhRQZ/X38s96CAakJ7uu+8qpi0/jRxw+ibT26+1KW9eJbDbUxjEAjeop D7qA5mLBck39ILf+rdJKRxe8Xh/WDvhgHzJw9u23TE07XHv2HGS/LPhJd0XAdqkg lb36MvG1TQpOOeBskw2EoK3lKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTGxX/J sjdWafbFWrlXBBae0af0MB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbulBiSfBd2uRfHGkyt9tMarhvOa1X2ByWlNhsGFLlSxfUUdQQnOVMeK9MP7A U0EB8WbZUt6ri0HneM/sUTyPbypZAR8HuYCmk6kENOucOVLyFOtUg/HztUTwottv uMPQSMb5UINPRTvapnpj+elFG9DdwqPEIzA34G6xVA9FK2TeMLUmEcktTPR/NaQA axAQ7i6j1F3EOUHPmXm1JOSET7DW4is0DMYbv5Jcr/hNVVNbpoiinn25LR7mJOMQ PIJd834E40VKo3fbXQ4l3kHUbDmG6CS+7mh9Z0ES1CZAKPXUBcCDSh4EacpOizG0 SvQOmqeZdY4djFnM/r784gpWFw== -----END CERTIFICATE-----Generated at Mon Oct 26 02:03:08 2026 by rpki-client