$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: z2kl23rWlOZXPtvkC1wOYe2NamME2tpsHtW4ETXkFbA= Subject key identifier: F5:67:97:B5:B7:76:B6:E8:FD:A9:D0:22:88:69:B1:2A:A1:B9:59:F7 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 02AD Signing time: Tue 27 Oct 2026 01:50:03 +0000 Manifest this update: Tue 27 Oct 2026 01:50:02 +0000 Manifest next update: Tue 03 Nov 2026 01:50:02 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: 9WyH+MTfDCKVl2s7KHcNdkIlTak8WT52EBwlJXxyWmU=) 2: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=) 3: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=) 4: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Oct 27 01:50:02 2026 GMT Not After : Nov 3 01:50:02 2026 GMT Subject: CN=6ae0034a-5574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:09:02:5d:d9:33:77:b6:f2:5a:84:3b:ad: 26:a9:27:64:9d:70:4e:00:2e:b9:b5:20:10:06:eb: af:50:27:7f:d9:94:69:eb:08:92:c1:6b:ff:46:7e: 20:54:ec:fe:cd:55:51:df:c3:2a:13:b3:b4:16:ea: f7:b7:dd:62:1c:3f:e4:97:5e:97:91:da:63:5c:a1: 1e:84:17:00:aa:1b:75:b6:6b:4b:ec:2b:30:26:bf: c7:04:ae:b8:4d:21:c8:89:39:79:a7:11:48:9d:28: 57:6b:f9:2d:38:7a:bd:61:32:b6:1b:2b:49:4c:bf: d9:56:1b:18:c4:ad:eb:4e:39:76:3c:d2:dc:16:90: b8:08:85:74:3a:82:63:85:5b:bf:51:29:c5:98:ba: 09:cb:c9:91:2f:a5:b9:66:50:18:74:cd:45:94:9b: ca:ac:7c:8c:bb:b1:44:c8:34:4f:12:80:53:e3:99: 6a:87:b7:5c:1d:1c:7b:e7:7d:fd:71:58:64:71:bf: 8f:aa:b2:f4:1a:3f:f3:b9:5c:b5:3d:68:b5:ce:b1: 65:4b:df:7b:68:c9:20:97:f8:73:63:e1:2b:ec:ab: db:af:0f:21:b2:92:ae:2f:05:b5:e4:ed:14:6d:cd: 8d:c7:9c:45:87:0b:3d:e3:f8:85:7e:fa:58:7e:2b: 3c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:97:B5:B7:76:B6:E8:FD:A9:D0:22:88:69:B1:2A:A1:B9:59:F7 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c3:42:cf:04:b7:53:c5:ba:c2:5e:66:a4:42:2b:41:93:a0: c4:26:65:f5:6b:b9:10:bf:d8:f2:84:19:e2:23:6a:ea:90:58: 71:b3:6d:97:2e:de:05:d2:45:eb:be:94:04:92:08:7e:11:9f: c6:9d:22:b0:d8:18:91:ac:c9:c5:b7:e4:89:a7:c3:ee:9a:b0: 9c:62:17:36:10:08:38:4f:ee:c5:b1:cd:01:52:ce:cc:3b:c1: d6:c2:89:83:4d:e1:0c:5e:6e:8f:8f:5a:0e:c3:c2:a8:c5:12: 2c:1f:36:89:a6:e6:89:80:71:25:12:bf:6f:94:c0:df:9f:03: 38:f5:82:58:95:18:f3:e2:d3:f1:e2:18:5e:52:31:af:81:d2: f9:10:11:15:ba:5e:26:3f:f3:50:3c:e6:e3:e5:cc:1c:5d:e3: 22:47:ef:92:9f:22:7c:07:ac:5d:3b:3b:90:30:89:5e:52:fc: d1:22:9b:1f:bd:20:3d:7e:14:d4:51:e4:f3:4e:74:d6:47:23: c0:89:b0:3d:f0:a5:ee:82:79:ac:82:b3:89:53:fc:17:e3:be: 79:94:46:05:07:02:2b:23:6d:cf:21:e0:cd:6c:83:5f:3c:6e: 03:24:0b:60:55:21:0f:92:24:46:91:7a:3e:e8:77:3c:ce:62: 26:29:8e:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjYxMDI3MDE1MDAyWhcNMjYxMTAzMDE1MDAyWjAYMRYwFAYD VQQDEw02YWUwMDM0YS01NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3AJAl3ZM3e28lqEO60mqSdknXBOAC65tSAQBuuvUCd/2ZRp6wiSwWv/Rn4g VOz+zVVR38MqE7O0Fur3t91iHD/kl16XkdpjXKEehBcAqht1tmtL7CswJr/HBK64 TSHIiTl5pxFInShXa/ktOHq9YTK2GytJTL/ZVhsYxK3rTjl2PNLcFpC4CIV0OoJj hVu/USnFmLoJy8mRL6W5ZlAYdM1FlJvKrHyMu7FEyDRPEoBT45lqh7dcHRx75339 cVhkcb+PqrL0Gj/zuVy1PWi1zrFlS997aMkgl/hzY+Er7Kvbrw8hspKuLwW15O0U bc2Nx5xFhws94/iFfvpYfis8xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVnl7W3 drbo/anQIohpsSqhuVn3MB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASMNCzwS3U8W6wl5mpEIrQZOgxCZl9Wu5EL/Y8oQZ4iNq6pBYcbNtly7eBdJF 676UBJIIfhGfxp0isNgYkazJxbfkiafD7pqwnGIXNhAIOE/uxbHNAVLOzDvB1sKJ g03hDF5uj49aDsPCqMUSLB82iabmiYBxJRK/b5TA358DOPWCWJUY8+LT8eIYXlIx r4HS+RARFbpeJj/zUDzm4+XMHF3jIkfvkp8ifAesXTs7kDCJXlL80SKbH70gPX4U 1FHk80501kcjwImwPfCl7oJ5rIKziVP8F+O+eZRGBQcCKyNtzyHgzWyDXzxuAyQL YFUhD5IkRpF6Puh3PM5iJimOgg== -----END CERTIFICATE-----Generated at Tue Oct 27 22:52:47 2026 by rpki-client