$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: IVR+qQ1hbtC488MtcYu34Lgp+SyYyZMRvQ14ODgA4dM= Subject key identifier: D6:6F:8D:AF:04:ED:A1:61:2C:97:25:21:1A:3B:DE:EC:1E:D2:1D:C6 Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 02A8 Signing time: Tue 27 Oct 2026 01:43:23 +0000 Manifest this update: Tue 27 Oct 2026 01:43:22 +0000 Manifest next update: Tue 03 Nov 2026 01:43:22 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: 97pPTXl+1fS3ap6DNAu/6BUsXrJeLpHc0HNExRmOmqk=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: tbYd8JflLqAHQOW0BH5GJ8PqKcZMxydsXpsTFe7lGrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Oct 27 01:43:22 2026 GMT Not After : Nov 3 01:43:22 2026 GMT Subject: CN=6ae001ba-915f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:e5:80:b3:de:45:cf:a7:93:d6:25:07:cb: 6d:da:e8:21:4e:13:3f:aa:d7:ac:2a:8f:00:b1:1c: eb:35:61:66:9a:83:77:41:1f:02:18:6b:12:f5:1c: ea:bd:e4:9e:9c:ab:74:4b:b7:af:59:55:ed:4a:16: 8b:1a:40:1e:2b:65:46:b1:f9:fa:13:81:61:fe:d4: e2:b3:79:08:22:5a:a9:b6:21:1b:f2:d6:2b:5b:74: 9f:1a:06:cc:a7:ed:0c:d2:3f:ea:a6:f5:89:aa:4b: cb:98:f8:6f:92:1b:aa:d7:52:47:8e:24:e3:45:23: 75:04:6d:e8:8e:10:ae:3c:f0:55:7a:cb:72:4c:35: 4e:7d:60:f6:a8:94:06:b1:78:e3:bb:5c:da:84:f4: fe:ec:30:cd:5b:39:83:2c:17:64:19:6d:55:d1:bb: c7:09:2b:7b:89:2c:ef:6d:5f:fb:f9:0c:c3:52:80: 75:68:b1:08:e9:cc:81:d4:8b:95:7a:87:1e:a4:78: df:34:1e:5f:18:5c:ed:d4:6f:7d:67:a3:59:05:e3: 5f:13:46:24:b7:ec:ed:24:0b:34:14:9c:50:e7:fb: 64:38:a1:35:3a:74:4b:6c:d4:1c:7b:23:5a:59:af: f0:bf:d3:8f:83:08:d3:b7:16:6a:54:a4:d3:f6:91: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:8D:AF:04:ED:A1:61:2C:97:25:21:1A:3B:DE:EC:1E:D2:1D:C6 X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:53:e6:91:7c:33:63:4e:f8:03:6c:59:e9:b9:13:bd:15:df: 27:0e:25:1a:85:99:03:9a:fe:5e:5d:54:14:e9:15:25:6d:f4: 03:dc:51:0e:e1:56:87:7c:7d:e3:a0:ae:17:74:b0:9c:aa:e9: e1:17:8a:7c:29:1f:a3:b7:d4:3a:37:1e:20:98:b3:11:d1:bd: 32:8a:66:4a:97:0a:22:e4:c1:6d:c0:0a:21:b1:3d:66:4c:29: 42:b8:41:61:3d:5f:9a:b8:10:59:e4:8a:7b:18:fe:0a:27:8e: da:fa:d2:05:f0:f9:21:d7:0c:4c:b5:79:83:82:8b:4a:d3:f9: 5e:8c:60:32:a2:19:da:ed:42:1a:62:0e:0e:a7:62:e7:87:95: 92:b1:d9:e1:85:43:c3:ab:9b:e4:03:58:21:86:98:c8:90:20: f7:3c:ae:42:9f:1f:73:d1:60:e0:c2:51:68:b2:ef:c0:d6:83: f7:43:0d:2e:75:3f:b7:f5:e3:56:c7:c7:13:09:3b:78:c5:18: fe:9a:cd:42:b9:c0:e8:6b:4a:c6:4e:a5:b7:01:f9:e5:fc:f0: 01:c4:8f:8c:ab:3c:1f:6b:38:58:2f:d0:43:3f:05:a1:8b:37: cd:06:bf:df:e9:e1:fa:fb:e5:a7:d4:8f:c9:7c:92:47:10:5d: 61:65:f5:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjYxMDI3MDE0MzIyWhcNMjYxMTAzMDE0MzIyWjAYMRYwFAYD VQQDEw02YWUwMDFiYS05MTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8XlgLPeRc+nk9YlB8tt2ughThM/qtesKo8AsRzrNWFmmoN3QR8CGGsS9Rzq veSenKt0S7evWVXtShaLGkAeK2VGsfn6E4Fh/tTis3kIIlqptiEb8tYrW3SfGgbM p+0M0j/qpvWJqkvLmPhvkhuq11JHjiTjRSN1BG3ojhCuPPBVestyTDVOfWD2qJQG sXjju1zahPT+7DDNWzmDLBdkGW1V0bvHCSt7iSzvbV/7+QzDUoB1aLEI6cyB1IuV eocepHjfNB5fGFzt1G99Z6NZBeNfE0Ykt+ztJAs0FJxQ5/tkOKE1OnRLbNQceyNa Wa/wv9OPgwjTtxZqVKTT9pHKswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZvja8E 7aFhLJclIRo73uwe0h3GMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAclPmkXwzY074A2xZ6bkTvRXfJw4lGoWZA5r+Xl1UFOkVJW30A9xRDuFWh3x9 46CuF3SwnKrp4ReKfCkfo7fUOjceIJizEdG9MopmSpcKIuTBbcAKIbE9ZkwpQrhB YT1fmrgQWeSKexj+CieO2vrSBfD5IdcMTLV5g4KLStP5XoxgMqIZ2u1CGmIODqdi 54eVkrHZ4YVDw6ub5ANYIYaYyJAg9zyuQp8fc9Fg4MJRaLLvwNaD90MNLnU/t/Xj VsfHEwk7eMUY/prNQrnA6GtKxk6ltwH55fzwAcSPjKs8H2s4WC/QQz8FoYs3zQa/ 3+nh+vvlp9SPyXySRxBdYWX1Dw== -----END CERTIFICATE-----Generated at Wed Oct 28 21:02:43 2026 by rpki-client