$ rpki-client -vvvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: zUFlv/4pB8vOsmoLaxXqjd/E+9poXNazEvwyh0pNeJs= Subject key identifier: 3C:A9:6A:BE:3B:8A:52:B2:D8:AB:C7:E1:A4:E5:05:4B:B6:FE:47:8C Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 0370 Signing time: Sun 25 Oct 2026 01:04:20 +0000 Manifest this update: Sun 25 Oct 2026 01:04:19 +0000 Manifest next update: Sun 01 Nov 2026 01:04:19 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: 9okQTuMS/gFHudeMP4R66O4q89av9A/nY6eormiRTVI=) 2: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=) 3: 460770DE8F0411F1812E6F496D11F970.roa (hash: MPHZ4gZ7BUbaXJ4GyjND7xBqAuLWN8we1t6I6nFoW+E=) 4: 42EEA7CE184D11F182F41629283D8C67.roa (hash: TVrPLmIBli4Y5DGPh5WbtZCgPebXr/yJxB3rRfwNFHI=) 5: 1B444154BCD811F188A4973A3611F970.roa (hash: Am/sCXyyVDmnL84xWclmgM26GsrBrlnxEcQWKb/ezQA=) 6: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: h4q9+s6LKkIzk4CyJWXnprv1pvkZF4sAJykGIi6Qgw0=) 7: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=) 8: E9A2C6AAAC1711F1AC2C3D313311F970.roa (hash: IUVg4aIeQJz80P8SnnQNdARYWjlA4YkPhCYesR8rZeY=) 9: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=) 10: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=) 11: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=) 12: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 01:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Oct 25 01:04:19 2026 GMT Not After : Nov 1 01:04:19 2026 GMT Subject: CN=6add5594-56a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:27:9d:76:68:65:06:1f:06:42:40:49:60: 75:07:c2:c2:6f:d8:5a:4e:a9:63:67:cf:2e:47:64: c8:cd:40:af:d5:19:cf:e4:30:82:36:aa:e2:be:ee: 84:a1:7d:b0:ca:70:dc:06:4e:e4:dc:5f:47:e7:58: d4:5e:eb:e6:de:49:b1:e5:07:33:44:ff:50:e5:e0: 55:65:de:36:f4:36:de:ae:f4:18:56:e9:89:29:a0: 02:fb:88:b7:d7:17:26:85:be:7e:64:16:96:ab:97: ee:b4:df:9a:48:d4:6e:35:66:a0:61:6a:f1:80:0f: 49:d8:8e:bf:bb:ab:97:c9:4d:de:0f:d0:8d:2c:3c: a4:d1:2c:68:1f:18:99:f8:d4:1f:77:ef:21:fd:af: b8:14:93:44:f3:62:dc:e8:38:80:6d:9c:fd:58:85: b4:6b:69:3e:8e:a3:8f:ec:49:3a:29:40:c5:ad:1d: 19:54:b9:e8:7a:6e:eb:5e:a8:bc:c7:1a:f2:51:f0: 6d:fe:a8:cd:9b:17:ea:47:56:82:26:f1:e3:07:97: 68:eb:0e:df:eb:18:eb:18:68:77:e3:68:ce:6e:80: 79:74:9b:ee:37:eb:a0:d9:93:1c:a8:03:0c:07:32: e0:c3:89:f0:e3:b1:da:da:6f:d2:24:41:a3:5e:38: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A9:6A:BE:3B:8A:52:B2:D8:AB:C7:E1:A4:E5:05:4B:B6:FE:47:8C X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f0:95:67:84:2e:0d:67:17:99:3e:6e:13:8f:af:dd:d6:b2: 7d:9e:94:48:e0:ba:59:06:50:84:0c:6f:46:ed:1b:a4:28:c3: 1f:64:a6:ed:fd:72:91:ec:78:bd:1c:dd:05:33:c4:5c:8c:21: bc:bf:27:c3:0d:4c:cc:0f:1b:87:bc:69:4e:f0:8a:f2:6b:73: c3:e6:8e:d1:56:41:48:ba:1b:42:2b:ca:e0:4b:fd:f2:25:44: 83:20:aa:88:d4:72:e9:6f:b7:19:4d:2e:79:93:e6:79:13:33: 19:56:ca:f3:69:bc:e8:05:85:6a:04:b2:86:9c:80:ea:9c:f6: f7:81:43:29:9e:13:6c:70:10:b4:72:e7:7b:1e:15:e8:01:5b: fe:b2:d8:52:89:71:55:b1:79:12:97:ee:27:81:ca:f9:88:14: 6c:97:44:01:c1:e6:bd:06:3f:ae:9b:4b:c5:92:2b:36:d6:14: 3b:94:42:90:38:89:dc:f9:e7:4f:65:44:76:cc:8c:5c:68:02: 48:90:79:00:7e:c4:39:27:8e:7d:49:8b:d4:2f:c8:de:bd:cb: 43:39:47:22:7f:ce:07:51:63:bb:6d:4d:be:64:9a:9a:be:85: 43:c1:6b:58:2f:6b:08:2b:37:44:77:bf:e9:c1:92:91:dc:75: 88:28:99:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjYxMDI1MDEwNDE5WhcNMjYxMTAxMDEwNDE5WjAYMRYwFAYD VQQDEw02YWRkNTU5NC01NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWYnnXZoZQYfBkJASWB1B8LCb9haTqljZ88uR2TIzUCv1RnP5DCCNqrivu6E oX2wynDcBk7k3F9H51jUXuvm3kmx5QczRP9Q5eBVZd429DbervQYVumJKaAC+4i3 1xcmhb5+ZBaWq5futN+aSNRuNWagYWrxgA9J2I6/u6uXyU3eD9CNLDyk0SxoHxiZ +NQfd+8h/a+4FJNE82Lc6DiAbZz9WIW0a2k+jqOP7Ek6KUDFrR0ZVLnoem7rXqi8 xxryUfBt/qjNmxfqR1aCJvHjB5do6w7f6xjrGGh342jOboB5dJvuN+ug2ZMcqAMM BzLgw4nw47Ha2m/SJEGjXjgA6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDypar47 ilKy2KvH4aTlBUu2/keMMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYPCVZ4QuDWcXmT5uE4+v3dayfZ6USOC6WQZQhAxvRu0bpCjDH2Sm7f1ykex4 vRzdBTPEXIwhvL8nww1MzA8bh7xpTvCK8mtzw+aO0VZBSLobQivK4Ev98iVEgyCq iNRy6W+3GU0ueZPmeRMzGVbK82m86AWFagSyhpyA6pz294FDKZ4TbHAQtHLnex4V 6AFb/rLYUolxVbF5EpfuJ4HK+YgUbJdEAcHmvQY/rptLxZIrNtYUO5RCkDiJ3Pnn T2VEdsyMXGgCSJB5AH7EOSeOfUmL1C/I3r3LQzlHIn/OB1Fju21NvmSamr6FQ8Fr WC9rCCs3RHe/6cGSkdx1iCiZVg== -----END CERTIFICATE-----Generated at Mon Oct 26 21:25:06 2026 by rpki-client