$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft File: A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft (raw, json) Hash identifier: eklSnf1Rs5EfRDkSE69LX5bLNX7GO8VfzU5g0Jgk168= Subject key identifier: 75:A2:F8:DF:0F:CD:38:62:13:6F:15:32:DA:0D:3F:F4:58:44:C6:49 Authority key identifier: 03:48:1D:15:1D:C2:EC:76:3C:47:F2:DB:6B:7F:19:BE:D2:88:01:DD Certificate issuer: /CN=A916B5CE/serialNumber=03481D151DC2EC763C47F2DB6B7F19BED28801DD Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft Manifest number: 1D Signing time: Tue 27 Oct 2026 09:16:49 +0000 Manifest this update: Tue 27 Oct 2026 09:16:48 +0000 Manifest next update: Tue 03 Nov 2026 09:16:48 +0000 Files and hashes: 1: A0gdFR3C7HY8R_Lba38ZvtKIAd0.crl (hash: BvToIGsPqXnU9o0i23v6YES1wUTBLdfdhpYuD/FRMp8=) 2: 86656B28AB4611F19C0E979A7111F970.roa (hash: bmO3dPAC/fR/n/YpWnTx/2XvmrXvhSTRva8fJ9Ol/Go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.crl rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B5CE, serialNumber=03481D151DC2EC763C47F2DB6B7F19BED28801DD Validity Not Before: Oct 27 09:16:48 2026 GMT Not After : Nov 3 09:16:48 2026 GMT Subject: CN=6ae06c01-61eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:25:8d:0d:5c:81:14:d4:0b:6b:e8:b3:99: 20:80:1d:f5:cc:62:5f:2c:df:e3:79:73:82:15:27: cd:e6:40:b9:8d:38:cf:da:0f:4c:8b:9d:3a:e9:c4: 10:30:b6:ed:eb:39:ab:4e:42:9e:37:db:f1:d7:ea: a9:b9:bf:71:b5:34:bf:08:1b:ea:49:71:ce:be:be: c3:eb:b0:a1:0a:62:da:6d:71:6a:98:cc:9d:79:13: b2:f4:e5:19:19:a1:d0:ff:1e:38:f3:a7:6e:bb:a0: 7f:6f:31:a4:64:13:b3:b5:db:df:1d:c3:3f:07:f8: 9d:b8:71:46:3f:0c:0a:76:d4:8b:4c:10:9c:78:ab: 93:5f:7c:85:46:20:33:fd:2f:b6:d3:2d:1e:0a:d3: 6f:e8:5b:0c:71:91:64:29:03:6e:41:04:23:f2:4b: ee:de:5b:bd:34:42:a3:7b:12:d4:34:00:e6:4a:28: d9:27:bf:bc:1f:88:1f:05:0e:30:15:80:5a:fd:d5: 02:32:f8:39:5e:78:1c:39:9d:14:ee:54:07:31:be: cf:9b:44:2e:de:a0:d9:54:c4:f0:d9:44:8f:77:60: 37:4c:a7:7c:6a:b5:5b:6b:d3:0e:70:f1:36:7d:2e: 07:48:09:0b:5b:b8:a6:52:74:f9:fb:5f:dd:f9:ec: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A2:F8:DF:0F:CD:38:62:13:6F:15:32:DA:0D:3F:F4:58:44:C6:49 X509v3 Authority Key Identifier: keyid:03:48:1D:15:1D:C2:EC:76:3C:47:F2:DB:6B:7F:19:BE:D2:88:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:11:9d:75:73:32:ff:fb:bb:74:33:83:e6:21:0c:5c:2d:06: ed:9c:5d:db:3b:dd:73:b4:34:76:f0:7d:bf:d6:fb:d0:f3:e1: 97:c8:30:69:5d:cf:f2:df:12:08:09:86:a8:6b:f5:09:07:71: 9a:08:c9:eb:cb:8f:da:5e:26:3c:06:fe:bf:a7:1f:dd:18:22: 80:d4:ac:55:c0:54:b7:10:88:54:7c:a8:9c:76:f2:a3:96:78: f6:ab:9c:e8:2f:20:01:0b:ed:24:f3:e4:ca:c5:6c:20:7d:46: 1d:95:f8:02:6f:75:50:8f:29:a0:a8:bd:75:27:a0:d1:f5:7a: 80:9b:65:f5:43:85:8a:ff:59:45:76:6a:cc:c4:1f:21:dc:95: 40:4b:8d:7a:be:2c:5b:6e:a1:40:1b:67:bd:2e:df:3e:9c:97: 83:87:4a:61:76:01:93:e3:7d:a3:4c:5b:3b:93:4e:42:3c:16: 69:c2:25:70:12:fa:41:0e:48:b2:d7:a6:b5:62:d0:28:ac:5d: a3:6b:b6:6c:65:36:e9:b5:f9:df:60:67:d4:b0:74:a0:93:05: 93:3b:6c:fc:9e:3c:5f:60:c3:b8:59:dd:20:24:bd:3c:37:dd: 84:3e:cd:cc:b2:1b:60:ff:80:dc:c5:45:e8:4c:11:ea:05:91: 70:41:23:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjVDRTExMC8GA1UEBRMoMDM0ODFEMTUxREMyRUM3NjNDNDdGMkRCNkI3RjE5QkVE Mjg4MDFERDAeFw0yNjEwMjcwOTE2NDhaFw0yNjExMDMwOTE2NDhaMBgxFjAUBgNV BAMTDTZhZTA2YzAxLTYxZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6kSWNDVyBFNQLa+izmSCAHfXMYl8s3+N5c4IVJ83mQLmNOM/aD0yLnTrpxBAw tu3rOatOQp432/HX6qm5v3G1NL8IG+pJcc6+vsPrsKEKYtptcWqYzJ15E7L05RkZ odD/Hjjzp267oH9vMaRkE7O1298dwz8H+J24cUY/DAp21ItMEJx4q5NffIVGIDP9 L7bTLR4K02/oWwxxkWQpA25BBCPyS+7eW700QqN7EtQ0AOZKKNknv7wfiB8FDjAV gFr91QIy+DleeBw5nRTuVAcxvs+bRC7eoNlUxPDZRI93YDdMp3xqtVtr0w5w8TZ9 LgdICQtbuKZSdPn7X9357PCBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdaL43w/N OGITbxUy2g0/9FhExkkwHwYDVR0jBBgwFoAUA0gdFR3C7HY8R/Lba38ZvtKIAd0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNUNFLzYzM0FFMzA2QUI0 MzExRjE4MzUzM0RERDcwMTFGOTcwL0EwZ2RGUjNDN0hZOFJfTGJhMzhadnRLSUFk MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTBnZEZSM0M3SFk4Ul9MYmEzOFp2dEtJQWQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NUNFLzYzM0FFMzA2QUI0MzExRjE4MzUzM0RERDcwMTFGOTcwL0EwZ2RGUjNDN0hZ OFJfTGJhMzhadnRLSUFkMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDrEZ11czL/+7t0M4PmIQxcLQbtnF3bO91ztDR28H2/1vvQ8+GXyDBpXc/y3xII CYaoa/UJB3GaCMnry4/aXiY8Bv6/px/dGCKA1KxVwFS3EIhUfKicdvKjlnj2q5zo LyABC+0k8+TKxWwgfUYdlfgCb3VQjymgqL11J6DR9XqAm2X1Q4WK/1lFdmrMxB8h 3JVAS416vixbbqFAG2e9Lt8+nJeDh0phdgGT432jTFs7k05CPBZpwiVwEvpBDkiy 16a1YtAorF2ja7ZsZTbptfnfYGfUsHSgkwWTO2z8njxfYMO4Wd0gJL08N92EPs3M shtg/4DcxUXoTBHqBZFwQSPB -----END CERTIFICATE-----Generated at Wed Oct 28 11:24:43 2026 by rpki-client