$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft File: 433E2CR2A-hIwAZsRFuc2NpzUNY.mft (raw, json) Hash identifier: bvfs/f3o8wkS0M0QSCL/vXm6asN6E+oKry8/HVQ3tH8= Subject key identifier: 47:C3:95:D8:E7:7A:E1:65:BE:22:91:61:ED:A8:E4:B5:10:F7:9F:C7 Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 Certificate issuer: /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft Manifest number: F1 Signing time: Wed 07 Oct 2026 06:52:03 +0000 Manifest this update: Wed 07 Oct 2026 06:52:02 +0000 Manifest next update: Wed 14 Oct 2026 06:52:02 +0000 Files and hashes: 1: 433E2CR2A-hIwAZsRFuc2NpzUNY.crl (hash: yZ0hZLnkSKjRxzRyLZwamym22+GJP7H4bUBusSAAcKQ=) 2: 730C503A56C611F096620043C4F9AE02.roa (hash: 0O+T5p2u9RjCzYCInOpadN0gyJxBbnecFtZNvwYOPBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Validity Not Before: Oct 7 06:52:02 2026 GMT Not After : Oct 14 06:52:02 2026 GMT Subject: CN=6ac5ec12-4fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:5c:ed:fb:39:2c:1a:71:ac:6d:33:44:ea: 6f:39:60:9a:bf:a8:56:dd:eb:23:4e:94:d6:ba:61: 33:c1:90:66:e1:2a:20:75:8a:6a:fd:57:ec:45:52: 68:74:14:57:0b:6b:be:fd:51:1e:73:36:e6:05:1e: bf:8f:21:df:8b:50:b7:e0:21:e4:29:00:4d:20:27: 4f:03:94:7b:c5:66:32:7b:ba:49:cf:1c:e5:cd:cc: 1a:98:24:ea:0f:8d:0a:29:41:a2:67:71:bb:d4:0d: 9e:d9:e2:9d:01:ea:4f:c3:30:e5:29:84:63:63:dc: 79:0f:1b:b7:96:67:76:6b:a5:e8:5a:4c:4c:0e:e4: b9:87:ad:f8:a7:4b:32:75:f0:28:a7:66:26:c6:9e: 0e:85:1f:c5:13:8a:8b:78:7f:d1:00:3a:bd:74:33: 3e:84:f7:24:1c:77:18:93:19:f4:4e:94:f3:50:d3: e8:e6:2f:e6:b6:fd:8e:de:19:62:c1:68:db:9d:d5: f1:e2:36:6b:da:9e:22:aa:00:6c:1d:1b:54:fc:9e: c6:fe:18:f6:ee:92:df:75:f5:d2:c3:89:0e:3d:cc: 96:ef:a0:fd:87:91:e9:a1:03:19:25:cc:eb:fe:77: 04:f9:3a:0f:d2:2e:cf:05:36:27:ef:86:e1:77:d3: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C3:95:D8:E7:7A:E1:65:BE:22:91:61:ED:A8:E4:B5:10:F7:9F:C7 X509v3 Authority Key Identifier: keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:0d:25:9d:17:77:3a:8d:b8:2c:e1:45:c2:31:6f:2c:91:de: b1:78:e7:d7:ed:c2:ea:d2:1f:a2:0b:a2:1a:1d:dd:17:67:40: b5:33:b5:88:7b:d0:34:bf:94:e8:a6:5a:3f:70:3e:a0:44:77: 38:e3:41:74:28:48:4b:5a:15:c4:96:e7:53:97:6a:b3:96:10: d7:b6:47:b0:80:15:79:90:91:f6:61:f6:bb:58:ba:96:52:9f: 03:c3:ed:22:f1:e9:5d:15:7b:af:c7:34:86:b3:80:e2:9e:08: ee:b0:9a:62:2e:3d:e1:c5:7e:6d:8b:59:1c:e8:cf:cf:f9:a0: d2:21:d1:96:53:cb:c8:b5:04:38:68:91:b4:a0:52:f7:09:77: 3e:45:0d:e4:5e:ca:69:df:a8:a7:64:0e:13:0d:d5:4a:54:63: 1e:6a:1f:e0:cf:45:cd:26:9e:82:34:e0:f1:ab:dc:78:d6:3a: 76:6e:83:ae:9a:95:cc:f2:5e:6c:5d:52:6c:d1:d9:9f:4d:0d: db:72:de:d0:3f:f1:9a:d6:fa:69:7d:0a:ba:95:be:ac:32:e7: 7e:ef:a0:85:92:90:ca:20:a8:81:bc:9d:0e:b7:83:72:33:98: 4d:88:e8:53:9b:e6:58:a6:a4:3d:ad:c5:14:9d:8f:d3:64:71: 2c:93:96:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RjIxMTAvBgNVBAUTKEUzN0RDNEQ4MjQ3NjAzRTg0OEMwMDY2QzQ0NUI5Q0Q4 REE3MzUwRDYwHhcNMjYxMDA3MDY1MjAyWhcNMjYxMDE0MDY1MjAyWjAYMRYwFAYD VQQDEw02YWM1ZWMxMi00ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRBc7fs5LBpxrG0zROpvOWCav6hW3esjTpTWumEzwZBm4SogdYpq/VfsRVJo dBRXC2u+/VEeczbmBR6/jyHfi1C34CHkKQBNICdPA5R7xWYye7pJzxzlzcwamCTq D40KKUGiZ3G71A2e2eKdAepPwzDlKYRjY9x5Dxu3lmd2a6XoWkxMDuS5h634p0sy dfAop2Ymxp4OhR/FE4qLeH/RADq9dDM+hPckHHcYkxn0TpTzUNPo5i/mtv2O3hli wWjbndXx4jZr2p4iqgBsHRtU/J7G/hj27pLfdfXSw4kOPcyW76D9h5HpoQMZJczr /ncE+ToP0i7PBTYn74bhd9MQ9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfDldjn euFlviKRYe2o5LUQ95/HMB8GA1UdIwQYMBaAFON9xNgkdgPoSMAGbERbnNjac1DW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhGMi8yODdERTczNjU2 QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEtaEl3QVpzUkZ1YzJOcHpV TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQzM0UyQ1IyQS1oSXdBWnNSRnVjMk5welVOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhGMi8yODdERTczNjU2QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEt aEl3QVpzUkZ1YzJOcHpVTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAow0lnRd3Oo24LOFFwjFvLJHesXjn1+3C6tIfoguiGh3dF2dAtTO1iHvQNL+U 6KZaP3A+oER3OONBdChIS1oVxJbnU5dqs5YQ17ZHsIAVeZCR9mH2u1i6llKfA8Pt IvHpXRV7r8c0hrOA4p4I7rCaYi494cV+bYtZHOjPz/mg0iHRllPLyLUEOGiRtKBS 9wl3PkUN5F7Kad+op2QOEw3VSlRjHmof4M9FzSaegjTg8avceNY6dm6DrpqVzPJe bF1SbNHZn00N23Le0D/xmtb6aX0KupW+rDLnfu+ghZKQyiCogbydDreDcjOYTYjo U5vmWKakPa3FFJ2P02RxLJOWNw== -----END CERTIFICATE-----Generated at Wed Oct 7 13:07:02 2026 by rpki-client