$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json) Hash identifier: /kZnTAtgO/FBCHGxtgWDmKhkgkI7JpLbOFfINkLuSZs= Subject key identifier: 99:40:6D:7F:8D:C9:07:60:BC:9E:CA:E0:DA:60:D8:F2:46:35:A2:3B Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft Manifest number: C2 Signing time: Sun 01 Nov 2026 07:55:52 +0000 Manifest this update: Sun 01 Nov 2026 07:55:51 +0000 Manifest next update: Sun 08 Nov 2026 07:55:51 +0000 Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: iau5qt+vLuplFjPeZ6mnnoBvkqyjYOXU7sHZRONVNLQ=) 2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 07:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED Validity Not Before: Nov 1 07:55:51 2026 GMT Not After : Nov 8 07:55:51 2026 GMT Subject: CN=6ae6f087-5060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:24:24:90:00:62:8c:52:64:da:27:0c:28: 5b:47:1b:51:1e:52:e0:cb:96:3d:5f:36:1d:1d:35: 8f:c1:50:32:ab:73:d7:34:3e:b6:10:ee:ff:af:d2: 62:9c:31:a0:36:7b:6b:7e:46:1a:7a:fa:58:f3:3a: 3e:92:0f:ad:6d:58:07:8c:33:0a:2f:e4:5c:b6:e4: 59:68:63:ed:80:ac:f9:44:9e:7a:c4:bd:05:9c:5a: 04:63:f2:f5:c5:6a:6f:21:27:e1:8b:fc:b0:60:7b: d5:60:30:19:06:8c:bb:5e:c3:f2:fa:12:5f:aa:fe: ea:3b:f8:67:4b:66:0d:d4:67:c2:f4:12:2c:fb:24: 67:94:d6:0d:1f:b5:f1:11:63:ee:07:2c:f4:3b:e5: 15:df:72:d2:de:dc:b3:62:d1:aa:e4:d5:fa:d1:66: d9:00:59:93:ad:b6:40:fb:89:03:cb:ad:2b:51:84: 94:58:51:68:2c:c5:63:98:63:f7:0e:3e:12:1e:4d: 3c:6d:22:9d:11:f0:ff:b7:8f:5f:09:60:99:ba:b1: f7:c2:4a:fb:5c:ac:20:cb:ac:63:2b:3e:46:45:19: fe:01:4d:b4:b7:07:fd:22:00:35:29:3d:c2:35:c7: 70:f8:4c:28:ac:ba:43:75:cb:b0:5b:4a:93:89:c6: c4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:40:6D:7F:8D:C9:07:60:BC:9E:CA:E0:DA:60:D8:F2:46:35:A2:3B X509v3 Authority Key Identifier: keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:70:6b:48:c2:80:06:e2:dc:42:5a:97:57:72:1a:ff:8a:f4: 6f:70:e1:3b:0a:51:da:10:0f:66:cb:3e:b6:0c:f5:ec:f3:91: 1a:b8:26:38:b3:86:28:8e:d8:8b:97:42:92:c6:fb:e1:18:2c: ea:ef:50:bc:7a:73:c7:8f:4b:1e:e1:5d:b9:c9:22:58:f5:8c: 15:3e:d0:95:cd:68:4e:dd:a5:a8:f0:06:bd:2d:0b:84:a7:3c: 5b:6c:5d:f5:2b:b6:32:43:ca:aa:df:30:2d:71:05:39:d1:a9: a7:a8:04:fb:73:6d:2f:ca:24:15:9d:9d:75:91:57:3b:af:ad: 85:af:2d:42:4d:ad:14:7c:fb:78:2c:a7:43:28:cf:c0:0d:42: 61:ff:01:df:0a:20:f7:bb:36:01:29:33:ac:b7:b8:88:a7:9a: 12:36:72:4c:5a:a7:2c:e7:b6:45:d7:e0:4a:d2:0d:10:d7:e7: 81:34:86:af:b4:6e:af:43:f2:11:e2:c8:7e:89:92:79:67:ba: fa:97:6e:7a:59:5d:13:06:42:42:ae:7c:ab:6a:38:b9:0e:4c: 28:2c:4e:7e:08:06:e7:9b:2d:6c:d4:79:55:b2:5c:dc:c1:6f: 12:d4:8a:be:95:1c:f8:ed:0a:64:6f:3c:f1:1a:42:c1:13:e7: c1:de:e8:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5OTYxMTAvBgNVBAUTKDcwNEMzOUU5QjIzMDJFQzk3QTlDQUU5OUVDRTc5NDVC ODFGMkNCRUQwHhcNMjYxMTAxMDc1NTUxWhcNMjYxMTA4MDc1NTUxWjAYMRYwFAYD VQQDEw02YWU2ZjA4Ny01MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvckJJAAYoxSZNonDChbRxtRHlLgy5Y9XzYdHTWPwVAyq3PXND62EO7/r9Ji nDGgNntrfkYaevpY8zo+kg+tbVgHjDMKL+RctuRZaGPtgKz5RJ56xL0FnFoEY/L1 xWpvISfhi/ywYHvVYDAZBoy7XsPy+hJfqv7qO/hnS2YN1GfC9BIs+yRnlNYNH7Xx EWPuByz0O+UV33LS3tyzYtGq5NX60WbZAFmTrbZA+4kDy60rUYSUWFFoLMVjmGP3 Dj4SHk08bSKdEfD/t49fCWCZurH3wkr7XKwgy6xjKz5GRRn+AU20twf9IgA1KT3C Ncdw+EworLpDdcuwW0qTicbELwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlAbX+N yQdgvJ7K4Npg2PJGNaI7MB8GA1UdIwQYMBaAFHBMOemyMC7JepyumeznlFuB8svt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTk5Ni9BRjdGNEQ2Q0FF NjcxMUYwQjUzNEY2MjZDNEY5QUUwMi9jRXc1NmJJd0xzbDZuSzZaN09lVVc0SHl5 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFdzU2Ykl3THNsNm5LNlo3T2VVVzRIeXktMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTk5Ni9BRjdGNEQ2Q0FFNjcxMUYwQjUzNEY2MjZDNEY5QUUwMi9jRXc1NmJJd0xz bDZuSzZaN09lVVc0SHl5LTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbHBrSMKABuLcQlqXV3Ia/4r0b3DhOwpR2hAPZss+tgz17PORGrgmOLOGKI7Y i5dCksb74Rgs6u9QvHpzx49LHuFduckiWPWMFT7Qlc1oTt2lqPAGvS0LhKc8W2xd 9Su2MkPKqt8wLXEFOdGpp6gE+3NtL8okFZ2ddZFXO6+tha8tQk2tFHz7eCynQyjP wA1CYf8B3wog97s2ASkzrLe4iKeaEjZyTFqnLOe2RdfgStINENfngTSGr7Rur0Py EeLIfomSeWe6+pduelldEwZCQq58q2o4uQ5MKCxOfggG55stbNR5VbJc3MFvEtSK vpUc+O0KZG888RpCwRPnwd7ogA== -----END CERTIFICATE-----Generated at Sun Nov 1 14:49:36 2026 by rpki-client