$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: hfrayJXse+tLPkCnL4wWeCjO2t3R1atCHDLV9JPdV9A= Subject key identifier: 3C:C2:10:5B:85:C8:12:AE:C9:E7:A6:F2:1C:3A:4D:B2:56:64:0D:AA Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 35D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 35AA Signing time: Sun 18 Oct 2026 14:16:59 +0000 Manifest this update: Sun 18 Oct 2026 14:16:58 +0000 Manifest next update: Sun 25 Oct 2026 14:16:58 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: kNxXOnHng6kY78Dp3Y0UP+p1cW3zCAMH9K4fnclBsOk=) 2: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=) 3: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 14:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13782 (0x35d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Oct 18 14:16:58 2026 GMT Not After : Oct 25 14:16:58 2026 GMT Subject: CN=6ad4d4da-64eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:41:fe:dc:1d:0c:3a:a2:0a:28:97:c6:c8:ce: 0f:c5:35:34:72:23:80:8b:3b:dc:a1:8f:c0:97:3e: de:08:33:fc:94:4d:b8:df:10:5b:08:b0:00:d2:89: 8d:c8:c8:30:8d:ab:5a:c6:35:41:17:0a:36:5a:19: 6e:ef:91:67:16:0c:b1:22:5b:e2:9b:9b:1c:2b:d9: 75:4e:34:e9:8c:cd:ef:8d:54:b3:8e:c1:9a:3c:00: 26:80:a8:5e:48:98:91:18:f6:dd:87:24:1e:d6:d0: 21:df:e2:e9:2d:3e:76:52:b5:be:65:26:d6:21:67: 3d:2b:19:53:a3:bf:1f:49:64:b8:5e:9c:c7:b7:be: a4:a3:3a:a9:70:78:af:2b:50:c5:41:f2:ae:2f:05: 5e:92:30:da:6f:bb:6e:f9:8f:71:da:b6:93:f6:d0: d9:ff:a6:64:24:bb:fb:1e:5a:57:b7:a8:af:b6:c0: c4:6f:45:0b:0f:60:fa:b5:29:10:4a:aa:a3:75:f1: 64:1e:03:f5:78:63:fd:83:e3:41:ae:03:1a:3f:01: 3e:0e:d9:84:77:21:7a:90:c1:ad:1a:86:c5:75:81: 38:08:1c:fe:6a:fd:5e:54:bc:33:b5:e1:94:f2:43: 32:c7:b6:d1:0d:a8:32:1b:23:c5:fc:c2:9b:96:fb: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C2:10:5B:85:C8:12:AE:C9:E7:A6:F2:1C:3A:4D:B2:56:64:0D:AA X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5f:49:8a:20:db:7e:24:75:ad:77:5f:1e:84:89:14:6b:da: 1f:37:ed:41:3f:8a:b0:bd:6f:f0:fe:c8:b2:b8:95:db:d4:79: 72:9c:7d:11:ef:b4:20:9c:a4:93:3b:73:89:65:f2:98:26:a4: d8:bf:09:35:d3:74:bb:2e:2e:c1:ca:f2:d4:dd:53:d4:7b:89: c9:f3:e2:1a:0a:d8:30:2a:04:c9:93:1f:1a:c6:77:6f:28:80: f4:07:f6:0e:38:31:d1:5d:ec:5d:98:32:bc:90:73:3c:81:b8: 05:ef:ad:39:ab:86:14:8a:b5:a1:dd:b5:a1:f9:c3:00:dd:23: 99:ba:80:ba:c5:4b:dd:39:44:73:fd:e9:e5:35:32:c0:99:0d: f9:dc:ed:f5:04:e4:e9:8b:31:53:b5:7a:be:61:67:da:c3:bd: 17:07:3e:61:a6:6e:8a:39:ae:c5:48:10:4b:4f:83:19:f0:8e: 6b:ef:7f:56:7e:9f:de:ae:bc:06:6a:04:4e:bc:ab:6c:e9:52: b6:c5:9d:f6:c1:3f:91:ef:82:33:2c:81:f0:db:4b:51:03:6f: d5:a2:8d:fe:e7:00:5d:f9:27:e2:81:de:a3:93:93:6d:87:30: be:99:c9:d2:46:f9:79:40:82:a1:05:23:9a:3b:44:e6:e3:81: a5:ac:c2:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjYxMDE4MTQxNjU4WhcNMjYxMDI1MTQxNjU4WjAYMRYwFAYD VQQDEw02YWQ0ZDRkYS02NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkUH+3B0MOqIKKJfGyM4PxTU0ciOAizvcoY/Alz7eCDP8lE243xBbCLAA0omN yMgwjataxjVBFwo2Whlu75FnFgyxIlvim5scK9l1TjTpjM3vjVSzjsGaPAAmgKhe SJiRGPbdhyQe1tAh3+LpLT52UrW+ZSbWIWc9KxlTo78fSWS4XpzHt76kozqpcHiv K1DFQfKuLwVekjDab7tu+Y9x2raT9tDZ/6ZkJLv7HlpXt6ivtsDEb0ULD2D6tSkQ SqqjdfFkHgP1eGP9g+NBrgMaPwE+DtmEdyF6kMGtGobFdYE4CBz+av1eVLwzteGU 8kMyx7bRDagyGyPF/MKblvtxDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzCEFuF yBKuyeem8hw6TbJWZA2qMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASl9JiiDbfiR1rXdfHoSJFGvaHzftQT+KsL1v8P7IsriV29R5cpx9Ee+0IJyk kztziWXymCak2L8JNdN0uy4uwcry1N1T1HuJyfPiGgrYMCoEyZMfGsZ3byiA9Af2 Djgx0V3sXZgyvJBzPIG4Be+tOauGFIq1od21ofnDAN0jmbqAusVL3TlEc/3p5TUy wJkN+dzt9QTk6YsxU7V6vmFn2sO9Fwc+YaZuijmuxUgQS0+DGfCOa+9/Vn6f3q68 BmoETryrbOlStsWd9sE/ke+CMyyB8NtLUQNv1aKN/ucAXfkn4oHeo5OTbYcwvpnJ 0kb5eUCCoQUjmjtE5uOBpazC1Q== -----END CERTIFICATE-----Generated at Mon Oct 19 04:44:59 2026 by rpki-client