$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: AR6chUwZqQd2PUJnxHe5cyaSmubxOA5UAEjCn5aW+98= Subject key identifier: B3:98:CE:F0:10:D0:44:0C:D2:38:AC:21:C1:FF:2E:F6:E9:A0:60:E6 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 08A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 0895 Signing time: Sun 18 Oct 2026 20:53:04 +0000 Manifest this update: Sun 18 Oct 2026 20:53:04 +0000 Manifest next update: Sun 25 Oct 2026 20:53:04 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: zWY+ZpIQk/1ceEtSdXfSIny0m049WjNUOwHt5fnQWjU=) 2: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=) 3: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 20:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Oct 18 20:53:04 2026 GMT Not After : Oct 25 20:53:04 2026 GMT Subject: CN=6ad531b0-fabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:3c:ed:13:b7:cc:3f:9c:8d:2c:a2:b0:12: d9:55:c5:1c:49:cf:70:74:ab:56:77:d7:35:6d:a6: 23:47:15:d6:5b:45:26:f8:96:de:5a:2b:61:b4:71: 15:89:87:dd:f0:f2:34:11:32:a4:9c:13:48:ca:ad: 5a:4a:fe:bf:8f:05:44:ae:ca:ef:6f:2c:b9:ed:87: 0b:1a:50:72:e7:eb:56:05:df:a5:00:5a:de:4f:46: b4:26:44:ea:68:9c:4a:b7:e5:b9:1f:ef:98:e1:34: a0:d0:4b:c2:76:9e:3a:fb:c5:3f:bf:7b:a3:8b:1d: 81:1b:2b:de:9f:de:7d:96:ed:c2:cb:15:3d:ca:29: 8e:da:17:6e:51:fc:e6:30:9a:39:cc:33:dd:eb:db: 2e:6e:0e:26:78:d9:24:8a:40:b0:9a:8d:06:b2:de: 83:6e:4a:b0:42:37:9b:44:25:60:99:02:13:cf:a2: 1c:d6:0a:33:94:28:d6:82:2a:8f:0b:f5:98:1c:51: 89:50:07:e5:ae:55:b5:42:99:0a:d9:6b:3e:6c:9d: 02:2a:be:cf:cc:f1:2d:64:4b:e5:cb:c9:49:56:95: 73:12:84:c3:e6:9f:ab:23:3a:66:ca:e9:fa:fc:2f: 0b:d0:7d:bd:77:7a:51:3c:45:3b:4c:9c:64:8d:2c: d5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:98:CE:F0:10:D0:44:0C:D2:38:AC:21:C1:FF:2E:F6:E9:A0:60:E6 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:98:15:4f:1f:db:d9:4d:a2:c0:83:7c:9b:02:ce:0a:3a:26: b8:a0:e7:da:7e:b4:aa:e0:c5:f4:c2:e1:65:49:f0:87:fc:37: c3:dd:94:d7:7e:0d:0c:9b:49:ad:7e:90:4b:4c:8a:93:d5:96: 11:b7:2a:81:58:47:8c:a7:97:d3:07:ec:c3:31:5d:1d:04:66: 57:9c:ed:34:80:00:4f:a9:ce:9e:be:1c:8d:fc:14:a5:29:40: 6b:8d:16:b9:22:0a:3c:46:fb:6b:f2:51:57:68:c1:28:e6:e8: 89:6d:ad:68:d0:01:68:35:20:97:ab:30:1d:17:78:06:17:24: 9a:a2:79:d5:b2:f8:02:fa:d7:05:8f:de:6c:2b:98:2f:e7:f7: c2:5e:05:7a:c7:8b:27:ec:0c:4c:cf:8e:7e:51:38:89:17:a1: 4b:3f:af:fb:55:a2:5e:c6:43:59:3c:0b:20:cb:6e:8d:7a:eb: 22:10:12:63:b4:17:06:90:d4:f4:9f:95:98:06:8e:f2:31:14: 2b:e5:7b:9d:75:9e:ad:92:c5:fc:eb:36:87:8a:a4:a0:a2:8d: 82:f7:34:e1:d2:93:ad:99:f9:77:8c:0d:74:8d:f0:e9:de:24: fd:9c:4b:3a:c6:a1:b4:1f:af:56:b8:85:18:f6:c4:8e:de:79: fd:ae:6c:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYxMDE4MjA1MzA0WhcNMjYxMDI1MjA1MzA0WjAYMRYwFAYD VQQDEw02YWQ1MzFiMC1mYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPY87RO3zD+cjSyisBLZVcUcSc9wdKtWd9c1baYjRxXWW0Um+JbeWithtHEV iYfd8PI0ETKknBNIyq1aSv6/jwVErsrvbyy57YcLGlBy5+tWBd+lAFreT0a0JkTq aJxKt+W5H++Y4TSg0EvCdp46+8U/v3ujix2BGyven959lu3CyxU9yimO2hduUfzm MJo5zDPd69subg4meNkkikCwmo0Gst6DbkqwQjebRCVgmQITz6Ic1gozlCjWgiqP C/WYHFGJUAflrlW1QpkK2Ws+bJ0CKr7PzPEtZEvly8lJVpVzEoTD5p+rIzpmyun6 /C8L0H29d3pRPEU7TJxkjSzVtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOYzvAQ 0EQM0jisIcH/LvbpoGDmMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn5gVTx/b2U2iwIN8mwLOCjomuKDn2n60quDF9MLhZUnwh/w3w92U134NDJtJ rX6QS0yKk9WWEbcqgVhHjKeX0wfswzFdHQRmV5ztNIAAT6nOnr4cjfwUpSlAa40W uSIKPEb7a/JRV2jBKOboiW2taNABaDUgl6swHRd4BhckmqJ51bL4AvrXBY/ebCuY L+f3wl4FeseLJ+wMTM+OflE4iRehSz+v+1WiXsZDWTwLIMtujXrrIhASY7QXBpDU 9J+VmAaO8jEUK+V7nXWerZLF/Os2h4qkoKKNgvc04dKTrZn5d4wNdI3w6d4k/ZxL OsahtB+vVriFGPbEjt55/a5sDA== -----END CERTIFICATE-----Generated at Mon Oct 19 21:09:52 2026 by rpki-client