$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft File: RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft (raw, json) Hash identifier: HxADARCc6M9chHJdFOB8hVeS/vOY4dx+cxfSshH5Jd0= Subject key identifier: B9:61:6A:A1:60:4C:A7:0A:E9:4D:DD:8E:81:98:80:F5:73:23:DF:BA Authority key identifier: 44:FB:C5:5D:CD:D2:A8:42:7D:4F:78:F8:14:04:84:A2:6E:52:77:90 Certificate issuer: /CN=A917BAC9/serialNumber=44FBC55DCDD2A8427D4F78F8140484A26E527790 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft Manifest number: 2B Signing time: Sun 25 Oct 2026 09:07:38 +0000 Manifest this update: Sun 25 Oct 2026 09:07:37 +0000 Manifest next update: Sun 01 Nov 2026 09:07:37 +0000 Files and hashes: 1: RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl (hash: SBPRSclao1DiBhBrPdn0VQY1U7YJzLERJ6jfWhIDRc8=) 2: A4C79D56915C11F1B31E34186B11F970.roa (hash: txZBE76GyRH2FzSb4nahHUjabcAmRenCXZB0dWzn970=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC9, serialNumber=44FBC55DCDD2A8427D4F78F8140484A26E527790 Validity Not Before: Oct 25 09:07:37 2026 GMT Not After : Nov 1 09:07:37 2026 GMT Subject: CN=6addc6d9-549a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:19:06:79:4a:75:a0:de:48:dc:b9:ae:96: 0c:60:38:67:06:91:74:9c:b1:7b:0f:56:6f:1c:a6: ed:16:33:9b:14:21:13:da:26:14:8b:0c:9c:2a:42: 06:7d:59:81:4e:c6:9a:b4:bb:03:33:71:a8:cb:0d: 1e:80:77:83:6c:6b:53:da:df:68:38:85:11:8e:62: 20:c4:ca:1c:17:0a:d3:03:a7:ca:72:33:9a:1b:89: 39:41:a3:d9:90:8e:fb:a2:ba:8c:eb:d9:bc:15:4e: 42:76:08:0b:43:6d:c3:3f:67:8c:ce:5f:79:ae:d1: c4:38:08:22:41:3f:86:8b:40:7a:86:72:94:05:3b: cb:53:6c:68:a2:34:7d:97:86:16:cd:53:e7:2e:b5: 64:37:32:31:35:59:38:c2:13:7a:44:c2:dc:2a:71: f8:70:46:20:61:b1:b2:e5:cb:ba:1b:19:f4:74:74: 6b:9f:dc:b0:10:f9:d2:70:0d:60:17:84:c9:c7:0b: a1:a6:54:00:37:4c:bb:13:af:bc:dc:6e:4e:84:3c: 38:3d:8c:c1:1f:63:27:72:e9:9e:a9:ec:5f:3e:7d: d7:30:59:b2:02:17:b9:8f:ff:f3:00:17:92:ff:c0: 5f:dc:9a:e6:61:3a:7e:a4:c3:77:49:02:91:ba:16: 5e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:61:6A:A1:60:4C:A7:0A:E9:4D:DD:8E:81:98:80:F5:73:23:DF:BA X509v3 Authority Key Identifier: keyid:44:FB:C5:5D:CD:D2:A8:42:7D:4F:78:F8:14:04:84:A2:6E:52:77:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:db:c8:16:e0:d5:c6:6e:56:23:55:e4:60:30:ba:66:66:b4: b7:fb:6a:ab:4f:33:2c:ad:bc:0f:0e:29:05:99:c2:45:c7:b0: 8c:76:04:cd:6d:b2:8b:3c:bc:d4:6b:5b:9f:3e:65:6a:98:17: 27:8c:cc:27:ca:8c:7f:b1:07:16:ed:1a:50:17:85:b5:af:36: 4c:be:c3:c1:d6:4c:96:c6:d0:db:4c:bc:ba:1c:77:42:53:3b: 47:41:55:52:86:44:e1:ae:49:a9:69:fe:1b:19:b1:32:ad:e4: 32:b7:1c:b8:dd:91:92:b7:91:6d:73:66:e2:75:ef:b9:bf:11: b6:d6:4d:ed:75:a0:15:eb:71:7d:06:29:12:5b:5d:dd:27:6b: 98:3e:9e:2d:22:9a:a9:df:4a:93:c7:db:b3:5b:83:3e:5e:f4: 0d:61:75:72:33:14:87:0c:41:fa:96:38:a9:26:f7:bc:da:ec: 61:15:9c:ab:96:c5:bb:4e:a2:75:d6:3a:07:aa:cb:f7:96:88: a0:6d:88:a3:62:c4:d0:a5:4d:33:27:59:4a:2c:04:97:dd:ff: 57:c8:af:c2:4a:48:ea:a8:b4:56:7a:a0:59:f6:73:84:48:cc: dd:7a:56:51:f4:37:19:14:57:9a:2e:ec:5c:0d:54:15:90:09: bc:4f:a6:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkFDOTExMC8GA1UEBRMoNDRGQkM1NURDREQyQTg0MjdENEY3OEY4MTQwNDg0QTI2 RTUyNzc5MDAeFw0yNjEwMjUwOTA3MzdaFw0yNjExMDEwOTA3MzdaMBgxFjAUBgNV BAMTDTZhZGRjNmQ5LTU0OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU9RkGeUp1oN5I3LmulgxgOGcGkXScsXsPVm8cpu0WM5sUIRPaJhSLDJwqQgZ9 WYFOxpq0uwMzcajLDR6Ad4Nsa1Pa32g4hRGOYiDEyhwXCtMDp8pyM5obiTlBo9mQ jvuiuozr2bwVTkJ2CAtDbcM/Z4zOX3mu0cQ4CCJBP4aLQHqGcpQFO8tTbGiiNH2X hhbNU+cutWQ3MjE1WTjCE3pEwtwqcfhwRiBhsbLly7obGfR0dGuf3LAQ+dJwDWAX hMnHC6GmVAA3TLsTr7zcbk6EPDg9jMEfYydy6Z6p7F8+fdcwWbICF7mP//MAF5L/ wF/cmuZhOn6kw3dJApG6Fl49AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuWFqoWBM pwrpTd2OgZiA9XMj37owHwYDVR0jBBgwFoAURPvFXc3SqEJ9T3j4FASEom5Sd5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQUM5LzhFQjZFNUFDOTE1 ODExRjE4NjBFN0Y0NTZBMTFGOTcwL1JQdkZYYzNTcUVKOVQzajRGQVNFb201U2Q1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlB2RlhjM1NxRUo5VDNqNEZBU0VvbTVTZDVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QUM5LzhFQjZFNUFDOTE1ODExRjE4NjBFN0Y0NTZBMTFGOTcwL1JQdkZYYzNTcUVK OVQzajRGQVNFb201U2Q1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBN28gW4NXGblYjVeRgMLpmZrS3+2qrTzMsrbwPDikFmcJFx7CMdgTNbbKLPLzU a1ufPmVqmBcnjMwnyox/sQcW7RpQF4W1rzZMvsPB1kyWxtDbTLy6HHdCUztHQVVS hkThrkmpaf4bGbEyreQytxy43ZGSt5Ftc2bide+5vxG21k3tdaAV63F9BikSW13d J2uYPp4tIpqp30qTx9uzW4M+XvQNYXVyMxSHDEH6ljipJve82uxhFZyrlsW7TqJ1 1joHqsv3loigbYijYsTQpU0zJ1lKLASX3f9XyK/CSkjqqLRWeqBZ9nOESMzdelZR 9DcZFFeaLuxcDVQVkAm8T6aa -----END CERTIFICATE-----Generated at Mon Oct 26 13:21:03 2026 by rpki-client