$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json) Hash identifier: nvPQy19Moo+91E1rbMFyjr3nJt7UdTzmBtEX7yhtAIk= Subject key identifier: 12:2E:C2:0A:42:A0:97:4F:20:22:44:1A:BD:09:72:C2:35:9C:15:12 Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Certificate serial: 362A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft Manifest number: 35E5 Signing time: Tue 20 Oct 2026 14:27:15 +0000 Manifest this update: Tue 20 Oct 2026 14:27:15 +0000 Manifest next update: Tue 27 Oct 2026 14:27:15 +0000 Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: axbOHZfhWJbT55GTcdSlTnr6ktAXQaMdpC2EMTGoS3Y=) 2: ACACA8C6D5A611F0A08DD435C4F9AE02.roa (hash: 8+OhuWCy2Q/+5EOFBaBhHTBOjwb6o2MiQFSjk3LYjzg=) 3: B16ED608D4A311F09760561DC4F9AE02.roa (hash: KTE/5UmLg1Jx7p3qXHkj9a3Zu722Q28ccyfvFDypscA=) 4: 665D242CD57411F0AA8EA47EC4F9AE02.roa (hash: Ix+QmO0rSCT4pyJs1dGC/MTdKFeZNsFKd69IpQPvvRw=) 5: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: ZbvAqdZRdRlZ0nK19Soo+W7fZP+M1TyK82wvNdqV5u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 14:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13866 (0x362a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D3A1, serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Validity Not Before: Oct 20 14:27:15 2026 GMT Not After : Oct 27 14:27:15 2026 GMT Subject: CN=6ad77a43-d5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:c4:42:8b:48:5b:f1:97:43:8f:1d:02:f4: ca:e9:d8:36:7e:46:2e:a0:01:1b:9b:30:df:0a:79: b6:8b:7e:d8:6e:c0:d1:12:ed:d1:90:4f:eb:45:6e: 46:c0:f4:3f:be:91:25:dc:d4:e5:37:dd:3f:6c:5f: 53:b2:1f:45:36:4e:93:5b:15:04:16:1a:f4:16:09: 1e:75:86:ea:4c:7e:44:32:06:3f:c1:8a:61:f9:a1: f3:89:72:7b:b5:fc:95:ae:99:bb:90:17:b7:9f:58: 83:82:63:79:3b:e0:d9:42:67:ca:e4:81:b0:21:5c: 6c:8f:e6:fc:c4:2e:14:31:9a:77:60:1f:4c:77:ed: da:68:bf:33:bb:ff:8f:52:e7:bb:d8:9c:6b:e2:a0: a1:d8:b9:40:b5:3a:99:7d:11:35:0b:83:c6:52:fe: 72:a7:4f:27:0d:d3:1b:b7:68:4b:84:01:6c:0f:66: 13:ae:c4:c4:07:f7:41:5c:5d:69:f8:02:c9:39:60: 5d:ec:3b:78:4c:21:1c:31:a5:f4:48:a1:9b:9f:d6: 1e:4d:ca:8d:bd:61:b9:3e:c1:bf:4d:97:d2:49:2e: a0:f2:84:a4:9e:5d:54:ce:c8:32:c9:a8:10:1d:05: 1b:1d:de:06:4b:63:d3:04:88:db:45:87:80:3e:2a: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2E:C2:0A:42:A0:97:4F:20:22:44:1A:BD:09:72:C2:35:9C:15:12 X509v3 Authority Key Identifier: keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6e:2e:d9:97:5d:01:1c:72:d3:20:04:3e:b1:7d:22:74:bd: f6:74:01:1b:ff:f0:26:19:54:99:66:2e:6f:3f:db:ad:9b:81: 77:6c:07:c2:f2:f4:b7:22:b3:a6:4f:1f:7a:c3:e3:bc:21:0f: a4:2e:6d:e6:d5:bc:a9:a2:0e:bd:dd:26:be:aa:83:57:71:76: 73:3f:fb:33:ac:d2:38:c1:cf:13:32:e1:1b:88:12:f6:0d:4f: 93:65:9a:fb:e5:68:bc:9e:9c:39:f6:ae:71:69:21:d5:ec:a1: 35:69:72:91:fc:bf:1d:67:00:f4:26:11:bc:47:af:e7:d1:3f: f4:25:bb:e7:0f:9b:5f:3f:b7:55:c9:79:1b:bb:12:52:2b:a5: fd:23:53:04:d8:c1:7c:c3:e8:0c:6e:ba:41:23:52:19:fe:dd: f7:3b:a0:92:56:fd:12:1a:76:83:fe:d8:7b:f5:28:19:0c:06: 7c:0c:22:fe:a0:3e:61:99:74:f9:97:c9:c6:33:e8:e2:07:90: dd:a2:cf:cb:05:e9:7e:aa:ba:f9:6d:94:87:d5:fa:89:d2:e8: 3c:90:3d:3f:8b:95:7f:93:a0:a7:5e:a5:4b:1e:5f:a7:e0:0a: 3e:2a:d0:cf:10:a5:5d:09:57:58:29:0c:05:53:e1:14:69:48: bd:66:1b:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzQTExMTAvBgNVBAUTKDBERTE2NzlEMjFEMzlCNjFGMDI2NTBBNDE0RUM5RDA0 NjJDNUU0MTgwHhcNMjYxMDIwMTQyNzE1WhcNMjYxMDI3MTQyNzE1WjAYMRYwFAYD VQQDEw02YWQ3N2E0My1kNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEDEQotIW/GXQ48dAvTK6dg2fkYuoAEbmzDfCnm2i37YbsDREu3RkE/rRW5G wPQ/vpEl3NTlN90/bF9Tsh9FNk6TWxUEFhr0FgkedYbqTH5EMgY/wYph+aHziXJ7 tfyVrpm7kBe3n1iDgmN5O+DZQmfK5IGwIVxsj+b8xC4UMZp3YB9Md+3aaL8zu/+P Uue72Jxr4qCh2LlAtTqZfRE1C4PGUv5yp08nDdMbt2hLhAFsD2YTrsTEB/dBXF1p +ALJOWBd7Dt4TCEcMaX0SKGbn9YeTcqNvWG5PsG/TZfSSS6g8oSknl1UzsgyyagQ HQUbHd4GS2PTBIjbRYeAPiq9NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBIuwgpC oJdPICJEGr0JcsI1nBUSMB8GA1UdIwQYMBaAFA3hZ50h05th8CZQpBTsnQRixeQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDNBMS82MDdBRTk1NDFE ODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0ySHdKbENrRk95ZEJHTEY1 QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlRm5uU0hUbTJId0psQ2tGT3lkQkdMRjVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDNBMS82MDdBRTk1NDFEODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0y SHdKbENrRk95ZEJHTEY1QmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYG4u2ZddARxy0yAEPrF9InS99nQBG//wJhlUmWYubz/brZuBd2wHwvL0tyKz pk8fesPjvCEPpC5t5tW8qaIOvd0mvqqDV3F2cz/7M6zSOMHPEzLhG4gS9g1Pk2Wa ++VovJ6cOfaucWkh1eyhNWlykfy/HWcA9CYRvEev59E/9CW75w+bXz+3Vcl5G7sS Uiul/SNTBNjBfMPoDG66QSNSGf7d9zugklb9Ehp2g/7Ye/UoGQwGfAwi/qA+YZl0 +ZfJxjPo4geQ3aLPywXpfqq6+W2Uh9X6idLoPJA9P4uVf5Ogp16lSx5fp+AKPirQ zxClXQlXWCkMBVPhFGlIvWYbnQ== -----END CERTIFICATE-----Generated at Wed Oct 21 11:33:08 2026 by rpki-client