$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: J87oVvtL92HeqDFti+rozlZXy1Bu0B3j4qtLPvh4qfw= Subject key identifier: 9B:C5:BC:14:ED:A3:AA:25:CF:67:09:8E:F9:D7:FF:79:E0:E1:27:91 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 08FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 08E8 Signing time: Sat 24 Oct 2026 20:25:53 +0000 Manifest this update: Sat 24 Oct 2026 20:25:53 +0000 Manifest next update: Sat 31 Oct 2026 20:25:53 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: HQmdI6alB2BBKqI6LiqfLVygKmh23Ts9dPh3UXJBp0E=) 2: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=) 3: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2298 (0x8fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Oct 24 20:25:53 2026 GMT Not After : Oct 31 20:25:53 2026 GMT Subject: CN=6add1451-98e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:53:ff:42:e7:3d:f9:79:fd:5d:b0:ee:d0: 18:0d:e6:55:9a:73:b1:85:da:01:bf:c5:a4:d5:d5: 6e:f5:79:53:23:34:00:91:2b:e8:d0:62:d1:18:b1: f2:87:12:d1:81:00:db:ab:c0:45:20:fc:d9:96:2d: 47:a0:e1:d2:a7:ca:f8:20:80:9c:1a:32:20:4b:cc: a3:0e:41:5b:87:db:96:bd:33:db:43:a0:3e:dd:38: 59:48:ed:20:a8:76:20:b9:79:a7:4f:cd:c9:0a:de: 47:71:01:f3:8f:cc:02:5b:b4:07:9a:59:63:1a:7d: c1:b5:86:39:de:54:06:f8:e2:b4:38:5e:5d:b0:58: c2:0c:73:43:34:1f:b2:bf:84:f3:ab:13:16:83:06: e3:6a:cd:19:a1:06:02:d4:49:a0:62:27:52:79:6a: 33:49:99:5e:82:f3:5b:b0:1e:1e:60:5e:cb:62:40: 30:e3:36:01:b3:6f:eb:50:02:38:88:4f:6a:76:af: 3c:12:ce:46:67:b5:79:06:ed:1a:af:e1:3a:e3:b2: b7:a6:60:85:dd:9e:5e:2d:c1:c6:00:d6:78:80:e5: 34:73:b4:b9:9c:a9:bc:aa:60:96:98:40:51:a6:e6: b9:cf:07:53:b5:04:ad:53:cf:42:ad:f8:d6:3a:09: 10:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C5:BC:14:ED:A3:AA:25:CF:67:09:8E:F9:D7:FF:79:E0:E1:27:91 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:5c:35:42:39:80:c2:ad:85:f9:16:88:20:93:d3:e3:eb:50: 4c:40:ef:4c:5b:d4:cf:3d:cc:f3:b7:0b:83:86:c8:6b:c1:65: 01:fb:33:d9:93:64:c7:65:22:07:89:35:35:9b:ef:14:5b:e6: d8:d3:84:49:b8:73:d1:f2:7a:2d:af:03:8b:e4:c6:38:34:b2: 3f:83:e0:7f:ef:e2:35:e9:75:4b:9a:0e:50:83:c6:9d:45:a2: 46:85:44:49:07:f5:41:63:b7:dd:75:72:bb:3d:0a:56:57:fe: 2d:65:96:a2:81:c1:8b:a5:aa:2a:d6:88:27:67:e3:db:c6:d4: f2:87:f6:f7:5c:41:a2:8d:34:6d:75:97:18:01:8d:93:40:8b: 90:2a:f7:74:52:63:aa:cc:35:8e:22:09:5c:02:bc:a2:21:e3: cf:04:21:54:74:00:e7:4a:af:ff:1a:39:a3:66:9e:5a:e5:24: 45:49:05:ad:2a:06:9e:76:a0:fe:51:c9:08:4a:9b:89:b5:6f: 13:93:f5:eb:1a:90:48:6d:b7:2b:43:8b:19:fc:d3:2d:4c:e4: 73:8a:49:f0:57:cf:2d:9b:b6:29:45:89:5d:ec:fc:96:37:63: be:dc:77:d1:74:e0:e5:f6:f0:de:69:e3:37:cc:90:d3:bf:87: da:62:67:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjYxMDI0MjAyNTUzWhcNMjYxMDMxMjAyNTUzWjAYMRYwFAYD VQQDEw02YWRkMTQ1MS05OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFdT/0LnPfl5/V2w7tAYDeZVmnOxhdoBv8Wk1dVu9XlTIzQAkSvo0GLRGLHy hxLRgQDbq8BFIPzZli1HoOHSp8r4IICcGjIgS8yjDkFbh9uWvTPbQ6A+3ThZSO0g qHYguXmnT83JCt5HcQHzj8wCW7QHmlljGn3BtYY53lQG+OK0OF5dsFjCDHNDNB+y v4TzqxMWgwbjas0ZoQYC1EmgYidSeWozSZlegvNbsB4eYF7LYkAw4zYBs2/rUAI4 iE9qdq88Es5GZ7V5Bu0ar+E647K3pmCF3Z5eLcHGANZ4gOU0c7S5nKm8qmCWmEBR pua5zwdTtQStU89CrfjWOgkQYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvFvBTt o6olz2cJjvnX/3ng4SeRMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdVw1QjmAwq2F+RaIIJPT4+tQTEDvTFvUzz3M87cLg4bIa8FlAfsz2ZNkx2Ui B4k1NZvvFFvm2NOESbhz0fJ6La8Di+TGODSyP4Pgf+/iNel1S5oOUIPGnUWiRoVE SQf1QWO33XVyuz0KVlf+LWWWooHBi6WqKtaIJ2fj28bU8of291xBoo00bXWXGAGN k0CLkCr3dFJjqsw1jiIJXAK8oiHjzwQhVHQA50qv/xo5o2aeWuUkRUkFrSoGnnag /lHJCEqbibVvE5P16xqQSG23K0OLGfzTLUzkc4pJ8FfPLZu2KUWJXez8ljdjvtx3 0XTg5fbw3mnjN8yQ07+H2mJnOw== -----END CERTIFICATE-----Generated at Mon Oct 26 07:35:19 2026 by rpki-client