$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft File: CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json) Hash identifier: HmrDMOoxEpIu2qDEco44HZOep63TxZXstgZ1ejRjowU= Subject key identifier: 70:61:17:AF:17:63:67:58:39:16:4C:C3:E2:6C:A6:1C:74:39:38:EE Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft Manifest number: 0154 Signing time: Sat 31 Oct 2026 23:06:32 +0000 Manifest this update: Sat 31 Oct 2026 23:06:32 +0000 Manifest next update: Sat 07 Nov 2026 23:06:32 +0000 Files and hashes: 1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: bRONX2h0MK0mBvVP3YStqwcTOm0VKiJNzyrf7kuG/kw=) 2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: WCm/rVtxlt8ev0RhCcVNbQ1MEeC0CY6l+ePOzpVk8Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 23:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: Oct 31 23:06:32 2026 GMT Not After : Nov 7 23:06:32 2026 GMT Subject: CN=6ae67478-1240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:01:ea:f7:47:3c:0e:47:30:9a:b4:54:dd: f4:d3:90:49:18:38:b0:b8:bf:94:5c:d1:b9:17:bf: 47:f9:8c:36:b5:6e:b8:5c:b2:32:b2:5a:33:fe:b9: b0:cf:a4:13:2c:2f:ba:2b:bf:3e:fd:45:72:2b:f4: 09:cc:a9:58:f0:d2:c5:84:6c:67:92:20:d5:e0:28: c4:5c:ee:70:03:ed:bc:c6:31:21:f8:96:fc:59:c2: 71:d0:79:8c:68:e1:5b:14:f8:49:fd:a0:bf:a9:34: 2f:7e:59:94:68:29:74:09:61:e2:b3:84:41:17:19: 6a:0c:f0:f0:5f:62:4d:9c:3e:3d:ac:14:97:71:93: 23:95:7f:d8:fe:8b:f8:c3:0f:52:f0:37:36:af:01: 28:1f:80:14:57:86:29:13:0b:48:df:ef:7c:19:d5: a9:13:90:aa:aa:c8:c7:04:db:44:3a:d0:31:10:0e: 93:fd:82:6e:59:23:87:9a:d8:a3:2c:30:df:36:75: 9b:fc:10:12:dd:2a:ff:4a:a7:19:24:de:4f:28:9c: 57:d4:5d:47:e0:a0:0d:de:ba:94:76:0a:22:0d:c5: 34:a8:60:f3:67:b6:fa:c3:14:5e:75:03:55:68:7b: 55:c6:bb:a7:a5:db:0b:51:6b:e1:be:7b:f8:9e:1c: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:61:17:AF:17:63:67:58:39:16:4C:C3:E2:6C:A6:1C:74:39:38:EE X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b1:1a:00:ad:5d:be:3b:f1:3d:4b:f9:39:de:84:e0:f6:02: 5b:f0:65:08:99:a6:83:4b:17:6a:ab:76:57:71:25:bd:2b:cf: 13:64:44:d1:35:4f:9c:f4:9c:31:76:19:0f:95:6b:df:bb:9c: d9:43:13:47:64:b5:5e:15:f5:10:a6:cc:13:9c:9d:35:09:c2: 6c:67:ca:2a:a9:7b:77:14:1e:60:21:bf:8f:12:5a:61:09:3b: a1:8b:82:6a:26:5c:c0:69:be:58:a9:37:79:42:f3:61:28:4e: 7b:e7:ba:2c:a7:b9:02:ad:c8:ed:d4:25:fc:b5:61:d1:cb:27: f7:e1:1b:a0:da:88:6a:c7:92:c1:57:9d:d3:9b:df:2f:5f:52: 65:d1:09:43:c6:38:27:68:5a:7d:b3:37:55:ad:f1:5e:0b:fa: 85:e3:f3:83:9d:1a:7f:d7:4d:23:0e:92:46:d2:89:e7:13:07: fc:4d:6b:55:65:fe:f9:95:f8:63:9c:fc:41:36:4a:6f:4d:2c: f5:3f:ee:9c:c1:9b:a5:18:d1:06:33:8d:35:c6:b3:3d:1a:c6: de:56:19:93:b5:0d:ad:64:0c:84:a9:59:2d:85:96:4a:2d:bb: 6b:a2:c0:31:0e:ff:e2:41:73:50:d3:56:02:ac:7e:cd:b7:9d: 47:b5:81:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDA4MzU4NzQ5NzhCQTMwOUVEN0RBNDY3M0U3NzM5RDkz MjJGMjYyOUIwHhcNMjYxMDMxMjMwNjMyWhcNMjYxMTA3MjMwNjMyWjAYMRYwFAYD VQQDEw02YWU2NzQ3OC0xMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynQB6vdHPA5HMJq0VN3005BJGDiwuL+UXNG5F79H+Yw2tW64XLIysloz/rmw z6QTLC+6K78+/UVyK/QJzKlY8NLFhGxnkiDV4CjEXO5wA+28xjEh+Jb8WcJx0HmM aOFbFPhJ/aC/qTQvflmUaCl0CWHis4RBFxlqDPDwX2JNnD49rBSXcZMjlX/Y/ov4 ww9S8Dc2rwEoH4AUV4YpEwtI3+98GdWpE5CqqsjHBNtEOtAxEA6T/YJuWSOHmtij LDDfNnWb/BAS3Sr/SqcZJN5PKJxX1F1H4KAN3rqUdgoiDcU0qGDzZ7b6wxRedQNV aHtVxrunpdsLUWvhvnv4nhwHowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBhF68X Y2dYORZMw+Jsphx0OTjuMB8GA1UdIwQYMBaAFAg1h0l4ujCe19pGc+dznZMi8mKb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi83RDJCMURGMEQ3 RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1KN1gya1p6NTNPZGt5THlZ cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi83RDJCMURGMEQ3RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1K N1gya1p6NTNPZGt5THlZcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV7EaAK1dvjvxPUv5Od6E4PYCW/BlCJmmg0sXaqt2V3ElvSvPE2RE0TVPnPSc MXYZD5Vr37uc2UMTR2S1XhX1EKbME5ydNQnCbGfKKql7dxQeYCG/jxJaYQk7oYuC aiZcwGm+WKk3eULzYShOe+e6LKe5Aq3I7dQl/LVh0csn9+EboNqIaseSwVed05vf L19SZdEJQ8Y4J2hafbM3Va3xXgv6hePzg50af9dNIw6SRtKJ5xMH/E1rVWX++ZX4 Y5z8QTZKb00s9T/unMGbpRjRBjONNcazPRrG3lYZk7UNrWQMhKlZLYWWSi27a6LA MQ7/4kFzUNNWAqx+zbedR7WB+Q== -----END CERTIFICATE-----Generated at Sun Nov 1 13:01:08 2026 by rpki-client