$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: bBbP4D1dLdnAKWo46UAbszBMjDUfP6Lyfn/5VYQvsxc= Subject key identifier: E5:42:DF:7C:FF:8E:2B:0F:78:19:FD:50:AB:5C:8E:E6:6C:7A:2C:ED Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 065B Signing time: Mon 26 Oct 2026 22:35:12 +0000 Manifest this update: Mon 26 Oct 2026 22:35:11 +0000 Manifest next update: Mon 02 Nov 2026 22:35:11 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: u2I3OPzLNXXlDQPgbdL8xmmYaoDuQQGYFIbWw8RDcRE=) 2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=) 3: 928880FE8B0F11F182DCACFD3211F970.roa (hash: 97DMfE8QWEUEG5Cfx4YrvAURPmPn7eR9nJeGo/mBqD0=) 4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: Oct 26 22:35:11 2026 GMT Not After : Nov 2 22:35:11 2026 GMT Subject: CN=6adfd5a0-fe25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:d1:77:71:5d:b6:9b:69:9a:3c:a1:24:6b: 16:7a:24:65:66:0f:76:6f:8e:fd:c9:98:6b:c6:01: 05:9f:52:16:db:24:e7:3d:bb:11:56:d7:33:30:bc: 72:79:c2:83:1d:07:36:d2:e4:a0:7e:68:fe:39:56: db:c6:25:67:08:35:3d:5c:03:ce:b1:6f:fe:8f:ef: f0:e8:f9:0b:fe:b0:14:1f:76:24:c2:dd:2f:43:bb: a6:bb:5b:2d:75:fa:78:a5:33:39:dd:60:65:11:b7: d7:94:3c:fa:a8:86:70:29:a1:5f:d9:de:8e:bf:07: 17:2c:02:44:c4:59:32:0e:77:f1:7e:c3:5d:b8:94: a3:0a:79:66:47:ab:62:69:7d:c3:4d:55:ec:69:3f: 6d:8f:bc:13:0f:3a:c5:ee:43:1d:8d:3c:8d:78:e0: e1:db:82:69:7a:d2:ff:c8:6c:56:81:24:c0:b1:79: cd:83:b7:5c:84:d5:b9:e0:59:52:fc:6f:38:16:b4: 8d:e8:1d:72:70:93:4b:1f:09:94:52:cf:40:da:0a: b0:97:ae:fc:dc:b4:76:b3:61:3e:88:29:ab:7a:cd: 96:9e:e1:fe:b0:4f:7d:db:bc:14:a9:70:d1:58:ff: cc:ff:d1:2d:7d:d5:33:9b:d1:4e:ef:25:06:58:ea: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:42:DF:7C:FF:8E:2B:0F:78:19:FD:50:AB:5C:8E:E6:6C:7A:2C:ED X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:13:3e:20:36:71:57:27:6a:26:2e:21:03:4a:a3:1d:df:92: 3e:7e:e9:b1:c4:9a:e4:62:a8:94:94:70:f6:9b:6d:90:2d:e9: 52:53:52:f6:15:e7:78:c8:92:de:b4:69:51:f9:b9:8a:b1:f7: 38:df:ec:16:af:4f:97:07:1c:b3:ae:b8:30:e4:ef:53:06:cf: 1c:e4:57:3c:8c:4e:8f:3e:44:48:40:fe:f0:ed:84:8b:7b:8a: e5:c2:fb:75:7d:e2:5f:a8:62:4d:78:c0:8e:2d:4e:90:f2:c2: be:f1:27:c3:35:63:55:7d:9a:d1:64:e3:3c:01:bb:b6:bc:4f: 89:e8:28:2f:f4:42:60:50:24:64:15:f1:01:42:06:98:5c:01: 04:d8:83:1c:af:8f:33:48:f9:e6:70:e3:17:31:84:8f:70:6a: 7a:ae:7a:b7:a6:ab:a9:f0:77:08:99:fc:a9:d3:de:66:a0:80: c1:eb:5d:4b:95:fb:07:e7:d0:37:f0:b4:a3:81:b2:f7:57:c6: 3a:f8:b9:12:92:cf:b2:55:ea:4d:22:2b:c6:85:d7:eb:4b:a2: 4f:43:ca:1c:8d:5b:50:f0:f9:4e:b4:76:ff:27:72:bb:e2:52: 88:3b:df:2c:63:47:f3:0d:ef:b0:07:07:cc:bc:95:dc:d8:4b: 71:02:18:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjYxMDI2MjIzNTExWhcNMjYxMTAyMjIzNTExWjAYMRYwFAYD VQQDEw02YWRmZDVhMC1mZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA377Rd3FdtptpmjyhJGsWeiRlZg92b479yZhrxgEFn1IW2yTnPbsRVtczMLxy ecKDHQc20uSgfmj+OVbbxiVnCDU9XAPOsW/+j+/w6PkL/rAUH3Ykwt0vQ7umu1st dfp4pTM53WBlEbfXlDz6qIZwKaFf2d6OvwcXLAJExFkyDnfxfsNduJSjCnlmR6ti aX3DTVXsaT9tj7wTDzrF7kMdjTyNeODh24JpetL/yGxWgSTAsXnNg7dchNW54FlS /G84FrSN6B1ycJNLHwmUUs9A2gqwl6783LR2s2E+iCmres2WnuH+sE9927wUqXDR WP/M/9EtfdUzm9FO7yUGWOoZTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVC33z/ jisPeBn9UKtcjuZseiztMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoBM+IDZxVydqJi4hA0qjHd+SPn7pscSa5GKolJRw9pttkC3pUlNS9hXneMiS 3rRpUfm5irH3ON/sFq9Plwccs664MOTvUwbPHORXPIxOjz5ESED+8O2Ei3uK5cL7 dX3iX6hiTXjAji1OkPLCvvEnwzVjVX2a0WTjPAG7trxPiegoL/RCYFAkZBXxAUIG mFwBBNiDHK+PM0j55nDjFzGEj3Bqeq56t6arqfB3CJn8qdPeZqCAwetdS5X7B+fQ N/C0o4Gy91fGOvi5EpLPslXqTSIrxoXX60uiT0PKHI1bUPD5TrR2/ydyu+JSiDvf LGNH8w3vsAcHzLyV3NhLcQIY7Q== -----END CERTIFICATE-----Generated at Tue Oct 27 22:27:30 2026 by rpki-client