$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft File: UG49HcCtxzidnNuq-lFwdBtVhho.mft (raw, json) Hash identifier: sP8P3q/j4IjGLgER3Z4v0ZvkDoEB1Yj3I5oRSmlm0z8= Subject key identifier: AA:03:09:F9:9F:BC:EC:2B:41:04:AA:89:04:47:10:ED:38:F0:11:A4 Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A Certificate issuer: /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft Manifest number: 7B Signing time: Tue 27 Oct 2026 08:03:52 +0000 Manifest this update: Tue 27 Oct 2026 08:03:51 +0000 Manifest next update: Tue 03 Nov 2026 08:03:51 +0000 Files and hashes: 1: UG49HcCtxzidnNuq-lFwdBtVhho.crl (hash: yyDhg6BynL3D4xdL0v7xLARPscB/ITqzzdUSpEMbz6s=) 2: F780D776194611F1871644483C3D8C67.roa (hash: ho5eEvE3UY6na6Rt/OnfOdSf9aaBbnbQUdpdtiKwfI4=) 3: D040E1BC16D311F18D1B19D1303D8C67.roa (hash: FW4iyNzwJYx2pnIdKFnPL+9FFZZIBrzKM+GhxItUIOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A Validity Not Before: Oct 27 08:03:51 2026 GMT Not After : Nov 3 08:03:51 2026 GMT Subject: CN=6ae05ae8-6dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:ba:03:9f:8e:c0:c9:ac:97:fe:8e:39:48: 2d:7c:77:16:6a:16:dc:de:37:20:e5:0d:3b:28:79: 62:54:81:bb:e8:5d:aa:51:98:97:df:a1:cc:33:3a: 7f:a6:2a:5f:14:e3:9c:96:a8:ee:c5:92:74:ae:e2: a4:ee:97:8b:0c:bf:fd:c2:29:bb:a6:68:74:be:3d: 4d:2d:25:d7:f7:e1:2a:e1:dd:0a:4b:d9:fa:7c:cc: 78:55:90:05:77:ed:3b:57:e3:1f:53:dc:aa:1f:dc: 00:6b:08:07:18:33:6e:c7:6b:51:61:09:b0:81:b2: 46:a6:90:36:b0:52:7d:8a:8e:df:e3:4c:77:1d:ba: 44:aa:bb:9b:9c:0d:6c:b4:4a:45:65:00:88:05:de: 0e:b2:6d:e6:20:2f:c9:e3:90:41:42:af:16:b7:d4: 8a:b2:08:80:5a:11:77:3a:14:f3:73:ab:39:03:42: 4f:e2:83:09:9b:35:c6:27:dc:03:5e:d5:2a:d1:ff: e0:b9:b6:e3:8b:a3:9e:97:30:61:c0:b8:ab:af:6c: d8:18:30:15:b1:f1:e4:43:44:b1:d9:c5:3f:70:ed: 0e:6c:4b:07:b8:5e:d6:c7:93:1c:64:75:f5:1a:c7: 4a:4b:9d:be:62:49:35:1d:cc:bb:1a:17:a4:d4:76: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:03:09:F9:9F:BC:EC:2B:41:04:AA:89:04:47:10:ED:38:F0:11:A4 X509v3 Authority Key Identifier: keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a8:be:4f:94:7e:16:06:37:f1:a4:8e:6b:b5:87:d0:b3:df: a8:cc:a7:59:33:1f:74:d5:cf:a7:06:b7:46:32:34:75:01:50: bc:c2:e0:dc:54:75:be:db:b9:51:75:e2:04:d4:63:74:27:b2: 87:cd:e1:a3:6d:9c:8f:90:aa:5b:ac:6b:e1:7b:2f:4d:41:65: d5:f9:c6:16:49:ac:ed:dd:39:88:b1:32:41:76:86:7b:b5:76: 83:18:7d:b4:14:d1:95:5d:68:4f:7c:c7:5b:2b:1d:d2:9a:52: 9c:be:4c:ae:bd:4f:42:18:d1:d6:a7:65:e3:c3:1d:e5:80:5b: 65:80:f4:52:cc:aa:b7:7d:16:84:de:6d:8c:b8:a2:42:eb:d1: 0e:21:9d:a0:53:ce:f8:71:6e:3c:f5:c0:0c:54:68:7d:08:4e: 80:d7:11:ed:d2:36:e8:66:40:86:bf:e1:59:a5:dc:73:b6:a6: e1:6e:6b:84:d4:c5:d9:9b:c5:ec:00:5c:9c:f2:d7:71:d2:9c: 4c:2c:a7:e6:08:d9:ec:c9:fe:7d:71:a2:3c:55:31:86:43:7d: 3d:0f:1f:af:6c:ea:0f:4c:62:f1:a0:43:7d:67:fd:1e:8a:eb: 09:28:bd:f6:49:1c:e8:5d:0d:d8:a7:5d:55:95:aa:41:cb:4a: 0f:49:a9:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkZDQzExMC8GA1UEBRMoNTA2RTNEMURDMEFEQzczODlEOUNEQkFBRkE1MTcwNzQx QjU1ODYxQTAeFw0yNjEwMjcwODAzNTFaFw0yNjExMDMwODAzNTFaMBgxFjAUBgNV BAMTDTZhZTA1YWU4LTZkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBH7oDn47AyayX/o45SC18dxZqFtzeNyDlDTsoeWJUgbvoXapRmJffocwzOn+m Kl8U45yWqO7FknSu4qTul4sMv/3CKbumaHS+PU0tJdf34Srh3QpL2fp8zHhVkAV3 7TtX4x9T3Kof3ABrCAcYM27Ha1FhCbCBskamkDawUn2Kjt/jTHcdukSqu5ucDWy0 SkVlAIgF3g6ybeYgL8njkEFCrxa31IqyCIBaEXc6FPNzqzkDQk/igwmbNcYn3ANe 1SrR/+C5tuOLo56XMGHAuKuvbNgYMBWx8eRDRLHZxT9w7Q5sSwe4XtbHkxxkdfUa x0pLnb5iSTUdzLsaF6TUdknnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqgMJ+Z+8 7CtBBKqJBEcQ7TjwEaQwHwYDVR0jBBgwFoAUUG49HcCtxzidnNuq+lFwdBtVhhow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzA2QzU1QUU4MTZE MzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHppZG5OdXEtbEZ3ZEJ0Vmho by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUc0OUhjQ3R4emlkbk51cS1sRndkQnRWaGhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG RkNDLzA2QzU1QUU4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHpp ZG5OdXEtbEZ3ZEJ0Vmhoby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8qL5PlH4WBjfxpI5rtYfQs9+ozKdZMx901c+nBrdGMjR1AVC8wuDcVHW+27lR deIE1GN0J7KHzeGjbZyPkKpbrGvhey9NQWXV+cYWSazt3TmIsTJBdoZ7tXaDGH20 FNGVXWhPfMdbKx3SmlKcvkyuvU9CGNHWp2Xjwx3lgFtlgPRSzKq3fRaE3m2MuKJC 69EOIZ2gU874cW489cAMVGh9CE6A1xHt0jboZkCGv+FZpdxztqbhbmuE1MXZm8Xs AFyc8tdx0pxMLKfmCNnsyf59caI8VTGGQ309Dx+vbOoPTGLxoEN9Z/0eiusJKL32 SRzoXQ3Yp11VlapBy0oPSanW -----END CERTIFICATE-----Generated at Wed Oct 28 06:04:48 2026 by rpki-client