$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft File: 0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json) Hash identifier: 7OilQyIiHFP6x47y01i1zLIMMhKRSaFq8WIbUnDWYYg= Subject key identifier: 33:89:5D:8E:8E:68:B3:26:77:46:BB:E7:19:4B:90:3B:33:B5:9E:F3 Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E Certificate issuer: /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft Manifest number: 84 Signing time: Sun 25 Oct 2026 08:06:10 +0000 Manifest this update: Sun 25 Oct 2026 08:06:09 +0000 Manifest next update: Sun 01 Nov 2026 08:06:09 +0000 Files and hashes: 1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: WvCDCeqGXDr6fGSh7yBxA0T5QGW0JwEziSssIEG5kAc=) 2: 69E5BC382CD811F1ACDE793A9A833773.roa (hash: smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=) 3: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E Validity Not Before: Oct 25 08:06:09 2026 GMT Not After : Nov 1 08:06:09 2026 GMT Subject: CN=6addb872-4775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:26:66:79:82:12:40:6b:9e:79:4b:29:fa: 42:41:2e:d0:f1:43:21:72:14:7b:e2:03:b5:c5:ea: 91:29:3a:d3:46:ed:03:b8:a6:d4:d7:e9:7d:bb:5a: ca:77:a8:17:0b:0d:01:da:e5:6c:87:04:69:6e:19: 27:e6:f1:3c:c8:7a:4b:cc:2a:d3:a7:e3:20:40:ca: 0f:4f:f1:70:3b:86:c5:81:71:43:1f:17:18:08:e0: f3:9c:61:e5:7c:eb:19:e5:c2:99:0d:96:2e:81:40: e6:c2:8d:60:bd:ba:62:f8:fd:5b:21:8d:0e:d8:29: a6:34:8c:5b:2b:16:9a:ad:fb:22:16:29:24:24:61: 5b:14:98:07:40:28:6c:b6:f2:a9:04:c0:72:40:2a: c2:fd:7e:8d:f5:40:bd:54:11:21:5f:62:c4:82:a0: 24:6d:2c:d5:4e:a0:2f:38:33:d7:eb:fe:c0:c6:aa: d9:da:be:00:29:7e:07:88:cc:cd:b1:82:2a:8c:8a: 46:7e:9a:d5:57:32:25:b5:3a:e2:02:95:c8:96:47: 97:1d:a5:1b:1b:0e:c2:fe:62:95:cd:82:98:bc:b6: 56:e4:b4:94:db:a4:ee:5a:eb:1a:f0:e4:14:8e:27: 1f:2b:6c:b3:c3:f3:3e:0d:a2:9d:87:15:6b:9c:4a: 3b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:89:5D:8E:8E:68:B3:26:77:46:BB:E7:19:4B:90:3B:33:B5:9E:F3 X509v3 Authority Key Identifier: keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:93:2e:89:86:6f:ce:36:f1:42:8c:8a:56:c6:ae:59:ee:2d: b0:93:35:ce:89:8d:d8:42:aa:bf:eb:21:9c:c8:97:ce:a4:3d: 7a:5e:36:1c:fa:c7:b3:46:93:10:7b:2a:cc:81:49:89:44:15: bc:ca:a5:ee:72:c9:06:3d:74:08:a2:62:90:e8:ec:6f:33:ad: 76:09:7c:51:55:aa:47:7e:6c:af:18:9c:a7:1f:f8:e7:78:4c: 20:c5:be:2a:42:03:1a:06:a6:3d:8b:57:e5:85:cd:30:ab:b3: 6e:74:e4:8d:6e:24:b8:db:70:90:3a:fe:8d:9c:c4:48:67:c5: 59:45:34:6b:dd:66:18:68:44:c5:cf:6d:0c:f7:18:ba:1e:9c: 2b:ed:40:1c:28:99:e3:56:53:29:11:91:fe:b4:52:e5:d2:f5: d7:54:50:6d:12:7d:8c:dc:a7:ba:c5:d7:77:16:f1:7a:e9:59: a3:5e:fb:d3:19:bf:2a:e5:a8:3a:e2:ae:49:5d:ec:ad:30:d0: 1b:76:91:4f:ee:cc:1c:0f:66:38:97:1c:20:0e:d0:9b:52:53: ff:dd:65:d5:b5:7f:15:9e:08:0c:e4:81:b6:35:53:51:f3:cc: 59:c4:24:23:5c:67:87:35:b1:ea:d2:e1:a7:86:12:22:98:14: 50:69:6a:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNDcxMTAvBgNVBAUTKEQzMTJFRTUwRTY1MUZBRjAzOTY4RURGNEVBMDAxMTQ5 RTU5NUZDMEUwHhcNMjYxMDI1MDgwNjA5WhcNMjYxMTAxMDgwNjA5WjAYMRYwFAYD VQQDEw02YWRkYjg3Mi00Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ0mZnmCEkBrnnlLKfpCQS7Q8UMhchR74gO1xeqRKTrTRu0DuKbU1+l9u1rK d6gXCw0B2uVshwRpbhkn5vE8yHpLzCrTp+MgQMoPT/FwO4bFgXFDHxcYCODznGHl fOsZ5cKZDZYugUDmwo1gvbpi+P1bIY0O2CmmNIxbKxaarfsiFikkJGFbFJgHQChs tvKpBMByQCrC/X6N9UC9VBEhX2LEgqAkbSzVTqAvODPX6/7AxqrZ2r4AKX4HiMzN sYIqjIpGfprVVzIltTriApXIlkeXHaUbGw7C/mKVzYKYvLZW5LSU26TuWusa8OQU jicfK2yzw/M+DaKdhxVrnEo7KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOJXY6O aLMmd0a75xlLkDsztZ7zMB8GA1UdIwQYMBaAFNMS7lDmUfrwOWjt9OoAEUnllfwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM0Ny80QTkzNzJGNjBF M0YxMUYxQjJDQ0RCNzMxODNEOEM2Ny8weEx1VU9aUi12QTVhTzMwNmdBUlNlV1Zf QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzB4THVVT1pSLXZBNWFPMzA2Z0FSU2VXVl9BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM0Ny80QTkzNzJGNjBFM0YxMUYxQjJDQ0RCNzMxODNEOEM2Ny8weEx1VU9aUi12 QTVhTzMwNmdBUlNlV1ZfQTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbJMuiYZvzjbxQoyKVsauWe4tsJM1zomN2EKqv+shnMiXzqQ9el42HPrHs0aT EHsqzIFJiUQVvMql7nLJBj10CKJikOjsbzOtdgl8UVWqR35srxicpx/453hMIMW+ KkIDGgamPYtX5YXNMKuzbnTkjW4kuNtwkDr+jZzESGfFWUU0a91mGGhExc9tDPcY uh6cK+1AHCiZ41ZTKRGR/rRS5dL111RQbRJ9jNynusXXdxbxeulZo1770xm/KuWo OuKuSV3srTDQG3aRT+7MHA9mOJccIA7Qm1JT/91l1bV/FZ4IDOSBtjVTUfPMWcQk I1xnhzWx6tLhp4YSIpgUUGlqgQ== -----END CERTIFICATE-----Generated at Sun Oct 25 14:33:54 2026 by rpki-client