$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft File: BmIVgepjVqm4tbC9s26io0KBciU.mft (raw, json) Hash identifier: 4FpIm13ldnG5JT6Vd9KhwzRGfM47gLf9wWm6PW4Jef0= Subject key identifier: DD:EE:BD:E4:DE:3E:64:18:05:87:CB:26:AB:82:78:D7:93:28:E8:47 Authority key identifier: 06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25 Certificate issuer: /CN=A918D9E8/serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft Manifest number: 7A Signing time: Sun 25 Oct 2026 08:10:07 +0000 Manifest this update: Sun 25 Oct 2026 08:10:06 +0000 Manifest next update: Sun 01 Nov 2026 08:10:06 +0000 Files and hashes: 1: BmIVgepjVqm4tbC9s26io0KBciU.crl (hash: v80t29ENzq3Hn1I9nZ7r+yKxft4Uf3TOdY0K9bUn9Ns=) 2: 3829F376174D11F19A004491173D8C67.roa (hash: 0k0rXsYRdBQmrsruCwfnV2JmIIADeibhHxkfkqZPiGk=) 3: 0EEDB772174D11F193D7AA7E173D8C67.roa (hash: y6pgs+n3x+EaANPspWEoZC1ehkpn8O/za+IreRLvylU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 08:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D9E8, serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225 Validity Not Before: Oct 25 08:10:06 2026 GMT Not After : Nov 1 08:10:06 2026 GMT Subject: CN=6addb95f-e913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:10:44:8d:45:0d:26:90:0e:b3:78:8e:d0: 82:14:40:02:f2:62:df:a7:7e:96:6f:bb:c3:9b:ba: 43:32:5f:bf:1a:86:ec:39:71:bd:a9:29:a6:50:86: 2f:9e:83:9e:b0:fa:9d:3f:87:d2:2e:2a:d4:74:d8: 38:c9:b1:01:19:d5:4d:9a:10:d8:99:5a:5e:99:55: 3b:2c:60:23:7f:90:d7:6a:53:db:88:31:99:11:4b: 4a:bf:c3:e8:6b:49:87:ff:2c:4b:cc:59:8f:9c:c6: 33:b8:83:c2:5b:84:b4:cc:47:f8:79:ec:81:dc:07: eb:d1:23:4f:d4:c5:4d:cd:f5:1c:c6:62:7e:3a:02: a4:71:ad:c2:02:94:79:a3:2d:8e:6e:7a:1b:b7:a6: 4f:95:91:ba:9f:9b:8d:53:43:13:b5:e1:4d:8a:9e: 51:7c:68:4d:0d:d7:26:0d:06:90:8a:08:bc:d5:1b: 12:53:f0:ab:63:49:ee:55:f9:ec:66:64:45:d9:57: 79:5a:b7:0f:5d:45:33:76:97:9d:a4:0f:04:b3:9e: f8:ab:7d:a3:23:57:90:02:21:8a:f6:20:6b:18:1b: 72:83:1d:c5:8f:f3:05:ed:cc:2c:49:9c:f4:c1:b0: 50:42:eb:02:ea:18:f2:54:21:d6:0d:97:99:66:ba: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:BD:E4:DE:3E:64:18:05:87:CB:26:AB:82:78:D7:93:28:E8:47 X509v3 Authority Key Identifier: keyid:06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:82:5b:be:41:7e:7a:13:10:af:e9:6d:85:5d:9f:ee:8b:61: ff:71:42:59:c3:ff:18:b3:34:2f:73:25:93:b3:4c:01:7f:6d: 66:8f:60:ae:e8:39:e6:6f:15:f6:3a:22:2e:8b:ff:7a:29:6b: 93:a1:fd:ec:a6:2f:80:96:4c:de:75:94:5f:97:af:1a:1a:d3: b3:54:4f:6a:e0:73:0d:b2:df:5d:ff:e1:54:c3:7a:ec:72:00: 8b:98:13:19:a7:87:89:d1:85:4e:6c:2e:cf:f5:e8:fd:14:49: 69:80:5c:f3:38:4f:c1:82:c0:fe:1a:cb:eb:dd:03:b0:4d:97: 09:8f:ab:d2:29:01:51:6c:df:fe:a5:d0:73:ba:c9:12:a6:66: 88:66:6f:53:58:85:bf:1f:50:13:86:43:de:78:66:3e:a5:e5: 54:69:cf:3b:01:5b:e9:8f:f9:a1:f5:92:02:b0:1f:e8:19:6c: 4d:b5:2f:e6:25:09:0b:28:0d:4b:1c:ac:eb:72:1a:33:78:c8: 4e:12:09:ea:9f:b5:3a:5d:1f:37:ba:76:fa:88:f8:b3:8e:35: bc:02:b3:de:89:de:fb:5f:3a:40:9c:b4:e6:72:db:02:6f:2b: e8:7a:3c:0d:aa:a7:71:11:8b:20:fd:e7:91:53:76:11:a7:db: 0b:23:71:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDlFODExMC8GA1UEBRMoMDY2MjE1ODFFQTYzNTZBOUI4QjVCMEJEQjM2RUEyQTM0 MjgxNzIyNTAeFw0yNjEwMjUwODEwMDZaFw0yNjExMDEwODEwMDZaMBgxFjAUBgNV BAMTDTZhZGRiOTVmLWU5MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWYRBEjUUNJpAOs3iO0IIUQALyYt+nfpZvu8ObukMyX78ahuw5cb2pKaZQhi+e g56w+p0/h9IuKtR02DjJsQEZ1U2aENiZWl6ZVTssYCN/kNdqU9uIMZkRS0q/w+hr SYf/LEvMWY+cxjO4g8JbhLTMR/h57IHcB+vRI0/UxU3N9RzGYn46AqRxrcIClHmj LY5uehu3pk+Vkbqfm41TQxO14U2KnlF8aE0N1yYNBpCKCLzVGxJT8KtjSe5V+exm ZEXZV3latw9dRTN2l52kDwSznvirfaMjV5ACIYr2IGsYG3KDHcWP8wXtzCxJnPTB sFBC6wLqGPJUIdYNl5lmupl1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3e695N4+ ZBgFh8smq4J415Mo6EcwHwYDVR0jBBgwFoAUBmIVgepjVqm4tbC9s26io0KBciUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEOUU4L0RBQTQ3N0U0MTc0 QzExRjFBMTE5RjREODE2M0Q4QzY3L0JtSVZnZXBqVnFtNHRiQzlzMjZpbzBLQmNp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQm1JVmdlcGpWcW00dGJDOXMyNmlvMEtCY2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE OUU4L0RBQTQ3N0U0MTc0QzExRjFBMTE5RjREODE2M0Q4QzY3L0JtSVZnZXBqVnFt NHRiQzlzMjZpbzBLQmNpVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCiglu+QX56ExCv6W2FXZ/ui2H/cUJZw/8YszQvcyWTs0wBf21mj2Cu6DnmbxX2 OiIui/96KWuTof3spi+AlkzedZRfl68aGtOzVE9q4HMNst9d/+FUw3rscgCLmBMZ p4eJ0YVObC7P9ej9FElpgFzzOE/BgsD+Gsvr3QOwTZcJj6vSKQFRbN/+pdBzuskS pmaIZm9TWIW/H1AThkPeeGY+peVUac87AVvpj/mh9ZICsB/oGWxNtS/mJQkLKA1L HKzrchozeMhOEgnqn7U6XR83unb6iPizjjW8ArPeid77XzpAnLTmctsCbyvoejwN qqdxEYsg/eeRU3YRp9sLI3F9 -----END CERTIFICATE-----Generated at Mon Oct 26 23:18:27 2026 by rpki-client