$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json) Hash identifier: sTFqNQNxypk2qwpgtwKS5RyS5l8N/tiGQUO+vx9gv7U= Subject key identifier: 01:17:07:C6:EE:4D:39:E2:84:1D:AA:C6:78:C6:21:6F:3F:AF:54:3F Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Certificate serial: 1425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft Manifest number: 140A Signing time: Wed 28 Oct 2026 16:58:38 +0000 Manifest this update: Wed 28 Oct 2026 16:58:37 +0000 Manifest next update: Wed 04 Nov 2026 16:58:37 +0000 Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: 3FK4YsZ10jUE6P9zPtS+W6cd4/Rg1GbIWQKKaM5xy+k=) 2: AE7603724F8711F1ACC1478F91833773.roa (hash: ZFycndJC2lKcQ5Vl3n62o2a5etgps95Yn0KAsxtV2fU=) 3: F5B633B2283411F1B1D7DF7FCA833773.roa (hash: NbyI7KrlbmFRIzpwKLH61+A9J/r7MmWiby176b3GguY=) 4: B80482FC748911F19DCB36BA84A30FBC.roa (hash: AkBnhv1elJIf+muJa+G8eCFULbd4tj996g8htybW8wM=) 5: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: hdZcPdKFAT489GyojQEyzRuhICFQktXZMlSZFI4OK30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 16:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5157 (0x1425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Validity Not Before: Oct 28 16:58:37 2026 GMT Not After : Nov 4 16:58:37 2026 GMT Subject: CN=6ae229bd-58f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:cf:f9:ea:da:eb:d0:b6:39:5d:c8:7f:04: 0f:7d:96:50:ad:40:86:5a:fc:5a:3d:6c:97:b9:30: b1:97:95:c9:f9:1a:44:f8:40:37:3d:b7:38:f8:82: 1f:e7:41:7e:66:72:07:84:7d:99:79:cb:88:1a:42: f3:56:bb:f8:e4:85:25:cf:f8:83:e3:0d:95:c0:ef: 4e:ab:3e:3c:e3:ce:08:1d:89:75:90:1c:77:24:e6: 8d:c1:7f:fb:3f:ff:ce:d2:0b:17:d4:dd:48:21:af: 0e:04:de:89:bf:f5:2c:f8:38:02:a5:fc:49:a5:60: c6:48:b1:8d:36:b7:38:da:dd:45:c2:2d:4e:b7:a6: cd:3e:d7:d8:aa:1d:eb:c5:31:4a:70:a4:be:16:b0: d1:58:1b:f5:d5:86:16:63:1e:69:6e:60:5c:0f:8b: b6:78:0e:02:87:c3:71:22:b9:0a:cf:e7:d0:49:99: 19:84:c0:7d:33:71:d5:87:08:7b:56:a9:55:19:7b: d8:8b:b4:b0:2f:03:ef:8b:a8:7d:21:44:59:d7:55: af:a4:70:c1:71:52:cd:41:47:a7:2c:88:ba:55:0d: 7b:1d:50:da:2b:20:66:e4:0d:87:b8:a1:50:0e:45: 90:a3:20:5d:ff:50:e6:59:3d:7c:c4:42:67:20:26: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:07:C6:EE:4D:39:E2:84:1D:AA:C6:78:C6:21:6F:3F:AF:54:3F X509v3 Authority Key Identifier: keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:99:69:7a:c0:68:55:71:02:3d:9e:ef:cd:72:a7:0c:3f:e2: b1:3c:12:05:11:12:d8:d1:fb:0e:01:3d:49:e1:7f:75:b1:b0: 7e:76:cc:71:76:5f:b2:31:fe:fa:68:86:2e:d8:71:73:b2:1a: 7b:52:1b:93:b7:bd:5a:9e:fc:3d:25:2d:15:fd:bb:34:19:22: 9e:17:bb:c0:22:75:c2:0a:cd:b4:8d:82:0b:2a:f2:03:84:c0: e0:1b:2e:6e:13:eb:d9:00:e4:58:a9:1f:2d:6a:f1:92:ae:1e: 4e:34:47:2e:5c:b0:a8:88:f0:49:cc:65:17:58:1e:f5:97:05: a6:5f:c1:b8:a0:20:62:12:0e:ec:46:59:0f:ca:b2:a9:23:c4: 7b:63:92:30:a3:60:3d:52:26:63:c3:26:d8:a7:ea:71:81:70: d3:1f:8b:6c:4a:1e:1e:d1:14:c5:7a:c7:c2:77:b2:d3:10:32: 24:bb:c7:23:4d:ba:1e:86:d2:3c:a8:98:5d:f0:b6:8f:6a:ba: d5:25:6a:5b:32:c8:24:cf:56:68:1c:c2:17:23:fe:91:31:9c: 69:77:ab:b9:75:30:67:c1:03:a3:46:ca:30:ff:22:c6:9b:c8: 10:0a:de:3a:be:6b:a6:4d:08:f7:d7:67:ec:00:f8:22:ec:00: 55:7f:e5:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz RDY5NTZFMzIwHhcNMjYxMDI4MTY1ODM3WhcNMjYxMTA0MTY1ODM3WjAYMRYwFAYD VQQDEw02YWUyMjliZC01OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6PP+era69C2OV3IfwQPfZZQrUCGWvxaPWyXuTCxl5XJ+RpE+EA3Pbc4+IIf 50F+ZnIHhH2ZecuIGkLzVrv45IUlz/iD4w2VwO9Oqz48484IHYl1kBx3JOaNwX/7 P//O0gsX1N1IIa8OBN6Jv/Us+DgCpfxJpWDGSLGNNrc42t1Fwi1Ot6bNPtfYqh3r xTFKcKS+FrDRWBv11YYWYx5pbmBcD4u2eA4Ch8NxIrkKz+fQSZkZhMB9M3HVhwh7 VqlVGXvYi7SwLwPvi6h9IURZ11WvpHDBcVLNQUenLIi6VQ17HVDaKyBm5A2HuKFQ DkWQoyBd/1DmWT18xEJnICZaCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEXB8bu TTnihB2qxnjGIW8/r1Q/MB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2 OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjk3OC83RTIyQjM3NEI2OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5 YV9vSktEQWhfcEU5YVZiakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsZlpesBoVXECPZ7vzXKnDD/isTwSBRES2NH7DgE9SeF/dbGwfnbMcXZfsjH+ +miGLthxc7Iae1Ibk7e9Wp78PSUtFf27NBkinhe7wCJ1wgrNtI2CCyryA4TA4Bsu bhPr2QDkWKkfLWrxkq4eTjRHLlywqIjwScxlF1ge9ZcFpl/BuKAgYhIO7EZZD8qy qSPEe2OSMKNgPVImY8Mm2KfqcYFw0x+LbEoeHtEUxXrHwney0xAyJLvHI026HobS PKiYXfC2j2q61SVqWzLIJM9WaBzCFyP+kTGcaXeruXUwZ8EDo0bKMP8ixpvIEAre Or5rpk0I99dn7AD4IuwAVX/l5w== -----END CERTIFICATE-----Generated at Thu Oct 29 17:04:10 2026 by rpki-client