$ rpki-client -vvvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: h73ZiaAl0xE8zFHi67fVgvXqpNYS5FxZ8ine90suNVw= Subject key identifier: C9:09:AF:54:E3:1F:6A:26:FC:B5:84:4A:98:38:CF:78:B0:CF:08:D4 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 058E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 0577 Signing time: Mon 26 Oct 2026 23:12:28 +0000 Manifest this update: Mon 26 Oct 2026 23:12:28 +0000 Manifest next update: Mon 02 Nov 2026 23:12:28 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: r50iudybLLsqkLfxMF9JzWx0hcLpWLqSzMBftFY4UOE=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: LJy17ILIBfPomAik/C3VD6opwZLbdXQBjkGQXiaQSQ4=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: HrJ+8JztV8jOok9XoxaSZjsBUJtbPDSkJYLMEhJeKdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Oct 26 23:12:28 2026 GMT Not After : Nov 2 23:12:28 2026 GMT Subject: CN=6adfde5c-df1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:69:97:f2:d6:d1:06:86:24:1a:a9:3b:0a: 17:a7:58:41:96:9a:14:6f:ba:3d:76:06:92:f0:c9: f7:40:4c:2e:41:e0:5f:af:5a:be:f2:31:14:59:3d: bd:ad:6a:15:f0:cd:17:96:6e:a7:a8:b5:28:30:c0: 91:3c:12:80:83:59:45:b9:d4:9e:ef:ca:45:d4:aa: 71:10:5a:53:87:d4:13:7d:22:59:2f:39:a3:44:0a: 81:2f:f9:46:82:93:60:49:49:0f:81:a2:70:75:54: 87:70:fe:20:c1:6f:a4:39:e2:91:ed:47:c2:19:45: 5e:fd:7f:30:3a:ea:92:88:26:6f:48:46:8c:85:f8: 48:98:6a:fd:20:08:8d:83:da:52:5e:9f:91:ff:18: aa:ad:28:a5:1f:59:d6:5f:a3:98:f9:60:3b:9b:6c: 62:f8:d3:02:8b:30:0c:56:27:85:bf:72:84:58:5f: fe:08:d0:0e:7d:d7:63:27:2d:74:c2:c4:35:ae:22: 88:00:5f:d2:ae:c1:eb:5d:c3:16:af:de:da:51:a9: ac:64:4d:71:6e:6d:70:1b:78:0f:25:d3:d4:63:33: f6:d6:18:d8:ae:fe:6b:38:06:d7:e7:2d:20:dd:e4: 3e:6b:35:33:4b:38:79:eb:e9:f2:68:88:d8:a7:07: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:09:AF:54:E3:1F:6A:26:FC:B5:84:4A:98:38:CF:78:B0:CF:08:D4 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a7:42:be:b7:78:37:2c:bf:87:5b:82:95:96:eb:aa:75:79: dc:03:72:15:42:d1:95:ba:be:26:13:6e:81:20:28:d6:c1:6e: 1c:25:dc:10:dd:f9:a8:c9:82:f1:a7:82:42:87:a7:85:c2:3d: f2:1a:61:1c:70:5e:78:bd:80:55:2e:e8:dd:0a:fe:7c:f7:30: 12:9b:d7:58:58:30:62:5b:34:9c:f5:e4:6a:09:96:7f:d5:ee: d2:53:01:94:98:cd:de:9f:c5:a5:26:a1:58:0e:00:aa:bb:69: 81:0f:60:d0:f5:32:71:62:16:6e:31:32:96:ab:0f:ca:81:1c: 16:0a:7d:8f:fe:f1:77:21:41:71:5d:5f:97:55:47:03:10:c2: e4:1f:d9:97:53:28:e9:be:a9:64:03:60:76:3d:67:6b:b5:6b: 12:30:27:ac:c5:57:57:5f:71:d0:fb:e3:b6:cb:ee:e8:23:48: 59:84:9b:d5:ce:9e:cf:66:f2:d5:b8:e8:fa:2d:d9:b2:ad:60: b6:00:30:d9:00:ad:59:a2:09:02:ae:c2:89:fe:8f:f3:0c:65: a9:21:0d:9a:b5:c7:a4:70:c7:59:de:29:92:d9:1f:40:27:56: 1d:c8:d7:80:f4:b2:dd:41:55:1d:31:6f:3b:a3:8c:48:68:93: e1:cc:cf:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjYxMDI2MjMxMjI4WhcNMjYxMTAyMjMxMjI4WjAYMRYwFAYD VQQDEw02YWRmZGU1Yy1kZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrtpl/LW0QaGJBqpOwoXp1hBlpoUb7o9dgaS8Mn3QEwuQeBfr1q+8jEUWT29 rWoV8M0Xlm6nqLUoMMCRPBKAg1lFudSe78pF1KpxEFpTh9QTfSJZLzmjRAqBL/lG gpNgSUkPgaJwdVSHcP4gwW+kOeKR7UfCGUVe/X8wOuqSiCZvSEaMhfhImGr9IAiN g9pSXp+R/xiqrSilH1nWX6OY+WA7m2xi+NMCizAMVieFv3KEWF/+CNAOfddjJy10 wsQ1riKIAF/SrsHrXcMWr97aUamsZE1xbm1wG3gPJdPUYzP21hjYrv5rOAbX5y0g 3eQ+azUzSzh56+nyaIjYpweT7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkJr1Tj H2om/LWESpg4z3iwzwjUMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASadCvrd4Nyy/h1uClZbrqnV53ANyFULRlbq+JhNugSAo1sFuHCXcEN35qMmC 8aeCQoenhcI98hphHHBeeL2AVS7o3Qr+fPcwEpvXWFgwYls0nPXkagmWf9Xu0lMB lJjN3p/FpSahWA4AqrtpgQ9g0PUycWIWbjEylqsPyoEcFgp9j/7xdyFBcV1fl1VH AxDC5B/Zl1Mo6b6pZANgdj1na7VrEjAnrMVXV19x0Pvjtsvu6CNIWYSb1c6ez2by 1bjo+i3Zsq1gtgAw2QCtWaIJAq7Cif6P8wxlqSENmrXHpHDHWd4pktkfQCdWHcjX gPSy3UFVHTFvO6OMSGiT4czPKg== -----END CERTIFICATE-----Generated at Wed Oct 28 10:28:42 2026 by rpki-client