$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: fHvwQNxC8hO7sN4d3TcIEUA9kS3ZW28YJuYRPO20U+Y= Subject key identifier: 40:F8:43:E9:21:41:17:D8:5E:28:EF:9B:F5:02:77:49:CE:AA:80:1D Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 0278 Signing time: Sun 25 Oct 2026 02:18:26 +0000 Manifest this update: Sun 25 Oct 2026 02:18:26 +0000 Manifest next update: Sun 01 Nov 2026 02:18:26 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: udtyPyA1Ec8lueCAEGxQPFBKsEfjeAs4KHDl1yZXHu8=) 2: R6BHRo62GtsSYK9CwGU0B99Bg3g.asa (hash: NsJb2in6gp7hfwhYnDER/z+Z1HlvVdEc0aLqBjEB1l8=) 3: 27623F48040711F193DC81CA173D8C67.roa (hash: mzCIZfKTucgozxw0jlm4c47n5Z3DTwwALFRuv9z3XQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Oct 25 02:18:26 2026 GMT Not After : Nov 1 02:18:26 2026 GMT Subject: CN=6add66f2-90fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:2c:86:d3:b9:96:c6:97:ce:17:ef:48:93: 8b:a6:2a:7e:6e:d3:6d:0b:1e:4f:02:13:b2:5b:5a: f4:47:ee:ab:a9:49:18:d5:25:92:4f:9c:10:fa:b6: 1b:38:27:ca:e5:34:d6:0c:5c:a0:a2:eb:a7:ed:26: 21:6c:37:07:e6:ed:49:e0:6e:61:56:14:c9:32:96: 4c:0e:ab:a3:4d:a7:e7:e5:85:16:5a:a2:6a:71:db: c9:d5:5b:67:7b:4f:13:47:1c:11:9d:49:81:5e:18: 11:67:63:6e:c6:93:99:ac:e6:06:c6:ec:c7:51:e4: 56:01:a5:97:1a:19:19:82:e5:02:5c:c7:cd:5c:6d: ff:dc:e9:40:c9:aa:07:f6:1a:76:be:36:bc:7c:dd: df:d5:c5:5b:c8:c6:4f:95:86:66:f5:18:3b:df:1f: 36:07:ab:6f:86:be:bd:a4:c1:6c:5b:31:ac:eb:06: ad:79:e8:18:85:5f:51:13:a7:63:17:b7:ff:5b:c4: aa:f4:0b:67:a7:2e:f4:4f:e9:f7:12:60:57:ac:d2: a8:41:ec:59:5b:e3:7e:c1:6f:10:06:2d:70:f9:ba: 96:1a:a5:88:84:1b:8c:35:6f:50:47:ad:62:da:8e: 21:67:b5:74:fe:ff:a2:05:fb:ad:05:dc:d1:9f:0f: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F8:43:E9:21:41:17:D8:5E:28:EF:9B:F5:02:77:49:CE:AA:80:1D X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d2:63:5a:0e:9f:00:0d:7f:c2:2a:9b:3a:a0:9b:63:91:45: 82:ee:82:99:13:78:b4:cf:c1:54:70:85:7a:11:17:63:a4:6f: cc:26:69:14:1c:fd:fe:b9:fd:4d:64:1a:38:bf:ee:4a:47:86: 96:70:70:b5:15:40:40:e5:3a:66:62:c2:9c:ef:d5:c7:30:15: 72:7e:7e:ef:1d:64:b5:a1:87:34:22:06:f6:9b:94:e8:93:9e: 34:bd:2b:93:80:ea:99:2c:15:c8:a3:88:0e:d8:b3:63:d9:b1: 69:ee:19:d5:57:6a:84:ee:23:c2:d4:86:9b:b9:6b:6d:6f:ed: 11:10:a7:75:b6:84:96:48:9d:06:6a:15:c6:32:3f:14:7d:16: a7:2c:0b:b7:e9:2c:a9:e6:a0:82:c7:72:4c:43:d8:25:d3:f6: fe:ce:6a:75:91:4f:95:f1:35:cc:ba:f0:17:ae:e4:c1:30:cc: 14:3e:2b:f4:b8:b3:57:3d:62:44:50:f8:4b:77:ff:39:f5:4d: 1c:d7:10:76:db:fc:52:cd:1c:96:96:00:55:a8:39:f2:5e:77: 2b:d5:03:ab:33:17:fb:c9:cb:17:29:1b:9c:fb:4c:75:57:50: 3b:41:cb:c7:be:1d:25:22:48:10:3b:7b:0c:58:da:45:22:70: 3b:a6:c6:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjYxMDI1MDIxODI2WhcNMjYxMTAxMDIxODI2WjAYMRYwFAYD VQQDEw02YWRkNjZmMi05MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TgshtO5lsaXzhfvSJOLpip+btNtCx5PAhOyW1r0R+6rqUkY1SWST5wQ+rYb OCfK5TTWDFygouun7SYhbDcH5u1J4G5hVhTJMpZMDqujTafn5YUWWqJqcdvJ1Vtn e08TRxwRnUmBXhgRZ2NuxpOZrOYGxuzHUeRWAaWXGhkZguUCXMfNXG3/3OlAyaoH 9hp2vja8fN3f1cVbyMZPlYZm9Rg73x82B6tvhr69pMFsWzGs6wateegYhV9RE6dj F7f/W8Sq9Atnpy70T+n3EmBXrNKoQexZW+N+wW8QBi1w+bqWGqWIhBuMNW9QR61i 2o4hZ7V0/v+iBfutBdzRnw8pyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFED4Q+kh QRfYXijvm/UCd0nOqoAdMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9JjWg6fAA1/wiqbOqCbY5FFgu6CmRN4tM/BVHCFehEXY6RvzCZpFBz9/rn9 TWQaOL/uSkeGlnBwtRVAQOU6ZmLCnO/VxzAVcn5+7x1ktaGHNCIG9puU6JOeNL0r k4DqmSwVyKOIDtizY9mxae4Z1VdqhO4jwtSGm7lrbW/tERCndbaElkidBmoVxjI/ FH0WpywLt+ksqeaggsdyTEPYJdP2/s5qdZFPlfE1zLrwF67kwTDMFD4r9LizVz1i RFD4S3f/OfVNHNcQdtv8Us0clpYAVag58l53K9UDqzMX+8nLFykbnPtMdVdQO0HL x74dJSJIEDt7DFjaRSJwO6bGBg== -----END CERTIFICATE-----Generated at Tue Oct 27 01:53:32 2026 by rpki-client