$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: MZ8OozplTPr5t6eOSQDx79tEVLTe5+Me/yzXlvj2J90= Subject key identifier: 04:D9:CD:85:54:58:21:8B:64:75:41:FF:5C:99:82:80:EC:C1:32:90 Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 0570 Signing time: Sat 31 Oct 2026 23:52:50 +0000 Manifest this update: Sat 31 Oct 2026 23:52:49 +0000 Manifest next update: Sat 07 Nov 2026 23:52:49 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: ZCGT/OlwP9+ai9RY8X6YXYMzynPimGwYpKQOHbLPfdM=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=) 3: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=) 4: 5542C1D66D7E11F1B74F03108747A888.roa (hash: GK+s6oT3MEUn7idrDMZYD/2eUrDgfq7a0JF4Bt8bdJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 23:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: Oct 31 23:52:49 2026 GMT Not After : Nov 7 23:52:49 2026 GMT Subject: CN=6ae67f52-74c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:22:15:9a:36:8f:59:fd:d1:4f:9c:3c:74: 2d:74:52:fd:21:6c:41:7d:52:ab:64:13:92:71:0f: 33:c8:58:26:f8:07:74:89:cc:bd:12:7d:c8:20:b4: 0a:bc:a1:55:3f:81:d4:2a:5d:03:15:2c:ac:d9:8e: de:01:da:41:d9:c2:86:63:f7:07:8d:8a:2f:77:ca: 19:e6:a6:54:10:c5:18:2c:37:b8:42:5b:27:1c:10: d0:50:be:f4:2e:38:44:6f:01:bf:fa:ca:eb:d8:ce: 32:18:e6:8b:cb:1f:2b:b6:4c:15:ec:4e:45:79:ae: f3:05:9a:13:18:25:64:68:14:81:56:69:2a:dd:45: 35:bb:1e:a7:b7:1f:ed:32:d4:8d:3c:75:9e:ac:a1: 31:2b:72:ba:74:f2:52:31:23:6a:b0:59:f8:d7:5c: 2a:b5:14:70:d5:36:5f:05:44:4b:48:4f:45:92:2a: c8:44:47:76:e6:25:36:d9:36:2b:4c:5f:8a:f0:7d: ee:02:67:31:a4:ad:11:49:c3:30:8c:c9:71:33:53: f5:34:ca:c0:65:01:29:8d:c0:71:ce:d8:7e:67:4d: dc:bc:b4:ae:c2:2a:b1:4e:c6:19:83:00:ef:95:0b: 0d:f0:02:76:06:20:f0:6b:3d:19:21:93:d8:8f:42: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D9:CD:85:54:58:21:8B:64:75:41:FF:5C:99:82:80:EC:C1:32:90 X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:78:8a:28:06:e1:1f:0d:15:14:b0:5d:18:d8:83:3a:4f:a7: e2:31:2f:3e:56:3d:d0:93:ff:2a:e5:aa:50:59:f3:f6:2d:9f: 35:af:5b:5d:64:33:6e:9e:0f:d9:c0:4c:9e:59:66:68:ac:c4: df:9d:3b:74:80:07:52:8e:ed:29:e2:1a:f5:36:6e:9c:7e:d3: 18:f1:a3:22:85:3b:77:04:66:14:31:1d:ac:51:0d:10:a6:00: 5c:cf:d5:f6:fb:db:2b:8d:a1:c3:3e:36:5a:1d:f8:4a:f6:32: 4a:fb:6f:3f:d0:07:4a:27:d0:3f:c9:4f:69:4f:87:91:02:60: 8c:d8:22:d4:8a:c4:16:c7:e5:5b:81:96:35:9d:8f:91:e4:37: f7:08:f2:6e:a7:f5:1b:90:03:01:9c:23:be:93:d2:fd:e1:ae: 34:1f:b0:25:b7:6a:f2:6b:5d:e7:e3:a6:e6:c9:5c:73:a7:2f: da:5a:7d:83:13:a5:33:dd:80:73:56:bf:7d:b6:a7:02:06:d3: 75:a2:b7:ae:eb:76:c7:cb:75:83:35:cb:02:6c:67:d3:a5:48: 0f:29:16:ad:cd:1a:83:d0:aa:e2:c4:a7:c5:c6:4a:09:80:d6: 4a:55:4e:9f:92:34:d9:28:41:16:2a:8a:e7:bb:6e:ce:8d:cb: 59:e9:07:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjYxMDMxMjM1MjQ5WhcNMjYxMTA3MjM1MjQ5WjAYMRYwFAYD VQQDEw02YWU2N2Y1Mi03NGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwysiFZo2j1n90U+cPHQtdFL9IWxBfVKrZBOScQ8zyFgm+Ad0icy9En3IILQK vKFVP4HUKl0DFSys2Y7eAdpB2cKGY/cHjYovd8oZ5qZUEMUYLDe4QlsnHBDQUL70 LjhEbwG/+srr2M4yGOaLyx8rtkwV7E5Fea7zBZoTGCVkaBSBVmkq3UU1ux6ntx/t MtSNPHWerKExK3K6dPJSMSNqsFn411wqtRRw1TZfBURLSE9FkirIREd25iU22TYr TF+K8H3uAmcxpK0RScMwjMlxM1P1NMrAZQEpjcBxzth+Z03cvLSuwiqxTsYZgwDv lQsN8AJ2BiDwaz0ZIZPYj0KviwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATZzYVU WCGLZHVB/1yZgoDswTKQMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARHiKKAbhHw0VFLBdGNiDOk+n4jEvPlY90JP/KuWqUFnz9i2fNa9bXWQzbp4P 2cBMnllmaKzE3507dIAHUo7tKeIa9TZunH7TGPGjIoU7dwRmFDEdrFENEKYAXM/V 9vvbK42hwz42Wh34SvYySvtvP9AHSifQP8lPaU+HkQJgjNgi1IrEFsflW4GWNZ2P keQ39wjybqf1G5ADAZwjvpPS/eGuNB+wJbdq8mtd5+Om5slcc6cv2lp9gxOlM92A c1a/fbanAgbTdaK3rut2x8t1gzXLAmxn06VIDykWrc0ag9Cq4sSnxcZKCYDWSlVO n5I02ShBFiqK57tuzo3LWekHkg== -----END CERTIFICATE-----Generated at Mon Nov 2 08:28:27 2026 by rpki-client