$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: 5OmhVq4yNihLQVha0vCAnGx9musgnoCiDY9hNHoJnrM= Subject key identifier: BD:84:D2:EB:4D:7E:E8:14:66:7E:A6:F4:1C:FF:D0:A2:04:BB:6F:31 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 163B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 161A Signing time: Sat 10 Oct 2026 16:44:14 +0000 Manifest this update: Sat 10 Oct 2026 16:44:13 +0000 Manifest next update: Sat 17 Oct 2026 16:44:13 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: LUENih/HlKuStskGOuq5Z7o2XP87duhFGmKn1kx5Zeg=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: 49JEiOnck3YIqSnh0w+N5FmwAfU3DdS+vbKJpG7LI7Q=) 3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: GS7Hz+JO/tFd7f6jkV506RLU0L8tY/ifzdZjJQhwPzk=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5691 (0x163b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Oct 10 16:44:13 2026 GMT Not After : Oct 17 16:44:13 2026 GMT Subject: CN=6aca6b5d-95ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:56:9a:77:93:dc:cd:71:1b:30:78:22:2e: f4:a9:4b:97:44:f2:81:ec:f5:d3:86:23:b4:2f:b0: 20:6b:48:49:5f:48:87:08:7f:26:70:eb:d4:a8:24: 7f:4d:5b:d3:b2:94:8a:7c:e2:f0:4d:62:a1:1c:7d: eb:a3:46:c3:f3:b2:a7:b9:41:ad:61:64:6c:76:cb: b3:37:ec:c2:3f:3f:2f:c6:ea:f5:1e:3b:d0:a1:d0: 33:c2:55:71:b9:34:e3:02:01:09:0a:44:a1:32:69: 3b:e8:be:b5:e3:98:9f:7a:ba:2d:a8:80:52:eb:57: 1a:a2:07:05:67:b4:45:78:6d:97:0c:5b:d2:25:7e: c0:5e:07:67:ad:95:ba:a8:34:ea:be:03:be:d0:b3: 88:cd:ac:82:20:17:5c:ff:8d:56:df:f8:d3:d7:a5: 9c:6d:53:dd:e2:c2:83:04:c2:e1:ad:60:3e:3c:2c: 56:e8:c1:5c:d6:bb:1a:5c:cb:e3:98:c5:1a:fb:c4: ab:1d:ab:3b:9b:12:14:c3:ed:1e:39:b3:eb:ce:a4: f7:d8:6b:1c:34:02:87:f8:14:a9:96:9e:6e:30:cc: f9:ae:61:12:e4:09:79:b0:e0:7f:26:c4:c1:46:87: b1:65:e3:9c:0e:26:1d:16:0c:00:b9:77:2b:3c:22: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:84:D2:EB:4D:7E:E8:14:66:7E:A6:F4:1C:FF:D0:A2:04:BB:6F:31 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:6b:62:c9:49:65:72:3b:eb:95:20:cf:bb:d5:ed:45:6f:c8: f1:40:bf:5a:49:57:76:d9:ee:30:f6:8f:74:83:46:8a:b2:5d: ee:a0:b6:c5:f2:09:7f:09:71:d2:b2:a1:ab:e4:7d:2a:49:c5: 49:2a:a2:40:0e:a2:b3:dc:c8:24:b1:b0:cf:02:40:30:ae:86: 24:c7:84:fb:f3:0e:fb:d9:9f:90:a0:8f:63:8a:dc:3f:b5:36: 7a:e1:d6:32:d5:63:91:a1:99:5d:d0:8f:8c:8f:1b:51:08:1f: ae:e9:fc:f7:3a:83:7f:4d:45:fb:20:48:b9:3c:ea:6e:e2:43: a6:e7:79:02:6a:e3:cc:d5:79:f0:2e:9e:0c:b2:22:f6:24:de: aa:30:90:47:a7:9e:1a:ca:55:7c:d2:48:3d:d1:a7:bd:fc:21: 65:fb:2d:35:ed:58:1e:d0:fd:29:2b:5e:dc:8b:49:0d:56:96: 64:1b:3d:f7:50:84:43:f6:82:b8:46:6d:f6:a2:45:ba:90:d9: 3d:51:88:be:0c:7c:84:ce:95:b7:58:a1:83:6a:81:6c:32:8c: f5:e2:9c:e1:2f:17:51:5a:47:4c:ba:21:c2:b7:f1:85:d0:54: a6:99:35:2c:ec:f9:60:d6:12:b3:f6:fa:14:f2:5b:1d:34:06: 10:77:3a:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjYxMDEwMTY0NDEzWhcNMjYxMDE3MTY0NDEzWjAYMRYwFAYD VQQDEw02YWNhNmI1ZC05NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub5WmneT3M1xGzB4Ii70qUuXRPKB7PXThiO0L7Aga0hJX0iHCH8mcOvUqCR/ TVvTspSKfOLwTWKhHH3ro0bD87KnuUGtYWRsdsuzN+zCPz8vxur1HjvQodAzwlVx uTTjAgEJCkShMmk76L6145iferotqIBS61caogcFZ7RFeG2XDFvSJX7AXgdnrZW6 qDTqvgO+0LOIzayCIBdc/41W3/jT16WcbVPd4sKDBMLhrWA+PCxW6MFc1rsaXMvj mMUa+8SrHas7mxIUw+0eObPrzqT32GscNAKH+BSplp5uMMz5rmES5Al5sOB/JsTB RoexZeOcDiYdFgwAuXcrPCJIuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2E0utN fugUZn6m9Bz/0KIEu28xMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJGtiyUllcjvrlSDPu9XtRW/I8UC/WklXdtnuMPaPdINGirJd7qC2xfIJfwlx 0rKhq+R9KknFSSqiQA6is9zIJLGwzwJAMK6GJMeE+/MO+9mfkKCPY4rcP7U2euHW MtVjkaGZXdCPjI8bUQgfrun89zqDf01F+yBIuTzqbuJDpud5AmrjzNV58C6eDLIi 9iTeqjCQR6eeGspVfNJIPdGnvfwhZfstNe1YHtD9KSte3ItJDVaWZBs991CEQ/aC uEZt9qJFupDZPVGIvgx8hM6Vt1ihg2qBbDKM9eKc4S8XUVpHTLohwrfxhdBUppk1 LOz5YNYSs/b6FPJbHTQGEHc6NQ== -----END CERTIFICATE-----Generated at Mon Oct 12 00:54:16 2026 by rpki-client