$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: /r94/tNV17IIi1JC+iudc9Wyj+fqLk9Se/GLeyqrih8= Subject key identifier: 41:B9:D3:11:B6:35:C7:5F:3C:4E:05:D7:17:CE:B8:8D:EB:DC:E8:0A Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 35B8 Signing time: Mon 26 Oct 2026 14:18:39 +0000 Manifest this update: Mon 26 Oct 2026 14:18:38 +0000 Manifest next update: Mon 02 Nov 2026 14:18:38 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: Dpcop6nXZUsF+v3y73Z/S2loSiBlJGvL1lPx1CLHJCM=) 2: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: tqtw4ZzPM+7v2OXL4ee9j+OhCHpdq+ETgmzVjNEKuZM=) 3: 1566F532B1C111F1A50EDCAD3B11F970.roa (hash: eLxkBOamtm81MpbJ50sALkQHzYmuXzOthatH6ezkZAE=) 4: B683232C65AA11F1B5A6BBF27847A888.roa (hash: Q1GcTAgf2nrtpktPJ+ZVkiLvWbDwB2IXx55xo1QNSIc=) 5: 1F40296A65AA11F1A2780DB67847A888.roa (hash: 5pA71dkaLyZI4tt6GSYpT0q9d3vNjsFRCh52Rfsg9js=) 6: vGD_i-ufSXp4QvGD4i80b3LhTIQ.asa (hash: fgjYIXWbUTvh0tLaOEUg6nwtsdUtFLyvcmGXgs2vsZ8=) 7: FFF66C16B1FA11F18EC9E9F94D11F970.roa (hash: 2mv9ZOAc6mHVkd+OYaS2VGBltCSWoZlTZtwkPDhN2U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13806 (0x35ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Oct 26 14:18:38 2026 GMT Not After : Nov 2 14:18:38 2026 GMT Subject: CN=6adf613f-5fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:c0:09:45:5e:e0:67:d0:ec:03:00:24:4c: b8:df:50:c5:e9:39:4b:f9:fe:51:b9:1e:43:69:0c: 8c:70:4d:b9:be:62:2a:36:66:1a:bd:57:8d:5b:5f: dd:b3:5b:16:dc:b9:a8:a0:98:77:e8:d7:a4:93:1a: 72:2e:4f:43:fc:69:a0:ec:4e:32:2e:1f:bf:7e:aa: f5:5b:89:5c:ba:2c:c1:f2:66:ea:0b:97:34:d7:05: b6:eb:f3:f0:86:71:f5:81:05:bd:8b:37:76:05:e5: 3c:21:fa:98:de:a6:cd:20:bf:8b:fc:27:f1:f7:3f: 89:94:6e:72:e4:02:4c:41:f1:71:81:20:18:fa:d9: 87:63:19:c8:c8:61:ad:43:3a:e8:d8:23:c2:44:3e: 5d:aa:a7:ba:86:33:2e:1b:db:88:7a:2b:43:94:57: a2:47:a4:65:9c:d3:e3:f2:53:76:29:83:59:0a:af: 43:6e:8d:07:2d:98:70:63:e2:cd:8f:bf:79:f4:cf: a3:07:28:5a:dd:9d:f3:4c:ff:69:33:05:1b:75:d7: 4c:73:b9:c2:08:88:35:46:a3:a6:57:8b:58:fa:85: 8d:c1:5c:a8:49:5e:45:03:09:94:20:84:36:ec:d8: 79:1f:aa:03:2e:4e:af:1e:b1:37:54:01:04:27:24: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B9:D3:11:B6:35:C7:5F:3C:4E:05:D7:17:CE:B8:8D:EB:DC:E8:0A X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:4e:ea:67:64:7a:74:4c:5d:e2:81:c9:5d:2d:27:49:bd:4a: 3d:13:8f:ff:b5:16:5f:65:77:6a:7d:58:5d:ba:ad:80:1a:9b: a3:dc:18:8d:a3:f3:f5:6a:f5:5e:5c:05:2f:85:d6:76:9d:1f: 4a:2d:d8:a3:24:2d:c5:77:63:b8:22:f4:82:53:9b:57:9f:4f: 48:fc:85:e5:10:52:3b:c7:de:ff:49:2c:03:0d:55:d5:78:04: ea:c3:8c:32:39:bf:f6:c5:79:49:93:dd:48:62:c1:df:87:4a: 53:99:00:92:5a:04:30:7c:eb:17:25:a0:1f:72:8d:58:50:bc: 9b:54:1d:90:30:68:fb:6f:d5:83:72:41:1b:a4:e1:5c:25:1e: 70:ca:cb:37:f1:60:a5:bd:99:77:49:ad:9d:50:b1:de:08:61: 3c:f1:da:52:63:11:16:9c:9b:72:39:95:db:20:eb:bd:68:c5: c7:e9:2a:27:2c:64:f2:ef:a6:64:b3:66:5a:d2:e9:8e:cb:f4: 73:2b:0f:7a:d3:19:e0:5f:6e:72:87:c6:b4:b8:d9:d8:60:67: 17:fd:a4:84:c9:28:d7:b0:56:7b:3d:6f:de:19:e6:fd:cf:61: 93:01:b9:ec:2d:18:d2:1e:3b:b9:ef:d9:49:f9:7f:35:97:bc: ac:8c:b5:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYxMDI2MTQxODM4WhcNMjYxMTAyMTQxODM4WjAYMRYwFAYD VQQDEw02YWRmNjEzZi01ZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYXACUVe4GfQ7AMAJEy431DF6TlL+f5RuR5DaQyMcE25vmIqNmYavVeNW1/d s1sW3LmooJh36NekkxpyLk9D/Gmg7E4yLh+/fqr1W4lcuizB8mbqC5c01wW26/Pw hnH1gQW9izd2BeU8IfqY3qbNIL+L/Cfx9z+JlG5y5AJMQfFxgSAY+tmHYxnIyGGt Qzro2CPCRD5dqqe6hjMuG9uIeitDlFeiR6RlnNPj8lN2KYNZCq9Dbo0HLZhwY+LN j7959M+jByha3Z3zTP9pMwUbdddMc7nCCIg1RqOmV4tY+oWNwVyoSV5FAwmUIIQ2 7Nh5H6oDLk6vHrE3VAEEJyQJIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEG50xG2 NcdfPE4F1xfOuI3r3OgKMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMk7qZ2R6dExd4oHJXS0nSb1KPROP/7UWX2V3an1YXbqtgBqbo9wYjaPz9Wr1 XlwFL4XWdp0fSi3YoyQtxXdjuCL0glObV59PSPyF5RBSO8fe/0ksAw1V1XgE6sOM Mjm/9sV5SZPdSGLB34dKU5kAkloEMHzrFyWgH3KNWFC8m1QdkDBo+2/Vg3JBG6Th XCUecMrLN/Fgpb2Zd0mtnVCx3ghhPPHaUmMRFpybcjmV2yDrvWjFx+kqJyxk8u+m ZLNmWtLpjsv0cysPetMZ4F9ucofGtLjZ2GBnF/2khMko17BWez1v3hnm/c9hkwG5 7C0Y0h47ue/ZSfl/NZe8rIy19g== -----END CERTIFICATE-----Generated at Wed Oct 28 16:31:07 2026 by rpki-client