$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: 4cbsvVQ/cq+vhknpVjU0BDgl52k5VKGNIwDUL7PGCBw= Subject key identifier: B0:F3:6E:30:4C:C8:F4:E7:29:CC:6A:59:AC:14:F5:78:91:41:69:97 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 35B9 Signing time: Wed 28 Oct 2026 14:18:44 +0000 Manifest this update: Wed 28 Oct 2026 14:18:43 +0000 Manifest next update: Wed 04 Nov 2026 14:18:43 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: F44pKfLi5Wp0+fSlJ1A74OPeGpY2CHWmIIeR8p3vxsA=) 2: vGD_i-ufSXp4QvGD4i80b3LhTIQ.asa (hash: fgjYIXWbUTvh0tLaOEUg6nwtsdUtFLyvcmGXgs2vsZ8=) 3: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: tqtw4ZzPM+7v2OXL4ee9j+OhCHpdq+ETgmzVjNEKuZM=) 4: 1566F532B1C111F1A50EDCAD3B11F970.roa (hash: eLxkBOamtm81MpbJ50sALkQHzYmuXzOthatH6ezkZAE=) 5: B683232C65AA11F1B5A6BBF27847A888.roa (hash: Q1GcTAgf2nrtpktPJ+ZVkiLvWbDwB2IXx55xo1QNSIc=) 6: 1F40296A65AA11F1A2780DB67847A888.roa (hash: 5pA71dkaLyZI4tt6GSYpT0q9d3vNjsFRCh52Rfsg9js=) 7: FFF66C16B1FA11F18EC9E9F94D11F970.roa (hash: 2mv9ZOAc6mHVkd+OYaS2VGBltCSWoZlTZtwkPDhN2U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13807 (0x35ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Oct 28 14:18:43 2026 GMT Not After : Nov 4 14:18:43 2026 GMT Subject: CN=6ae20444-14f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:52:34:3b:35:e9:d7:84:d9:70:7f:b0:f2: 30:47:76:a0:e3:28:e3:a1:0b:a1:85:d9:2d:2b:14: b0:c4:83:9f:2c:f2:ba:1f:9c:61:6b:42:c8:90:8e: ba:ef:85:b1:7a:71:47:e2:dc:a3:08:98:52:50:a3: 37:a5:05:b4:61:ed:1d:8f:51:85:e0:93:84:27:69: 23:95:ff:7a:7f:a3:05:cb:fe:11:ce:6d:df:08:b3: 10:69:75:07:30:78:94:01:bd:dd:32:f5:6b:9d:76: 95:25:f4:d4:b8:ed:88:95:16:14:82:b1:7d:85:bb: a7:96:0b:e9:69:c3:72:6b:00:1b:24:c0:65:5a:55: fc:02:83:cf:1b:73:f6:3f:12:40:26:0e:dd:b5:26: 92:b8:58:1c:e3:05:63:17:55:70:f8:6f:8f:05:75: 15:c5:11:ba:05:d9:9a:b5:53:15:29:c0:d9:d5:5a: 58:e1:cd:bc:a3:0f:4f:f0:72:e2:1e:70:d7:d1:71: 9a:b4:fa:92:d8:93:a8:c0:cc:05:7d:07:49:eb:41: a6:73:6d:b1:8f:bc:f7:d0:00:ce:53:51:21:41:80: 0f:b0:2b:4c:f1:57:3a:99:59:c9:58:da:39:80:3e: b5:ce:af:a8:13:da:f6:cd:17:60:96:48:c5:9c:5d: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F3:6E:30:4C:C8:F4:E7:29:CC:6A:59:AC:14:F5:78:91:41:69:97 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:64:a0:7b:40:ab:e8:3b:08:3f:95:24:10:ee:f4:4d:05:d1: f5:a7:73:a7:f6:bc:1e:af:6c:98:a2:ea:11:bf:33:5f:f3:44: d0:09:91:2f:e3:a3:92:10:ad:b0:ca:2e:33:31:8f:03:21:57: bf:b8:a8:d5:a3:5c:9b:34:7a:c3:a3:b4:c2:4c:d3:05:5c:99: 19:67:47:38:80:36:74:a7:c3:81:8b:bc:8a:f2:82:c2:65:b5: 75:3f:7a:cd:98:36:9c:fc:7d:fe:cd:26:dd:a0:ac:40:3e:c7: 37:e1:41:63:db:47:b1:a3:d3:cf:e8:04:6a:cc:ba:69:fb:f2: d4:e8:35:27:1f:b8:6f:f8:41:41:64:b3:78:a7:4d:d8:05:13: 61:07:48:ef:84:93:b6:37:6a:60:78:71:da:0d:9f:db:e5:34: 95:d7:78:1a:17:62:d5:20:07:22:c3:b8:27:02:76:35:0d:49: 23:7c:fc:83:6e:2d:fe:16:c8:30:9e:c6:96:e3:30:36:3b:e0: 2f:c4:fe:8b:54:90:9a:67:4f:af:ee:d9:55:20:f0:41:82:01: 9b:a7:69:13:98:02:7f:dc:8a:f7:a2:0b:18:22:4a:81:87:a7: 6d:0a:df:1a:63:15:b0:bb:43:26:b6:90:85:5b:c8:1c:c2:29: ff:6e:f3:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYxMDI4MTQxODQzWhcNMjYxMTA0MTQxODQzWjAYMRYwFAYD VQQDEw02YWUyMDQ0NC0xNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b1SNDs16deE2XB/sPIwR3ag4yjjoQuhhdktKxSwxIOfLPK6H5xha0LIkI66 74WxenFH4tyjCJhSUKM3pQW0Ye0dj1GF4JOEJ2kjlf96f6MFy/4Rzm3fCLMQaXUH MHiUAb3dMvVrnXaVJfTUuO2IlRYUgrF9hbunlgvpacNyawAbJMBlWlX8AoPPG3P2 PxJAJg7dtSaSuFgc4wVjF1Vw+G+PBXUVxRG6BdmatVMVKcDZ1VpY4c28ow9P8HLi HnDX0XGatPqS2JOowMwFfQdJ60Gmc22xj7z30ADOU1EhQYAPsCtM8Vc6mVnJWNo5 gD61zq+oE9r2zRdglkjFnF0wWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDzbjBM yPTnKcxqWawU9XiRQWmXMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGmSge0Cr6DsIP5UkEO70TQXR9adzp/a8Hq9smKLqEb8zX/NE0AmRL+OjkhCt sMouMzGPAyFXv7io1aNcmzR6w6O0wkzTBVyZGWdHOIA2dKfDgYu8ivKCwmW1dT96 zZg2nPx9/s0m3aCsQD7HN+FBY9tHsaPTz+gEasy6afvy1Og1Jx+4b/hBQWSzeKdN 2AUTYQdI74STtjdqYHhx2g2f2+U0ldd4Ghdi1SAHIsO4JwJ2NQ1JI3z8g24t/hbI MJ7GluMwNjvgL8T+i1SQmmdPr+7ZVSDwQYIBm6dpE5gCf9yK96ILGCJKgYenbQrf GmMVsLtDJraQhVvIHMIp/27zoA== -----END CERTIFICATE-----Generated at Thu Oct 29 17:03:14 2026 by rpki-client