$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft File: KbaocCpK1kSocQZLZAet5JPmOo0.mft (raw, json) Hash identifier: 8UuDvqE/dFYudi/gLSjwqlPbmnMCAqyxhZ+514t/cMc= Subject key identifier: C6:9F:09:40:69:50:27:88:80:5D:E7:A2:AD:17:62:29:87:D2:3B:4B Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1AC5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft Manifest number: 1A90 Signing time: Fri 16 Oct 2026 16:22:39 +0000 Manifest this update: Fri 16 Oct 2026 16:22:39 +0000 Manifest next update: Fri 23 Oct 2026 16:22:39 +0000 Files and hashes: 1: KbaocCpK1kSocQZLZAet5JPmOo0.crl (hash: 7TLyos0BjpUwbnxof41XllL6SiMMTReetx+sZ8czljQ=) 2: CB355B666EA911F1979A4FB45FA30FBC.roa (hash: /IseCICH6q3e2nUzOYWats2uppQ9nbnphidvQoo+KcI=) 3: CAA99CAC6EA911F1979A4FB45FA30FBC.roa (hash: m7EUzzHnpucYKiHcNFB8qgSUahU1+/tp+vEsRlqPQUM=) 4: 932C5CF28B2C11F1938379423E11F970.roa (hash: 6x4zg3RShZkV+0VjijXtAsRZy4Cy68u6hzwg44RyXgo=) 5: E7729178378211EF822BAA6EC4F9AE02.roa (hash: kWi4j9Wig93ekWVxphoEylI+bhEAyZFHwi2cC9HjPZU=) 6: 92AEE092378211EFAEB6B36DC4F9AE02.roa (hash: 4taf7ltYE6M7p58XiP5zUTTzb89QrcQbwrr0YABbhPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 16:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6853 (0x1ac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Oct 16 16:22:39 2026 GMT Not After : Oct 23 16:22:39 2026 GMT Subject: CN=6ad24f4f-533c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:05:df:ef:d7:be:1a:c3:05:e1:e1:d4:4f:50: d2:3e:64:62:0b:24:20:47:2e:eb:f7:d2:d7:10:e6: b2:02:c7:30:f8:f9:d4:2b:5b:f3:87:f1:56:4d:1b: f2:3e:63:57:58:31:0a:52:77:2b:5d:d9:32:a0:ac: 80:65:fb:c5:11:19:cd:dc:13:9a:fd:3b:06:ab:49: a7:1c:19:4c:2d:79:23:3b:e8:57:2c:4a:0e:0d:24: 88:aa:2c:8c:b4:7f:65:64:b5:30:dc:5a:ac:42:d9: f8:2c:14:68:a5:93:06:70:12:5f:05:6c:19:c5:50: 33:b3:0a:80:87:c9:ee:83:8f:e3:b6:31:81:ef:86: 58:a8:29:ab:23:85:2d:96:6f:e9:cf:4b:3c:0f:d7: fb:ab:09:74:f0:75:53:a6:7d:eb:13:e2:da:08:8b: ba:de:06:12:d9:f4:50:11:6e:7f:b4:a9:ca:9e:2f: 58:7e:3c:67:4a:0a:67:6e:a1:5b:4c:21:3a:cb:39: 54:7a:9b:22:f6:bd:45:be:16:f2:47:f5:f5:74:6c: 15:46:61:6b:88:80:ca:c8:75:3e:b4:69:14:fd:53: 1d:2f:c5:e1:6f:0d:d0:5f:36:9f:75:88:7d:a4:45: d9:f5:52:06:02:27:cc:f7:b7:ae:ca:42:d1:59:a3: 41:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:09:40:69:50:27:88:80:5D:E7:A2:AD:17:62:29:87:D2:3B:4B X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c2:79:1e:e2:96:40:e5:4a:1b:10:47:a6:24:30:b0:61:f5: 8c:1b:9d:1a:54:76:f8:ea:10:08:80:16:06:b5:62:34:62:43: 30:fc:08:ea:5e:22:da:0a:7a:ce:6e:c8:3e:c9:af:97:6a:e8: c5:01:59:3d:cc:c9:ce:17:82:94:17:0e:6b:5e:24:b6:0e:4e: 47:9b:55:0f:7b:57:36:f1:4e:7e:06:34:73:5d:ed:e4:7e:1e: 6d:f7:f9:a9:93:a6:e0:a1:19:60:4f:1a:65:1e:49:ae:b1:49: 0f:e2:ec:29:b0:0f:20:3a:85:81:c3:00:bd:07:87:77:d8:e5: 0f:08:fd:b7:60:18:49:8b:c9:e4:63:13:8b:c5:c2:20:6f:7b: 72:22:91:cf:d4:7b:e2:90:7b:1b:fa:32:aa:60:8d:78:00:68: 98:ec:b6:7a:d5:de:3d:74:e7:9a:8b:94:16:51:bd:cb:cd:5b: 0c:04:cc:ff:57:56:2d:6a:cf:c9:b9:44:7b:ee:89:d7:31:05: 08:bc:79:8e:c0:a2:51:80:03:3a:9c:e9:46:cf:fb:b1:02:a3: fe:7e:a4:54:b0:6c:d5:c5:49:db:a5:bb:7e:a9:ca:0a:cd:3e: 31:6e:6a:c5:9b:38:6b:43:e0:54:4e:85:7f:6a:77:b2:7b:dd: e9:44:27:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYxMDE2MTYyMjM5WhcNMjYxMDIzMTYyMjM5WjAYMRYwFAYD VQQDEw02YWQyNGY0Zi01MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlAXf79e+GsMF4eHUT1DSPmRiCyQgRy7r99LXEOayAscw+PnUK1vzh/FWTRvy PmNXWDEKUncrXdkyoKyAZfvFERnN3BOa/TsGq0mnHBlMLXkjO+hXLEoODSSIqiyM tH9lZLUw3FqsQtn4LBRopZMGcBJfBWwZxVAzswqAh8nug4/jtjGB74ZYqCmrI4Ut lm/pz0s8D9f7qwl08HVTpn3rE+LaCIu63gYS2fRQEW5/tKnKni9YfjxnSgpnbqFb TCE6yzlUepsi9r1FvhbyR/X1dGwVRmFriIDKyHU+tGkU/VMdL8Xhbw3QXzafdYh9 pEXZ9VIGAifM97euykLRWaNB/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMafCUBp UCeIgF3noq0XYimH0jtLMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85M0JCNTAyRTZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFr U29jUVpMWkFldDVKUG1PbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD8J5HuKWQOVKGxBHpiQwsGH1jBudGlR2+OoQCIAWBrViNGJDMPwI6l4i2gp6 zm7IPsmvl2roxQFZPczJzheClBcOa14ktg5OR5tVD3tXNvFOfgY0c13t5H4ebff5 qZOm4KEZYE8aZR5JrrFJD+LsKbAPIDqFgcMAvQeHd9jlDwj9t2AYSYvJ5GMTi8XC IG97ciKRz9R74pB7G/oyqmCNeABomOy2etXePXTnmouUFlG9y81bDATM/1dWLWrP yblEe+6J1zEFCLx5jsCiUYADOpzpRs/7sQKj/n6kVLBs1cVJ26W7fqnKCs0+MW5q xZs4a0PgVE6Ff2p3snvd6UQnmA== -----END CERTIFICATE-----Generated at Sat Oct 17 12:21:14 2026 by rpki-client