$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft File: -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json) Hash identifier: qoKiTSA+jt8b9N4VAfgA1X44OtHZaORDLvePw1dbVxU= Subject key identifier: 93:6E:36:42:4B:39:15:5F:A8:B1:5C:3C:B5:44:3D:7F:8B:8B:A1:C8 Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft Manifest number: 0310 Signing time: Thu 29 Oct 2026 01:22:37 +0000 Manifest this update: Thu 29 Oct 2026 01:22:37 +0000 Manifest next update: Thu 05 Nov 2026 01:22:37 +0000 Files and hashes: 1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: jDpFq7S/liPxf6/fK0meSz/lknMdHy6Ip2Cz7ugoQEA=) 2: ZS-ppPjt8opYJHcdG7fYKHkDkZo.asa (hash: MLD41Ka89WGkgVftoVmQ8WO7uVk8k1eWEGfBvHuaahM=) 3: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E Validity Not Before: Oct 29 01:22:37 2026 GMT Not After : Nov 5 01:22:37 2026 GMT Subject: CN=6ae29fdd-b943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:e3:98:d0:57:44:3e:88:e8:1e:9f:9f:76: 8c:3b:e9:17:bf:b1:1a:4c:43:af:f9:f4:af:78:f4: 35:41:a6:ce:6c:b7:0f:0d:bb:80:3c:37:b2:82:4f: 52:d3:48:ac:19:e9:43:52:98:09:fb:4f:c8:ce:ab: 7f:09:03:60:3a:2f:8b:ba:7e:ec:9e:48:5b:ec:8f: df:6d:76:71:ea:ee:17:31:c0:87:b3:a5:06:80:49: 9d:74:5c:cd:e0:9f:d4:66:ab:4a:1e:76:b8:1c:df: c5:58:7e:19:c4:8f:76:a4:c6:46:ce:ff:cf:ee:0e: 92:dd:51:3b:f1:96:80:85:66:10:6e:47:04:05:f2: 2d:26:fc:cb:a6:c9:95:60:16:4c:4e:87:cf:fb:54: 98:aa:fd:71:d7:8f:fd:32:7b:b9:14:fe:33:87:6b: cb:c5:02:bf:8b:64:2f:25:63:c3:6b:1d:4b:53:df: 6d:65:1d:c3:08:5d:8c:d9:37:90:f5:98:66:e0:b0: e9:b3:24:a7:52:ba:19:b1:2a:b2:ae:9c:23:7a:95: 4c:b9:67:cc:b6:10:c1:63:c1:5e:1d:ca:36:8a:8c: d1:0d:5a:a7:86:d6:d5:e1:ef:e5:d2:80:8a:de:5e: e5:af:22:20:62:4d:95:ff:f4:01:42:4a:cc:1d:0a: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6E:36:42:4B:39:15:5F:A8:B1:5C:3C:B5:44:3D:7F:8B:8B:A1:C8 X509v3 Authority Key Identifier: keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:41:79:ae:1b:4d:b1:56:b7:70:9a:80:ce:d6:12:38:e0:b4: 05:49:b8:70:dd:bc:b4:19:39:f2:be:fb:6f:0b:97:31:ab:a2: 51:a7:4c:7a:ef:c9:37:b2:7f:e4:95:36:d8:ae:0d:08:a2:ab: 26:94:85:82:0d:36:96:f9:a5:16:b3:0e:a4:5f:6c:86:4a:02: 7c:8c:9a:cd:0a:77:19:18:42:da:54:9e:65:89:22:4e:7a:a2: 5e:88:bb:ae:dc:5d:82:a8:7b:6b:ee:79:78:c5:30:9c:de:7e: e9:1f:a0:55:52:da:b4:80:8c:ca:d5:95:17:fa:9d:c8:7f:a4: ad:c5:9f:61:9e:54:2d:23:70:a4:ef:8c:c3:af:8d:28:ac:66: 54:79:b3:34:f8:96:ba:55:98:7b:fd:99:8d:82:0b:00:16:2d: cd:bc:17:be:b6:46:8b:98:44:0d:1a:4d:e1:18:8c:28:59:56: bc:1f:71:f1:a6:a1:63:9c:5e:8c:83:fc:46:67:08:f7:30:b9: 88:3a:42:f3:7e:06:73:03:48:04:31:83:d1:11:12:e5:81:df: bc:70:fb:5f:48:13:22:b9:b4:23:56:c6:43:af:10:2f:a0:5c: 0e:ff:21:e5:d7:dc:87:b3:9a:e7:d1:7d:3a:dd:b5:29:f9:00: ff:61:af:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNjcxMTAvBgNVBAUTKEY4RDY5M0EyNjk2NENEM0M1QTE5OUQyQzI2RUQyMjY0 N0EyMEU3N0UwHhcNMjYxMDI5MDEyMjM3WhcNMjYxMTA1MDEyMjM3WjAYMRYwFAYD VQQDEw02YWUyOWZkZC1iOTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1rjmNBXRD6I6B6fn3aMO+kXv7EaTEOv+fSvePQ1QabObLcPDbuAPDeygk9S 00isGelDUpgJ+0/Izqt/CQNgOi+Lun7snkhb7I/fbXZx6u4XMcCHs6UGgEmddFzN 4J/UZqtKHna4HN/FWH4ZxI92pMZGzv/P7g6S3VE78ZaAhWYQbkcEBfItJvzLpsmV YBZMTofP+1SYqv1x14/9Mnu5FP4zh2vLxQK/i2QvJWPDax1LU99tZR3DCF2M2TeQ 9Zhm4LDpsySnUroZsSqyrpwjepVMuWfMthDBY8FeHco2iozRDVqnhtbV4e/l0oCK 3l7lryIgYk2V//QBQkrMHQoEcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNuNkJL ORVfqLFcPLVEPX+Li6HIMB8GA1UdIwQYMBaAFPjWk6JpZM08WhmdLCbtImR6IOd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2Ny8xMkNFNThDMDRC Q0IxMUVEQkJFNTkyNUVDNEY5QUUwMi8tTmFUb21sa3pUeGFHWjBzSnUwaVpIb2c1 MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OYVRvbWxrelR4YUdaMHNKdTBpWkhvZzUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2Ny8xMkNFNThDMDRCQ0IxMUVEQkJFNTkyNUVDNEY5QUUwMi8tTmFUb21sa3pU eGFHWjBzSnUwaVpIb2c1MzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV0F5rhtNsVa3cJqAztYSOOC0BUm4cN28tBk58r77bwuXMauiUadMeu/JN7J/ 5JU22K4NCKKrJpSFgg02lvmlFrMOpF9shkoCfIyazQp3GRhC2lSeZYkiTnqiXoi7 rtxdgqh7a+55eMUwnN5+6R+gVVLatICMytWVF/qdyH+krcWfYZ5ULSNwpO+Mw6+N KKxmVHmzNPiWulWYe/2ZjYILABYtzbwXvrZGi5hEDRpN4RiMKFlWvB9x8aahY5xe jIP8RmcI9zC5iDpC834GcwNIBDGD0RES5YHfvHD7X0gTIrm0I1bGQ68QL6BcDv8h 5dfch7Oa59F9Ot21KfkA/2Gv5Q== -----END CERTIFICATE-----Generated at Thu Oct 29 10:59:54 2026 by rpki-client