$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: LawKI5mCZ7YF21vBwrqEAc5iCK9b48L7GuEIAoFStQA= Subject key identifier: C2:F8:41:D9:16:B5:A1:3D:AE:86:4A:2A:E6:E5:48:4D:99:4B:D9:0B Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 01FA Signing time: Tue 27 Oct 2026 03:42:44 +0000 Manifest this update: Tue 27 Oct 2026 03:42:43 +0000 Manifest next update: Tue 03 Nov 2026 03:42:43 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: ZWjDB5d8lfOsBvOI5OYiTmkUuk6orjDuNuPbeZ/7d7k=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 7eQsc3jFfyJA5G5xsvQGlnjUsJ7FXLyXJQcnFpGfOuU=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Y5OchRYZWCfXmYyEmnL2P8kc7yv28yWNLEvFTKE+MGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Oct 27 03:42:43 2026 GMT Not After : Nov 3 03:42:43 2026 GMT Subject: CN=6ae01db4-e1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:40:87:24:d0:e5:d3:bc:f9:b3:d6:db:a4: 82:2c:30:ca:e7:33:29:61:f8:17:f8:c0:23:d5:e4: 64:60:b3:cf:48:a5:f2:03:ec:ff:8f:92:f8:b9:a6: bd:c5:c0:18:a8:3c:dd:a6:56:81:33:19:07:92:f1: 33:64:f3:9b:c2:33:a9:da:ea:fa:0d:1c:dd:2b:6c: f5:e4:24:9e:f1:68:5a:bc:8c:bf:70:41:70:8d:79: 0b:2e:b0:e8:a3:a9:f3:e9:3c:68:e4:8a:3d:d5:bf: 40:30:47:0e:dc:14:fd:cd:f7:62:46:29:a5:96:af: b0:13:14:e0:69:ff:dc:db:9b:82:f6:75:11:5c:a4: 0d:0e:77:c9:61:33:a5:80:43:7d:e2:b4:92:5f:8d: 7c:da:89:24:d8:c5:4f:dd:fb:21:8c:51:48:0f:8b: 66:58:80:47:a3:ba:54:e1:43:fe:6a:7d:20:0c:73: 44:35:9b:f6:64:bd:37:71:3d:75:42:a8:3f:2f:1d: 48:59:23:1e:fd:83:16:37:70:3c:ef:e6:ce:62:b2: 09:3a:b9:66:9d:42:95:9e:12:85:8c:10:78:0c:98: ca:b1:f8:3b:15:74:d9:a4:68:2a:d8:93:5f:88:18: 3a:89:c5:2a:db:0b:84:46:1a:62:46:1b:f8:cc:7e: 99:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F8:41:D9:16:B5:A1:3D:AE:86:4A:2A:E6:E5:48:4D:99:4B:D9:0B X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4b:99:82:d3:c8:33:7c:c7:7d:5e:18:11:03:c5:41:62:c8: e5:ee:d2:eb:82:c0:54:3a:78:5f:bb:4c:36:d2:91:8e:f8:d7: 1c:7d:04:7d:8b:0c:ad:78:0b:56:48:61:df:7e:48:ac:35:7d: c0:6b:7c:35:a8:90:3d:50:29:f8:f4:0b:b3:f9:5f:ac:58:0f: b3:d9:25:2e:21:57:b6:73:48:6e:d4:ae:73:56:81:fb:88:ce: 46:85:46:57:b1:fc:e8:bc:42:4f:fb:e8:69:92:3a:33:92:88: 60:d1:eb:f5:f5:40:c7:99:a0:01:74:52:87:f1:ba:61:8f:f7: 34:37:1c:ac:3c:fc:57:d2:2a:05:cf:e0:24:36:e8:ce:59:f8: cd:f1:88:aa:ee:8e:ae:65:ab:40:16:8c:af:4e:e4:17:6a:dd: 97:f9:67:46:29:4c:74:33:d0:36:4a:df:f3:a4:cb:38:cd:ee: eb:95:ed:f8:64:49:2f:e7:03:eb:68:71:1b:e9:58:9f:3e:6f: 3a:2a:74:e5:42:c0:c8:1e:9c:e2:84:f4:bf:35:2a:26:08:4e: f3:66:ed:65:90:4c:66:57:e5:70:35:62:82:b0:0c:fc:a8:6f: 2c:c4:de:97:67:99:1d:e6:f8:fc:ba:d9:e5:25:4c:72:42:ee: 57:5f:44:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYxMDI3MDM0MjQzWhcNMjYxMTAzMDM0MjQzWjAYMRYwFAYD VQQDEw02YWUwMWRiNC1lMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhxAhyTQ5dO8+bPW26SCLDDK5zMpYfgX+MAj1eRkYLPPSKXyA+z/j5L4uaa9 xcAYqDzdplaBMxkHkvEzZPObwjOp2ur6DRzdK2z15CSe8WhavIy/cEFwjXkLLrDo o6nz6Txo5Io91b9AMEcO3BT9zfdiRimllq+wExTgaf/c25uC9nURXKQNDnfJYTOl gEN94rSSX4182okk2MVP3fshjFFID4tmWIBHo7pU4UP+an0gDHNENZv2ZL03cT11 Qqg/Lx1IWSMe/YMWN3A87+bOYrIJOrlmnUKVnhKFjBB4DJjKsfg7FXTZpGgq2JNf iBg6icUq2wuERhpiRhv4zH6ZywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFML4QdkW taE9roZKKublSE2ZS9kLMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYkuZgtPIM3zHfV4YEQPFQWLI5e7S64LAVDp4X7tMNtKRjvjXHH0EfYsMrXgL Vkhh335IrDV9wGt8NaiQPVAp+PQLs/lfrFgPs9klLiFXtnNIbtSuc1aB+4jORoVG V7H86LxCT/voaZI6M5KIYNHr9fVAx5mgAXRSh/G6YY/3NDccrDz8V9IqBc/gJDbo zln4zfGIqu6OrmWrQBaMr07kF2rdl/lnRilMdDPQNkrf86TLOM3u65Xt+GRJL+cD 62hxG+lYnz5vOip05ULAyB6c4oT0vzUqJghO82btZZBMZlflcDVigrAM/KhvLMTe l2eZHeb4/LrZ5SVMckLuV19E2Q== -----END CERTIFICATE-----Generated at Tue Oct 27 18:25:41 2026 by rpki-client