$ rpki-client -vvvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: +JOtxCmcHEYLMiTTjZUGHeQvOUC0pSO3Exd4lXv96CU= Subject key identifier: 20:90:5A:A8:0C:95:27:65:79:78:ED:6C:A3:E4:28:00:4C:4A:4F:4D Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0CAF Signing time: Mon 12 Oct 2026 18:43:21 +0000 Manifest this update: Mon 12 Oct 2026 18:43:20 +0000 Manifest next update: Mon 19 Oct 2026 18:43:20 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: H/E27T8A0DmRYC1PXOATnSVugXHeV+jA5GPz7WDvpYo=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: ysJpjq4GZRT81ypvyps70Xs2FSrmpAOh+0WROxWsBRE=) 3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=) 4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: Oct 12 18:43:20 2026 GMT Not After : Oct 19 18:43:20 2026 GMT Subject: CN=6acd2a49-ea9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:20:36:ab:5e:79:3f:b3:ad:2d:98:83:ad: d9:c2:34:1d:d9:1d:95:6b:38:29:f5:4e:ca:ca:5a: c6:1d:4b:26:0d:12:19:f4:f6:10:dd:69:90:a0:d3: d4:56:1d:cb:a7:e7:c0:fa:7d:28:07:f7:d4:34:83: 0e:fd:c3:3f:c6:f6:40:92:33:44:9b:cb:5a:7e:c3: 8d:2d:66:68:77:86:2f:02:36:5c:48:93:83:84:d8: 8d:91:71:ee:c3:91:4e:e4:fd:c2:74:db:69:71:e9: cb:1c:c3:86:04:78:62:e0:73:e6:a9:ae:ba:ba:fb: 28:11:ff:9c:92:ec:43:3e:64:27:cf:b2:7e:0d:b5: 01:48:a5:6b:3b:6c:18:b3:da:8c:13:92:44:1d:01: ac:a9:36:16:b8:10:d5:49:a9:59:87:26:bb:40:f9: 42:16:c4:fd:0f:6a:7e:e1:7a:54:f3:b6:f7:7c:df: 14:45:e9:1a:6a:89:4e:f4:75:c9:84:ca:d9:f0:17: 7a:dc:f9:b5:dd:96:07:01:26:5c:02:d1:08:03:86: 70:59:aa:cc:29:1b:27:55:7f:0e:ab:49:e8:b2:06: 84:3b:be:45:14:cb:d6:59:17:58:57:b7:88:55:86: 31:b1:0c:d0:e4:6e:29:8f:3c:64:15:bc:b2:e4:bb: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:90:5A:A8:0C:95:27:65:79:78:ED:6C:A3:E4:28:00:4C:4A:4F:4D X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7b:41:c1:ba:d5:f0:3b:44:4c:43:4f:8f:e8:79:11:10:1c: c7:86:78:2b:17:26:38:f7:01:31:f2:2c:65:33:a8:c5:00:5e: b0:3c:35:9e:65:06:51:76:75:ed:e3:47:a2:95:3a:b1:18:e6: 5f:6a:20:aa:6c:ca:97:11:67:8c:bf:7b:45:56:59:58:c9:87: 0e:2a:07:72:51:87:df:eb:ac:a8:db:c3:09:43:32:a4:89:f8: 37:27:f2:fb:f2:8a:fc:7d:63:eb:01:2f:3b:e5:f8:f3:11:ec: 00:79:88:f8:12:d3:d1:d6:86:0a:70:af:dd:7f:15:75:ae:7f: 70:af:81:7c:02:19:5c:88:e0:48:5d:11:58:d9:76:d7:8c:9a: 56:55:d1:5f:ad:e6:77:e8:96:83:9b:d9:f1:fc:2e:59:12:4b: 4f:1c:f9:87:34:77:d3:65:e6:96:44:ea:f0:50:39:16:ea:ad: 9a:0d:1f:2a:3c:b3:83:55:6a:5d:07:a8:e4:c3:1d:76:3b:74: 0c:c0:67:b7:29:b9:68:8c:c1:91:54:2e:04:f9:1a:29:bc:43: 67:49:3e:10:57:c4:be:ce:94:8d:2a:a7:92:3e:1e:58:a9:8c: 9f:b0:fc:49:0d:2a:bf:d0:09:92:5c:3c:49:8f:35:6b:9f:0a: c7:2d:1b:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjYxMDEyMTg0MzIwWhcNMjYxMDE5MTg0MzIwWjAYMRYwFAYD VQQDEw02YWNkMmE0OS1lYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l0gNqteeT+zrS2Yg63ZwjQd2R2Vazgp9U7KylrGHUsmDRIZ9PYQ3WmQoNPU Vh3Lp+fA+n0oB/fUNIMO/cM/xvZAkjNEm8tafsONLWZod4YvAjZcSJODhNiNkXHu w5FO5P3CdNtpcenLHMOGBHhi4HPmqa66uvsoEf+ckuxDPmQnz7J+DbUBSKVrO2wY s9qME5JEHQGsqTYWuBDVSalZhya7QPlCFsT9D2p+4XpU87b3fN8URekaaolO9HXJ hMrZ8Bd63Pm13ZYHASZcAtEIA4ZwWarMKRsnVX8Oq0nosgaEO75FFMvWWRdYV7eI VYYxsQzQ5G4pjzxkFbyy5LtOtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCQWqgM lSdleXjtbKPkKABMSk9NMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADXtBwbrV8DtETENPj+h5ERAcx4Z4KxcmOPcBMfIsZTOoxQBesDw1nmUGUXZ1 7eNHopU6sRjmX2ogqmzKlxFnjL97RVZZWMmHDioHclGH3+usqNvDCUMypIn4Nyfy +/KK/H1j6wEvO+X48xHsAHmI+BLT0daGCnCv3X8Vda5/cK+BfAIZXIjgSF0RWNl2 14yaVlXRX63md+iWg5vZ8fwuWRJLTxz5hzR302XmlkTq8FA5Fuqtmg0fKjyzg1Vq XQeo5MMddjt0DMBntym5aIzBkVQuBPkaKbxDZ0k+EFfEvs6UjSqnkj4eWKmMn7D8 SQ0qv9AJklw8SY81a58Kxy0blQ== -----END CERTIFICATE-----Generated at Mon Oct 12 23:18:59 2026 by rpki-client