$ rpki-client -vvvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json) Hash identifier: EX9hD8Wu/BBUNPFgaxDw1fQoI2N5RthuwvcuOJfk4uU= Subject key identifier: 20:61:23:56:AD:2A:46:F6:9A:10:A0:EE:67:DB:AC:74:D3:A0:BA:C9 Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft Manifest number: 0256 Signing time: Thu 05 Nov 2026 03:00:24 +0000 Manifest this update: Thu 05 Nov 2026 03:00:23 +0000 Manifest next update: Thu 12 Nov 2026 03:00:23 +0000 Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: aEjg1yU1rF2DDiN3E0EnlV8axTe53JljXJEn1Ipdd6k=) 2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: mj1933/3n6toouA33PYerjmiVEAl8MHe43vblZwNmME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 03:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Validity Not Before: Nov 5 03:00:23 2026 GMT Not After : Nov 12 03:00:23 2026 GMT Subject: CN=6aebf148-8324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:85:f2:51:df:9c:f4:fa:b9:9c:8c:b7:37: 2e:17:98:33:d2:1e:a0:15:b9:70:ef:b6:83:88:77: 54:fd:62:94:37:0a:a9:e7:bf:1b:5d:23:4c:79:9a: 9c:0e:5a:91:f5:41:8a:a5:bc:ae:15:04:3e:c9:ea: 6d:7d:88:f6:77:4e:89:28:a0:fd:84:1b:c0:d8:2f: 31:76:68:a4:9f:b2:f6:34:eb:0f:fc:d6:bb:3c:b8: 08:09:be:76:03:93:fb:1c:79:5d:01:72:af:f6:06: 06:3a:da:95:86:ab:52:99:43:ac:3a:0b:99:52:97: 4d:88:82:85:1e:b8:34:27:c7:fc:49:36:33:db:fe: 61:f8:4e:77:48:93:3e:af:51:18:4c:63:4d:fb:95: a4:e3:f9:03:6e:bf:b3:ff:b3:03:2c:dc:a2:d4:2a: 88:a2:90:f7:fa:4f:a8:ec:31:8e:d8:64:f4:35:19: ae:2e:fd:90:dc:70:ed:2e:e8:77:1b:8e:51:77:c4: 59:10:1f:89:cd:8a:e4:ee:3a:65:1e:6b:1c:db:b3: 56:4e:da:0c:d0:37:ba:6e:c1:a4:ed:c3:21:0a:0c: 71:01:2f:99:c9:22:67:1d:53:7d:07:2c:4d:0c:cd: 05:25:7f:65:55:60:60:eb:66:d1:de:c8:86:05:67: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:61:23:56:AD:2A:46:F6:9A:10:A0:EE:67:DB:AC:74:D3:A0:BA:C9 X509v3 Authority Key Identifier: keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:8a:bd:43:f4:bc:93:a3:ee:e4:f2:21:fa:c1:5f:6d:4c: 4d:f6:cf:28:76:a9:06:1a:14:c8:93:00:fe:b5:92:4d:16:1a: f7:04:68:68:0f:ed:3c:66:3a:c3:1a:60:7c:c6:e4:a6:87:74: da:e4:7e:5e:2e:a9:19:52:fe:e9:e0:50:f7:e4:2c:8d:cb:1e: 3b:2d:a1:77:3a:3c:6d:9c:3b:d4:2a:a5:88:da:68:e5:02:cb: 31:0d:5c:80:ee:65:8b:3f:4b:0b:3b:bf:56:fa:95:e5:e7:51: 94:38:fc:bc:18:5b:3d:64:a2:67:fd:75:da:1f:45:77:42:cc: 23:a3:ac:07:ba:a4:e3:a1:5d:86:02:17:17:bf:7e:bf:67:fc: c4:a4:12:2e:7b:1b:88:a0:bb:8b:e1:20:c4:ad:ef:63:9e:0f: 6f:1b:0a:5d:d3:b4:f6:52:e1:7b:13:c7:bd:65:ef:cd:59:90: d5:96:27:50:f6:02:48:1d:4a:86:bb:e4:28:e6:8b:95:36:ff: f2:5d:3a:b4:a8:2c:2a:ca:be:be:e1:a9:85:11:9a:3b:d7:62: cb:af:0b:66:a8:7c:a8:d6:2b:9a:05:2e:7c:61:76:a4:6c:f2: a4:b4:b5:ac:fd:56:4c:71:90:e5:77:a9:ea:77:70:3d:62:5a: 50:02:78:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG NTAwNTFFOUEwHhcNMjYxMTA1MDMwMDIzWhcNMjYxMTEyMDMwMDIzWjAYMRYwFAYD VQQDEw02YWViZjE0OC04MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoX2F8lHfnPT6uZyMtzcuF5gz0h6gFblw77aDiHdU/WKUNwqp578bXSNMeZqc DlqR9UGKpbyuFQQ+yeptfYj2d06JKKD9hBvA2C8xdmikn7L2NOsP/Na7PLgICb52 A5P7HHldAXKv9gYGOtqVhqtSmUOsOguZUpdNiIKFHrg0J8f8STYz2/5h+E53SJM+ r1EYTGNN+5Wk4/kDbr+z/7MDLNyi1CqIopD3+k+o7DGO2GT0NRmuLv2Q3HDtLuh3 G45Rd8RZEB+JzYrk7jplHmsc27NWTtoM0De6bsGk7cMhCgxxAS+ZySJnHVN9ByxN DM0FJX9lVWBg62bR3siGBWdz7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBhI1at Kkb2mhCg7mfbrHTToLrJMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3 M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVy OHNCSVdzSVhpYl8xQUZIcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACoqKvUP0vJOj7uTyIfrBX21MTfbPKHapBhoUyJMA/rWSTRYa9wRoaA/tPGY6 wxpgfMbkpod02uR+Xi6pGVL+6eBQ9+QsjcseOy2hdzo8bZw71CqliNpo5QLLMQ1c gO5liz9LCzu/VvqV5edRlDj8vBhbPWSiZ/112h9Fd0LMI6OsB7qk46FdhgIXF79+ v2f8xKQSLnsbiKC7i+EgxK3vY54PbxsKXdO09lLhexPHvWXvzVmQ1ZYnUPYCSB1K hrvkKOaLlTb/8l06tKgsKsq+vuGphRGaO9diy68LZqh8qNYrmgUufGF2pGzypLS1 rP1WTHGQ5Xep6ndwPWJaUAJ4PQ== -----END CERTIFICATE-----Generated at Thu Nov 5 19:49:51 2026 by rpki-client