$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json) Hash identifier: d7xwKFiYQpl4X68K3+x5CpsCUhGaeF0zFMA4qwF+/PA= Subject key identifier: 4A:3E:52:6E:AF:2C:FD:B8:1E:44:1C:AD:2E:27:84:9B:BE:D5:86:A5 Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft Manifest number: 04F6 Signing time: Wed 04 Nov 2026 23:58:01 +0000 Manifest this update: Wed 04 Nov 2026 23:58:01 +0000 Manifest next update: Wed 11 Nov 2026 23:58:01 +0000 Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: i38dxUlYJ+wdibsdvmboraH/Z6NdFfvsZCneCgSym5U=) 2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: /VTKAsBYqoqlqAxKe4NHOLUI09z6HI4GOHUHa9bO0Ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 23:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157031, serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Validity Not Before: Nov 4 23:58:01 2026 GMT Not After : Nov 11 23:58:01 2026 GMT Subject: CN=6aebc689-b33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:70:5e:d5:80:0c:e3:31:d6:72:82:97:40: b2:c5:91:f8:ef:8f:d7:2b:ae:0b:c3:83:a9:4d:c7: 38:71:e0:a7:60:29:a5:6c:cb:bd:53:27:75:e9:b3: 39:57:62:80:75:74:78:48:18:ad:3f:f1:72:e3:83: 24:f3:8a:5d:84:cb:e2:12:c2:eb:d1:5d:0f:74:ef: 9e:60:41:d8:6b:5d:23:0e:98:12:11:c4:de:bf:cb: 9d:e0:42:f0:29:90:27:16:86:ed:15:3c:2a:ee:27: 9d:d0:65:ae:02:b0:be:72:ba:88:c8:6f:1d:48:ad: 4c:5d:0c:c3:52:97:cf:1e:be:14:7f:74:a5:70:12: ea:2c:8a:18:d9:6d:e1:19:17:81:c3:8c:6c:5f:0f: 27:f8:a7:e1:04:69:2e:22:12:bb:f2:62:0f:74:1e: 94:63:28:dd:95:e6:5c:8c:93:b3:d5:0f:5f:4c:ce: f3:0b:0d:81:6e:0b:97:0c:59:78:3f:e1:99:d3:07: 01:d6:ca:65:cb:52:a7:e8:38:1e:0a:78:e3:e7:b8: 3e:c0:ec:ec:1f:e4:ee:42:9b:e2:e3:de:19:90:fc: b1:6c:23:e2:76:d8:04:ac:a1:0c:d7:0e:d0:45:b2: 8a:50:d3:3f:fa:4c:a1:43:7c:f4:f8:ce:02:24:83: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3E:52:6E:AF:2C:FD:B8:1E:44:1C:AD:2E:27:84:9B:BE:D5:86:A5 X509v3 Authority Key Identifier: keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:8a:c2:f1:a5:9c:d5:1e:e9:01:17:d7:0f:93:53:c8:79:48: c0:fb:43:6a:02:45:13:f4:77:93:b1:3d:d1:19:63:89:b0:97: 66:a0:67:c0:c2:27:18:f4:89:4e:04:84:1a:45:d3:5b:98:74: 74:00:33:8a:36:bc:5b:1d:95:3c:e6:bb:a0:8a:58:f8:58:7b: 60:a0:a2:83:77:a6:29:54:4e:13:4c:2e:6f:a3:1f:ac:4c:16: 95:32:88:6c:4e:e3:c0:83:bf:2e:ab:2c:36:ab:09:01:da:94: b5:1d:28:bc:78:6e:23:de:52:6d:6e:7c:c9:55:73:5c:26:cb: 87:c4:20:6b:00:66:c3:8b:31:ce:b6:91:42:64:d4:4e:d4:36: 47:01:2e:0e:61:6a:31:7e:c5:0f:82:f7:ae:0e:d0:dc:88:98: 61:60:f7:5b:f3:76:14:73:03:e3:82:eb:40:e0:e3:08:91:df: d5:fc:f7:f3:26:74:31:fd:34:d0:16:31:93:11:07:59:d3:02: 99:6c:00:01:0b:42:8a:a1:75:5d:4e:61:96:a7:69:fa:e0:d1: 2b:35:71:22:e6:70:26:1e:6a:65:97:13:30:96:8c:ac:ed:5e: b5:bc:f9:30:7f:aa:ba:a0:25:83:de:69:ee:c9:ac:ad:8d:c1: 1c:ff:80:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwMzExMTAvBgNVBAUTKDUwRTUwRURBRjY0QTJDMjVCNzMxMjM5NjczRDkwNzBG NjE4MzAyNzkwHhcNMjYxMTA0MjM1ODAxWhcNMjYxMTExMjM1ODAxWjAYMRYwFAYD VQQDEw02YWViYzY4OS1iMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtdwXtWADOMx1nKCl0CyxZH474/XK64Lw4OpTcc4ceCnYCmlbMu9Uyd16bM5 V2KAdXR4SBitP/Fy44Mk84pdhMviEsLr0V0PdO+eYEHYa10jDpgSEcTev8ud4ELw KZAnFobtFTwq7ied0GWuArC+crqIyG8dSK1MXQzDUpfPHr4Uf3SlcBLqLIoY2W3h GReBw4xsXw8n+KfhBGkuIhK78mIPdB6UYyjdleZcjJOz1Q9fTM7zCw2BbguXDFl4 P+GZ0wcB1sply1Kn6DgeCnjj57g+wOzsH+TuQpvi494ZkPyxbCPidtgErKEM1w7Q RbKKUNM/+kyhQ3z0+M4CJIPgnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEo+Um6v LP24HkQcrS4nhJu+1YalMB8GA1UdIwQYMBaAFFDlDtr2SiwltzEjlnPZBw9hgwJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzAzMS83QTAwNEY3ODdF QzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xDVzNNU09XYzlrSEQyR0RB bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPVU8ydlpLTENXM01TT1djOWtIRDJHREFuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzAzMS83QTAwNEY3ODdFQzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xD VzNNU09XYzlrSEQyR0RBbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlorC8aWc1R7pARfXD5NTyHlIwPtDagJFE/R3k7E90RljibCXZqBnwMInGPSJ TgSEGkXTW5h0dAAzija8Wx2VPOa7oIpY+Fh7YKCig3emKVROE0wub6MfrEwWlTKI bE7jwIO/LqssNqsJAdqUtR0ovHhuI95SbW58yVVzXCbLh8QgawBmw4sxzraRQmTU TtQ2RwEuDmFqMX7FD4L3rg7Q3IiYYWD3W/N2FHMD44LrQODjCJHf1fz38yZ0Mf00 0BYxkxEHWdMCmWwAAQtCiqF1XU5hlqdp+uDRKzVxIuZwJh5qZZcTMJaMrO1etbz5 MH+quqAlg95p7smsrY3BHP+A6A== -----END CERTIFICATE-----Generated at Thu Nov 5 12:20:25 2026 by rpki-client