$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: gX4460COzvI0Uj7BcuNUQpkSFw5jmW++9SFW7WicvOc= Subject key identifier: B1:60:D8:10:3E:22:2D:5E:76:4D:7D:C5:9B:27:9D:7F:7E:40:0E:18 Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0C60 Signing time: Mon 12 Oct 2026 18:48:56 +0000 Manifest this update: Mon 12 Oct 2026 18:48:55 +0000 Manifest next update: Mon 19 Oct 2026 18:48:55 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: an+OAPkMTtttw3eXOZumiVSlftqPKfvNbcPo9sdQRiw=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: NnChO+AKLPYxrSb85TL7NkWuNcOh9X5s3cfGb3mVcMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Oct 12 18:48:55 2026 GMT Not After : Oct 19 18:48:55 2026 GMT Subject: CN=6acd2b97-398a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:6f:ff:27:78:e7:46:80:54:7b:13:a8:02: ac:02:13:a0:db:c2:99:fd:14:0d:b3:f0:6f:ac:67: c8:76:65:c2:1f:a9:f6:c4:70:70:a9:ab:82:4a:dd: 25:c2:b2:73:af:01:56:af:be:61:f4:6d:64:dc:6f: d0:36:98:d7:0d:e3:0c:49:54:e0:94:a7:76:37:d8: 34:0c:98:0f:e2:1d:6f:2a:fb:e2:70:b9:14:a7:3e: d1:ac:a9:36:66:4d:ea:86:a5:c6:53:a2:4c:05:8e: a9:45:85:7a:4a:65:f5:c3:6c:b2:58:22:7a:7a:6c: d9:99:21:cd:8d:2f:b4:17:1d:e5:fc:33:97:b4:07: 94:12:c2:8c:ec:22:91:1e:47:f1:24:f3:14:5b:4c: 11:03:14:06:06:98:66:9d:8a:32:7e:9a:a0:14:91: 0d:a1:b0:a7:1b:7f:fa:e3:91:2b:59:e9:65:69:fb: 40:a6:f3:d8:2e:bc:a2:c5:e6:88:38:25:5c:e9:6b: 87:06:23:9b:0c:65:f5:dc:e9:c4:9a:dd:99:46:ca: 86:0e:94:79:59:25:d6:93:78:64:cb:f6:cb:bc:5a: c8:cb:a6:dc:e3:fd:ae:34:1c:69:7b:6e:85:ed:27: 26:82:23:32:cd:a5:07:e4:69:08:f5:b0:6d:ea:5a: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:60:D8:10:3E:22:2D:5E:76:4D:7D:C5:9B:27:9D:7F:7E:40:0E:18 X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:99:b3:4f:2e:1b:23:49:40:72:f6:89:a2:35:f9:cb:10:10: d0:ee:fa:55:8c:f1:2e:a5:7e:f1:49:39:45:8c:d5:94:e0:e2: 01:f9:ea:dc:32:2b:5e:4b:98:9f:da:a2:b7:ee:a6:23:96:20: cb:c9:8c:11:64:98:03:61:94:5f:60:7b:ad:d0:46:bd:8c:f1: 3a:e7:58:83:70:8c:24:ea:e0:8c:28:72:d2:47:2e:dd:85:c6: e3:7b:1e:a0:8a:df:2e:49:87:92:3b:77:7a:f3:7d:03:9f:9b: bb:a2:c0:95:3a:0e:5e:90:ba:7c:d0:c9:a6:18:30:2c:57:07: d7:a2:86:80:69:31:9a:66:85:ec:fd:8c:9f:cd:2c:99:04:25: 66:6e:ed:82:3a:ee:e0:7d:03:37:bf:be:be:1f:4e:14:dd:15: 64:1e:9a:70:30:2f:86:0d:62:0e:cb:7c:7e:22:81:4c:35:4e: 54:b2:36:7b:59:67:77:34:a2:87:23:e7:ff:e8:64:16:00:64: 4f:c0:4c:0a:62:87:52:90:79:af:32:ed:87:fe:13:80:b1:ef: d3:7c:c2:ad:14:d7:1d:10:df:af:09:09:e0:18:47:de:9b:5c: 50:db:fb:46:92:d0:51:95:08:3d:8a:61:1f:b0:75:21:26:10: 29:46:8c:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjYxMDEyMTg0ODU1WhcNMjYxMDE5MTg0ODU1WjAYMRYwFAYD VQQDEw02YWNkMmI5Ny0zOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7pv/yd450aAVHsTqAKsAhOg28KZ/RQNs/BvrGfIdmXCH6n2xHBwqauCSt0l wrJzrwFWr75h9G1k3G/QNpjXDeMMSVTglKd2N9g0DJgP4h1vKvvicLkUpz7RrKk2 Zk3qhqXGU6JMBY6pRYV6SmX1w2yyWCJ6emzZmSHNjS+0Fx3l/DOXtAeUEsKM7CKR HkfxJPMUW0wRAxQGBphmnYoyfpqgFJENobCnG3/645ErWellaftApvPYLryixeaI OCVc6WuHBiObDGX13OnEmt2ZRsqGDpR5WSXWk3hky/bLvFrIy6bc4/2uNBxpe26F 7ScmgiMyzaUH5GkI9bBt6lpurQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFg2BA+ Ii1edk19xZsnnX9+QA4YMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl5mzTy4bI0lAcvaJojX5yxAQ0O76VYzxLqV+8Uk5RYzVlODiAfnq3DIrXkuY n9qit+6mI5Ygy8mMEWSYA2GUX2B7rdBGvYzxOudYg3CMJOrgjChy0kcu3YXG43se oIrfLkmHkjt3evN9A5+bu6LAlToOXpC6fNDJphgwLFcH16KGgGkxmmaF7P2Mn80s mQQlZm7tgjru4H0DN7++vh9OFN0VZB6acDAvhg1iDst8fiKBTDVOVLI2e1lndzSi hyPn/+hkFgBkT8BMCmKHUpB5rzLth/4TgLHv03zCrRTXHRDfrwkJ4BhH3ptcUNv7 RpLQUZUIPYphH7B1ISYQKUaMTw== -----END CERTIFICATE-----Generated at Tue Oct 13 08:50:30 2026 by rpki-client