$ rpki-client -vvvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: 89gZiiRkMafNaaKgBF6aq+VM2T84BetH/vmyXNItnP0= Subject key identifier: 31:03:BC:B5:56:6B:2C:38:5D:41:E2:F1:8D:51:E7:3C:F6:B0:D9:5C Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0CAB Signing time: Sun 04 Oct 2026 18:40:00 +0000 Manifest this update: Sun 04 Oct 2026 18:40:00 +0000 Manifest next update: Sun 11 Oct 2026 18:40:00 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: KEEJrxjdpBVzuZs5/qRt7I6oM4FLCQfecJ89jA1Ta9I=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: ysJpjq4GZRT81ypvyps70Xs2FSrmpAOh+0WROxWsBRE=) 3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=) 4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: Oct 4 18:40:00 2026 GMT Not After : Oct 11 18:40:00 2026 GMT Subject: CN=6ac29d80-bf10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:d4:de:a3:9e:02:b3:a9:fc:e3:94:dc:4b: ca:c2:a3:04:57:1f:e7:19:58:be:a9:62:95:a4:ca: 46:5f:a4:25:73:e9:b3:55:de:ca:af:96:26:c0:ed: ba:9e:9a:a2:af:03:2a:ae:59:41:88:69:8a:47:56: b0:ff:ab:0b:1d:d9:7c:27:a2:ae:1a:f0:2f:4b:a4: 59:28:c5:90:f4:5d:f3:b3:8d:8b:e7:05:fc:dd:b6: 11:fc:17:44:8d:98:00:df:e4:de:77:d0:46:4b:be: e6:73:ff:71:05:a1:df:56:64:29:86:af:ce:82:68: 44:ea:3d:c2:2d:db:36:9e:ef:52:27:00:16:16:4c: ab:5d:2d:3a:cc:de:76:e8:aa:5a:70:f4:ae:ee:76: 49:5a:02:f2:29:06:57:10:19:3d:82:85:78:61:db: 34:00:30:58:a5:ed:df:1d:bc:e8:49:c2:80:e8:84: 2d:1f:96:4a:cc:fc:a7:5e:ee:54:79:83:1b:a6:46: 7d:c9:8f:6a:4f:d8:8a:7e:32:f1:38:96:70:d2:d1: ec:cd:0d:50:df:da:2d:4e:72:a7:f3:90:5e:7c:87: 64:12:7d:11:13:0f:c2:46:82:2e:77:a7:4a:55:fd: 19:1e:4b:a1:be:57:88:e9:2e:3c:91:08:c7:60:93: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:03:BC:B5:56:6B:2C:38:5D:41:E2:F1:8D:51:E7:3C:F6:B0:D9:5C X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:77:8a:3e:fa:24:3b:c7:ff:90:51:b3:30:49:72:5f:a8:5b: e6:93:33:a2:e0:99:26:5c:58:e5:8f:aa:1d:5e:3f:d8:4d:07: 21:57:e9:5a:c7:f7:d4:d1:28:2a:9b:65:1e:c0:1b:6f:80:c8: d8:e5:0c:73:44:0c:33:b7:5b:9e:02:30:28:55:5c:08:93:11: c9:35:76:5b:0a:e8:f2:ae:25:1c:0f:1b:c9:af:b6:29:17:0d: 7a:c8:2a:48:35:f4:3f:23:fe:6f:d8:c3:01:7b:08:28:b0:97: 1f:56:7e:69:8f:62:3a:25:20:68:86:df:a5:1a:55:f9:60:00: 99:e5:6e:4a:9d:45:1f:62:d6:9b:42:f0:55:4d:fc:23:f0:03: e6:a4:b1:4e:62:4f:64:07:c1:3c:e4:fe:bc:92:fe:05:9b:d4: 5e:67:db:55:33:eb:f6:71:40:3c:b0:2d:42:69:a3:5e:09:3d: 21:c3:c9:67:88:0b:96:b0:c9:68:32:f7:6d:2f:c7:b7:1c:30: 79:bb:73:81:17:fa:07:e8:ca:f7:87:3d:ad:49:e1:ad:a9:fc: a2:86:4e:cb:4f:c9:55:dc:2b:38:b3:9d:4e:d4:fc:88:75:15: 7d:29:0f:97:d3:59:af:67:4f:a9:85:f1:4b:6b:42:c3:1c:4c: fc:ba:ee:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjYxMDA0MTg0MDAwWhcNMjYxMDExMTg0MDAwWjAYMRYwFAYD VQQDEw02YWMyOWQ4MC1iZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HjU3qOeArOp/OOU3EvKwqMEVx/nGVi+qWKVpMpGX6Qlc+mzVd7Kr5YmwO26 npqirwMqrllBiGmKR1aw/6sLHdl8J6KuGvAvS6RZKMWQ9F3zs42L5wX83bYR/BdE jZgA3+Ted9BGS77mc/9xBaHfVmQphq/OgmhE6j3CLds2nu9SJwAWFkyrXS06zN52 6KpacPSu7nZJWgLyKQZXEBk9goV4Yds0ADBYpe3fHbzoScKA6IQtH5ZKzPynXu5U eYMbpkZ9yY9qT9iKfjLxOJZw0tHszQ1Q39otTnKn85BefIdkEn0REw/CRoIud6dK Vf0ZHkuhvleI6S48kQjHYJO7AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEDvLVW ayw4XUHi8Y1R5zz2sNlcMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm3eKPvokO8f/kFGzMElyX6hb5pMzouCZJlxY5Y+qHV4/2E0HIVfpWsf31NEo KptlHsAbb4DI2OUMc0QMM7dbngIwKFVcCJMRyTV2Wwro8q4lHA8bya+2KRcNesgq SDX0PyP+b9jDAXsIKLCXH1Z+aY9iOiUgaIbfpRpV+WAAmeVuSp1FH2LWm0LwVU38 I/AD5qSxTmJPZAfBPOT+vJL+BZvUXmfbVTPr9nFAPLAtQmmjXgk9IcPJZ4gLlrDJ aDL3bS/HtxwwebtzgRf6B+jK94c9rUnhran8ooZOy0/JVdwrOLOdTtT8iHUVfSkP l9NZr2dPqYXxS2tCwxxM/Lru9A== -----END CERTIFICATE-----Generated at Sun Oct 4 22:36:24 2026 by rpki-client