$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: LDV1GuOIrw1Xz5+zmaYH3lk3YKyw4BHeDUJnJzvF8/I= Subject key identifier: F7:28:80:60:EF:CB:02:CC:A0:E4:41:D9:3F:E4:67:AB:F9:0F:08:F0 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 2643 Signing time: Thu 08 Oct 2026 15:46:26 +0000 Manifest this update: Thu 08 Oct 2026 15:46:26 +0000 Manifest next update: Thu 15 Oct 2026 15:46:26 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: pHbaHF1MUTew+XBhgLBWev83fW2i6pGhDX3JOE8zpgg=) 2: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: U+tT529Q+GHL3QD7YEYw7NjVcXz/pyFy7z7T6MnIels=) 3: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: kkS8+JqG0jays5vdA1cYp8CR+s315r8vJEVpcCgrkxw=) 4: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: HAzpr+/WwGkW8DZj5IL+9eyh8W1fcpKsnYsToZZGt6k=) 5: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: PvlCjzRuVQS5z3Y7RAsjDxZGQj+lAI/1wkWEPf7utQs=) 6: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lOvYt+0/Xr6pgMpv/63iUFQ210NPhZzouXW57Pt++DQ=) 7: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: gjf2jRQsp1qsh5RXiSSXaVBggupO1BAV+sMX1zhYhgA=) 8: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: dsoG1fAq1bgsphdBqoNIah+vGbeVpPNIP3lQ1EE01Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 15:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10112 (0x2780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Oct 8 15:46:26 2026 GMT Not After : Oct 15 15:46:26 2026 GMT Subject: CN=6ac7bad2-6699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:9b:81:ca:6f:b1:86:26:99:7f:9b:05:24: ec:f0:f6:26:05:74:e1:d2:38:15:2a:b3:8d:a1:95: 96:ab:e6:05:8b:81:b0:04:38:2e:0f:c1:6d:6f:4e: a8:3a:6c:11:cc:83:0b:e0:7b:8f:5e:bd:39:ec:f5: 60:da:74:8f:ae:d8:36:6e:da:79:4d:a1:d7:3d:00: d7:17:8c:a3:0d:5b:89:3b:b4:50:d4:eb:cd:56:f0: 63:57:e0:0b:2a:25:60:de:7c:07:35:3a:06:92:cd: a2:38:f9:02:05:4d:e8:51:3b:36:55:ec:ac:df:fd: 1d:9e:c8:81:23:e1:13:e4:62:f7:b9:6f:f3:37:d5: 91:91:c9:c4:16:da:1f:e1:c1:24:97:03:3b:d6:d7: ff:a6:bf:f8:6c:7e:a0:c4:9f:e3:8a:7c:2f:b5:3c: 43:e8:0e:66:08:2a:3b:f7:f7:28:47:7a:ae:ed:72: 73:6a:3d:27:87:96:d2:b9:82:ce:1f:c0:39:d0:4c: 18:22:3e:07:3f:70:70:c8:8e:f0:7f:72:13:b7:ce: 4f:bd:5d:c9:64:4a:66:a2:5d:4e:fb:ad:76:6d:d3: 5d:88:48:1b:a0:c1:97:e2:6a:d8:1c:dd:6a:bd:39: 44:41:f4:ad:ea:f7:22:99:4a:b4:30:d2:8f:fa:d7: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:28:80:60:EF:CB:02:CC:A0:E4:41:D9:3F:E4:67:AB:F9:0F:08:F0 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:39:a3:a0:92:5f:8f:2c:32:24:5c:ec:16:f6:e2:09:ac:0a: 32:1d:62:e5:32:0d:16:60:61:02:fc:99:9e:50:bb:c9:01:b7: bd:c4:ba:1a:da:bd:9d:0c:37:ef:b3:13:f7:90:6b:63:8c:13: 73:ff:33:b3:ce:4d:a8:22:3a:97:2f:08:5b:3a:31:94:af:17: a8:c4:59:ae:f7:eb:6e:77:1f:03:31:d3:09:9b:b4:b8:49:34: 73:2d:62:19:ff:e5:41:af:76:82:f6:a4:aa:b9:83:50:83:1d: e1:9a:05:53:5c:0a:81:16:db:08:72:70:f4:d5:58:d5:f2:a9: 12:e1:5e:59:18:30:0b:59:9c:cf:e1:61:85:79:23:99:30:0f: 9b:93:3b:07:b7:15:bd:b5:8a:7d:4f:9c:e6:bf:31:bd:1e:98: bd:85:dd:cb:29:f8:26:45:1e:29:8c:28:02:f0:77:e6:e1:bb: 8a:19:2f:13:14:69:f4:43:13:a9:38:8e:dd:e3:6e:20:36:cb: b4:7c:a8:a3:48:64:51:58:d8:64:84:29:db:74:c1:5f:3b:f4: 96:04:2b:1c:ce:9d:56:70:79:71:2c:23:8b:15:96:f5:6c:6a: 76:ca:d1:c3:26:24:4a:75:6e:11:a3:71:f6:98:15:e8:46:a4: 5b:fd:5a:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYxMDA4MTU0NjI2WhcNMjYxMDE1MTU0NjI2WjAYMRYwFAYD VQQDEw02YWM3YmFkMi02Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+ybgcpvsYYmmX+bBSTs8PYmBXTh0jgVKrONoZWWq+YFi4GwBDguD8Ftb06o OmwRzIML4HuPXr057PVg2nSPrtg2btp5TaHXPQDXF4yjDVuJO7RQ1OvNVvBjV+AL KiVg3nwHNToGks2iOPkCBU3oUTs2Veys3/0dnsiBI+ET5GL3uW/zN9WRkcnEFtof 4cEklwM71tf/pr/4bH6gxJ/jinwvtTxD6A5mCCo79/coR3qu7XJzaj0nh5bSuYLO H8A50EwYIj4HP3BwyI7wf3ITt85PvV3JZEpmol1O+612bdNdiEgboMGX4mrYHN1q vTlEQfSt6vcimUq0MNKP+tdRvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPcogGDv ywLMoORB2T/kZ6v5DwjwMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMTmjoJJfjywyJFzsFvbiCawKMh1i5TINFmBhAvyZnlC7yQG3vcS6Gtq9nQw3 77MT95BrY4wTc/8zs85NqCI6ly8IWzoxlK8XqMRZrvfrbncfAzHTCZu0uEk0cy1i Gf/lQa92gvakqrmDUIMd4ZoFU1wKgRbbCHJw9NVY1fKpEuFeWRgwC1mcz+FhhXkj mTAPm5M7B7cVvbWKfU+c5r8xvR6YvYXdyyn4JkUeKYwoAvB35uG7ihkvExRp9EMT qTiO3eNuIDbLtHyoo0hkUVjYZIQp23TBXzv0lgQrHM6dVnB5cSwjixWW9WxqdsrR wyYkSnVuEaNx9pgV6EakW/1aMA== -----END CERTIFICATE-----Generated at Sat Oct 10 11:31:19 2026 by rpki-client