$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: dfsm1Za/4RaoSE29eddMp2JN+eMnefIPwzrwk0bR4RM= Subject key identifier: A1:BB:AC:9F:46:2C:D0:F0:ED:50:45:03:35:24:7C:E8:9F:AC:15:9B Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 358F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 3589 Signing time: Sat 26 Sep 2026 15:07:46 +0000 Manifest this update: Sat 26 Sep 2026 15:07:46 +0000 Manifest next update: Sat 03 Oct 2026 15:07:46 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: P1jXP4spJtLHngP3jNF+wQv3vRhT78b5Pv9J83Fwjak=) 2: 83440A96A05E11F1BD16176B4411F970.roa (hash: ibRZc0F5qz64ffBnyZag/XiuPhH/eRAyOQPliiCWC9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13711 (0x358f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Sep 26 15:07:46 2026 GMT Not After : Oct 3 15:07:46 2026 GMT Subject: CN=6ab7dfc2-5458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:2a:ca:28:64:c2:9a:0d:33:5e:35:93:d2: 10:22:17:bf:9f:ad:ab:54:23:72:21:6b:71:ce:cf: f4:59:b1:bb:86:4b:95:f7:08:11:aa:2d:b3:22:81: 45:77:8f:90:41:7a:63:92:6b:be:c2:1e:dd:d1:f6: c8:31:f3:04:76:1e:b4:7b:b9:b5:17:f2:77:bb:bf: 7a:92:f0:16:e7:d1:13:f6:8e:e9:de:43:da:67:b9: 90:f2:b1:73:08:65:93:b1:5d:be:fc:f3:24:f6:ae: 42:22:a2:0b:b4:6d:29:7d:dd:7a:dc:ea:0c:6c:9e: dd:8e:10:0c:4f:0d:13:e9:a9:c7:29:8a:c2:8f:d1: 7f:97:9f:b2:65:2d:43:75:80:a1:27:01:a1:f8:e4: 13:91:d3:44:40:39:34:ca:6a:30:a0:ec:30:69:ff: 26:1f:e7:50:96:88:c2:ad:32:aa:f9:26:4e:6a:ae: c9:b3:85:f9:ed:05:d1:fe:9c:d9:b3:9c:23:d2:35: f9:a1:47:86:95:85:f9:4e:40:46:76:19:29:b7:63: 05:a1:24:4b:70:dc:0c:74:29:4a:da:ef:4e:51:8d: aa:a9:63:7b:39:b0:cb:e1:d5:1e:5f:1d:0d:83:0f: cc:1d:75:b0:67:2a:73:87:21:93:81:c6:fa:3d:b0: 63:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BB:AC:9F:46:2C:D0:F0:ED:50:45:03:35:24:7C:E8:9F:AC:15:9B X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:bf:cb:3e:bf:43:1a:33:bf:b2:18:9f:d2:75:2d:52:2d: f5:f1:09:ab:ac:8a:ce:69:a3:6b:30:e7:d3:70:28:99:cf:69: c3:38:49:d4:43:df:ba:71:19:0c:65:dc:39:48:95:3f:74:df: 71:cb:36:77:a0:20:09:89:c1:4f:47:a9:a6:f0:7b:9a:64:4f: f7:9d:f8:21:68:fe:8e:09:0e:15:e3:e9:6f:40:d9:83:59:ff: be:18:f5:ec:2d:6d:43:ea:4c:c0:63:91:d7:c7:29:7e:51:8e: 56:6d:18:a9:76:ab:b3:48:8d:af:aa:96:2a:db:bc:07:d7:3c: 48:c4:c9:c9:6a:14:fa:7f:39:d2:6a:56:5d:d6:97:30:55:41: 30:44:4d:d9:ca:b3:95:6b:7f:69:c8:a8:5a:26:c5:93:0a:dc: 32:04:96:0e:7b:3b:96:7c:c3:b5:54:99:8c:3e:7a:13:68:fe: fc:26:46:eb:51:15:8b:c5:50:4c:99:b5:02:a6:60:2e:37:fd: 50:87:f0:17:d8:ea:99:5e:5b:84:71:c2:4a:76:02:1a:80:5e: ec:e4:14:73:cf:46:9d:a9:d8:89:c7:ee:a6:5a:20:42:0c:35: a6:b9:d9:ac:3a:94:20:85:27:0c:46:b5:ce:c9:72:4d:7e:e9: 9c:70:80:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjYwOTI2MTUwNzQ2WhcNMjYxMDAzMTUwNzQ2WjAYMRYwFAYD VQQDEw02YWI3ZGZjMi01NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjo8qyihkwpoNM141k9IQIhe/n62rVCNyIWtxzs/0WbG7hkuV9wgRqi2zIoFF d4+QQXpjkmu+wh7d0fbIMfMEdh60e7m1F/J3u796kvAW59ET9o7p3kPaZ7mQ8rFz CGWTsV2+/PMk9q5CIqILtG0pfd163OoMbJ7djhAMTw0T6anHKYrCj9F/l5+yZS1D dYChJwGh+OQTkdNEQDk0ymowoOwwaf8mH+dQlojCrTKq+SZOaq7Js4X57QXR/pzZ s5wj0jX5oUeGlYX5TkBGdhkpt2MFoSRLcNwMdClK2u9OUY2qqWN7ObDL4dUeXx0N gw/MHXWwZypzhyGTgcb6PbBjyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKG7rJ9G LNDw7VBFAzUkfOifrBWbMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjt6/yz6/Qxozv7IYn9J1LVIt9fEJq6yKzmmjazDn03Aomc9pwzhJ1EPfunEZ DGXcOUiVP3Tfccs2d6AgCYnBT0eppvB7mmRP9534IWj+jgkOFePpb0DZg1n/vhj1 7C1tQ+pMwGOR18cpflGOVm0YqXars0iNr6qWKtu8B9c8SMTJyWoU+n850mpWXdaX MFVBMERN2cqzlWt/acioWibFkwrcMgSWDns7lnzDtVSZjD56E2j+/CZG61EVi8VQ TJm1AqZgLjf9UIfwF9jqmV5bhHHCSnYCGoBe7OQUc89GnanYicfuplogQgw1prnZ rDqUIIUnDEa1zslyTX7pnHCA3w== -----END CERTIFICATE-----Generated at Sat Sep 26 18:21:44 2026 by rpki-client