$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: bbGZNTxkCQeqk5Kh/tgXHQU54JxWIkzz+FFwUFtRln8= Subject key identifier: AD:93:92:81:94:88:8A:A4:FE:7E:2A:5C:2F:AE:CF:01:7C:99:68:2B Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 056B Signing time: Fri 02 Oct 2026 23:39:14 +0000 Manifest this update: Fri 02 Oct 2026 23:39:13 +0000 Manifest next update: Fri 09 Oct 2026 23:39:13 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: 1hr5UdsRmCejc57y8AIA6JT8V6LY0Gd2lIxVQyFMYgo=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: Oct 2 23:39:13 2026 GMT Not After : Oct 9 23:39:13 2026 GMT Subject: CN=6ac040a1-4e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:d6:2b:da:e0:ef:c1:97:16:e7:63:8a:e0: 9a:c7:db:9b:26:6f:01:2c:a2:5d:e2:d6:2b:12:f3: b9:72:43:67:f1:a8:6b:61:f7:e6:44:44:d0:32:f7: 66:41:45:ae:0b:6b:96:2c:46:38:99:53:17:c0:f6: 93:77:79:4d:d0:f2:46:84:8a:87:f9:f3:69:20:3a: f1:3c:65:83:c8:64:e4:b2:d8:c3:56:d8:28:c8:03: 6b:ea:fb:77:0c:42:dc:e1:03:85:e0:5b:24:d2:44: 5a:1b:03:7e:63:fa:2a:0d:bd:8f:22:0f:a4:16:86: 2c:2d:ff:52:63:51:53:c9:f9:bc:c6:37:6c:8a:ee: b7:2a:9d:47:c9:63:b8:2f:8d:7e:21:b8:a8:7a:c4: 20:d5:b5:91:b8:61:41:dd:fc:fe:52:24:c2:88:95: 6d:45:17:dd:a9:8d:33:10:de:35:07:a4:f9:47:f4: 31:37:bb:b6:b6:5f:01:ff:b3:c4:cf:0f:95:8c:7d: ac:1c:72:63:54:af:a5:ff:2c:73:6d:99:04:de:93: a7:6a:e6:9e:ff:fa:2b:62:90:f0:7d:18:d6:00:ca: 0b:9c:39:ea:b4:00:70:5d:c0:8a:ac:ab:0a:53:e9: 68:94:8c:75:ad:de:96:e6:2f:e1:34:b6:50:27:d4: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:93:92:81:94:88:8A:A4:FE:7E:2A:5C:2F:AE:CF:01:7C:99:68:2B X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:6e:da:a3:96:37:e4:31:e8:0c:a5:31:35:63:81:5c:8e:da: 6f:62:af:ef:ff:56:7b:3c:08:52:fb:f3:b6:a0:7e:df:5b:b7: 3e:af:6f:48:ea:a5:2d:11:9b:e1:20:94:3e:1a:9c:79:ab:c7: e6:cc:d3:f1:cc:c2:ec:3d:12:82:95:e7:f1:da:6c:27:a0:0f: f9:a8:90:e3:b9:b0:19:c2:58:be:60:ef:c4:80:cb:aa:d0:9a: d3:d0:11:e8:68:87:f9:b9:6e:ca:40:75:c3:f2:09:9d:fb:63: cb:50:c8:00:a9:e1:d4:bc:74:73:a7:c1:8f:f9:1b:d4:42:50: 12:dc:41:52:2f:21:7c:f1:2e:51:8f:84:bf:2e:4c:ec:1a:54: ac:fa:40:e4:3f:22:91:e0:03:6d:03:b6:1b:1d:6d:ca:3e:a0: 12:2b:d6:c5:09:f2:fe:f8:87:30:47:b9:e9:26:b3:2e:63:98: 1d:fb:c6:6e:c9:ba:81:7c:2e:05:44:ff:32:12:93:1e:fb:8b: 0f:d1:9c:81:6c:30:53:81:ba:6b:54:4c:28:a2:69:e1:b2:88: 58:92:38:28:95:dc:e5:2a:cc:25:af:c6:6e:d8:20:7e:9b:fe: b1:e1:b6:21:54:07:6c:4d:32:7d:ee:63:fd:47:b1:f4:40:b8: 66:33:62:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjYxMDAyMjMzOTEzWhcNMjYxMDA5MjMzOTEzWjAYMRYwFAYD VQQDEw02YWMwNDBhMS00ZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj1LWK9rg78GXFudjiuCax9ubJm8BLKJd4tYrEvO5ckNn8ahrYffmRETQMvdm QUWuC2uWLEY4mVMXwPaTd3lN0PJGhIqH+fNpIDrxPGWDyGTkstjDVtgoyANr6vt3 DELc4QOF4Fsk0kRaGwN+Y/oqDb2PIg+kFoYsLf9SY1FTyfm8xjdsiu63Kp1HyWO4 L41+IbioesQg1bWRuGFB3fz+UiTCiJVtRRfdqY0zEN41B6T5R/QxN7u2tl8B/7PE zw+VjH2sHHJjVK+l/yxzbZkE3pOnauae//orYpDwfRjWAMoLnDnqtABwXcCKrKsK U+lolIx1rd6W5i/hNLZQJ9TXxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2TkoGU iIqk/n4qXC+uzwF8mWgrMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwm7ao5Y35DHoDKUxNWOBXI7ab2Kv7/9WezwIUvvztqB+31u3Pq9vSOqlLRGb 4SCUPhqceavH5szT8czC7D0SgpXn8dpsJ6AP+aiQ47mwGcJYvmDvxIDLqtCa09AR 6GiH+bluykB1w/IJnftjy1DIAKnh1Lx0c6fBj/kb1EJQEtxBUi8hfPEuUY+Evy5M 7BpUrPpA5D8ikeADbQO2Gx1tyj6gEivWxQny/viHMEe56SazLmOYHfvGbsm6gXwu BUT/MhKTHvuLD9GcgWwwU4G6a1RMKKJp4bKIWJI4KJXc5SrMJa/Gbtggfpv+seG2 IVQHbE0yfe5j/Uex9EC4ZjNi5w== -----END CERTIFICATE-----Generated at Sun Oct 4 02:44:14 2026 by rpki-client