$ rpki-client -vvvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: 8T27BJzjd8Q5z/p96+AccfKyYJTDRmFvcsCchXLUGmY= Subject key identifier: 7D:59:A8:0E:AB:E1:A8:26:54:7A:D8:BD:E8:0B:98:8B:B0:03:47:CA Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 010D Signing time: Tue 22 Sep 2026 17:26:53 +0000 Manifest this update: Tue 22 Sep 2026 17:26:53 +0000 Manifest next update: Tue 29 Sep 2026 17:26:53 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: uYgCcCF8qgBgnp8h/wc9mi4Za5oAemINeFn6vBRIlhs=) 2: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZonpCT+5ZZuP5erM6WjI5zX2DJGXZb7/2jDh35lgn00=) 3: 79FB87E45BE811F1A1050E64C6833773.roa (hash: NWwclcZCcPG2TS1pQpW1RR20GoSP1Iy5BozZgf751Lw=) 4: E7E8471858BB11F1BAE21C4D9A833773.roa (hash: Tc3fcqpoYCzH1k3AQYmkHoaNjc5Waq991d+rce3j0bg=) 5: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: 4a6PLPW/gOHUVu6+aFebgQ5/qx4vCQg4zTQoTmjp9Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Sep 22 17:26:53 2026 GMT Not After : Sep 29 17:26:53 2026 GMT Subject: CN=6ab2ba5d-a553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:d9:5a:cd:ac:a1:7d:56:1c:b5:0e:d3:b6: 21:03:53:06:d6:bd:23:16:a4:55:06:90:be:d2:14: 90:6e:b4:ab:dc:23:a5:74:9d:7c:a7:9c:c6:cf:e6: ee:2f:dc:b7:a2:8b:b1:22:6b:e6:07:3f:ef:59:46: 5e:40:bb:fc:63:52:04:72:a6:5f:b5:30:df:d9:a2: 40:9c:e6:16:8b:31:9c:1a:5f:23:d1:82:32:3e:a3: 6c:62:71:44:fa:94:02:14:cf:91:79:f7:95:87:2b: 82:45:08:7b:a0:2e:b7:af:b3:44:59:35:6b:40:dd: 6d:a1:6e:3e:e7:b6:e7:a1:0a:c6:d4:29:5c:d7:e6: a3:c3:df:ba:4e:e4:a8:4d:bc:3f:02:69:44:03:03: 9d:75:77:1e:1b:2b:b4:45:df:a7:7c:50:34:50:0c: 64:02:9d:8c:89:dc:44:a5:67:c0:84:21:60:89:99: c3:5f:53:7f:12:03:b6:6e:de:80:2d:8e:05:29:f0: 96:51:a4:9a:61:c2:a4:84:e7:59:31:a0:b1:f7:43: 37:19:a0:ce:f9:d0:f5:c1:d7:a4:ff:bd:08:80:04: ec:05:e7:4e:1f:0b:d2:c5:90:8f:f2:90:4d:e1:4d: df:ad:b3:a3:bc:71:ef:e9:8c:7e:45:f6:47:09:99: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:59:A8:0E:AB:E1:A8:26:54:7A:D8:BD:E8:0B:98:8B:B0:03:47:CA X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:96:1d:b3:8e:43:f8:71:c3:81:ac:b0:6b:6c:70:b6:4b:d2: 5c:b8:6c:e7:48:d8:0e:97:e0:bb:54:6c:9d:b2:a2:b7:ea:79: fd:e1:f0:3c:1d:be:3a:ea:95:19:1b:17:71:49:e7:0b:b8:ab: 84:39:b9:3d:6a:ff:c7:e8:80:60:20:ee:f3:ca:c9:67:82:c8: 81:a2:a9:de:e7:88:5e:cf:09:30:0f:c7:ee:27:94:9c:4b:ff: 43:1e:2b:78:ba:dc:4f:3b:50:bd:eb:4e:b1:6e:9a:2f:61:3f: d4:c5:86:7b:0e:94:bc:21:43:9e:5e:50:65:93:f0:59:58:f9: 90:cc:ad:6b:ae:2d:cb:b8:60:64:b9:6d:bb:db:3b:8c:3e:8c: bc:a5:8c:62:fe:2f:1b:35:00:38:c7:11:19:6e:8a:02:79:47: 7f:4c:75:af:e0:98:e1:d0:82:38:bf:66:0b:0e:9d:18:ec:0d: df:b7:f0:dd:b0:9c:7d:8e:80:41:47:72:11:16:a0:62:d0:3a: 6d:9b:6c:66:2a:ee:5e:f2:e3:e6:6d:7f:f1:d2:7a:ad:6f:38: 79:91:65:cd:98:64:d2:b0:10:07:26:ba:14:a7:a1:c7:93:78: bb:69:4c:e1:bb:ea:0f:5c:52:7c:6b:54:7a:a8:91:9e:3c:d1: a1:04:61:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKDVEQjc1QjJERjk0RDA0NDc0QTZFNUUyRDRCNzhDQzA4 NEJGQzJBNkMwHhcNMjYwOTIyMTcyNjUzWhcNMjYwOTI5MTcyNjUzWjAYMRYwFAYD VQQDEw02YWIyYmE1ZC1hNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O3ZWs2soX1WHLUO07YhA1MG1r0jFqRVBpC+0hSQbrSr3COldJ18p5zGz+bu L9y3oouxImvmBz/vWUZeQLv8Y1IEcqZftTDf2aJAnOYWizGcGl8j0YIyPqNsYnFE +pQCFM+RefeVhyuCRQh7oC63r7NEWTVrQN1toW4+57bnoQrG1Clc1+ajw9+6TuSo Tbw/AmlEAwOddXceGyu0Rd+nfFA0UAxkAp2MidxEpWfAhCFgiZnDX1N/EgO2bt6A LY4FKfCWUaSaYcKkhOdZMaCx90M3GaDO+dD1wdek/70IgATsBedOHwvSxZCP8pBN 4U3frbOjvHHv6Yx+RfZHCZlQUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1ZqA6r 4agmVHrYvegLmIuwA0fKMB8GA1UdIwQYMBaAFF23Wy35TQRHSm5eLUt4zAhL/Cps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS8wOTVGNkM4QzI2 N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJFZEtibDR0UzNqTUNFdjhL bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS8wOTVGNkM4QzI2N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJF ZEtibDR0UzNqTUNFdjhLbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZpYds45D+HHDgaywa2xwtkvSXLhs50jYDpfgu1RsnbKit+p5/eHwPB2+OuqV GRsXcUnnC7irhDm5PWr/x+iAYCDu88rJZ4LIgaKp3ueIXs8JMA/H7ieUnEv/Qx4r eLrcTztQvetOsW6aL2E/1MWGew6UvCFDnl5QZZPwWVj5kMyta64ty7hgZLltu9s7 jD6MvKWMYv4vGzUAOMcRGW6KAnlHf0x1r+CY4dCCOL9mCw6dGOwN37fw3bCcfY6A QUdyERagYtA6bZtsZiruXvLj5m1/8dJ6rW84eZFlzZhk0rAQBya6FKehx5N4u2lM 4bvqD1xSfGtUeqiRnjzRoQRheg== -----END CERTIFICATE-----Generated at Thu Sep 24 16:55:56 2026 by rpki-client