$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: 4O3Q+kLAZWX9hDLH7yrIlXpwySBuAmDufG1LJQ69Vfs= Subject key identifier: FD:E9:B2:71:96:FF:18:24:D1:D0:EA:BC:4C:31:AF:DA:5A:19:7F:DD Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 119E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 117D Signing time: Thu 24 Sep 2026 17:10:09 +0000 Manifest this update: Thu 24 Sep 2026 17:10:09 +0000 Manifest next update: Thu 01 Oct 2026 17:10:09 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: lVufcb34QUC0QqLltJQdIU/p5hyRnzkB4nyKawgCnPk=) 2: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg=) 3: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: ssMQ43fjcNDdMMcxP4Zyw/zUAL+E/8FkY3VJGMomUwo=) 4: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: dYx5rg+ikh6rVRuWFPmqQgmz1ejCnGZL23u6GCNg5Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4510 (0x119e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Sep 24 17:10:09 2026 GMT Not After : Oct 1 17:10:09 2026 GMT Subject: CN=6ab55971-d0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:ad:0e:a6:06:21:a9:20:05:19:2d:86:b3: 27:63:cc:e7:e9:e7:16:c7:63:eb:e6:26:23:11:92: 58:43:ac:31:d4:ad:c3:d8:2f:58:b4:05:b2:b3:9f: 0f:a6:97:e5:11:7f:6b:4a:1e:8d:05:61:ab:e0:34: 71:a1:12:fc:3f:55:14:bb:e7:8a:34:5a:78:b5:14: 66:a0:3b:40:76:3e:60:f2:a1:6e:b9:3e:99:38:19: e2:78:1c:68:a3:73:a8:4b:d4:31:7c:8e:9d:39:0e: 10:59:e9:a2:b7:de:f5:5b:95:98:6d:1e:c5:c6:a1: 9b:54:ff:e1:97:be:65:86:bf:49:73:4a:f4:89:7c: 01:7a:c7:40:f1:c1:aa:37:db:bb:fd:8b:22:20:d2: d3:ed:a3:4d:a2:8c:67:3c:cc:50:1c:5d:da:1f:9b: 63:c2:be:ae:86:84:5f:41:fb:74:2a:d7:a5:6a:d2: 2f:15:9e:88:e9:64:be:5b:7f:10:14:89:10:f0:75: 2f:cb:1d:c2:80:c6:85:46:b7:ea:44:ca:bf:7a:3a: ae:cd:97:75:29:85:0d:18:e8:56:f5:a7:4a:14:9a: e6:43:de:9f:0e:b4:02:a2:21:74:b6:88:4a:6f:7b: 0c:89:91:43:22:72:ee:d0:2b:ed:1f:e9:84:35:1c: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E9:B2:71:96:FF:18:24:D1:D0:EA:BC:4C:31:AF:DA:5A:19:7F:DD X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b3:a0:67:a2:cf:2a:6b:b7:08:af:d0:41:46:af:d6:bc:f0: f0:0a:86:9f:ee:15:20:8e:7b:5d:ce:ef:59:a1:95:15:0b:86: ac:7d:55:33:1e:2c:54:4f:7f:88:17:16:b7:31:f0:b6:1a:05: 7e:ee:3e:f7:6a:c3:de:a8:bc:d5:7d:60:ff:db:ed:d1:11:e4: 8f:3f:78:82:07:88:bd:fb:34:c5:52:a9:b9:dc:56:19:3d:d6: 10:5e:c9:21:9a:53:ef:99:46:86:00:73:5e:81:47:58:90:2d: cc:39:96:92:f9:d6:5f:1a:4c:68:8b:3b:10:5d:86:c5:2b:f2: ba:dd:19:10:cf:5b:71:2a:b7:31:3a:1e:cd:9a:55:62:08:fb: cc:78:09:fb:f7:84:fa:68:43:61:95:6b:dc:05:a2:cf:43:a5: 7b:f1:e4:ef:c9:01:b5:af:f8:7f:12:15:3b:1d:c0:41:db:e7: a7:1e:a5:39:87:b5:1e:10:77:0c:8c:18:bf:9d:d1:a2:65:6b: 03:ee:31:f3:ec:72:0b:4d:49:84:c7:cb:95:4a:f1:60:7f:bd: 2f:04:e4:52:1a:de:2e:9a:ae:9f:2c:a0:3d:a6:da:7f:ad:95: f0:80:8f:88:d5:e6:ef:ef:a6:fb:b0:20:3f:d4:35:65:da:3c: 91:c4:fe:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjYwOTI0MTcxMDA5WhcNMjYxMDAxMTcxMDA5WjAYMRYwFAYD VQQDEw02YWI1NTk3MS1kMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP+tDqYGIakgBRkthrMnY8zn6ecWx2Pr5iYjEZJYQ6wx1K3D2C9YtAWys58P ppflEX9rSh6NBWGr4DRxoRL8P1UUu+eKNFp4tRRmoDtAdj5g8qFuuT6ZOBnieBxo o3OoS9QxfI6dOQ4QWemit971W5WYbR7FxqGbVP/hl75lhr9Jc0r0iXwBesdA8cGq N9u7/YsiINLT7aNNooxnPMxQHF3aH5tjwr6uhoRfQft0KtelatIvFZ6I6WS+W38Q FIkQ8HUvyx3CgMaFRrfqRMq/ejquzZd1KYUNGOhW9adKFJrmQ96fDrQCoiF0tohK b3sMiZFDInLu0CvtH+mENRyV0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3psnGW /xgk0dDqvEwxr9paGX/dMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMLOgZ6LPKmu3CK/QQUav1rzw8AqGn+4VII57Xc7vWaGVFQuGrH1VMx4sVE9/ iBcWtzHwthoFfu4+92rD3qi81X1g/9vt0RHkjz94ggeIvfs0xVKpudxWGT3WEF7J IZpT75lGhgBzXoFHWJAtzDmWkvnWXxpMaIs7EF2GxSvyut0ZEM9bcSq3MToezZpV Ygj7zHgJ+/eE+mhDYZVr3AWiz0Ole/Hk78kBta/4fxIVOx3AQdvnpx6lOYe1HhB3 DIwYv53RomVrA+4x8+xyC01JhMfLlUrxYH+9LwTkUhreLpqunyygPabaf62V8ICP iNXm7++m+7AgP9Q1Zdo8kcT+Jg== -----END CERTIFICATE-----Generated at Fri Sep 25 03:14:13 2026 by rpki-client