$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: +pK4qVb8BMELAjaPUEA5X4fEk84DX/W1FN3OAhxMwx0= Subject key identifier: 14:0F:0D:F9:70:D2:48:F2:66:90:85:33:BE:C1:7F:F5:46:2F:C3:F5 Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 029C Signing time: Fri 25 Sep 2026 16:20:12 +0000 Manifest this update: Fri 25 Sep 2026 16:20:11 +0000 Manifest next update: Fri 02 Oct 2026 16:20:11 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: rrnoW3Av8Io0aBJdEFHAlYDGkTfsguvnvd47Zf8H1VE=) 2: F8D9DD88B8FC11F1BF1A80ED4011F970.roa (hash: H0FKlshXl0D4srmT01cH307SR+SUUWcxlZRuNMPuvp0=) 3: B2DDF724B8FC11F1A8F661794011F970.roa (hash: ic1OJEHCSeM+RtMU+p3P86VGV/YehpNvpr9sRvOWDpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 16:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: Sep 25 16:20:11 2026 GMT Not After : Oct 2 16:20:11 2026 GMT Subject: CN=6ab69f3c-a748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:fc:e2:c4:90:4c:4d:38:1d:9e:43:04:88: 27:2b:39:48:eb:2e:c2:2e:06:a9:c0:49:2a:72:9f: c2:1e:38:6b:8e:54:85:90:27:2b:d9:74:38:fb:46: b0:5e:7d:17:f2:2a:86:68:75:fc:c4:3f:3c:bb:c8: 65:80:5d:19:26:cf:79:38:bd:ca:95:84:43:53:02: 51:9e:29:7d:36:83:fc:10:02:c8:32:0f:e3:a7:87: d4:8c:98:ba:9f:97:61:1b:2a:a4:48:b1:a6:33:0e: 85:aa:74:b1:80:44:fc:4c:16:7d:47:d2:76:c6:b2: 32:9d:07:6a:9b:e4:46:c2:8c:04:f8:19:87:25:4d: 1a:51:19:6b:a7:23:88:d4:da:2c:15:10:65:29:51: ff:48:2c:86:af:b6:31:cc:1b:46:7e:d9:fd:62:83: 36:e5:f3:d1:63:b8:8c:ba:aa:8a:45:0a:1a:cc:f7: 48:d2:c1:4c:57:80:65:be:cb:c5:b1:95:fb:5d:ed: 9a:4f:c6:de:5d:5e:e0:f8:25:d3:bf:9d:06:30:57: 95:70:e4:68:dc:7b:59:d9:6f:d5:6f:39:49:7e:35: d0:16:41:79:9c:84:25:62:1a:94:97:5c:8a:c8:49: 1f:0b:6f:a9:91:5c:5d:09:b5:89:85:1e:6c:e0:ac: b7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:0D:F9:70:D2:48:F2:66:90:85:33:BE:C1:7F:F5:46:2F:C3:F5 X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1f:93:8a:6e:7c:c4:57:76:0e:2c:0f:d1:92:00:27:d7:01: 09:13:34:f8:d7:17:97:6a:5f:55:f9:9b:83:91:42:0c:c1:81: ad:90:7d:a7:02:18:4d:7a:54:63:8d:c7:61:f3:6a:d3:34:d6: 73:21:b8:7d:e7:c6:ad:bb:bc:b3:12:80:4a:1b:ca:46:a6:9e: dc:96:d7:50:cf:bd:a3:df:a2:49:3f:f2:8f:b5:93:0c:f1:31: 38:62:7d:33:73:df:05:6f:f1:23:4c:58:84:da:25:c7:18:d5: cf:52:56:ba:4f:d1:a5:3c:42:d9:d8:7f:6b:0a:d6:b6:6e:86: 4f:42:4e:da:6f:03:8d:b4:a1:87:a3:d9:9c:13:9f:49:51:a1: e7:34:ee:74:ba:2c:4e:a1:39:d0:a7:25:22:a0:94:91:29:5f: d9:8d:84:72:39:a8:1b:d0:d9:21:d5:50:57:69:82:a7:af:af: 10:cb:23:4c:95:e0:c1:ac:e8:7f:1c:fa:57:86:2d:f5:90:89: f7:d0:9d:74:ee:fd:01:2a:54:71:56:ff:22:f1:1e:ac:2c:59: 19:06:02:9c:38:8f:41:74:1b:86:39:57:39:3d:1d:da:09:5b: 8e:e0:b7:04:c0:78:39:d5:ad:b8:05:6d:a2:a6:fa:06:d9:24: 12:d3:4d:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjYwOTI1MTYyMDExWhcNMjYxMDAyMTYyMDExWjAYMRYwFAYD VQQDEw02YWI2OWYzYy1hNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdr84sSQTE04HZ5DBIgnKzlI6y7CLgapwEkqcp/CHjhrjlSFkCcr2XQ4+0aw Xn0X8iqGaHX8xD88u8hlgF0ZJs95OL3KlYRDUwJRnil9NoP8EALIMg/jp4fUjJi6 n5dhGyqkSLGmMw6FqnSxgET8TBZ9R9J2xrIynQdqm+RGwowE+BmHJU0aURlrpyOI 1NosFRBlKVH/SCyGr7YxzBtGftn9YoM25fPRY7iMuqqKRQoazPdI0sFMV4BlvsvF sZX7Xe2aT8beXV7g+CXTv50GMFeVcORo3HtZ2W/VbzlJfjXQFkF5nIQlYhqUl1yK yEkfC2+pkVxdCbWJhR5s4Ky39wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQPDflw 0kjyZpCFM77Bf/VGL8P1MB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAex+Tim58xFd2DiwP0ZIAJ9cBCRM0+NcXl2pfVfmbg5FCDMGBrZB9pwIYTXpU Y43HYfNq0zTWcyG4fefGrbu8sxKAShvKRqae3JbXUM+9o9+iST/yj7WTDPExOGJ9 M3PfBW/xI0xYhNolxxjVz1JWuk/RpTxC2dh/awrWtm6GT0JO2m8DjbShh6PZnBOf SVGh5zTudLosTqE50KclIqCUkSlf2Y2EcjmoG9DZIdVQV2mCp6+vEMsjTJXgwazo fxz6V4Yt9ZCJ99CddO79ASpUcVb/IvEerCxZGQYCnDiPQXQbhjlXOT0d2glbjuC3 BMB4OdWtuAVtoqb6BtkkEtNNUA== -----END CERTIFICATE-----Generated at Sat Sep 26 14:42:06 2026 by rpki-client