$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: OhdGWQBI6flBmcGn8tisWj1CHUSlw1z36ynqx29aAlI= Subject key identifier: 50:3F:82:5C:21:FC:61:FF:F4:CC:F4:40:54:30:37:83:13:2E:29:4D Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: 0297 Signing time: Fri 25 Sep 2026 01:47:42 +0000 Manifest this update: Fri 25 Sep 2026 01:47:42 +0000 Manifest next update: Fri 02 Oct 2026 01:47:42 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: dvUl0WkefE3Fgc2iAeko9cBJsWUPoAp5J5wcp1NXASk=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: Sep 25 01:47:42 2026 GMT Not After : Oct 2 01:47:42 2026 GMT Subject: CN=6ab5d2be-555b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:5b:5e:a5:9f:91:0d:26:70:58:be:d0:9c: 6d:34:b1:43:2f:11:d3:99:47:23:61:a2:00:59:69: c1:2b:f0:6a:d3:6f:d4:4f:a1:64:55:f2:7d:27:16: bb:21:23:69:8e:95:67:93:9f:e8:37:57:2c:48:02: 10:3e:08:5a:97:da:64:78:e8:7e:67:b1:1e:ea:51: 84:c2:05:57:18:8c:38:6c:8b:14:a6:5f:ce:17:99: 4b:3a:6f:f8:b8:ad:95:dc:43:bd:77:93:53:e5:6d: ed:d6:d7:2f:cc:ee:e5:c4:43:a2:b2:48:26:79:e2: 9c:19:1d:14:70:23:7e:42:cb:93:bc:c9:33:91:ae: 87:7e:ab:fe:8c:4c:08:8d:49:d0:19:8c:86:7b:4d: e1:f0:2b:97:1d:d5:f9:42:23:4b:57:97:f9:fa:90: 09:b2:40:42:ee:64:ab:78:48:f3:21:43:62:c4:f2: ab:e8:06:6d:eb:79:38:ce:49:eb:ef:16:2c:2d:e8: 90:e5:80:5e:85:b5:d9:14:3d:02:40:ab:07:ae:f0: 5d:98:c3:de:76:3b:c7:b8:84:63:51:0c:ee:bc:4b: 30:b7:f0:ef:46:09:9d:04:f8:90:e3:39:55:c4:c5: 34:19:54:cc:ca:0b:35:cb:1a:af:ef:8a:36:b3:22: d5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3F:82:5C:21:FC:61:FF:F4:CC:F4:40:54:30:37:83:13:2E:29:4D X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b7:22:84:c2:99:1e:4f:ac:2d:58:07:2c:c9:f6:4a:f1:72: 8b:4e:f6:a2:e5:7e:7b:f5:0c:37:b3:7f:bb:ab:1f:fc:5d:1c: 22:3a:7d:b1:3d:5b:83:5e:d8:d5:e6:7c:61:a1:5d:40:3d:ae: 56:13:8d:8a:60:42:60:9b:05:43:e2:e9:c3:bc:ed:99:cc:a8: 2b:d9:b6:c2:59:c9:7b:1d:f6:18:f0:7d:5c:62:01:91:1f:24: c4:9d:b3:0e:1b:24:ca:3b:2e:c3:c1:ce:14:e7:2b:1d:ef:aa: 81:08:30:d3:35:cb:b6:18:62:15:3c:d7:d4:47:6e:7c:65:b2: 61:1f:84:7c:26:8d:b2:1e:f2:fd:ba:09:3b:76:70:e7:a4:b8: 39:bc:ca:1e:94:2c:ea:a5:5a:04:81:64:21:f8:bf:b7:a0:34: f5:38:79:9c:ce:07:9e:96:35:20:b0:ad:bd:e3:1a:bd:dc:34: de:16:86:9f:40:2e:77:2e:b3:41:28:5c:f6:a6:a9:1c:eb:6f: 4f:d0:cc:a5:e6:00:4b:32:4b:4b:d4:6b:36:db:01:a2:fb:e7: 60:73:a8:b0:c5:0f:1e:43:05:55:57:6c:0a:cb:5e:a0:6b:0f: 7b:69:d4:a8:76:ea:56:20:90:2f:cc:f6:fd:d2:45:78:f8:8c: e6:ad:bd:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjYwOTI1MDE0NzQyWhcNMjYxMDAyMDE0NzQyWjAYMRYwFAYD VQQDEw02YWI1ZDJiZS01NTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK5bXqWfkQ0mcFi+0JxtNLFDLxHTmUcjYaIAWWnBK/Bq02/UT6FkVfJ9Jxa7 ISNpjpVnk5/oN1csSAIQPghal9pkeOh+Z7Ee6lGEwgVXGIw4bIsUpl/OF5lLOm/4 uK2V3EO9d5NT5W3t1tcvzO7lxEOiskgmeeKcGR0UcCN+QsuTvMkzka6Hfqv+jEwI jUnQGYyGe03h8CuXHdX5QiNLV5f5+pAJskBC7mSreEjzIUNixPKr6AZt63k4zknr 7xYsLeiQ5YBehbXZFD0CQKsHrvBdmMPedjvHuIRjUQzuvEswt/DvRgmdBPiQ4zlV xMU0GVTMygs1yxqv74o2syLVUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFA/glwh /GH/9Mz0QFQwN4MTLilNMB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV7cihMKZHk+sLVgHLMn2SvFyi072ouV+e/UMN7N/u6sf/F0cIjp9sT1bg17Y 1eZ8YaFdQD2uVhONimBCYJsFQ+Lpw7ztmcyoK9m2wlnJex32GPB9XGIBkR8kxJ2z Dhskyjsuw8HOFOcrHe+qgQgw0zXLthhiFTzX1EdufGWyYR+EfCaNsh7y/boJO3Zw 56S4ObzKHpQs6qVaBIFkIfi/t6A09Th5nM4HnpY1ILCtveMavdw03haGn0Audy6z QShc9qapHOtvT9DMpeYASzJLS9RrNtsBovvnYHOosMUPHkMFVVdsCsteoGsPe2nU qHbqViCQL8z2/dJFePiM5q29Ig== -----END CERTIFICATE-----Generated at Sun Sep 27 02:54:44 2026 by rpki-client