$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json) Hash identifier: 2GPBMHIyqJsdGe+Vu6zJoDb5y78fce+eMNQjTdNJI7M= Subject key identifier: B9:09:46:8D:30:5B:33:BB:84:73:DC:D0:2A:DE:EC:63:0B:01:F6:2F Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft Manifest number: 05A8 Signing time: Tue 22 Sep 2026 22:55:07 +0000 Manifest this update: Tue 22 Sep 2026 22:55:07 +0000 Manifest next update: Tue 29 Sep 2026 22:55:07 +0000 Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: +mRBN7puD2qPT2sjq6mBu9iO5YhbCJ2UsUnwjMHi7HI=) 2: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: et9HDrh+GN5yOnO0QC3PHWe6pVv8xUnM/31aeD6iTS8=) 3: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: XRPA2JKWpTIHSFaMOHgkHY8yCfbif5wXEREcy191bJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Sep 22 22:55:07 2026 GMT Not After : Sep 29 22:55:07 2026 GMT Subject: CN=6ab3074b-4cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:22:d8:8c:b3:12:0a:c5:9b:6b:12:c5:bb: af:2c:3d:35:c8:2c:d0:7f:df:a8:43:7c:33:1b:df: 01:52:49:f5:4c:94:5f:ba:51:13:c5:b6:ad:60:ca: 8e:61:b5:23:e4:22:51:9f:a5:cb:c6:ff:0b:08:43: 16:1e:bc:6b:f4:f4:ea:5c:b4:2c:49:e6:49:f1:94: 66:87:c0:6d:b3:87:c5:35:a2:f6:f8:1e:f7:d7:cc: 16:bb:f6:b5:86:c4:23:0d:eb:5d:db:46:21:df:1b: b4:9d:e9:a8:4e:ee:24:25:a7:df:aa:1f:c9:f0:93: 18:e9:72:8f:a4:43:e8:1d:3e:fc:0a:a3:78:9c:d0: c2:f4:d1:b9:d7:1a:fd:42:29:73:6a:60:f1:45:8d: 09:e5:7e:26:11:1e:b5:72:7e:41:52:21:85:c3:e2: 48:51:46:17:9b:e8:d4:33:c6:0e:13:47:0f:0f:c8: 61:e3:e6:5b:bd:ad:43:6d:a5:75:2f:72:87:14:72: ee:2b:dc:f5:06:f3:29:47:0c:be:36:9c:92:d2:22: dc:da:f2:ef:0a:a5:c1:a2:ed:76:ad:62:7d:ca:ff: b5:fb:19:88:11:4e:d0:b3:97:53:09:1b:b7:ec:ea: 94:56:94:f7:de:f6:53:f8:8e:cc:a2:0d:6b:b1:31: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:09:46:8D:30:5B:33:BB:84:73:DC:D0:2A:DE:EC:63:0B:01:F6:2F X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c2:37:04:c6:53:e8:e3:32:f5:d3:3b:9f:50:eb:bf:78:0c: 35:3b:e8:60:7e:fc:10:28:fc:59:20:36:f4:2d:b1:62:6d:51: 5e:ab:66:90:c5:10:99:67:b6:93:b7:fb:8e:3c:40:7d:0f:ab: fc:fd:72:33:18:63:90:ce:a0:1a:9f:49:22:77:dd:ea:30:38: 3c:68:06:33:24:67:f2:c4:2d:3c:b4:d5:cf:90:ef:9e:89:21: 26:98:4a:b1:9d:f8:f8:51:50:aa:cc:85:a2:62:2b:22:c1:8c: a7:07:66:7b:62:b1:6e:53:61:6f:21:49:3d:58:18:68:58:d5: d2:96:cb:72:27:27:ec:07:c2:52:24:56:eb:20:98:0c:45:e9: 86:86:46:e9:31:da:fb:aa:34:72:06:6f:51:3d:e3:35:e8:b1: 71:7a:ce:67:be:10:e2:ca:85:5c:ab:2a:3b:f6:f3:30:70:9d: 65:3f:4c:1f:c6:bb:d0:18:c8:f2:57:42:2e:54:14:43:41:42: 29:0c:17:96:6e:2e:ba:29:01:6d:85:1e:e2:90:90:8a:d2:35: a0:90:01:64:c1:73:9d:00:38:4b:6c:3c:33:0f:41:21:a7:4f: 83:a4:ca:ce:dc:ea:4f:68:2e:a0:ff:37:49:ca:8d:35:fd:96: 1b:3e:ce:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjYwOTIyMjI1NTA3WhcNMjYwOTI5MjI1NTA3WjAYMRYwFAYD VQQDEw02YWIzMDc0Yi00Y2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoAi2IyzEgrFm2sSxbuvLD01yCzQf9+oQ3wzG98BUkn1TJRfulETxbatYMqO YbUj5CJRn6XLxv8LCEMWHrxr9PTqXLQsSeZJ8ZRmh8Bts4fFNaL2+B7318wWu/a1 hsQjDetd20Yh3xu0nemoTu4kJaffqh/J8JMY6XKPpEPoHT78CqN4nNDC9NG51xr9 QilzamDxRY0J5X4mER61cn5BUiGFw+JIUUYXm+jUM8YOE0cPD8hh4+Zbva1DbaV1 L3KHFHLuK9z1BvMpRwy+NpyS0iLc2vLvCqXBou12rWJ9yv+1+xmIEU7Qs5dTCRu3 7OqUVpT33vZT+I7Mog1rsTHloQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkJRo0w WzO7hHPc0Cre7GMLAfYvMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ WEJpU2NqTU52Y3JTcDlBVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJMI3BMZT6OMy9dM7n1Drv3gMNTvoYH78ECj8WSA29C2xYm1RXqtmkMUQmWe2 k7f7jjxAfQ+r/P1yMxhjkM6gGp9JInfd6jA4PGgGMyRn8sQtPLTVz5DvnokhJphK sZ34+FFQqsyFomIrIsGMpwdme2KxblNhbyFJPVgYaFjV0pbLcicn7AfCUiRW6yCY DEXphoZG6THa+6o0cgZvUT3jNeixcXrOZ74Q4sqFXKsqO/bzMHCdZT9MH8a70BjI 8ldCLlQUQ0FCKQwXlm4uuikBbYUe4pCQitI1oJABZMFznQA4S2w8Mw9BIadPg6TK ztzqT2guoP83ScqNNf2WGz7O2Q== -----END CERTIFICATE-----Generated at Wed Sep 23 19:14:33 2026 by rpki-client