$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: shuxPieOlc+0EPnGWpekJMxly/XwQMdsGZhpMyT/Vx0= Subject key identifier: 0E:7D:D8:95:0E:DD:36:8C:37:94:DD:2F:EE:5E:B3:3C:91:82:7B:81 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0735 Signing time: Mon 28 Sep 2026 22:22:44 +0000 Manifest this update: Mon 28 Sep 2026 22:22:43 +0000 Manifest next update: Mon 05 Oct 2026 22:22:43 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: NjQaVKogGn3A/xrqOHX3qX973mTHzfmIhO8jBswqmiU=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: AReViyH8qYJmKjUIQ8QrviAg/eKIeslm79IJrfhFTIA=) 3: E1201A0422D611EFAE700044C4F9AE02.roa (hash: VfZcIRpYWsXv2sQHMltNI7KlcM5kOmrXtKUtk3vzF9g=) 4: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: sM6Ff5Btr2H1Za3+xr7nTyk868AOvBu9Fccxr6yah7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 22:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Sep 28 22:22:43 2026 GMT Not After : Oct 5 22:22:43 2026 GMT Subject: CN=6abae8b4-4924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:99:55:09:d6:be:4f:1c:6b:6a:c1:c2:a2:aa: 6d:98:0d:91:8a:77:b3:07:0c:61:9c:54:1f:bb:66: 8d:ac:9e:4b:44:1f:3d:e8:37:e0:ec:20:db:13:c7: dd:d4:c1:8c:d6:9f:08:ed:d6:2d:c3:10:e1:26:2a: d6:70:ce:97:a7:94:4d:a5:9b:6a:90:4c:77:14:10: c6:f9:57:ae:b5:5c:e6:0c:77:33:ac:6e:e2:12:22: 0d:bb:4a:8e:b6:0e:1f:ce:26:90:7c:d6:11:67:7a: dd:09:de:94:06:5c:5d:5b:cf:62:97:84:f4:45:18: 7d:0e:f8:c1:42:99:45:d3:26:7c:5c:a2:e0:cc:d4: fd:4f:08:ec:b4:28:7f:d1:a7:76:6d:ab:66:5b:2b: d7:aa:66:4f:d2:b9:4b:bb:6a:2e:e3:5b:40:90:dc: 6c:71:61:00:d3:16:a5:e6:ec:57:78:20:e5:d9:01: 21:be:a4:56:79:69:b8:1e:a1:0f:66:6e:49:ae:c5: 16:05:3d:bd:b6:a1:42:03:ac:91:dc:6e:0c:0b:c1: 6f:34:3e:28:fe:23:ad:e0:9c:27:9e:b9:08:77:29: 1b:78:4f:f4:79:61:fe:93:b8:72:8e:55:a4:50:5c: fc:72:ba:02:5e:33:e5:5d:f6:e0:b4:09:46:6d:fa: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:D8:95:0E:DD:36:8C:37:94:DD:2F:EE:5E:B3:3C:91:82:7B:81 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:99:f5:c3:0c:50:42:df:a7:9b:11:11:54:bc:43:fd:14:94: c6:c1:10:c4:32:fd:28:c5:81:57:7d:c7:dd:b9:5b:89:96:37: 72:7f:e8:c9:75:84:0f:5b:8c:df:3b:27:5e:86:8a:2d:f6:24: 7f:47:1a:5d:1e:24:f9:d8:a1:b6:95:7b:79:de:18:ca:fb:5b: 61:6d:77:52:75:6b:db:ea:6b:6c:6b:4a:cd:27:7e:60:76:8d: 1f:eb:0c:bb:78:27:13:0b:ba:22:f8:88:ab:e5:91:7d:fb:f5: d0:59:ae:87:b4:e9:46:5a:bc:5e:1b:35:53:da:6f:d1:6c:d8: 3a:2f:29:47:81:0c:29:99:e3:25:19:c9:b3:35:8a:4b:b3:64: 62:c8:89:6d:ee:71:d0:57:e5:4e:64:16:74:e2:d8:04:68:31: 8e:37:e3:e5:b0:95:e7:45:de:fe:24:2b:70:f7:91:3f:14:f9: 7a:ae:18:b2:d6:24:0a:d6:ce:e0:ba:58:7f:db:d4:04:36:f5: 2c:c1:63:2b:0a:59:19:d2:e3:10:d2:85:28:ec:ce:3d:f2:5d: 1f:d1:b8:1d:26:71:e8:59:31:cb:11:6e:6e:57:c9:22:f5:f3: 0a:76:48:a1:49:28:7c:84:3c:10:79:01:54:ec:b0:8f:9f:96: b2:20:37:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjYwOTI4MjIyMjQzWhcNMjYxMDA1MjIyMjQzWjAYMRYwFAYD VQQDEw02YWJhZThiNC00OTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4plVCda+TxxrasHCoqptmA2RinezBwxhnFQfu2aNrJ5LRB896Dfg7CDbE8fd 1MGM1p8I7dYtwxDhJirWcM6Xp5RNpZtqkEx3FBDG+VeutVzmDHczrG7iEiINu0qO tg4fziaQfNYRZ3rdCd6UBlxdW89il4T0RRh9DvjBQplF0yZ8XKLgzNT9TwjstCh/ 0ad2batmWyvXqmZP0rlLu2ou41tAkNxscWEA0xal5uxXeCDl2QEhvqRWeWm4HqEP Zm5JrsUWBT29tqFCA6yR3G4MC8FvND4o/iOt4JwnnrkIdykbeE/0eWH+k7hyjlWk UFz8croCXjPlXfbgtAlGbfrVgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA592JUO 3TaMN5TdL+5eszyRgnuBMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmZn1wwxQQt+nmxERVLxD/RSUxsEQxDL9KMWBV33H3blbiZY3cn/oyXWED1uM 3zsnXoaKLfYkf0caXR4k+dihtpV7ed4YyvtbYW13UnVr2+prbGtKzSd+YHaNH+sM u3gnEwu6IviIq+WRffv10Fmuh7TpRlq8Xhs1U9pv0WzYOi8pR4EMKZnjJRnJszWK S7NkYsiJbe5x0FflTmQWdOLYBGgxjjfj5bCV50Xe/iQrcPeRPxT5eq4YstYkCtbO 4LpYf9vUBDb1LMFjKwpZGdLjENKFKOzOPfJdH9G4HSZx6FkxyxFublfJIvXzCnZI oUkofIQ8EHkBVOywj5+WsiA3Cw== -----END CERTIFICATE-----Generated at Tue Sep 29 03:56:26 2026 by rpki-client