$ rpki-client -vvvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: UldfAbls304MuOGeq6r607T15V3ClXZXNy5QXL5lrb4= Subject key identifier: C3:9D:21:3A:AB:05:99:80:D4:02:85:78:37:E1:75:52:F1:B2:73:D2 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7E9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 492D Signing time: Tue 22 Sep 2026 16:50:13 +0000 Manifest this update: Tue 22 Sep 2026 16:50:12 +0000 Manifest next update: Tue 29 Sep 2026 16:50:12 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: f0JXctJ0wx5ucGGi3AzuSgvFKhEp1xfReiWTGMfgzYc=) 2: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: GCPP3Zkeb88CMAM4ecp19R2oGr0s67YLKK0lItldtcI=) 3: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: 9nTKPawfGHtPhjNOmWn8l90W8nDxOehnoaoOT9irCWw=) 4: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: cSJqj5g48JTcjBcGFsAbqitb62jbctH5OWGGZ2nY5TY=) 5: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: qG1F9oSfTBN5NOm4LXLgIPHtejfdqzXmcuKvzt+5uSQ=) 6: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: BQdV6ndcECrItHdc1IEW8WyLJSqfh/iCl7ffuQz9nnQ=) 7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: /V12Eqf620PvsHyjHjC7SsTrYWKzvxlGrdEZ3jISFaE=) 8: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: VBI4G1ovmwOYXsiKsWVJkf1feKjFHnDDeRgP+rbu+5k=) 9: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: 1NJm7ZOzu65GXUg/3DBxh7cNb5VPBWgXao2O9h+yjbY=) 10: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: EARXDyWWNkzvluDdghdjO0DJ2CbqIZ55pIns0B024Rg=) 11: 2DE2AC2669E311F18E29D967A047A888.roa (hash: y0np8i3XvwHRXGyvtfQ1quYALwf4BO+BBv/DSGvYscU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32411 (0x7e9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Sep 22 16:50:12 2026 GMT Not After : Sep 29 16:50:12 2026 GMT Subject: CN=6ab2b1c4-88d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:e4:aa:50:b1:6b:53:f4:b8:d5:d4:68:93: 01:68:e4:ca:17:db:58:65:2c:68:f0:de:38:68:73: d2:2a:47:84:0e:ab:6f:75:b7:31:98:c3:5e:29:7f: 45:81:cb:47:07:63:06:0b:ac:db:3a:87:21:b4:88: be:89:1c:a6:2c:8f:8e:ac:00:c8:01:a9:f0:60:be: 37:d3:a5:92:f6:37:c9:5d:2a:af:68:bc:44:90:e1: d3:7a:2a:ac:27:33:4a:58:83:97:f6:3d:6c:be:a6: c8:48:d3:82:13:1a:aa:c0:83:85:4b:4e:9c:fc:44: 0a:16:50:d3:28:21:ac:5a:ee:03:16:bd:dc:ec:38: d8:03:ff:d4:7c:a1:c7:3f:eb:d6:10:2c:ef:60:7d: c0:7c:5c:90:b7:39:4b:66:0f:31:a0:bd:1d:e1:99: 94:c5:67:ba:50:86:a0:0c:ce:a9:38:8d:e1:12:8a: 24:8e:58:03:f5:de:a8:cc:9a:f4:b5:57:78:1f:56: 54:a2:b2:4b:4a:a9:43:67:a5:eb:00:2a:cd:5b:a9: 7d:38:3c:14:01:90:e6:d4:65:24:5c:49:36:c3:af: 5d:38:b4:a0:30:4f:40:8c:d2:71:4a:4d:6f:15:47: e5:e6:b4:e7:de:41:9a:ae:a8:f2:1b:84:5f:f4:67: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:21:3A:AB:05:99:80:D4:02:85:78:37:E1:75:52:F1:B2:73:D2 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1d:a5:89:bc:4e:01:f0:5b:c0:8b:49:5a:3a:3b:e2:24:9e: 0b:e4:d1:13:5f:1c:6c:57:4e:ab:00:b2:d3:23:5a:50:9c:50: 9a:4b:a1:39:6b:fb:37:a8:47:51:ce:ec:cb:46:51:f8:b6:7b: c3:81:58:78:39:93:dc:b7:3a:05:b8:7e:66:c0:0e:2b:68:08: b5:11:a8:52:7f:fd:66:3e:1c:64:09:ac:4e:29:17:5f:f4:9e: 9d:c5:cc:c3:10:99:c6:92:48:88:06:bf:50:ae:b7:9d:ed:d9: bf:6b:ce:0a:6b:a4:72:38:29:74:2b:a1:1b:df:f1:0a:44:29: 03:67:c1:a5:e5:90:6b:3e:0a:d8:ed:df:ef:97:b4:3d:1f:39: 61:f0:88:56:eb:33:65:04:5d:c8:61:52:10:68:e7:1d:3f:ff: 79:8d:d8:05:17:e9:07:91:8c:c2:d3:69:4b:7e:f7:34:95:af: e6:ee:a3:8f:16:71:17:b0:a5:b7:e5:73:4d:4a:f4:9c:ee:1d: 0d:bd:c7:d1:09:6f:4e:b1:4b:41:14:dc:04:f6:0d:1f:59:c0: 2c:9f:39:a9:c6:d4:cb:13:44:98:1c:c3:64:f1:58:d5:0f:6e: 07:01:0d:c9:07:e4:c0:6c:ee:23:c0:ba:d8:ba:89:35:4a:33: ab:4d:ed:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICfpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjYwOTIyMTY1MDEyWhcNMjYwOTI5MTY1MDEyWjAYMRYwFAYD VQQDEw02YWIyYjFjNC04OGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHzkqlCxa1P0uNXUaJMBaOTKF9tYZSxo8N44aHPSKkeEDqtvdbcxmMNeKX9F gctHB2MGC6zbOochtIi+iRymLI+OrADIAanwYL4306WS9jfJXSqvaLxEkOHTeiqs JzNKWIOX9j1svqbISNOCExqqwIOFS06c/EQKFlDTKCGsWu4DFr3c7DjYA//UfKHH P+vWECzvYH3AfFyQtzlLZg8xoL0d4ZmUxWe6UIagDM6pOI3hEookjlgD9d6ozJr0 tVd4H1ZUorJLSqlDZ6XrACrNW6l9ODwUAZDm1GUkXEk2w69dOLSgME9AjNJxSk1v FUfl5rTn3kGarqjyG4Rf9GcYowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOdITqr BZmA1AKFeDfhdVLxsnPSMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfB2libxOAfBbwItJWjo74iSeC+TRE18cbFdOqwCy0yNaUJxQmkuhOWv7N6hH Uc7sy0ZR+LZ7w4FYeDmT3Lc6Bbh+ZsAOK2gItRGoUn/9Zj4cZAmsTikXX/SencXM wxCZxpJIiAa/UK63ne3Zv2vOCmukcjgpdCuhG9/xCkQpA2fBpeWQaz4K2O3f75e0 PR85YfCIVuszZQRdyGFSEGjnHT//eY3YBRfpB5GMwtNpS373NJWv5u6jjxZxF7Cl t+VzTUr0nO4dDb3H0QlvTrFLQRTcBPYNH1nALJ85qcbUyxNEmBzDZPFY1Q9uBwEN yQfkwGzuI8C62LqJNUozq03tcQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:12:36 2026 by rpki-client