$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft File: _xOUBaa6BoyBp0rTX-yUkYJp2OE.mft (raw, json) Hash identifier: K8ispPWWYZq5FefwVkB0cGBzWDurZN3MYJvAn9anLKg= Subject key identifier: 37:72:EB:22:5E:AA:76:61:94:C8:28:A5:AC:32:9C:17:C4:49:13:39 Authority key identifier: FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1 Certificate issuer: /CN=A9139D67/serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft Manifest number: 20 Signing time: Fri 25 Sep 2026 09:03:04 +0000 Manifest this update: Fri 25 Sep 2026 09:03:04 +0000 Manifest next update: Fri 02 Oct 2026 09:03:04 +0000 Files and hashes: 1: _xOUBaa6BoyBp0rTX-yUkYJp2OE.crl (hash: id+0SUvnF0WbEg837vAaVINOQWqIdJFLsMJnFKL136s=) 2: FC3ECAC88BC111F190F2EAA86C11F970.roa (hash: 4889GaDsygj/hBcnFh0j5KUrF53rJ0JxKKaFI2ZWHR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139D67, serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1 Validity Not Before: Sep 25 09:03:04 2026 GMT Not After : Oct 2 09:03:04 2026 GMT Subject: CN=6ab638c8-faa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:b6:53:80:dc:08:43:03:51:a3:29:78:30: 44:d6:25:8c:38:3e:48:7a:78:7d:db:25:07:b5:ae: c8:9a:7c:d7:61:42:75:bb:1a:8e:c0:4a:29:70:18: 11:10:23:68:26:8b:4c:72:19:1a:ac:da:2d:89:03: 55:0a:5a:bb:67:7c:db:e3:69:e1:2f:3e:54:ec:59: 9c:0b:e6:e9:45:57:61:95:49:7a:33:ff:a2:fb:bb: a8:6d:ca:12:7d:99:85:82:00:05:fd:8b:f6:36:91: 30:56:e3:d2:3d:1d:56:ae:ae:7c:a7:4f:2b:be:93: 3a:a4:73:54:7a:54:2b:33:4a:0c:f0:9c:c4:f4:93: f5:df:65:e3:88:6e:88:58:6c:8e:8f:e9:ac:59:2b: cd:17:e2:63:cf:3f:6f:af:42:c2:0a:e9:20:22:5b: 7f:b7:5e:d2:02:4a:0f:cd:a7:29:a5:71:cf:56:75: f2:fd:da:37:8a:a6:72:ed:29:a1:5a:f8:4e:6c:f5: 20:1c:0e:2d:76:68:d3:2c:96:7d:95:04:d2:47:f8: b9:ed:fb:8c:12:73:e3:2b:ef:67:45:9c:29:d5:6d: 4f:8a:ca:7b:d2:8f:94:16:e8:eb:f8:b4:19:dd:6e: 2e:fd:c2:39:c5:21:c3:6f:08:56:22:9d:27:6b:38: 78:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:72:EB:22:5E:AA:76:61:94:C8:28:A5:AC:32:9C:17:C4:49:13:39 X509v3 Authority Key Identifier: keyid:FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5d:fc:a6:60:c3:6e:8c:18:a9:ef:0d:45:0e:3a:36:11:1d: ba:8a:5f:8e:37:a6:1a:59:50:8c:15:e9:5d:7b:e2:f3:de:31: f5:fc:46:33:05:5b:7d:58:22:0a:93:76:2d:e3:b8:95:de:cf: b1:60:d6:61:a5:e4:4b:e0:90:3b:6a:2e:4f:fe:75:ae:44:2b: 30:75:b7:cf:b1:8d:a7:4c:9d:9b:cf:60:a2:52:b1:df:f8:80: 4d:a2:12:aa:1e:36:95:82:b5:0f:1b:b0:05:56:25:b7:4f:e1: b5:18:4e:b2:dc:0b:94:3a:14:30:2e:2c:18:e7:99:e7:72:04: 56:cb:78:4a:cf:4a:ba:97:11:43:bd:c2:3a:06:68:42:e9:8a: 15:f3:a7:a6:53:99:05:62:22:b2:54:bd:a5:2b:de:d8:f1:57: 5e:41:32:48:10:87:d4:cd:18:ac:86:b6:2c:da:6f:6b:fb:00: 54:07:91:76:70:66:62:4c:49:ad:00:1d:ed:0a:ea:c9:92:81: 3a:8c:2d:25:d8:ac:ee:c8:24:bd:37:5a:48:10:d3:5a:80:cf: 8e:d5:74:4a:2f:89:62:d4:a5:b0:4d:fc:74:93:7c:3c:79:42: e5:69:19:28:59:e0:13:ac:38:74:47:b3:2b:b3:e3:dc:ed:4e: 7f:98:43:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUQ2NzExMC8GA1UEBRMoRkYxMzk0MDVBNkJBMDY4QzgxQTc0QUQzNUZFQzk0OTE4 MjY5RDhFMTAeFw0yNjA5MjUwOTAzMDRaFw0yNjEwMDIwOTAzMDRaMBgxFjAUBgNV BAMTDTZhYjYzOGM4LWZhYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsRLZTgNwIQwNRoyl4METWJYw4Pkh6eH3bJQe1rsiafNdhQnW7Go7ASilwGBEQ I2gmi0xyGRqs2i2JA1UKWrtnfNvjaeEvPlTsWZwL5ulFV2GVSXoz/6L7u6htyhJ9 mYWCAAX9i/Y2kTBW49I9HVaurnynTyu+kzqkc1R6VCszSgzwnMT0k/XfZeOIbohY bI6P6axZK80X4mPPP2+vQsIK6SAiW3+3XtICSg/Npymlcc9WdfL92jeKpnLtKaFa +E5s9SAcDi12aNMsln2VBNJH+Lnt+4wSc+Mr72dFnCnVbU+KynvSj5QW6Ov4tBnd bi79wjnFIcNvCFYinSdrOHgZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN3LrIl6q dmGUyCilrDKcF8RJEzkwHwYDVR0jBBgwFoAU/xOUBaa6BoyBp0rTX+yUkYJp2OEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RDY3LzkyNDUwOTY2OEJD MTExRjFBNTIwNEQ4ODZDMTFGOTcwL194T1VCYWE2Qm95QnAwclRYLXlVa1lKcDJP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX3hPVUJhYTZCb3lCcDByVFgteVVrWUpwMk9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RDY3LzkyNDUwOTY2OEJDMTExRjFBNTIwNEQ4ODZDMTFGOTcwL194T1VCYWE2Qm95 QnAwclRYLXlVa1lKcDJPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCIXfymYMNujBip7w1FDjo2ER26il+ON6YaWVCMFelde+Lz3jH1/EYzBVt9WCIK k3Yt47iV3s+xYNZhpeRL4JA7ai5P/nWuRCswdbfPsY2nTJ2bz2CiUrHf+IBNohKq HjaVgrUPG7AFViW3T+G1GE6y3AuUOhQwLiwY55nncgRWy3hKz0q6lxFDvcI6BmhC 6YoV86emU5kFYiKyVL2lK97Y8VdeQTJIEIfUzRishrYs2m9r+wBUB5F2cGZiTEmt AB3tCurJkoE6jC0l2KzuyCS9N1pIENNagM+O1XRKL4li1KWwTfx0k3w8eULlaRko WeATrDh0R7Mrs+Pc7U5/mENQ -----END CERTIFICATE-----Generated at Fri Sep 25 15:33:59 2026 by rpki-client