$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: y03vbfF5CDQiU0nyJoF+4fYld53M/nEUyhuVHQjTD8g= Subject key identifier: C5:9D:E6:0F:05:F0:A0:D9:41:E2:92:5B:BA:AB:4F:12:2E:11:D9:A0 Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 08EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 08E0 Signing time: Thu 24 Sep 2026 20:20:36 +0000 Manifest this update: Thu 24 Sep 2026 20:20:36 +0000 Manifest next update: Thu 01 Oct 2026 20:20:36 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: mkHSWbqZeCOL8xUWup7y0Sn52m7m3vA1QLmz1bvjVFA=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2283 (0x8eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Sep 24 20:20:36 2026 GMT Not After : Oct 1 20:20:36 2026 GMT Subject: CN=6ab58614-1f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:0d:c4:01:df:dd:c0:34:84:eb:54:5d:b1: 51:c8:09:65:cb:5b:18:26:a0:ef:9e:73:34:5c:8d: ba:4a:a9:da:52:e8:e0:71:71:60:69:71:d6:ac:b5: 59:c9:d3:29:34:f3:93:d8:d4:b2:31:74:25:6e:d5: 3a:6b:da:0e:e7:8d:1d:41:81:3b:3b:c9:29:2c:5a: 39:77:b7:f9:dd:cd:26:d0:ae:80:ba:a8:5c:80:34: 13:c5:b1:61:61:78:41:90:1f:e3:3e:45:72:86:2e: 73:95:91:b2:4b:a5:de:a0:67:96:96:15:1b:56:d5: 6c:3d:08:6e:61:93:9a:de:4f:23:0e:3d:e2:46:45: 3b:aa:51:3f:f9:26:1f:a9:c3:56:ba:57:62:4c:c4: 85:3d:d6:84:e2:00:ca:b7:05:8c:f4:3c:08:f1:d7: e4:72:d9:04:ed:bd:f7:24:fc:5a:ec:c8:33:8a:18: 30:95:3e:24:90:1c:4f:bf:1b:d2:62:a9:67:eb:a5: a4:30:f3:47:78:cc:af:48:82:0c:14:c0:99:2c:c2: 49:c8:7f:93:7e:f2:39:26:f2:b1:16:28:69:99:33: 46:a3:8f:b5:61:3f:5c:33:37:68:b2:05:00:d8:8f: 11:91:a6:cd:0f:92:ba:12:40:4d:6a:46:e9:76:b8: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9D:E6:0F:05:F0:A0:D9:41:E2:92:5B:BA:AB:4F:12:2E:11:D9:A0 X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:87:0f:da:04:05:0c:bc:9e:3b:7a:59:ab:3b:36:59:d7:d8: 14:2d:12:74:9c:20:6f:54:b6:89:0d:f8:4d:09:25:ba:53:6e: fe:3f:81:de:c1:60:6b:57:a3:de:03:dd:e7:e8:c0:fc:d5:8f: d1:37:5d:1b:02:67:37:9a:cd:04:20:bf:e7:73:9a:96:04:4c: c4:f2:57:d4:31:9d:2e:61:70:6b:13:7e:30:c3:6f:40:27:1a: b7:bc:ce:82:78:ce:57:e8:13:a4:1f:a8:4c:cd:96:c9:f2:bd: fb:fd:64:8a:0d:e2:fd:35:74:af:12:46:72:b8:87:66:85:9d: 4f:93:d6:54:be:ff:6a:25:2b:93:83:78:7c:1e:06:a0:df:f8: e8:a7:b4:12:33:78:98:b5:8b:36:e2:62:13:06:b8:13:e3:fe: a0:3d:7c:15:c2:85:4b:ae:15:d6:f4:ef:d4:1e:7f:6b:42:4f: 8d:42:86:32:72:55:ab:d8:cd:97:8a:16:79:7b:d8:a6:5b:e1: f3:a3:31:94:af:89:e2:43:14:74:50:70:08:70:c0:40:c4:b7: 83:ba:ab:ad:30:85:f1:c0:82:9d:87:89:13:e2:0b:91:1e:c5: de:6c:b7:d4:93:7b:71:40:74:4f:62:c2:50:4e:17:7d:5e:71: 53:66:8b:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjYwOTI0MjAyMDM2WhcNMjYxMDAxMjAyMDM2WjAYMRYwFAYD VQQDEw02YWI1ODYxNC0xZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSoNxAHf3cA0hOtUXbFRyAlly1sYJqDvnnM0XI26SqnaUujgcXFgaXHWrLVZ ydMpNPOT2NSyMXQlbtU6a9oO540dQYE7O8kpLFo5d7f53c0m0K6AuqhcgDQTxbFh YXhBkB/jPkVyhi5zlZGyS6XeoGeWlhUbVtVsPQhuYZOa3k8jDj3iRkU7qlE/+SYf qcNWuldiTMSFPdaE4gDKtwWM9DwI8dfkctkE7b33JPxa7MgzihgwlT4kkBxPvxvS Yqln66WkMPNHeMyvSIIMFMCZLMJJyH+TfvI5JvKxFihpmTNGo4+1YT9cMzdosgUA 2I8RkabND5K6EkBNakbpdrhrPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWd5g8F 8KDZQeKSW7qrTxIuEdmgMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsIcP2gQFDLyeO3pZqzs2WdfYFC0SdJwgb1S2iQ34TQklulNu/j+B3sFga1ej 3gPd5+jA/NWP0TddGwJnN5rNBCC/53OalgRMxPJX1DGdLmFwaxN+MMNvQCcat7zO gnjOV+gTpB+oTM2WyfK9+/1kig3i/TV0rxJGcriHZoWdT5PWVL7/aiUrk4N4fB4G oN/46Ke0EjN4mLWLNuJiEwa4E+P+oD18FcKFS64V1vTv1B5/a0JPjUKGMnJVq9jN l4oWeXvYplvh86MxlK+J4kMUdFBwCHDAQMS3g7qrrTCF8cCCnYeJE+ILkR7F3my3 1JN7cUB0T2LCUE4XfV5xU2aLvg== -----END CERTIFICATE-----Generated at Thu Sep 24 22:16:55 2026 by rpki-client