$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json) Hash identifier: Z+XEyzDOzWbG6yZRMKUoSB36GA/6zUP6F7MQ2HqkM1U= Subject key identifier: 68:D8:4D:02:28:9D:B2:6D:F8:1E:71:8B:3A:51:40:88:F5:DD:1A:9B Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft Manifest number: 022A Signing time: Sun 27 Sep 2026 03:07:14 +0000 Manifest this update: Sun 27 Sep 2026 03:07:13 +0000 Manifest next update: Sun 04 Oct 2026 03:07:13 +0000 Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: N04mbVe1puvQ1WtuahK6j6IXrFZrKZvGUUcnpHD0COc=) 2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Validity Not Before: Sep 27 03:07:13 2026 GMT Not After : Oct 4 03:07:13 2026 GMT Subject: CN=6ab88862-2810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:e7:1f:66:11:98:b0:cc:62:82:83:f0:57: 97:42:14:65:9f:8a:07:25:ec:9e:79:cc:70:72:c7: bf:5b:a0:e6:19:d0:e4:59:44:e8:91:d9:b5:6a:c6: 9b:a2:bc:65:4b:ee:4c:13:1b:b3:35:88:d3:b4:50: 00:bc:e1:a2:00:8d:27:9f:ef:ae:91:5f:d7:8b:70: fc:95:0a:82:a3:a8:29:a0:fc:1d:70:74:fd:45:fb: 2f:a5:7e:1d:c6:d0:ef:19:21:51:17:c4:f6:eb:ca: f6:2d:8e:b1:60:8f:e2:9a:43:6f:6b:ed:3f:05:96: fc:70:49:1e:e8:ba:28:7c:4d:84:30:fb:1f:6f:09: e8:09:3a:67:75:dc:4c:19:6c:d3:02:97:b4:ef:77: 11:37:79:1e:6d:60:62:23:48:b1:1f:72:b5:ed:3a: d1:7e:b0:2c:76:e6:1a:0b:3c:be:f4:bf:b9:78:04: dc:9a:55:08:7a:28:94:80:32:94:1f:44:92:da:67: d5:bf:cd:ea:d7:58:3a:fe:6a:46:78:8e:df:38:36: 68:bb:00:ca:f9:ef:93:ba:af:8c:cb:c2:b9:68:95: 1f:bb:80:9d:25:6c:97:a0:b6:f8:b3:80:66:55:e4: b3:d9:09:97:4b:b3:bd:9f:6b:fb:1f:71:02:71:bf: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D8:4D:02:28:9D:B2:6D:F8:1E:71:8B:3A:51:40:88:F5:DD:1A:9B X509v3 Authority Key Identifier: keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:53:43:4a:a3:b2:d2:43:80:bb:c9:87:33:d4:2a:7e:f4:56: 8d:39:49:53:2e:5d:22:1d:fe:55:1d:0f:32:66:8f:9d:40:6a: 13:8b:97:15:ac:e5:40:af:12:19:0e:f7:42:52:a5:3b:df:de: 8f:96:0c:75:12:89:f2:46:b2:9a:b6:03:00:49:f3:9d:bf:ad: 3e:d4:d1:4b:fd:fe:05:b8:0f:0f:8f:e0:22:32:02:fd:6d:da: 40:12:85:67:34:6b:75:9d:7c:b0:1e:c8:a4:a1:6e:86:46:e4: 90:2d:17:34:e5:a3:c9:a3:28:96:78:0b:b4:6f:bb:6d:15:18: e6:4d:b9:09:fe:77:2b:84:b8:ec:29:d6:04:7f:d7:0b:27:99: 6d:1c:d4:c3:6a:d1:05:04:5c:13:9e:7f:f0:19:7a:3f:da:75: f9:f6:c0:e7:4e:9c:d2:0e:72:2d:73:8c:6f:f4:d2:1b:bd:22: 86:56:47:fb:7c:ab:af:bd:5e:d6:0c:9d:50:8b:7b:4c:8d:d6: 41:57:98:4b:2a:11:30:85:1e:00:dd:ce:a3:d7:0f:54:c7:1f: 45:0d:c5:69:a1:c9:06:7f:db:28:48:ff:b3:c3:7c:1c:95:cb: 20:53:2c:2b:31:a6:22:28:b5:b5:ae:ed:17:b1:47:d1:ad:9c: 30:2e:2a:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw NkMwOENBMzgwHhcNMjYwOTI3MDMwNzEzWhcNMjYxMDA0MDMwNzEzWjAYMRYwFAYD VQQDEw02YWI4ODg2Mi0yODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeDnH2YRmLDMYoKD8FeXQhRln4oHJeyeecxwcse/W6DmGdDkWUTokdm1asab orxlS+5MExuzNYjTtFAAvOGiAI0nn++ukV/Xi3D8lQqCo6gpoPwdcHT9RfsvpX4d xtDvGSFRF8T268r2LY6xYI/imkNva+0/BZb8cEke6LoofE2EMPsfbwnoCTpnddxM GWzTApe073cRN3kebWBiI0ixH3K17TrRfrAsduYaCzy+9L+5eATcmlUIeiiUgDKU H0SS2mfVv83q11g6/mpGeI7fODZouwDK+e+Tuq+My8K5aJUfu4CdJWyXoLb4s4Bm VeSz2QmXS7O9n2v7H3ECcb9AVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjYTQIo nbJt+B5xizpRQIj13RqbMB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJB TExQWTZ0V3ZjLVVHd0l5amcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJlNDSqOy0kOAu8mHM9QqfvRWjTlJUy5dIh3+VR0PMmaPnUBqE4uXFazlQK8S GQ73QlKlO9/ej5YMdRKJ8kaymrYDAEnznb+tPtTRS/3+BbgPD4/gIjIC/W3aQBKF ZzRrdZ18sB7IpKFuhkbkkC0XNOWjyaMolngLtG+7bRUY5k25Cf53K4S47CnWBH/X CyeZbRzUw2rRBQRcE55/8Bl6P9p1+fbA506c0g5yLXOMb/TSG70ihlZH+3yrr71e 1gydUIt7TI3WQVeYSyoRMIUeAN3Oo9cPVMcfRQ3FaaHJBn/bKEj/s8N8HJXLIFMs KzGmIii1ta7tF7FH0a2cMC4qCQ== -----END CERTIFICATE-----Generated at Sun Sep 27 07:51:04 2026 by rpki-client