$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: GLmkzxdxWkCmkzGrADLdXGCox2xo7Y3bENZ/Ia2GUx8= Subject key identifier: A8:A4:40:F4:28:F5:28:39:51:4F:6C:B6:04:3C:1B:47:A8:BA:DE:D7 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 13B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 13AF Signing time: Thu 24 Sep 2026 16:54:47 +0000 Manifest this update: Thu 24 Sep 2026 16:54:46 +0000 Manifest next update: Thu 01 Oct 2026 16:54:46 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: zT7V1DOEN6psN21yUrPTUmc/w+dWlNu9FogpPEltDiw=) 2: E2B16FF23C8911F1A9897A359C833773.roa (hash: i8XPRUIqEgeLZapEq2D3+tp+3ktjcE4ag35fN0jDU5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5044 (0x13b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Sep 24 16:54:46 2026 GMT Not After : Oct 1 16:54:46 2026 GMT Subject: CN=6ab555d7-68fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f3:14:91:1a:c7:3b:21:3d:d5:0a:6e:57:24: 2c:43:74:2b:28:12:b5:80:b0:e5:38:94:11:3a:ca: b2:2d:92:b5:38:67:f8:56:36:26:93:a7:0c:3a:3b: c7:8c:99:e1:1b:21:d7:20:58:d1:38:f0:3d:fc:c0: 82:bc:b4:5a:17:7d:d6:60:c8:e9:eb:41:9a:8f:f4: d1:22:a3:96:9a:c2:ab:11:81:96:a1:8f:e5:06:e2: 83:8f:34:7e:7c:80:d9:65:4a:8e:52:7c:ea:5e:52: 70:9f:d8:65:85:3d:66:33:c4:f2:a0:17:8d:98:7c: 20:9e:2d:86:48:fe:1c:38:ff:69:7e:bc:9f:e0:0c: bb:f7:4e:c8:59:6c:bd:17:8b:53:cc:b2:bf:da:1b: f8:b7:56:15:e6:97:6e:3d:22:58:5b:25:e1:d7:15: ad:c5:4b:8c:b7:6d:cb:65:44:d2:b3:cc:3b:72:2d: b2:0a:a1:e7:e2:bc:59:84:96:0f:d0:83:6a:6c:99: d9:69:03:97:91:14:1f:77:4e:b0:57:60:a1:b4:cc: 7a:95:9b:9f:db:10:d9:0d:3b:1c:6f:6c:a2:77:5c: 7d:80:bd:fc:aa:3f:93:b0:0e:fa:d7:a2:68:31:ca: 8c:b2:aa:7d:76:3a:2e:ac:6b:e5:77:e1:92:65:12: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A4:40:F4:28:F5:28:39:51:4F:6C:B6:04:3C:1B:47:A8:BA:DE:D7 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b0:2f:9b:ea:99:eb:84:9a:cf:50:b4:87:74:b4:dc:12:b1: dc:1f:1d:1b:59:b3:51:da:f1:67:34:e3:d3:d7:e8:3a:87:11: 1d:4c:dd:21:83:a9:80:2a:90:35:ca:b8:b4:1a:6f:96:11:ca: ed:49:20:4b:22:46:8a:35:d4:2d:f9:b2:40:09:44:0d:af:a0: 28:5b:d6:e6:c1:b0:ca:d0:e7:ad:bd:0d:51:1e:a6:c3:55:b0: 8a:33:bd:c6:57:95:7d:96:f9:9e:58:8a:db:b3:41:e3:ed:f5: 84:37:f6:4f:28:9b:5e:81:ba:1e:2c:ed:02:a4:3d:70:90:19: a1:41:20:2e:2f:09:53:2f:36:f4:3b:f3:be:7a:44:1c:15:5d: b5:04:26:1f:49:3b:21:db:93:26:97:f2:38:db:aa:22:3e:9d: f6:66:97:15:44:de:dc:9b:2e:09:88:f8:b9:da:3a:2e:46:c3: e3:a2:7d:38:66:17:8e:0b:da:dc:3d:47:6a:e5:0b:e6:d6:e7: 65:94:56:29:66:07:5c:1e:bd:0e:73:b0:88:08:5e:f6:ee:88: a1:74:70:79:8d:b5:39:cb:c5:3c:99:72:ab:b6:b8:ec:25:16: 3f:bf:65:ee:fb:5e:a5:5f:90:60:56:39:75:c5:f5:a9:de:9d: d6:5a:f9:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjYwOTI0MTY1NDQ2WhcNMjYxMDAxMTY1NDQ2WjAYMRYwFAYD VQQDEw02YWI1NTVkNy02OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjvMUkRrHOyE91QpuVyQsQ3QrKBK1gLDlOJQROsqyLZK1OGf4VjYmk6cMOjvH jJnhGyHXIFjROPA9/MCCvLRaF33WYMjp60Gaj/TRIqOWmsKrEYGWoY/lBuKDjzR+ fIDZZUqOUnzqXlJwn9hlhT1mM8TyoBeNmHwgni2GSP4cOP9pfryf4Ay7907IWWy9 F4tTzLK/2hv4t1YV5pduPSJYWyXh1xWtxUuMt23LZUTSs8w7ci2yCqHn4rxZhJYP 0INqbJnZaQOXkRQfd06wV2ChtMx6lZuf2xDZDTscb2yid1x9gL38qj+TsA7616Jo McqMsqp9djourGvld+GSZRJfrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKikQPQo 9Sg5UU9stgQ8G0eout7XMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo7Avm+qZ64Saz1C0h3S03BKx3B8dG1mzUdrxZzTj09foOocRHUzdIYOpgCqQ Ncq4tBpvlhHK7UkgSyJGijXULfmyQAlEDa+gKFvW5sGwytDnrb0NUR6mw1WwijO9 xleVfZb5nliK27NB4+31hDf2TyibXoG6HiztAqQ9cJAZoUEgLi8JUy829DvzvnpE HBVdtQQmH0k7IduTJpfyONuqIj6d9maXFUTe3JsuCYj4udo6LkbD46J9OGYXjgva 3D1HauUL5tbnZZRWKWYHXB69DnOwiAhe9u6IoXRweY21OcvFPJlyq7a47CUWP79l 7vtepV+QYFY5dcX1qd6d1lr5dw== -----END CERTIFICATE-----Generated at Sat Sep 26 17:22:52 2026 by rpki-client