$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: CxVk3Qtf52SBP7C6AsCh2WP4RhLgS/1rRE8KBv09t0Q= Subject key identifier: 84:F6:DA:A0:50:A6:C1:88:E5:A6:FD:EB:4B:B8:1A:9C:5D:A2:39:D3 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0BFF Signing time: Thu 24 Sep 2026 18:55:17 +0000 Manifest this update: Thu 24 Sep 2026 18:55:17 +0000 Manifest next update: Thu 01 Oct 2026 18:55:17 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: eM9QwGpklOFjHvbpPgi8Istt2w2uaON3Cklj3025jF0=) 2: 208C60E46C7211F1AC9395217347A888.roa (hash: 5ObUZNUlNvXq+GBQnJ8kShAGXJHUdNizRWalI/RNNvQ=) 3: FC4FFE066C7211F18CC7D03C7347A888.roa (hash: dyeQGA/UBOIAhbkggjSvDhu8jNmpC8DjUcg5u7Epdgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Sep 24 18:55:17 2026 GMT Not After : Oct 1 18:55:17 2026 GMT Subject: CN=6ab57215-07d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:98:ef:47:af:e0:61:dc:b0:ec:f4:48:f7: 64:e6:7a:17:e8:27:e7:25:12:cd:9a:cd:f6:7d:7c: 1d:f4:72:13:5c:27:9e:6d:96:74:2e:ac:56:ef:75: 31:56:b7:da:01:f4:f4:82:d8:4b:53:fa:87:ee:37: c4:7f:c2:bf:84:18:b4:62:57:6a:d8:45:06:e4:2c: 7d:e4:0f:b0:bf:42:0a:c2:da:d1:19:35:91:79:18: 21:46:40:d7:83:d0:4e:a9:67:24:c2:fa:96:94:de: 53:6c:82:02:8f:64:21:a5:a4:ed:11:26:43:88:3f: 59:c0:1a:5a:0b:4b:01:06:e1:b4:a5:d2:a7:71:6c: f8:a4:02:17:ce:a5:56:43:ae:09:d5:20:6b:cb:82: d3:e3:3e:b3:8e:cd:bb:09:22:f8:c2:1a:b3:9a:0a: db:cb:b6:ca:b9:16:87:50:62:a8:a9:9c:32:8e:65: d0:49:df:43:38:ed:40:82:d8:8e:e8:50:43:5f:1d: f9:41:fa:5b:b9:6a:bb:ad:c1:16:40:71:fd:58:6e: 58:49:51:93:aa:41:3d:8f:a8:18:d7:14:b3:e9:3e: b7:b9:d8:8f:41:c6:11:db:2f:58:a2:33:7b:88:b3: 48:63:be:db:18:47:e2:19:9f:f3:ac:49:5c:46:3c: 30:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F6:DA:A0:50:A6:C1:88:E5:A6:FD:EB:4B:B8:1A:9C:5D:A2:39:D3 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5a:6f:1e:db:da:d4:60:9e:6f:9b:69:63:24:ec:ce:44:10: 8a:a2:a1:00:23:80:1e:40:7c:51:bb:8b:d1:f8:a6:36:99:b8: 4f:4c:30:a8:ae:26:58:bc:a9:33:04:b0:ac:89:3f:8c:53:90: 5a:e4:4b:06:66:52:ab:b6:9d:c7:43:e8:92:2e:df:80:ef:20: 02:2f:cf:f7:2a:96:7c:a5:0e:67:91:f6:05:7a:e1:be:83:2d: 26:cb:fa:85:97:cf:01:ab:c3:8d:01:0c:b4:40:79:ae:c9:f8: 12:16:e5:9d:ce:98:c6:c3:52:6f:44:ba:55:3a:43:72:65:fc: 7c:44:b8:ad:77:bc:b2:32:ad:f7:21:88:7e:14:ce:9a:ec:2f: 54:85:e9:95:bb:3b:6e:c3:5e:14:fd:12:85:a9:ff:2e:2f:3b: b3:3d:87:42:48:9b:79:82:b7:9e:a0:e6:5d:21:48:db:db:20: 80:f0:8e:e7:b7:15:ee:ce:fc:fb:8c:02:81:a0:e0:0f:83:09: f8:3a:ab:b6:a2:5f:09:fc:16:27:33:cc:7e:5a:0c:74:95:5d: ac:3d:12:08:5f:55:24:35:d4:18:5d:64:b1:b9:42:86:3e:2c: f4:bd:3e:97:7c:ef:c4:9e:53:c5:35:5d:02:ab:70:63:78:4e: 7c:50:44:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjYwOTI0MTg1NTE3WhcNMjYxMDAxMTg1NTE3WjAYMRYwFAYD VQQDEw02YWI1NzIxNS0wN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWmY70ev4GHcsOz0SPdk5noX6CfnJRLNms32fXwd9HITXCeebZZ0LqxW73Ux VrfaAfT0gthLU/qH7jfEf8K/hBi0Yldq2EUG5Cx95A+wv0IKwtrRGTWReRghRkDX g9BOqWckwvqWlN5TbIICj2QhpaTtESZDiD9ZwBpaC0sBBuG0pdKncWz4pAIXzqVW Q64J1SBry4LT4z6zjs27CSL4whqzmgrby7bKuRaHUGKoqZwyjmXQSd9DOO1AgtiO 6FBDXx35QfpbuWq7rcEWQHH9WG5YSVGTqkE9j6gY1xSz6T63udiPQcYR2y9YojN7 iLNIY77bGEfiGZ/zrElcRjwwRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIT22qBQ psGI5ab960u4GpxdojnTMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP1pvHtva1GCeb5tpYyTszkQQiqKhACOAHkB8UbuL0fimNpm4T0wwqK4mWLyp MwSwrIk/jFOQWuRLBmZSq7adx0Poki7fgO8gAi/P9yqWfKUOZ5H2BXrhvoMtJsv6 hZfPAavDjQEMtEB5rsn4Ehblnc6YxsNSb0S6VTpDcmX8fES4rXe8sjKt9yGIfhTO muwvVIXplbs7bsNeFP0Shan/Li87sz2HQkibeYK3nqDmXSFI29sggPCO57cV7s78 +4wCgaDgD4MJ+DqrtqJfCfwWJzPMfloMdJVdrD0SCF9VJDXUGF1ksblChj4s9L0+ l3zvxJ5TxTVdAqtwY3hOfFBEMA== -----END CERTIFICATE-----Generated at Fri Sep 25 03:18:14 2026 by rpki-client