$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: seLsQd1Td6m+L7Hx0Uu5qGV365wkQ9TgkvIHVKLAeeI= Subject key identifier: AC:C0:92:FF:34:2F:76:26:4E:23:4D:B7:6E:76:FC:92:3F:A2:4A:00 Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 048F Signing time: Mon 05 Oct 2026 00:06:55 +0000 Manifest this update: Mon 05 Oct 2026 00:06:54 +0000 Manifest next update: Mon 12 Oct 2026 00:06:54 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: 43uK2EP32sZsuMlU/l7ag+RimwLT36qRoceslUwyF+c=) 2: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: htWOUsGCluqo+bDLkY52m9kGHamjAwjskMqRyVdOAVI=) 3: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: Xwopv44IWtrA47h99nFS1HcICRmL98rRNkBLnVkufOs=) 4: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: W4goqtPYzyLcCdBI7xc2Qn8MqCV+FsXgvw4MFdwTxhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Oct 5 00:06:54 2026 GMT Not After : Oct 12 00:06:54 2026 GMT Subject: CN=6ac2ea1e-463b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:e4:a9:a2:90:20:d0:db:30:38:47:29:1b: 59:cb:d0:d9:1f:81:e3:1d:c8:a2:a2:16:55:ff:5d: 76:fb:7d:3a:27:71:a3:83:e1:34:d5:fd:a7:e2:27: 79:12:4f:67:f9:e3:59:c0:8f:89:63:da:4c:95:1a: 48:2e:aa:a1:90:f7:67:44:03:e3:a1:20:0e:9e:94: 12:c0:8e:cd:af:90:3c:92:c1:c4:e7:f7:32:bb:92: 80:04:36:9a:3e:2b:8c:40:62:d7:17:a7:c7:40:79: a3:cc:68:fa:69:c6:1f:af:e2:9e:b3:48:80:d0:3a: fb:08:b3:31:78:60:33:87:9f:12:84:34:4c:8e:e5: 3e:4d:29:86:f4:83:26:cd:78:85:72:ee:44:2a:e5: f8:cb:2f:84:ed:c5:b8:59:3f:aa:65:b6:af:c3:3f: ea:3a:2d:9e:82:58:b6:52:7d:2b:22:42:bb:4c:01: 6f:ba:13:d2:e2:59:18:2e:e6:e0:c5:0f:de:72:45: 20:3f:a5:e2:e3:a7:2f:83:fb:4a:d0:87:9c:d0:31: 33:64:43:c6:b8:3f:cb:33:70:cc:41:a7:dd:13:70: f7:60:73:e6:be:a6:2a:f3:6b:22:f6:a8:75:7b:fd: 5c:d9:fc:04:a1:95:18:82:41:dd:7e:d8:f8:44:9a: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C0:92:FF:34:2F:76:26:4E:23:4D:B7:6E:76:FC:92:3F:A2:4A:00 X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4e:bf:bd:23:a4:34:e7:44:fa:6d:04:a9:71:10:13:f3:ae: 93:64:ff:1c:d4:4c:32:86:49:97:20:a0:1e:fc:c7:05:8e:d9: 56:8d:1e:53:ff:90:7d:5e:d3:b4:cc:5a:a8:67:c0:5c:10:25: 36:f0:93:86:21:b4:7c:98:84:46:df:a4:3e:e1:75:30:3d:47: 23:1d:16:a9:7f:e2:40:20:82:df:83:66:a5:e1:f6:7e:9e:d3: 3c:cd:06:23:6e:ed:0a:68:ca:b7:8a:c8:9c:38:09:53:30:4f: f5:96:22:16:63:f8:45:42:92:f3:64:6d:49:93:00:da:75:c7: c7:81:0f:a2:55:12:16:e4:61:14:45:9a:25:12:85:e9:62:eb: 63:c1:17:bc:99:d5:bc:24:f2:e1:6d:5d:af:ab:26:9b:58:f2: 41:15:2e:91:d8:e1:fb:2c:ae:f2:de:2a:c7:1e:c9:25:0b:63: 97:39:75:b6:2e:24:80:e6:cb:fb:85:9d:6a:2d:7f:e4:d0:09: 7f:d0:06:53:e9:d0:56:4c:56:4d:dc:36:39:78:a1:12:c8:a4: 25:51:0b:f1:96:0e:41:5c:06:17:a3:d9:95:99:3e:d1:61:ad: 07:23:70:42:79:13:08:c2:5a:51:e6:06:e0:cb:14:fd:b6:87: 11:a8:44:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjYxMDA1MDAwNjU0WhcNMjYxMDEyMDAwNjU0WjAYMRYwFAYD VQQDEw02YWMyZWExZS00NjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtefkqaKQINDbMDhHKRtZy9DZH4HjHciiohZV/112+306J3Gjg+E01f2n4id5 Ek9n+eNZwI+JY9pMlRpILqqhkPdnRAPjoSAOnpQSwI7Nr5A8ksHE5/cyu5KABDaa PiuMQGLXF6fHQHmjzGj6acYfr+Kes0iA0Dr7CLMxeGAzh58ShDRMjuU+TSmG9IMm zXiFcu5EKuX4yy+E7cW4WT+qZbavwz/qOi2egli2Un0rIkK7TAFvuhPS4lkYLubg xQ/eckUgP6Xi46cvg/tK0Iec0DEzZEPGuD/LM3DMQafdE3D3YHPmvqYq82si9qh1 e/1c2fwEoZUYgkHdftj4RJrK3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzAkv80 L3YmTiNNt252/JI/okoAMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfk6/vSOkNOdE+m0EqXEQE/Ouk2T/HNRMMoZJlyCgHvzHBY7ZVo0eU/+QfV7T tMxaqGfAXBAlNvCThiG0fJiERt+kPuF1MD1HIx0WqX/iQCCC34NmpeH2fp7TPM0G I27tCmjKt4rInDgJUzBP9ZYiFmP4RUKS82RtSZMA2nXHx4EPolUSFuRhFEWaJRKF 6WLrY8EXvJnVvCTy4W1dr6smm1jyQRUukdjh+yyu8t4qxx7JJQtjlzl1ti4kgObL +4Wdai1/5NAJf9AGU+nQVkxWTdw2OXihEsikJVEL8ZYOQVwGF6PZlZk+0WGtByNw QnkTCMJaUeYG4MsU/baHEahEqA== -----END CERTIFICATE-----Generated at Tue Oct 6 20:18:20 2026 by rpki-client