$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft File: mpXY8Mq1144dbKm5o7JX446MfVs.mft (raw, json) Hash identifier: eyRYvHP3dggnSR/ikKLInGZTIePmh50FulmPCqC8Vtc= Subject key identifier: 39:99:0B:2A:7A:2C:AA:AB:D2:AE:AD:35:5F:EA:BE:18:11:54:0A:6C Authority key identifier: 9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B Certificate issuer: /CN=A915CF84/serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft Manifest number: 52 Signing time: Wed 23 Sep 2026 07:59:15 +0000 Manifest this update: Wed 23 Sep 2026 07:59:14 +0000 Manifest next update: Wed 30 Sep 2026 07:59:14 +0000 Files and hashes: 1: mpXY8Mq1144dbKm5o7JX446MfVs.crl (hash: ILpyELjkIXW+70Z+D7LB76MIvM5S/5Wo6tEbtk6JK+4=) 2: E0D625A23C6A11F183CD979F90833773.roa (hash: qj9IQ2Y4YzDmdOE6yQMu07d0ie+83o7yGutlXtdHDIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF84, serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B Validity Not Before: Sep 23 07:59:14 2026 GMT Not After : Sep 30 07:59:14 2026 GMT Subject: CN=6ab386d3-c136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:89:82:40:10:57:34:cd:cc:f8:14:44:53: 0d:b3:c7:73:2f:83:a1:70:53:79:bf:8d:c4:e7:d2: d0:7b:c3:67:ab:2a:49:82:d7:9c:20:1b:d3:0b:e8: 25:9d:8f:05:ae:ea:b8:23:e0:46:dd:1f:18:41:13: 20:67:99:a7:ae:12:1a:10:ce:6e:e1:6c:bb:30:7a: c6:d6:e7:72:39:7a:1e:cd:b3:8a:5f:e7:1b:24:c6: 88:f2:90:90:fc:95:25:bf:f2:b1:a5:77:ed:77:69: 0c:4e:4c:4e:07:d6:2c:2a:9c:0b:36:ea:63:2c:89: 2b:6e:b1:e2:17:1a:98:28:7f:ae:c1:a2:07:5f:2c: 20:ab:0a:77:7b:2e:84:fe:8a:99:9a:94:01:25:82: e1:fa:f5:d2:c4:9e:4a:e7:97:59:b8:b2:a0:77:09: e6:86:03:94:6b:4a:b6:bc:03:76:29:b9:b8:c5:84: 0c:45:e4:54:0d:01:24:a3:23:59:0a:5b:8d:db:32: 0a:db:87:f9:a8:98:b0:36:89:ff:77:60:b1:3a:0d: 31:65:56:7f:74:8d:98:80:18:7d:20:77:d9:4e:4e: 11:55:61:46:78:2a:2c:c3:d4:cf:fd:2d:a6:f4:66: 94:eb:20:7e:7a:2f:15:f3:e9:8e:37:74:33:d4:d6: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:99:0B:2A:7A:2C:AA:AB:D2:AE:AD:35:5F:EA:BE:18:11:54:0A:6C X509v3 Authority Key Identifier: keyid:9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:32:42:15:67:cb:88:af:cb:33:6a:45:4c:a2:54:e2:5e:bf: b5:9e:ca:6c:2e:8c:dc:aa:4a:ac:2a:0f:85:2a:3e:15:b8:2d: cb:1f:5f:21:b8:8a:bb:13:37:42:28:a3:d3:a5:e3:80:b4:eb: d4:77:cd:e8:cc:f1:f5:49:21:24:6f:e4:1b:6e:6c:93:81:ed: 33:61:fe:0d:04:3a:0e:42:b6:c6:40:2d:b5:ff:99:82:d5:d2: c1:c0:c9:72:60:05:96:64:b7:93:27:7b:d9:f0:b9:36:a4:62: 31:72:07:9e:34:b3:d2:a5:be:ac:63:8b:c4:d9:63:0e:c2:f0: f3:89:55:db:de:b2:7b:e0:67:3b:38:c0:d9:4e:29:79:38:71: 5e:dd:2e:32:23:e7:4c:65:db:2e:20:1a:29:36:27:89:48:02: 1b:2f:a0:6c:38:cc:0b:97:12:36:1a:27:bf:a2:be:c1:a4:c0: 96:cb:bc:10:f5:f9:44:de:bc:1d:68:96:bb:f3:75:66:45:87: c4:4f:7b:f1:bd:ab:49:9a:3e:e5:9e:1f:19:d4:03:76:63:e0: b8:78:d7:38:80:6d:fa:a2:54:aa:b9:f1:5b:e7:dc:20:f9:eb: 00:cd:48:52:eb:3c:98:6c:e1:48:cc:1c:53:fc:d3:b9:21:8b: 49:c2:18:f7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0Y4NDExMC8GA1UEBRMoOUE5NUQ4RjBDQUI1RDc4RTFENkNBOUI5QTNCMjU3RTM4 RThDN0Q1QjAeFw0yNjA5MjMwNzU5MTRaFw0yNjA5MzAwNzU5MTRaMBgxFjAUBgNV BAMTDTZhYjM4NmQzLWMxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCryYmCQBBXNM3M+BREUw2zx3Mvg6FwU3m/jcTn0tB7w2erKkmC15wgG9ML6CWd jwWu6rgj4EbdHxhBEyBnmaeuEhoQzm7hbLswesbW53I5eh7Ns4pf5xskxojykJD8 lSW/8rGld+13aQxOTE4H1iwqnAs26mMsiStuseIXGpgof67BogdfLCCrCnd7LoT+ ipmalAElguH69dLEnkrnl1m4sqB3CeaGA5RrSra8A3YpubjFhAxF5FQNASSjI1kK W43bMgrbh/momLA2if93YLE6DTFlVn90jZiAGH0gd9lOThFVYUZ4KizD1M/9Lab0 ZpTrIH56LxXz6Y43dDPU1hiRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOZkLKnos qqvSrq01X+q+GBFUCmwwHwYDVR0jBBgwFoAUmpXY8Mq1144dbKm5o7JX446MfVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRjg0LzdDQkMwREVFM0Mz MjExRjE4QzIxRDQ2RUJGODMzNzczL21wWFk4TXExMTQ0ZGJLbTVvN0pYNDQ2TWZW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbXBYWThNcTExNDRkYkttNW83Slg0NDZNZlZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD Rjg0LzdDQkMwREVFM0MzMjExRjE4QzIxRDQ2RUJGODMzNzczL21wWFk4TXExMTQ0 ZGJLbTVvN0pYNDQ2TWZWcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoMkIVZ8uIr8szakVMolTiXr+1nspsLozcqkqsKg+FKj4VuC3LH18huIq7EzdC KKPTpeOAtOvUd83ozPH1SSEkb+QbbmyTge0zYf4NBDoOQrbGQC21/5mC1dLBwMly YAWWZLeTJ3vZ8Lk2pGIxcgeeNLPSpb6sY4vE2WMOwvDziVXb3rJ74Gc7OMDZTil5 OHFe3S4yI+dMZdsuIBopNieJSAIbL6BsOMwLlxI2Gie/or7BpMCWy7wQ9flE3rwd aJa783VmRYfET3vxvatJmj7lnh8Z1AN2Y+C4eNc4gG36olSqufFb59wg+esAzUhS 6zyYbOFIzBxT/NO5IYtJwhj3 -----END CERTIFICATE-----Generated at Wed Sep 23 20:15:07 2026 by rpki-client