$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: 0JQfiVYvbPdLKS5T5EG+cApFpGWEqJOP7Fnd/93FTPg= Subject key identifier: 12:92:69:3D:AA:D8:15:DA:CB:AD:37:A6:32:C5:27:EA:49:83:B6:2A Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 0100 Signing time: Fri 25 Sep 2026 06:20:26 +0000 Manifest this update: Fri 25 Sep 2026 06:20:26 +0000 Manifest next update: Fri 02 Oct 2026 06:20:26 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: DpVYnQtRCs28R3fHQ3nwXcfsyBuHUKotiq7bMfz5eEw=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: NgYA//gR87ggutPm5mFctVw4RgX1V6AvPzMOoW8iMZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Sep 25 06:20:26 2026 GMT Not After : Oct 2 06:20:26 2026 GMT Subject: CN=6ab612aa-fcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:42:2d:89:4e:dd:1a:b6:06:0a:91:7d:3d: 4b:1e:44:dc:e0:78:eb:46:7e:2e:bb:77:a1:66:0c: 4b:cb:2e:bd:ac:36:af:47:9a:b4:7d:eb:dd:9d:7d: 84:ad:ea:1b:ab:b8:5a:9c:f0:39:ac:e3:d9:d7:ad: 6c:a8:64:aa:dc:4f:4d:63:00:03:3d:70:96:01:88: 66:7c:9e:6d:b4:cd:4d:80:ae:98:b9:e0:f5:36:dd: 5c:a5:e4:7b:89:4a:c5:5a:a1:13:3f:f3:63:ba:33: 90:94:3c:7c:e9:47:09:f7:2d:d2:41:6d:ac:5d:77: 76:68:17:2f:3a:5a:b3:ff:54:9e:47:2d:f7:0a:79: 05:ed:9c:ee:d1:bf:cb:5c:92:7c:ea:d4:10:19:0e: ac:a3:8b:b8:ee:e6:f8:ef:a2:df:9a:ff:e8:2a:e4: 31:c1:86:ab:02:28:4b:b7:6a:df:c2:7a:60:e0:44: 10:7f:40:ea:49:7b:1d:af:5a:58:1a:e7:a0:d9:a5: e0:30:42:a8:41:6f:9e:32:7f:c9:7a:65:55:30:d1: f6:7c:cf:08:4c:da:31:61:11:ca:93:ff:68:57:6f: c3:50:ed:66:2c:c4:ed:6b:4f:58:41:17:10:e2:c4: 80:05:59:1e:4d:50:b0:05:72:46:bb:fa:d8:c8:8d: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:92:69:3D:AA:D8:15:DA:CB:AD:37:A6:32:C5:27:EA:49:83:B6:2A X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:bf:19:ef:f1:13:75:a3:19:59:25:e1:0d:7a:4d:67:cd:6c: cc:d8:12:96:14:53:e6:29:c9:ff:36:98:d1:96:46:9c:34:60: a6:b8:9a:23:3d:70:ee:f0:1e:a4:98:71:57:95:d8:a0:20:35: 9f:b9:2c:e9:cf:3b:e1:95:79:5d:8e:7f:1e:58:3f:8e:d8:c1: a6:c9:f2:bd:52:f7:9a:58:3e:35:40:8d:79:b9:b5:c8:c9:82: af:d7:04:bb:c6:0e:72:b6:49:55:95:68:f8:a0:9a:ec:97:89: 58:0e:e1:83:34:0d:30:78:4f:b8:bb:87:22:ca:c5:5d:07:0c: f5:d5:39:9c:bc:07:93:cf:90:6b:0d:b9:0c:36:7a:80:08:74: 80:0e:bc:41:d4:5f:4d:b5:0c:3f:94:fb:17:b7:a2:e2:a6:9e: c6:9b:f4:1c:7b:12:1e:e7:bd:79:e7:90:cf:d0:09:83:21:32: f1:11:b1:bd:a2:8e:08:5a:48:05:66:94:ad:59:f6:83:e9:9a: ed:0b:c9:7e:05:c2:0e:9f:49:40:cd:ee:a3:58:6b:c8:e7:1b: 4c:e2:18:44:43:74:77:61:0d:e2:80:50:37:4e:90:85:3a:6c: 51:8a:ca:85:b1:e0:46:3f:8f:4a:23:86:d7:f5:b4:98:88:53: 3b:b7:b3:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKEM0MjZENDI2NDAwNjc2NTU1OTczREZFREU0RUIyNjQ0 QkVFRDI4NzMwHhcNMjYwOTI1MDYyMDI2WhcNMjYxMDAyMDYyMDI2WjAYMRYwFAYD VQQDEw02YWI2MTJhYS1mY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0JCLYlO3Rq2BgqRfT1LHkTc4HjrRn4uu3ehZgxLyy69rDavR5q0fevdnX2E reobq7hanPA5rOPZ161sqGSq3E9NYwADPXCWAYhmfJ5ttM1NgK6YueD1Nt1cpeR7 iUrFWqETP/NjujOQlDx86UcJ9y3SQW2sXXd2aBcvOlqz/1SeRy33CnkF7Zzu0b/L XJJ86tQQGQ6so4u47ub476Lfmv/oKuQxwYarAihLt2rfwnpg4EQQf0DqSXsdr1pY Gueg2aXgMEKoQW+eMn/JemVVMNH2fM8ITNoxYRHKk/9oV2/DUO1mLMTta09YQRcQ 4sSABVkeTVCwBXJGu/rYyI2N4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKSaT2q 2BXay603pjLFJ+pJg7YqMB8GA1UdIwQYMBaAFMQm1CZABnZVWXPf7eTrJkS+7Shz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DMUY3MzA3MjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2RsVlpjOV90NU9zbVJMN3RL SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DMUY3MzA3MjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2Rs VlpjOV90NU9zbVJMN3RLSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5r8Z7/ETdaMZWSXhDXpNZ81szNgSlhRT5inJ/zaY0ZZGnDRgpriaIz1w7vAe pJhxV5XYoCA1n7ks6c874ZV5XY5/Hlg/jtjBpsnyvVL3mlg+NUCNebm1yMmCr9cE u8YOcrZJVZVo+KCa7JeJWA7hgzQNMHhPuLuHIsrFXQcM9dU5nLwHk8+Qaw25DDZ6 gAh0gA68QdRfTbUMP5T7F7ei4qaexpv0HHsSHue9eeeQz9AJgyEy8RGxvaKOCFpI BWaUrVn2g+ma7QvJfgXCDp9JQM3uo1hryOcbTOIYREN0d2EN4oBQN06QhTpsUYrK hbHgRj+PSiOG1/W0mIhTO7ez7g== -----END CERTIFICATE-----Generated at Fri Sep 25 15:23:31 2026 by rpki-client