$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json) Hash identifier: nvk4uhwQG5SLq+U3aX+yfO3RsDB3q+HvdMcbkWcGhfs= Subject key identifier: 67:52:BA:FD:A6:52:EE:7E:79:D0:AA:67:20:1F:55:B4:9E:47:27:CA Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft Manifest number: 0575 Signing time: Tue 22 Sep 2026 23:00:30 +0000 Manifest this update: Tue 22 Sep 2026 23:00:30 +0000 Manifest next update: Tue 29 Sep 2026 23:00:30 +0000 Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: CSZeBRz4gKznqLQE+qzl1O/dQNVt/PG8wCqlAGx/L4Y=) 2: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xF2IvoVXmAincHuvdv8xT2emt6/vG3hUCriU6a0X2F4=) 3: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: TtIgh6p3MeT87i0AxcRjiCaJmw5Zn2R/2iZkAkCBffQ=) 4: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: YlLnh1haCAguuDMWLHxz+klHykWczeyMGFHRpbzDxJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Validity Not Before: Sep 22 23:00:30 2026 GMT Not After : Sep 29 23:00:30 2026 GMT Subject: CN=6ab3088e-540f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:9a:74:a1:2f:4b:5c:76:16:81:52:be:dc: df:d0:2a:fc:4b:68:3c:97:61:c3:26:d1:0a:a0:c7: 83:f6:69:cc:ae:70:94:3b:61:27:ba:5b:3c:b4:d7: 09:2c:27:c7:a3:08:a7:60:39:fd:86:18:9a:0d:ef: ff:b1:80:2d:6e:0a:25:eb:c4:b7:78:a0:12:50:6b: 1a:89:05:d5:64:7c:37:ab:b1:20:30:e3:af:b1:0d: f3:9b:08:50:4a:09:c3:3c:2b:df:1c:0f:de:a4:f8: c6:dc:b8:1a:b6:26:a5:c6:77:c5:8d:f5:ce:e2:d7: 3f:bd:d3:1a:6a:3b:68:3f:f8:cc:f5:bc:b6:0b:27: ae:c0:6c:6d:0b:a1:15:a5:30:35:89:05:ec:24:f5: 16:bd:ae:58:63:a1:4e:00:ed:17:41:99:50:1c:03: 6f:6c:02:44:e6:e2:e2:bf:36:79:75:80:92:90:59: e0:4e:26:75:e6:d3:06:a4:ee:2b:52:5e:80:89:3d: e5:fc:49:84:12:64:4b:85:97:02:04:ec:fb:8f:37: 58:c2:62:db:1c:c3:f5:96:be:ef:a8:37:d5:e6:bf: 29:dc:38:38:71:6a:18:36:a4:55:b2:d9:32:86:d8: 67:37:ba:e1:76:1d:64:ff:ed:cb:e0:43:f3:8b:97: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:52:BA:FD:A6:52:EE:7E:79:D0:AA:67:20:1F:55:B4:9E:47:27:CA X509v3 Authority Key Identifier: keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:44:ee:6b:4e:15:51:d4:29:27:5f:16:70:45:6c:cb:1a:2e: af:f9:1b:f9:3f:9e:2e:7d:3e:67:2c:df:61:e8:95:a6:eb:22: f7:48:02:e5:40:78:21:d0:45:8d:22:ab:12:76:55:19:ef:21: 62:14:8c:9a:fc:5e:dd:87:35:ec:f3:cd:5f:34:90:78:2c:5a: 27:db:5a:e9:ad:a4:62:3c:e9:d8:de:c1:2c:79:bf:a0:5a:a7: fd:ae:9e:78:9e:02:8b:4f:82:0b:bb:18:bc:46:29:6f:ee:bb: ba:56:cc:fd:d7:40:64:8b:5a:a8:bb:66:34:c7:6e:4f:18:21: 17:58:fc:e0:b3:1e:90:66:04:a8:e0:62:8f:5f:29:56:24:64: 4d:ee:27:31:22:4f:92:9d:f6:9d:29:70:4c:15:09:84:31:d0: d7:91:91:bd:21:9e:52:3a:a9:ff:98:80:e0:83:35:04:d7:5a: 27:a0:54:9e:61:6b:76:81:db:2a:ae:75:d9:d0:9d:90:59:1f: 4f:8b:97:81:c8:cf:ed:6e:68:b5:41:5b:cb:f8:fc:3f:93:13: 04:3c:f3:62:3f:49:6e:df:26:7c:dd:31:c2:15:a2:bd:56:2f: 39:04:ca:ec:32:f1:fe:89:10:79:1c:a5:c6:f4:70:77:4c:fc: 12:55:fa:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC NzQ1NkI3MTMwHhcNMjYwOTIyMjMwMDMwWhcNMjYwOTI5MjMwMDMwWjAYMRYwFAYD VQQDEw02YWIzMDg4ZS01NDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KuadKEvS1x2FoFSvtzf0Cr8S2g8l2HDJtEKoMeD9mnMrnCUO2Enuls8tNcJ LCfHowinYDn9hhiaDe//sYAtbgol68S3eKASUGsaiQXVZHw3q7EgMOOvsQ3zmwhQ SgnDPCvfHA/epPjG3LgatialxnfFjfXO4tc/vdMaajtoP/jM9by2CyeuwGxtC6EV pTA1iQXsJPUWva5YY6FOAO0XQZlQHANvbAJE5uLivzZ5dYCSkFngTiZ15tMGpO4r Ul6AiT3l/EmEEmRLhZcCBOz7jzdYwmLbHMP1lr7vqDfV5r8p3Dg4cWoYNqRVstky hthnN7rhdh1k/+3L4EPzi5disQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdSuv2m Uu5+edCqZyAfVbSeRyfKMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2 QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0 eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0 QWVwVUdMejZOUEczUld0eE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR0Tua04VUdQpJ18WcEVsyxour/kb+T+eLn0+ZyzfYeiVpusi90gC5UB4IdBF jSKrEnZVGe8hYhSMmvxe3Yc17PPNXzSQeCxaJ9ta6a2kYjzp2N7BLHm/oFqn/a6e eJ4Ci0+CC7sYvEYpb+67ulbM/ddAZItaqLtmNMduTxghF1j84LMekGYEqOBij18p ViRkTe4nMSJPkp32nSlwTBUJhDHQ15GRvSGeUjqp/5iA4IM1BNdaJ6BUnmFrdoHb Kq512dCdkFkfT4uXgcjP7W5otUFby/j8P5MTBDzzYj9Jbt8mfN0xwhWivVYvOQTK 7DLx/okQeRylxvRwd0z8ElX6EA== -----END CERTIFICATE-----Generated at Wed Sep 23 18:13:54 2026 by rpki-client