$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json) Hash identifier: 54gDS0lg+jb99ulXoyvOdHGUVBh1leD/BGWCFtkYjIY= Subject key identifier: F2:A6:69:83:6B:FE:09:55:AF:C4:09:AD:F1:18:3C:68:F2:CE:5A:DA Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft Manifest number: 0590 Signing time: Sat 14 Nov 2026 23:03:30 +0000 Manifest this update: Sat 14 Nov 2026 23:03:29 +0000 Manifest next update: Sat 21 Nov 2026 23:03:29 +0000 Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: fy0ZZcC4UxuYF1n0eB8z622QKXMXklvQgFD4ZXNhN/4=) 2: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: TtIgh6p3MeT87i0AxcRjiCaJmw5Zn2R/2iZkAkCBffQ=) 3: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xF2IvoVXmAincHuvdv8xT2emt6/vG3hUCriU6a0X2F4=) 4: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: YlLnh1haCAguuDMWLHxz+klHykWczeyMGFHRpbzDxJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Validity Not Before: Nov 14 23:03:29 2026 GMT Not After : Nov 21 23:03:29 2026 GMT Subject: CN=6af8e8c2-83f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:64:77:48:5e:b4:e3:de:bf:16:bb:9d:7b: 2a:1f:ac:b3:90:a0:5e:be:ed:27:f1:90:d2:8d:91: 45:a3:b3:50:b9:78:6b:ae:77:16:2b:b9:90:9b:6e: 39:0e:03:3b:84:da:a2:a5:35:66:4a:e0:73:0f:54: 8f:10:74:e6:b8:95:33:64:b7:50:85:3e:53:a3:b5: 72:59:58:29:94:80:37:b4:d7:b7:eb:66:f0:78:6d: 12:3c:59:e3:91:50:9b:79:d0:1c:bb:f9:b9:e9:c0: 9c:dd:b0:8d:b1:b3:17:e7:eb:9a:bb:94:5c:1c:1c: 26:6f:40:69:e1:26:26:2b:dd:57:66:d5:5a:df:d0: 64:40:f0:16:1c:d6:de:d8:9e:8e:9f:8c:96:3a:e0: 6e:84:a3:2e:34:e8:56:3f:9a:29:dd:1b:50:d5:88: 28:9d:87:70:86:90:48:e6:c7:60:77:d3:a5:04:7d: 9b:cf:cd:f7:6b:ac:e1:31:e6:37:02:6f:ca:29:78: 00:4a:fc:a0:e4:5d:de:d8:22:c4:20:bd:a3:7e:b5: e3:de:73:92:86:20:61:f0:0c:cc:b4:e0:d3:fe:bb: d9:ac:b8:22:c2:82:f9:6b:ed:02:80:7f:9c:22:98: 19:bc:0d:49:57:49:3a:16:b5:3b:87:64:4c:aa:20: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A6:69:83:6B:FE:09:55:AF:C4:09:AD:F1:18:3C:68:F2:CE:5A:DA X509v3 Authority Key Identifier: keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:87:8a:70:35:3b:c4:99:77:b2:c3:0a:8e:03:da:f4:eb:f8: 7b:b2:1a:56:e9:88:2c:c3:39:88:04:83:6b:a3:79:d6:f9:4c: 0a:42:ca:3f:69:5e:88:1d:2a:00:33:79:66:b4:8d:6c:e3:c6: 9c:61:26:16:ec:51:dd:a7:4a:84:48:84:20:01:45:ad:56:5f: 1a:70:86:2f:09:6c:e6:f0:85:71:e8:88:0f:4e:e5:08:4f:aa: 1f:20:88:29:7f:f4:ec:ce:e2:cb:0a:0c:f8:c0:d2:14:48:99: 3f:53:05:8f:b6:27:a9:71:70:cf:26:5b:dc:8b:b3:f1:45:f4: 31:e2:08:0d:85:18:15:a4:61:94:ae:42:bd:24:c6:b6:57:21: eb:81:c6:13:ba:09:2f:fc:d9:ad:92:76:d7:bb:7d:db:df:ff: 54:94:7b:86:2f:f1:01:ce:d0:7d:01:b0:96:56:21:1a:a3:2c: ca:5d:4c:ab:ec:f6:20:f0:78:2d:62:c3:7e:09:43:b6:6f:98: 95:a1:55:46:1e:5f:79:71:ee:61:34:9e:55:eb:7e:9c:a0:01: 36:49:b0:9e:59:47:27:c2:06:79:61:b9:5f:78:bb:d8:89:ff: 41:5c:18:6c:8c:2f:a1:78:d0:c7:b6:73:7f:52:fb:ab:1b:d3: a8:3b:62:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC NzQ1NkI3MTMwHhcNMjYxMTE0MjMwMzI5WhcNMjYxMTIxMjMwMzI5WjAYMRYwFAYD VQQDEw02YWY4ZThjMi04M2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE1kd0hetOPevxa7nXsqH6yzkKBevu0n8ZDSjZFFo7NQuXhrrncWK7mQm245 DgM7hNqipTVmSuBzD1SPEHTmuJUzZLdQhT5To7VyWVgplIA3tNe362bweG0SPFnj kVCbedAcu/m56cCc3bCNsbMX5+uau5RcHBwmb0Bp4SYmK91XZtVa39BkQPAWHNbe 2J6On4yWOuBuhKMuNOhWP5op3RtQ1YgonYdwhpBI5sdgd9OlBH2bz833a6zhMeY3 Am/KKXgASvyg5F3e2CLEIL2jfrXj3nOShiBh8AzMtODT/rvZrLgiwoL5a+0CgH+c IpgZvA1JV0k6FrU7h2RMqiBKkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKmaYNr /glVr8QJrfEYPGjyzlraMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2 QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0 eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0 QWVwVUdMejZOUEczUld0eE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJoeKcDU7xJl3ssMKjgPa9Ov4e7IaVumILMM5iASDa6N51vlMCkLKP2leiB0q ADN5ZrSNbOPGnGEmFuxR3adKhEiEIAFFrVZfGnCGLwls5vCFceiID07lCE+qHyCI KX/07M7iywoM+MDSFEiZP1MFj7YnqXFwzyZb3Iuz8UX0MeIIDYUYFaRhlK5CvSTG tlch64HGE7oJL/zZrZJ217t929//VJR7hi/xAc7QfQGwllYhGqMsyl1Mq+z2IPB4 LWLDfglDtm+YlaFVRh5feXHuYTSeVet+nKABNkmwnllHJ8IGeWG5X3i72In/QVwY bIwvoXjQx7Zzf1L7qxvTqDtiMg== -----END CERTIFICATE-----Generated at Sun Nov 15 08:34:00 2026 by rpki-client