$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: lS44DexFf9ECyqeJ49NULNFwe4VYrkg0aHkpLcQe8YY= Subject key identifier: DA:48:26:DC:7B:46:28:B9:13:D5:CF:17:A5:B5:FD:47:1D:8C:2B:19 Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: 01DD Signing time: Fri 25 Sep 2026 03:41:44 +0000 Manifest this update: Fri 25 Sep 2026 03:41:43 +0000 Manifest next update: Fri 02 Oct 2026 03:41:43 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: dCj8BxwPbuy7/9u3CrVsLA+9XEJc2NdBcQHVBQ0Q2V8=) 2: 1481122880F311F186C940A665A30FBC.roa (hash: PMTOPNCvK275VS9T+ov9NkbHzoz5VMbfUd/+yh/SAV0=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: At643elqRJd2BjPQAPdTeEaxQov7oAvsnBfXaIpuNvo=) 4: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: UDpxRFFH79in54JQo9jdMcxjvxE/p6jYvLLseV3aVBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: Sep 25 03:41:43 2026 GMT Not After : Oct 2 03:41:43 2026 GMT Subject: CN=6ab5ed78-f89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:39:e5:26:f7:12:0c:41:dd:39:cd:57:b4: dc:52:7b:77:1c:e1:c3:77:0c:9a:cd:73:3c:94:61: 5a:d6:1d:0c:40:77:6a:bd:65:47:55:76:0f:00:04: 2e:bf:31:db:91:ea:13:74:7f:27:c6:ab:67:e1:64: 75:1d:8c:7e:4f:5b:29:03:ac:a2:b5:50:64:5f:07: b2:4a:a0:bb:ab:9b:91:c9:73:65:70:c4:7d:07:bb: 16:68:1e:83:14:20:6c:4f:d5:3c:8e:58:05:dc:04: dd:62:79:59:a0:28:b2:21:f6:ac:80:02:04:62:6b: 9c:a7:4a:73:41:13:7d:2d:b7:9d:c6:0d:60:94:2b: ad:3d:a6:46:b7:81:35:98:35:04:d9:33:fa:1d:bf: 5b:a2:dd:4d:01:eb:60:d8:e4:e6:16:44:35:b5:74: 2e:31:da:90:74:79:59:f6:9a:82:9e:70:48:c0:6d: 94:11:56:89:7c:58:89:6e:a2:59:5f:bc:1d:d1:6c: c2:4b:f5:9e:14:03:6a:9c:96:43:3e:bf:88:52:36: b1:8a:c7:a7:2a:50:88:72:bc:fb:29:81:71:96:e1: a6:4c:80:52:fc:1d:f5:73:74:95:a1:69:7d:43:54: 38:3a:02:3a:99:1a:c1:5f:22:9e:e1:02:6f:a7:80: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:26:DC:7B:46:28:B9:13:D5:CF:17:A5:B5:FD:47:1D:8C:2B:19 X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8a:0c:71:2a:3a:7b:ca:64:9e:b7:cd:f3:06:a8:84:ed:eb: 9a:b7:61:5f:8d:12:8e:ee:52:28:86:47:15:a3:0b:25:51:ba: 6f:62:b3:ec:4e:22:07:a8:15:f0:91:22:8e:35:ca:4c:84:41: 89:42:2e:29:f8:48:93:e6:de:d4:d3:c8:b5:20:76:3c:00:e7: ea:6f:7c:61:d8:a2:b4:21:b6:92:81:30:bd:67:64:c1:3b:c7: 44:c5:66:10:bb:42:46:54:7f:f7:ed:7e:6e:55:4b:34:ed:09: 68:aa:68:00:06:3c:fc:09:32:d1:cd:28:23:3f:84:8f:98:02: 93:f3:0e:a3:9f:d4:5b:a8:d4:19:95:25:b0:27:ab:eb:81:67: 43:34:4c:b2:10:83:c6:0f:f6:e5:6e:ee:41:3d:64:da:79:57: 36:f8:97:56:61:89:ab:24:63:44:5a:e8:e8:a2:11:d2:cb:0a: 08:5a:84:c1:4c:61:4c:54:2e:fa:cc:be:82:be:04:fd:4d:b3: 28:f4:5a:8e:a0:70:07:2f:5c:10:70:a3:92:d7:ca:0c:a6:36: 94:a6:fe:74:0a:78:04:4e:5f:b9:e3:c9:a6:29:91:6c:ac:96: e3:d0:85:92:1e:4f:65:9f:74:88:3a:2c:7f:9a:7a:88:d4:79: 8c:4b:d3:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjYwOTI1MDM0MTQzWhcNMjYxMDAyMDM0MTQzWjAYMRYwFAYD VQQDEw02YWI1ZWQ3OC1mODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLk55Sb3EgxB3TnNV7TcUnt3HOHDdwyazXM8lGFa1h0MQHdqvWVHVXYPAAQu vzHbkeoTdH8nxqtn4WR1HYx+T1spA6yitVBkXweySqC7q5uRyXNlcMR9B7sWaB6D FCBsT9U8jlgF3ATdYnlZoCiyIfasgAIEYmucp0pzQRN9Lbedxg1glCutPaZGt4E1 mDUE2TP6Hb9bot1NAetg2OTmFkQ1tXQuMdqQdHlZ9pqCnnBIwG2UEVaJfFiJbqJZ X7wd0WzCS/WeFANqnJZDPr+IUjaxisenKlCIcrz7KYFxluGmTIBS/B31c3SVoWl9 Q1Q4OgI6mRrBXyKe4QJvp4D2TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpIJtx7 Rii5E9XPF6W1/UcdjCsZMB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZIoMcSo6e8pknrfN8waohO3rmrdhX40Sju5SKIZHFaMLJVG6b2Kz7E4iB6gV 8JEijjXKTIRBiUIuKfhIk+be1NPItSB2PADn6m98YdiitCG2koEwvWdkwTvHRMVm ELtCRlR/9+1+blVLNO0JaKpoAAY8/Aky0c0oIz+Ej5gCk/MOo5/UW6jUGZUlsCer 64FnQzRMshCDxg/25W7uQT1k2nlXNviXVmGJqyRjRFro6KIR0ssKCFqEwUxhTFQu +sy+gr4E/U2zKPRajqBwBy9cEHCjktfKDKY2lKb+dAp4BE5fuePJpimRbKyW49CF kh5PZZ90iDosf5p6iNR5jEvTPg== -----END CERTIFICATE-----Generated at Fri Sep 25 16:44:34 2026 by rpki-client