$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft File: xfPmCWA9MLk6tGt4klx63Q8s8hI.mft (raw, json) Hash identifier: PjevKWc3FNVee+GTZ7zwuThcbkGjKakFSggqyBp/87E= Subject key identifier: 50:AA:E6:39:C0:D4:5E:CB:26:EF:7A:3F:77:B0:E3:2C:83:98:30:48 Authority key identifier: C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12 Certificate issuer: /CN=A917A689/serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft Manifest number: 2C Signing time: Wed 23 Sep 2026 08:30:50 +0000 Manifest this update: Wed 23 Sep 2026 08:30:49 +0000 Manifest next update: Wed 30 Sep 2026 08:30:49 +0000 Files and hashes: 1: xfPmCWA9MLk6tGt4klx63Q8s8hI.crl (hash: FSv/BiENk0zzf1jYEUL9SM9PX/8uJvTzRQjADckVq8s=) 2: E9204B7A922D11F1B2D6A4FE6B11F970.roa (hash: 2QbsP2/BdY1Pzqt33Iq3WFHZOUUILNdbR0H9vspv+aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A689, serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212 Validity Not Before: Sep 23 08:30:49 2026 GMT Not After : Sep 30 08:30:49 2026 GMT Subject: CN=6ab38e39-1407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:3f:ed:94:16:40:42:46:f8:00:5d:0f:b7: 8d:47:d8:7e:b2:8d:aa:5e:28:fa:df:2a:00:b4:e6: ca:4c:8f:e4:7d:37:a6:22:5a:b2:e2:11:11:79:88: 74:b8:48:c2:02:91:2f:57:3f:f9:b2:f4:9e:7a:7d: bb:28:48:c0:f7:fd:fe:33:c1:01:aa:e4:7d:c5:6c: 53:3d:e6:54:c1:8d:35:06:b0:9f:9c:c6:2d:12:d0: 2c:21:03:ea:40:ba:d0:17:a7:7c:17:eb:65:44:98: b5:d3:9b:b1:2a:17:ee:a7:bb:b1:27:67:f0:b3:e2: bc:4e:d8:2e:22:ae:01:50:15:ee:2c:52:be:c7:8f: ca:c7:5d:0a:85:31:2e:9b:cd:4d:ca:8f:33:96:f0: 28:ad:01:d9:c6:0b:c7:0a:0d:08:b0:4e:06:08:3e: 4c:b8:fc:4d:9e:18:9b:8e:94:2e:e8:75:ef:7c:b9: 57:d4:6e:ae:08:b1:62:45:6e:cd:59:26:82:00:78: 24:58:50:ad:59:7f:3c:eb:f1:77:ad:b1:82:25:57: 0b:7a:01:c7:5e:f1:d4:76:09:42:46:de:26:f0:c3: f7:3d:9e:ed:a4:87:1e:6a:b4:d2:67:bd:12:e5:64: 08:62:a4:e6:31:79:2f:3b:2d:80:cb:aa:63:9d:fc: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AA:E6:39:C0:D4:5E:CB:26:EF:7A:3F:77:B0:E3:2C:83:98:30:48 X509v3 Authority Key Identifier: keyid:C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d4:44:23:84:b3:14:33:a9:3e:74:ac:2b:4b:3e:b0:e9:b9: 08:a6:2e:79:28:63:79:6a:49:62:0c:12:60:b8:07:27:e2:12: 9c:3e:d6:42:85:f0:c9:dc:9f:54:1a:80:81:75:54:2b:80:97: 85:f1:9b:80:69:ea:20:9b:eb:cd:d7:42:90:46:41:e1:0a:de: f4:62:86:c0:c5:51:4a:33:5b:60:40:0c:80:4c:4a:58:ce:16: 05:0e:14:7b:08:85:ef:45:56:6a:99:b6:a3:f4:eb:b1:83:96: 5b:6a:f4:02:0c:81:40:4b:1b:3f:b8:1b:69:1f:84:14:a4:ce: fb:02:63:4d:91:f2:4e:99:ba:0b:de:3d:36:e8:70:6e:a4:49: ed:16:41:5e:df:2b:bf:03:26:28:96:21:a2:22:35:69:df:a2: 21:f0:96:e2:66:82:5a:03:3f:86:6b:30:99:db:d2:ac:00:06: 50:58:03:71:cb:5b:14:7a:7f:e6:8c:f6:49:af:38:d1:99:14: 1f:60:a9:d5:da:e4:7c:51:54:a4:8c:90:0a:22:05:bd:f7:f9: 82:c6:bd:62:0d:bd:cb:70:21:15:b3:68:0f:98:28:06:3b:15: d9:dd:c4:67:20:af:b5:0f:cf:e6:16:e1:bc:be:c2:c4:9d:73: b8:44:69:3e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTY4OTExMC8GA1UEBRMoQzVGM0U2MDk2MDNEMzBCOTNBQjQ2Qjc4OTI1QzdBREQw RjJDRjIxMjAeFw0yNjA5MjMwODMwNDlaFw0yNjA5MzAwODMwNDlaMBgxFjAUBgNV BAMTDTZhYjM4ZTM5LTE0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqBD/tlBZAQkb4AF0Pt41H2H6yjapeKPrfKgC05spMj+R9N6YiWrLiERF5iHS4 SMICkS9XP/my9J56fbsoSMD3/f4zwQGq5H3FbFM95lTBjTUGsJ+cxi0S0CwhA+pA utAXp3wX62VEmLXTm7EqF+6nu7EnZ/Cz4rxO2C4irgFQFe4sUr7Hj8rHXQqFMS6b zU3KjzOW8CitAdnGC8cKDQiwTgYIPky4/E2eGJuOlC7ode98uVfUbq4IsWJFbs1Z JoIAeCRYUK1Zfzzr8XetsYIlVwt6Acde8dR2CUJG3ibww/c9nu2khx5qtNJnvRLl ZAhipOYxeS87LYDLqmOd/PJ9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUKrmOcDU Xssm73o/d7DjLIOYMEgwHwYDVR0jBBgwFoAUxfPmCWA9MLk6tGt4klx63Q8s8hIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjg5LzhFOEM3NTU2N0E5 NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxrNnRHdDRrbHg2M1E4czho SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGZQbUNXQTlNTGs2dEd0NGtseDYzUThzOGhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB Njg5LzhFOEM3NTU2N0E5NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxr NnRHdDRrbHg2M1E4czhoSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCL1EQjhLMUM6k+dKwrSz6w6bkIpi55KGN5akliDBJguAcn4hKcPtZChfDJ3J9U GoCBdVQrgJeF8ZuAaeogm+vN10KQRkHhCt70YobAxVFKM1tgQAyATEpYzhYFDhR7 CIXvRVZqmbaj9Ouxg5ZbavQCDIFASxs/uBtpH4QUpM77AmNNkfJOmboL3j026HBu pEntFkFe3yu/AyYoliGiIjVp36Ih8JbiZoJaAz+GazCZ29KsAAZQWANxy1sUen/m jPZJrzjRmRQfYKnV2uR8UVSkjJAKIgW99/mCxr1iDb3LcCEVs2gPmCgGOxXZ3cRn IK+1D8/mFuG8vsLEnXO4RGk+ -----END CERTIFICATE-----Generated at Thu Sep 24 23:40:52 2026 by rpki-client