$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json) Hash identifier: z0kUYspHhdEpVRsM6jV/Zp4g04TWVwOyeZyjdw/cD1I= Subject key identifier: F9:89:D4:A6:77:87:9C:EE:7B:21:77:4B:A6:B4:07:36:24:06:33:85 Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Certificate serial: 0A85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft Manifest number: 0A6A Signing time: Mon 28 Sep 2026 19:47:11 +0000 Manifest this update: Mon 28 Sep 2026 19:47:11 +0000 Manifest next update: Mon 05 Oct 2026 19:47:11 +0000 Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: lhbgZtKI1chdlCcjflavc3KcDcNe6Fuh8m8bhrmj7JA=) 2: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: phoNlFrzl7WYjyRvdppnlSL/FBRV8iS5x5iyLwB+dTc=) 3: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: V4TtDHDwWfSTPDtmdJxLiYpQrBPMzCI9Mup9QQhSTOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2693 (0xa85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Validity Not Before: Sep 28 19:47:11 2026 GMT Not After : Oct 5 19:47:11 2026 GMT Subject: CN=6abac43f-6b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:1d:3a:fe:32:87:f3:ab:34:05:68:21:da: 9b:82:ed:f6:67:f8:8e:ba:c3:82:6b:d2:c1:fb:ba: 23:d3:0c:61:05:7f:9a:65:70:6c:de:91:f9:0e:a1: 84:b9:91:85:1e:40:61:be:0b:80:cd:0a:46:64:bd: 05:cf:a9:d6:9d:06:7a:dc:15:82:a5:2b:a3:e4:da: 4e:8d:f9:0a:ae:90:4e:ae:97:01:79:1c:c7:4e:8a: 25:66:00:da:98:13:b8:66:7c:9a:0c:56:77:6b:58: f8:27:b6:86:2b:3a:2f:d7:29:dd:b7:1c:9d:62:2b: d1:5c:d5:47:63:1c:43:83:94:90:db:54:f7:c7:db: 2d:6f:2c:43:46:b4:75:31:df:d7:56:ca:ac:68:21: c5:9a:58:ec:d7:e8:0f:66:5f:02:6a:98:ea:94:26: e8:d7:c9:6f:aa:a7:22:ef:a9:12:d0:06:82:48:7c: 1a:2f:59:b7:70:db:85:1d:17:eb:41:10:e5:d1:e1: ec:47:87:d4:8d:ad:1c:29:c8:3d:36:32:5d:33:4c: af:09:24:93:46:8e:1f:7c:9e:4e:81:10:8e:81:52: 80:19:da:45:89:c6:b4:c2:f0:5a:03:8c:3d:0a:a8: 44:fe:2c:a4:80:b2:10:0f:a0:86:55:c9:79:09:bb: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:89:D4:A6:77:87:9C:EE:7B:21:77:4B:A6:B4:07:36:24:06:33:85 X509v3 Authority Key Identifier: keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f0:b9:9f:72:2a:77:bf:6a:02:e5:d7:e9:76:37:56:77:57: 1a:dc:6d:b0:8c:02:cc:4e:6e:82:d0:a6:77:72:13:26:09:9e: 8a:0a:3a:c7:eb:08:61:f2:8b:97:8d:c9:5f:9b:0b:b1:55:d2: cd:3c:e5:f5:81:10:e0:58:05:39:ae:a9:ec:79:df:28:94:09: 9a:68:31:28:7d:ce:84:7c:a3:af:41:24:65:cb:38:c6:71:57: 20:65:37:09:a3:6f:5a:21:4b:92:07:62:75:5f:4d:4e:60:cb: 4d:4f:e3:93:6b:86:03:e3:1c:f5:4d:64:8e:fc:28:91:ba:26: a4:02:5b:48:31:23:e1:76:09:6c:a1:be:14:e4:29:00:0f:7e: 2d:47:69:b9:06:c0:13:57:94:ed:5e:12:fe:b6:ae:f8:cc:93: da:c0:48:30:ab:12:5c:66:57:2b:7c:ec:54:29:cd:a0:cc:6f: ab:60:a5:9c:f5:79:a0:5e:21:73:0b:64:3b:a6:5d:7c:38:ee: 44:4e:2d:03:98:47:e1:ac:86:79:d7:62:07:29:16:2c:37:7d: 88:97:50:0f:b9:38:ed:44:16:06:a0:e2:2a:92:2d:cf:9e:bf: 59:9c:64:00:ef:a4:66:51:fd:d1:1a:29:c6:fd:c2:cf:a4:76: 09:34:ea:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4QTkxMTAvBgNVBAUTKDVDMEFCNDI1RjJCNDIzNUUxQzgxNTY4M0JENkM4RThC N0I4MEI3MjcwHhcNMjYwOTI4MTk0NzExWhcNMjYxMDA1MTk0NzExWjAYMRYwFAYD VQQDEw02YWJhYzQzZi02YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3sdOv4yh/OrNAVoIdqbgu32Z/iOusOCa9LB+7oj0wxhBX+aZXBs3pH5DqGE uZGFHkBhvguAzQpGZL0Fz6nWnQZ63BWCpSuj5NpOjfkKrpBOrpcBeRzHToolZgDa mBO4ZnyaDFZ3a1j4J7aGKzov1yndtxydYivRXNVHYxxDg5SQ21T3x9stbyxDRrR1 Md/XVsqsaCHFmljs1+gPZl8CapjqlCbo18lvqqci76kS0AaCSHwaL1m3cNuFHRfr QRDl0eHsR4fUja0cKcg9NjJdM0yvCSSTRo4ffJ5OgRCOgVKAGdpFica0wvBaA4w9 CqhE/iykgLIQD6CGVcl5Cbun5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmJ1KZ3 h5zueyF3S6a0BzYkBjOFMB8GA1UdIwQYMBaAFFwKtCXytCNeHIFWg71sjot7gLcn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhBOS8yQUEwNDMzMDk0 RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkxNGNnVmFEdld5T2kzdUF0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBcTBKZkswSTE0Y2dWYUR2V3lPaTN1QXR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhBOS8yQUEwNDMzMDk0RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkx NGNnVmFEdld5T2kzdUF0eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANfC5n3Iqd79qAuXX6XY3VndXGtxtsIwCzE5ugtCmd3ITJgmeigo6x+sIYfKL l43JX5sLsVXSzTzl9YEQ4FgFOa6p7HnfKJQJmmgxKH3OhHyjr0EkZcs4xnFXIGU3 CaNvWiFLkgdidV9NTmDLTU/jk2uGA+Mc9U1kjvwokbompAJbSDEj4XYJbKG+FOQp AA9+LUdpuQbAE1eU7V4S/rau+MyT2sBIMKsSXGZXK3zsVCnNoMxvq2ClnPV5oF4h cwtkO6ZdfDjuRE4tA5hH4ayGeddiBykWLDd9iJdQD7k47UQWBqDiKpItz56/WZxk AO+kZlH90Ropxv3Cz6R2CTTqhg== -----END CERTIFICATE-----Generated at Tue Sep 29 15:37:02 2026 by rpki-client