$ rpki-client -vvvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: BPbGPR1D0/N7Y9ZU+1HAN990+VpbEpeRcLMQr+H0Dm0= Subject key identifier: 80:60:FA:BB:F9:20:C0:0A:1F:B6:9F:FF:5F:47:F3:7C:2D:07:95:9D Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0E03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0DEF Signing time: Sat 10 Oct 2026 17:54:13 +0000 Manifest this update: Sat 10 Oct 2026 17:54:13 +0000 Manifest next update: Sat 17 Oct 2026 17:54:13 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: U4PLX7GY4qEJVbQ3D5zTeVScULf19SeBEtjNLZgZfrA=) 2: 438F11F056C311F181F3CD32B6833773.roa (hash: yjlsTkzpMnfS0rek53KiIgqiGpEW5frXpR+bs0ph5t0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3587 (0xe03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Oct 10 17:54:13 2026 GMT Not After : Oct 17 17:54:13 2026 GMT Subject: CN=6aca7bc5-0909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:f5:da:80:c9:b1:c8:f7:33:c4:57:74:e8: 7b:89:92:85:94:fb:bd:4a:ad:c6:a9:5d:27:bc:13: 0d:8e:47:ca:16:a6:53:da:cb:6b:b4:33:9f:ed:26: 68:9e:f5:12:b9:ea:e2:59:0a:cd:4d:38:f7:39:a6: d7:a7:e0:f2:fa:72:1f:be:eb:ae:93:1e:2c:b4:e4: 65:f8:2d:0e:a4:c6:ee:c2:19:43:df:d5:7e:f0:2c: be:40:8a:ad:b2:76:0c:30:01:38:17:06:6b:09:81: c2:2a:be:d8:79:56:8b:34:a6:e7:3c:ff:5b:b9:c1: 26:ec:ef:4a:07:d6:cd:8d:02:58:63:36:17:b1:68: d8:65:2f:03:f5:42:75:1f:4f:5c:f6:26:4f:d2:67: 61:4c:10:a1:23:b5:ee:42:cd:1e:18:97:1c:77:5e: 0a:7e:95:73:fa:5d:c9:9b:28:6b:29:8e:cc:98:df: f7:be:ad:55:d1:ed:01:81:ee:de:fe:fa:e1:cf:9c: 2f:f6:08:29:59:0e:25:1a:c0:b6:d5:60:1a:93:b8: e5:e8:5b:39:87:5e:ef:74:6c:df:0b:21:f3:9c:e8: f6:fc:89:38:a2:77:88:bc:52:e6:f1:4f:6a:fb:7c: 96:f3:f1:d4:fd:02:18:bb:9b:ed:fe:bd:42:33:e5: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:60:FA:BB:F9:20:C0:0A:1F:B6:9F:FF:5F:47:F3:7C:2D:07:95:9D X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:97:39:e4:a1:48:6f:06:20:da:c1:64:a9:0e:2b:2c:d9:c8: 6b:b4:74:b8:07:61:a8:ff:ca:63:3c:c5:9e:7b:2b:4e:70:88: dd:b0:26:28:74:cc:d3:a0:1b:28:83:40:4f:d8:8a:51:8f:25: 0a:46:e9:74:1d:a6:1f:dc:61:41:da:84:08:2e:fe:17:13:98: 76:0a:a3:9a:bb:68:e8:b8:4d:bd:de:9f:bf:f6:a8:d8:ec:2d: f0:0b:a1:b7:4d:64:bd:44:b5:b3:9d:57:95:50:17:09:fa:0c: 28:84:91:01:83:98:49:4c:b9:7d:71:3c:94:83:44:12:47:35: 46:e0:a0:59:f7:d8:de:ba:32:6c:6d:70:2e:ec:30:23:b2:07: e9:03:b6:f3:d2:dd:4b:02:6e:bd:42:27:78:2c:2c:02:b1:38: 8c:70:d4:4d:c9:d1:62:84:b2:2b:9f:ec:a6:f4:9d:31:0d:ef: da:5c:07:cc:af:26:54:ad:45:5d:9f:64:5c:8a:31:99:e6:4e: f2:ed:68:5f:38:b6:5a:e0:d6:f7:5a:74:fa:ae:61:65:cd:c0: c2:9e:36:4e:1a:2c:d9:ee:57:08:3e:94:22:3a:67:dd:dc:28: 46:98:61:57:c3:f9:9e:73:b3:d4:5c:1c:c9:ca:41:03:05:fd: 8a:19:06:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjYxMDEwMTc1NDEzWhcNMjYxMDE3MTc1NDEzWjAYMRYwFAYD VQQDEw02YWNhN2JjNS0wOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSb12oDJscj3M8RXdOh7iZKFlPu9Sq3GqV0nvBMNjkfKFqZT2strtDOf7SZo nvUSueriWQrNTTj3OabXp+Dy+nIfvuuukx4stORl+C0OpMbuwhlD39V+8Cy+QIqt snYMMAE4FwZrCYHCKr7YeVaLNKbnPP9bucEm7O9KB9bNjQJYYzYXsWjYZS8D9UJ1 H09c9iZP0mdhTBChI7XuQs0eGJccd14KfpVz+l3JmyhrKY7MmN/3vq1V0e0Bge7e /vrhz5wv9ggpWQ4lGsC21WAak7jl6Fs5h17vdGzfCyHznOj2/Ik4oneIvFLm8U9q +3yW8/HU/QIYu5vt/r1CM+XYiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBg+rv5 IMAKH7af/19H83wtB5WdMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApJc55KFIbwYg2sFkqQ4rLNnIa7R0uAdhqP/KYzzFnnsrTnCI3bAmKHTM06Ab KINAT9iKUY8lCkbpdB2mH9xhQdqECC7+FxOYdgqjmrto6LhNvd6fv/ao2Owt8Auh t01kvUS1s51XlVAXCfoMKISRAYOYSUy5fXE8lINEEkc1RuCgWffY3roybG1wLuww I7IH6QO289LdSwJuvUIneCwsArE4jHDUTcnRYoSyK5/spvSdMQ3v2lwHzK8mVK1F XZ9kXIoxmeZO8u1oXzi2WuDW91p0+q5hZc3Awp42Thos2e5XCD6UIjpn3dwoRphh V8P5nnOz1FwcycpBAwX9ihkGJQ== -----END CERTIFICATE-----Generated at Sat Oct 10 23:09:41 2026 by rpki-client