$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: 0RbTgVMzaqmQ1mQvZEaF+epn+fOzn1DZKSBH4JLdGuA= Subject key identifier: 70:7E:D1:20:B4:F5:F9:31:76:55:55:A0:91:0D:3F:56:E6:DF:4D:00 Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: 01CA Signing time: Sun 27 Sep 2026 04:14:41 +0000 Manifest this update: Sun 27 Sep 2026 04:14:40 +0000 Manifest next update: Sun 04 Oct 2026 04:14:40 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: UPk6iPYkEX2pEBmkmwaIR7OO5reelRhiyija9tZcvwg=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: y7jb6cwIzoJ+j87zu0EqC/c/p/EowwP9+XVDIVZhy6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Sep 27 04:14:40 2026 GMT Not After : Oct 4 04:14:40 2026 GMT Subject: CN=6ab89831-128a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:b8:0d:ac:ca:9b:a7:ad:0f:f0:c9:f7:24: 39:b0:33:b7:d7:3e:5f:56:c2:3d:5a:7b:91:18:df: 6a:43:47:31:cc:7c:4e:59:7b:4c:c1:d9:8a:d2:d4: ad:ea:de:34:f4:44:ba:db:4a:98:39:9a:4d:49:1d: 4f:47:01:e4:c5:9d:37:98:ba:40:4c:b8:0a:63:64: e2:25:24:65:ca:9d:eb:fc:b0:22:37:7a:d0:bd:1b: 67:67:4d:d6:25:4c:87:e5:5c:29:99:da:4b:51:54: e1:a9:93:f7:f9:e8:16:25:46:86:ff:94:d1:0d:de: 70:97:59:cb:2a:aa:07:07:2f:a6:f5:86:23:4a:a9: 89:aa:7c:ea:e9:a0:a5:3b:d3:28:bd:b1:d4:45:6c: 59:3d:ad:9f:a1:29:e1:58:66:df:1b:09:11:90:80: de:59:ba:d0:92:9a:52:31:c4:32:40:4f:a2:10:8f: e9:59:b7:c0:56:05:e4:d7:18:11:d0:b2:d2:54:28: 21:de:f4:53:18:2a:07:68:9c:fa:9a:a0:31:52:63: a0:b9:c6:b5:40:09:4a:20:a2:53:d6:a5:88:5c:e9: c8:f7:dc:20:0e:fd:41:ff:96:49:9e:83:9d:76:2f: 20:d6:cb:11:b5:1f:56:3d:82:76:1b:f2:c2:23:2c: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7E:D1:20:B4:F5:F9:31:76:55:55:A0:91:0D:3F:56:E6:DF:4D:00 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e7:b6:b3:f9:3f:fd:61:ab:77:a8:d3:32:bc:ad:3d:83:26: 92:d6:78:47:cd:22:66:9b:87:78:1f:4d:65:10:bb:e6:0b:3d: 19:d0:b5:32:78:d4:af:65:ba:85:9f:93:7c:2d:51:4d:72:f6: 86:c4:f0:fc:f5:d8:f5:3d:aa:e4:da:49:10:70:a3:76:87:8c: 54:74:dd:96:8d:ba:f9:dc:15:b1:8c:2d:d4:c7:1c:bc:07:67: 3e:24:2a:ed:a1:2f:b3:d3:a3:15:34:d8:89:be:7a:fb:8c:60: 3d:9f:4c:55:2c:c8:2c:f7:64:63:87:45:dc:3a:8b:70:34:0b: 0c:25:e1:18:8c:fc:b9:d8:01:37:b3:59:9b:56:a6:85:b7:68: 79:23:a7:10:41:57:75:74:77:4a:e2:3b:f0:0e:5c:d7:73:5e: bc:5c:60:df:99:41:98:d6:02:c5:8a:fb:ce:7e:d0:34:ef:5d: 54:e0:44:6b:1a:e7:eb:ed:ad:23:15:25:95:39:79:66:de:20: bd:ff:8c:98:3e:d6:f9:ed:52:22:47:68:4b:1a:10:4a:ca:0b: 0d:4b:1b:bd:a2:fa:76:e3:55:d5:21:31:19:a2:bd:d9:c6:4b: 1a:97:2f:cb:94:c6:a6:d4:89:e5:b2:f0:2f:7e:c4:f0:1d:18: a6:32:33:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjYwOTI3MDQxNDQwWhcNMjYxMDA0MDQxNDQwWjAYMRYwFAYD VQQDEw02YWI4OTgzMS0xMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLO4DazKm6etD/DJ9yQ5sDO31z5fVsI9WnuRGN9qQ0cxzHxOWXtMwdmK0tSt 6t409ES620qYOZpNSR1PRwHkxZ03mLpATLgKY2TiJSRlyp3r/LAiN3rQvRtnZ03W JUyH5VwpmdpLUVThqZP3+egWJUaG/5TRDd5wl1nLKqoHBy+m9YYjSqmJqnzq6aCl O9MovbHURWxZPa2foSnhWGbfGwkRkIDeWbrQkppSMcQyQE+iEI/pWbfAVgXk1xgR 0LLSVCgh3vRTGCoHaJz6mqAxUmOguca1QAlKIKJT1qWIXOnI99wgDv1B/5ZJnoOd di8g1ssRtR9WPYJ2G/LCIyxXFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHB+0SC0 9fkxdlVVoJENP1bm300AMB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ+e2s/k//WGrd6jTMrytPYMmktZ4R80iZpuHeB9NZRC75gs9GdC1MnjUr2W6 hZ+TfC1RTXL2hsTw/PXY9T2q5NpJEHCjdoeMVHTdlo26+dwVsYwt1MccvAdnPiQq 7aEvs9OjFTTYib56+4xgPZ9MVSzILPdkY4dF3DqLcDQLDCXhGIz8udgBN7NZm1am hbdoeSOnEEFXdXR3SuI78A5c13NevFxg35lBmNYCxYr7zn7QNO9dVOBEaxrn6+2t IxUllTl5Zt4gvf+MmD7W+e1SIkdoSxoQSsoLDUsbvaL6duNV1SExGaK92cZLGpcv y5TGptSJ5bLwL37E8B0YpjIzmA== -----END CERTIFICATE-----Generated at Tue Sep 29 01:50:42 2026 by rpki-client