$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json) Hash identifier: N0sce+e/nhz9ltHqdWcEmU6cycfXqofWW5NvX4w9P7A= Subject key identifier: 52:3E:C7:D4:D6:9B:F1:AC:B0:2D:28:A8:A6:6A:C8:3F:5A:FB:AC:EE Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft Manifest number: 0C3C Signing time: Mon 12 Oct 2026 18:52:46 +0000 Manifest this update: Mon 12 Oct 2026 18:52:45 +0000 Manifest next update: Mon 19 Oct 2026 18:52:45 +0000 Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: TCccH9g35yfbjBMZc2Tk664fAg3aIhp0Yb/1OF1H0d0=) 2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: ZfN47QZk1I0stKKG/PcylN3pXvV6tmE6VzGmQ9cZBhw=) 3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: WrULTRVyC0CP0la8trGFB188cSwiC+Ug49Ju1Bs+OYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Validity Not Before: Oct 12 18:52:45 2026 GMT Not After : Oct 19 18:52:45 2026 GMT Subject: CN=6acd2c7e-960a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:67:0b:4d:49:93:97:01:6b:8f:09:d4:52: 19:f3:4a:0c:f5:cb:0e:d9:3e:d7:47:cf:f6:c8:29: 7f:89:96:cf:14:20:b9:69:8d:14:fb:5c:a9:54:a1: 97:66:96:2e:f0:b6:7d:21:03:f2:b8:5e:a0:95:1a: 5e:08:ec:94:99:63:3c:0d:37:73:02:86:9c:99:e2: 3f:b4:5d:17:f9:95:92:43:25:29:c9:95:2c:dd:9b: 9b:66:a5:ec:34:97:7b:bb:70:16:c3:e0:82:92:55: 22:9c:d7:b4:0c:b6:d5:b3:f4:28:85:f3:4c:88:4b: 0d:9b:66:be:23:ca:5b:39:d0:5c:3f:27:fe:51:67: 0e:ab:67:e9:fb:db:3a:20:78:d0:bc:f0:71:5f:8b: f2:6f:05:d4:9d:12:26:85:52:f4:11:f4:a7:43:59: 1f:43:67:0f:b8:09:d1:c0:24:06:85:0b:19:7b:1d: b3:c2:b4:fa:b1:d7:f2:dd:03:7e:e2:e4:d8:7d:50: a7:1b:42:73:db:f3:30:4a:6e:ef:26:ac:5d:69:b5: b0:06:0d:7e:84:ea:23:2c:99:e0:de:15:22:37:2f: 1a:a0:d3:2c:11:fb:66:53:e1:b2:28:ee:03:6e:0b: 7d:98:a2:10:91:ca:57:00:19:ef:1f:a4:79:70:c0: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3E:C7:D4:D6:9B:F1:AC:B0:2D:28:A8:A6:6A:C8:3F:5A:FB:AC:EE X509v3 Authority Key Identifier: keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8a:50:09:5c:be:07:59:e4:bd:e8:d2:d7:61:72:10:b3:7b: 1c:ad:10:75:51:7e:1b:bb:ff:23:74:f7:6b:43:dc:0e:f7:27: 74:58:3e:15:1d:e4:33:87:ef:8e:94:f4:4a:5c:29:7e:00:f9: a4:94:dd:b3:93:38:4f:40:f8:89:d0:39:0a:0e:07:3b:d6:d5: 37:36:b9:b9:c9:b8:c2:bd:0e:64:2f:dd:af:3f:36:00:46:c2: 8d:27:44:9f:bd:3b:3f:1c:e3:45:cf:b4:99:e2:70:35:0e:70: 30:bb:9e:9c:4f:35:f7:95:15:6d:f6:39:61:7e:e1:89:1e:ff: b1:e8:2e:e1:d2:d9:7c:39:34:43:c7:b8:7a:8d:d1:5b:e2:c4: dd:12:c0:5a:64:d3:cd:3f:c0:6a:a1:93:a9:5b:6c:93:60:30: 11:f8:11:ca:50:1e:a5:d0:26:79:51:a8:61:e5:64:45:98:66: 1e:1d:69:30:6d:ca:9f:30:6c:15:1c:f0:4c:33:9e:ba:5c:9b: 93:f5:de:bb:80:a8:86:40:55:c4:32:c9:c8:41:98:f0:bf:56: 21:33:08:94:1f:6a:d1:3d:b0:1c:6e:91:71:79:7d:fe:a0:d4: 15:ff:fb:4a:ad:46:a4:f5:7c:07:ca:0f:52:c0:fa:81:d4:9a: 1d:88:d5:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2 QTA4MTRCQUMwHhcNMjYxMDEyMTg1MjQ1WhcNMjYxMDE5MTg1MjQ1WjAYMRYwFAYD VQQDEw02YWNkMmM3ZS05NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5ZnC01Jk5cBa48J1FIZ80oM9csO2T7XR8/2yCl/iZbPFCC5aY0U+1ypVKGX ZpYu8LZ9IQPyuF6glRpeCOyUmWM8DTdzAoacmeI/tF0X+ZWSQyUpyZUs3ZubZqXs NJd7u3AWw+CCklUinNe0DLbVs/QohfNMiEsNm2a+I8pbOdBcPyf+UWcOq2fp+9s6 IHjQvPBxX4vybwXUnRImhVL0EfSnQ1kfQ2cPuAnRwCQGhQsZex2zwrT6sdfy3QN+ 4uTYfVCnG0Jz2/MwSm7vJqxdabWwBg1+hOojLJng3hUiNy8aoNMsEftmU+GyKO4D bgt9mKIQkcpXABnvH6R5cMDoAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFI+x9TW m/GssC0oqKZqyD9a+6zuMB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5 NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI c2pXUWxJVmRpZUZxQ0JTNncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARYpQCVy+B1nkvejS12FyELN7HK0QdVF+G7v/I3T3a0PcDvcndFg+FR3kM4fv jpT0SlwpfgD5pJTds5M4T0D4idA5Cg4HO9bVNza5ucm4wr0OZC/drz82AEbCjSdE n707PxzjRc+0meJwNQ5wMLuenE8195UVbfY5YX7hiR7/segu4dLZfDk0Q8e4eo3R W+LE3RLAWmTTzT/AaqGTqVtsk2AwEfgRylAepdAmeVGoYeVkRZhmHh1pMG3KnzBs FRzwTDOeulybk/Xeu4CohkBVxDLJyEGY8L9WITMIlB9q0T2wHG6RcXl9/qDUFf/7 Sq1GpPV8B8oPUsD6gdSaHYjV2A== -----END CERTIFICATE-----Generated at Tue Oct 13 01:36:26 2026 by rpki-client