$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json) Hash identifier: zHBVgQXO6tWQDOVG6mEOOdsNYZ/1ltWAphnsu8dUl28= Subject key identifier: CD:0E:B9:B6:7F:AC:53:F6:F0:8F:1A:1A:97:B4:88:6F:01:9C:41:5C Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft Manifest number: FC Signing time: Wed 23 Sep 2026 06:02:19 +0000 Manifest this update: Wed 23 Sep 2026 06:02:18 +0000 Manifest next update: Wed 30 Sep 2026 06:02:18 +0000 Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: 603jJ2hmvdxoh+YBectM8zBLexhBxJk2T0xrwZA7jmA=) 2: C053613E38B311F08DB63209C4F9AE02.roa (hash: Lek/WPDDNc+yHYMkaUrmzOxGk5PnD1k8962Z0HoMdcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Validity Not Before: Sep 23 06:02:18 2026 GMT Not After : Sep 30 06:02:18 2026 GMT Subject: CN=6ab36b6b-8fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:e2:8b:8c:a9:22:a0:eb:08:d1:af:b2:a4: 05:dd:52:ad:2b:eb:79:aa:f2:65:57:f0:1c:72:f8: 69:83:10:36:9d:36:d0:8c:b8:f5:6e:a1:aa:8d:c9: 94:5d:aa:95:04:64:fe:0d:3a:ad:9f:9a:fc:50:05: 65:0f:50:88:ec:bb:b5:d9:4f:79:78:9d:2b:a8:1d: 42:02:52:e3:f7:f4:7f:fe:ab:eb:2a:6b:c2:9b:77: b4:8a:34:6f:0f:c1:56:17:54:39:7f:77:98:1b:26: d3:a7:97:ce:9c:d5:1a:ba:4b:d7:52:67:1a:de:a6: 9b:ff:0a:a6:96:73:0e:f5:d5:9e:fe:62:d4:d3:6b: c1:30:1b:f1:a3:63:a9:9b:0b:2d:74:b9:ff:92:73: 1e:2c:b5:c1:64:a9:da:00:1e:70:b5:fd:b2:05:c1: 24:48:ff:77:80:11:20:a9:5a:7f:9d:ae:85:e1:61: 6a:60:4f:38:2b:53:5c:87:4b:01:17:d2:f8:b4:ca: b3:bb:ec:4a:14:23:15:96:4d:d9:a8:4f:43:a3:4b: 76:ea:7e:63:b4:8f:8f:be:66:0e:32:23:9f:cc:b8: 45:39:75:9c:80:6b:c2:d0:0b:e3:1f:b0:de:92:22: bc:e4:b4:d3:36:b2:db:e1:b1:b9:da:ce:e9:30:8e: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0E:B9:B6:7F:AC:53:F6:F0:8F:1A:1A:97:B4:88:6F:01:9C:41:5C X509v3 Authority Key Identifier: keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:28:88:eb:b4:43:97:78:76:a3:f5:e3:37:18:e8:4c:a5:81: 45:cf:c5:7b:be:9d:3b:13:a4:96:49:2a:89:f7:51:e2:33:2d: 06:0a:54:67:d3:96:99:fa:14:a6:1d:d3:cd:cc:42:7e:62:40: 28:37:02:16:f5:37:b6:b6:de:34:97:f8:de:a2:d2:4c:22:e4: 26:59:4b:4d:6c:91:41:6d:5f:e2:d1:7b:61:fd:91:29:c1:5d: d1:8f:06:e1:47:52:97:3a:d6:f1:8e:a5:49:7a:d4:83:64:df: 1b:8f:ee:8b:b4:6d:87:ca:07:35:2c:ef:14:56:8a:ef:ce:80: cb:da:cf:87:24:ac:10:ab:b8:9b:c9:dc:11:68:b8:c7:9c:a5: e6:71:d2:00:e6:23:d0:d4:87:9f:1b:99:5d:e8:5a:5a:d6:e5: 05:af:6a:09:ff:5d:02:f1:7f:7e:15:db:84:e6:1a:c3:05:99: 92:8b:d8:2d:95:ac:55:0e:fb:19:b9:11:c4:1d:76:3a:ab:00: 01:bc:81:53:60:12:45:55:a1:aa:f7:08:5d:30:e3:ee:20:26: 72:5b:d8:ff:d3:6d:9b:6f:ed:b3:2f:85:7c:08:6b:dd:36:7c: 75:8b:12:ec:d4:9e:e5:27:87:1d:1f:0a:6b:98:ec:32:c1:c7: 64:b9:41:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGODcxMTAvBgNVBAUTKDVFQzVGQjMzNEVFNTJCOTAwOUNCOTIzQzY5M0JEMjBG MDQ3OEExNDQwHhcNMjYwOTIzMDYwMjE4WhcNMjYwOTMwMDYwMjE4WjAYMRYwFAYD VQQDEw02YWIzNmI2Yi04ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Tii4ypIqDrCNGvsqQF3VKtK+t5qvJlV/AccvhpgxA2nTbQjLj1bqGqjcmU XaqVBGT+DTqtn5r8UAVlD1CI7Lu12U95eJ0rqB1CAlLj9/R//qvrKmvCm3e0ijRv D8FWF1Q5f3eYGybTp5fOnNUaukvXUmca3qab/wqmlnMO9dWe/mLU02vBMBvxo2Op mwstdLn/knMeLLXBZKnaAB5wtf2yBcEkSP93gBEgqVp/na6F4WFqYE84K1Nch0sB F9L4tMqzu+xKFCMVlk3ZqE9Do0t26n5jtI+PvmYOMiOfzLhFOXWcgGvC0AvjH7De kiK85LTTNrLb4bG52s7pMI7MfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0OubZ/ rFP28I8aGpe0iG8BnEFcMB8GA1UdIwQYMBaAFF7F+zNO5SuQCcuSPGk70g8EeKFE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY4Ny8zNDAwODAyMjM4 QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9Yc1g3TTA3bEs1QUp5NUk4YVR2U0R3UjRv VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY4Ny8zNDAwODAyMjM4QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9Yc1g3TTA3bEs1 QUp5NUk4YVR2U0R3UjRvVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUiiI67RDl3h2o/XjNxjoTKWBRc/Fe76dOxOklkkqifdR4jMtBgpUZ9OWmfoU ph3TzcxCfmJAKDcCFvU3trbeNJf43qLSTCLkJllLTWyRQW1f4tF7Yf2RKcFd0Y8G 4UdSlzrW8Y6lSXrUg2TfG4/ui7Rth8oHNSzvFFaK786Ay9rPhySsEKu4m8ncEWi4 x5yl5nHSAOYj0NSHnxuZXehaWtblBa9qCf9dAvF/fhXbhOYawwWZkovYLZWsVQ77 GbkRxB12OqsAAbyBU2ASRVWhqvcIXTDj7iAmclvY/9Ntm2/tsy+FfAhr3TZ8dYsS 7NSe5SeHHR8Ka5jsMsHHZLlB0Q== -----END CERTIFICATE-----Generated at Fri Sep 25 06:28:25 2026 by rpki-client