$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: oe5tYFcsLQdXaIeRsBZoWXPV3a5cVkMXYUpCB6fIk1E= Subject key identifier: B7:E4:24:76:C1:B9:B1:F4:51:E3:2A:57:74:8D:05:E0:F4:CB:53:37 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 245F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 243D Signing time: Fri 02 Oct 2026 15:53:59 +0000 Manifest this update: Fri 02 Oct 2026 15:53:59 +0000 Manifest next update: Fri 09 Oct 2026 15:53:59 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: 97JhBUC86VbzLkO+4WUfflt+SoTs5ChBgIukmDPZJfo=) 2: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: WHFTgTdN91JmiwgkjLTnaveiREzYpYdH00fsH4EjbJg=) 3: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: MDPP/VIQwu8qPe+/SiKWS6o/CY6nGMpyQ4F+e1jNL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9311 (0x245f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Oct 2 15:53:59 2026 GMT Not After : Oct 9 15:53:59 2026 GMT Subject: CN=6abfd397-235a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:b5:4c:1e:a7:48:c6:a8:9b:8c:8e:21:1e: e6:7b:55:ed:8d:f0:d4:ba:d2:d4:95:58:ca:c3:53: ca:8a:8f:08:00:24:b8:0e:40:29:86:7a:ea:33:6d: 80:bb:3c:32:35:5e:49:db:bd:b9:69:0c:1e:0a:6c: 2f:9c:2a:03:40:34:84:93:12:d3:7b:98:75:1e:9b: 89:74:75:bd:97:9f:f7:07:8b:77:ef:6a:72:f6:95: 9c:e9:e5:99:ec:ff:6e:b8:87:5c:70:d2:59:f6:21: 89:90:3f:c4:51:ec:eb:82:2d:cf:e7:67:4e:cb:b2: 60:03:e5:ac:cf:2c:64:2a:41:24:cd:10:e3:ca:42: a6:e3:91:8f:06:db:f8:ed:d7:88:3d:d4:05:51:72: ae:87:2f:25:aa:d6:27:e6:a1:02:b2:a6:73:66:11: 6c:08:2c:d1:08:6f:69:5a:fe:bc:6d:59:14:f0:78: 5d:6c:88:ea:5c:e6:77:f1:7e:64:9d:75:44:82:0d: 79:3f:8c:49:2b:b6:b0:9f:02:fb:62:36:bc:be:e2: 97:ea:13:dd:a0:11:21:11:7d:45:22:86:4a:85:65: 77:61:73:87:0d:a1:10:88:fd:6c:2b:fc:fb:4d:51: 6e:73:c9:97:0b:bd:3a:61:0c:2a:47:aa:10:2e:b1: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E4:24:76:C1:B9:B1:F4:51:E3:2A:57:74:8D:05:E0:F4:CB:53:37 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:df:e8:18:ab:08:45:9b:10:f5:52:a4:1c:9b:1d:10:75:1d: cf:b3:1f:f5:57:21:ea:25:48:48:0d:30:4e:9a:d1:03:2c:e2: db:b1:62:fc:1f:0a:b3:05:a9:19:7b:7f:ae:9e:be:fe:e4:b1: 84:dd:b0:ea:e8:36:59:86:7f:b3:34:9b:e4:17:1e:6b:82:2c: a5:ed:7f:f0:71:e6:f0:34:63:35:63:8a:2c:4c:61:bb:e2:10: 99:18:76:42:bb:53:45:6c:5f:38:0a:b8:6c:6e:07:79:98:52: 7b:05:90:3e:03:e8:12:37:a0:b6:24:f6:b2:63:ca:5d:14:13: eb:09:9f:10:a4:c0:bd:fe:df:ea:f6:78:54:d0:35:0b:2f:6d: b9:3a:17:62:0e:fa:22:a3:e2:d7:8e:4c:4d:2a:2b:b1:32:bc: cf:9b:69:a4:aa:a4:00:53:9b:86:6b:d4:27:fb:5c:58:12:36: 9c:4a:83:9c:5c:23:8b:aa:44:88:27:e7:73:d7:1d:bc:a8:fe: f1:13:0a:91:a1:4d:de:ca:4d:a7:9a:83:19:7b:2f:87:06:80: 29:2a:17:3e:6e:26:53:43:53:48:16:3b:2d:97:15:43:cd:15: 59:25:67:de:f0:ef:d2:67:79:e3:a5:27:71:45:82:3c:c9:da: 5c:ee:3b:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjYxMDAyMTU1MzU5WhcNMjYxMDA5MTU1MzU5WjAYMRYwFAYD VQQDEw02YWJmZDM5Ny0yMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQq1TB6nSMaom4yOIR7me1XtjfDUutLUlVjKw1PKio8IACS4DkAphnrqM22A uzwyNV5J2725aQweCmwvnCoDQDSEkxLTe5h1HpuJdHW9l5/3B4t372py9pWc6eWZ 7P9uuIdccNJZ9iGJkD/EUezrgi3P52dOy7JgA+WszyxkKkEkzRDjykKm45GPBtv4 7deIPdQFUXKuhy8lqtYn5qECsqZzZhFsCCzRCG9pWv68bVkU8HhdbIjqXOZ38X5k nXVEgg15P4xJK7awnwL7Yja8vuKX6hPdoBEhEX1FIoZKhWV3YXOHDaEQiP1sK/z7 TVFuc8mXC706YQwqR6oQLrEHDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfkJHbB ubH0UeMqV3SNBeD0y1M3MB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM9/oGKsIRZsQ9VKkHJsdEHUdz7Mf9Vch6iVISA0wTprRAyzi27Fi/B8KswWp GXt/rp6+/uSxhN2w6ug2WYZ/szSb5Bcea4Ispe1/8HHm8DRjNWOKLExhu+IQmRh2 QrtTRWxfOAq4bG4HeZhSewWQPgPoEjegtiT2smPKXRQT6wmfEKTAvf7f6vZ4VNA1 Cy9tuToXYg76IqPi145MTSorsTK8z5tppKqkAFObhmvUJ/tcWBI2nEqDnFwji6pE iCfnc9cdvKj+8RMKkaFN3spNp5qDGXsvhwaAKSoXPm4mU0NTSBY7LZcVQ80VWSVn 3vDv0md546UncUWCPMnaXO47fQ== -----END CERTIFICATE-----Generated at Sun Oct 4 13:06:32 2026 by rpki-client