$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft File: xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json) Hash identifier: UzwpHiHM5Q0Png0k2xFeEPO4oCsBeSLj9MYwKU2LI0g= Subject key identifier: 46:00:D8:CB:E1:5E:8B:D4:E0:CE:8C:3F:0D:26:26:8E:8F:A3:96:84 Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft Manifest number: 8B Signing time: Mon 05 Oct 2026 08:04:25 +0000 Manifest this update: Mon 05 Oct 2026 08:04:24 +0000 Manifest next update: Mon 12 Oct 2026 08:04:24 +0000 Files and hashes: 1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: wvO6HoZ8CYjWgcZqh4+01OJwrLD9voqN6EO55UPQjoA=) 2: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=) 3: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Validity Not Before: Oct 5 08:04:24 2026 GMT Not After : Oct 12 08:04:24 2026 GMT Subject: CN=6ac35a09-902f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:99:f2:40:ca:93:0b:85:60:80:3c:cc:ef: fd:9b:78:76:96:b3:6d:e1:e5:81:6c:63:c0:e5:93: 90:52:dd:94:cc:2e:17:f4:b6:0f:dc:23:a8:e8:0b: 79:11:ff:50:41:0c:bd:09:2e:42:e2:ac:09:c1:8c: 9f:bc:bc:d8:22:a9:a6:66:ae:f3:e6:62:fd:bd:cc: 51:03:b5:7f:70:a8:2b:b5:e9:00:9c:16:0f:b5:7a: 75:b4:61:e7:41:af:fb:66:0f:01:ac:16:d5:0a:56: cf:4a:16:0b:2f:e6:da:a6:ec:b8:a4:47:fb:5e:33: 26:ae:5e:da:b7:89:33:43:a0:91:13:4d:60:6d:72: eb:e1:ec:d2:26:bc:db:e7:48:94:61:75:11:48:1c: 8f:77:3a:32:80:97:d0:7e:18:6e:41:1a:3c:7e:81: 0a:f0:a0:98:c5:78:67:90:ed:27:94:7e:ce:87:3b: 55:34:b8:48:ad:6b:50:ae:22:28:72:45:b7:aa:3e: 6b:63:3a:d5:12:60:09:94:e3:a3:8c:48:05:d7:d9: 7f:70:1d:1d:62:09:ed:7d:20:44:09:23:1b:7b:1b: 75:00:e6:44:cc:18:c1:5e:e7:65:47:33:b8:8d:43: 5f:22:72:59:8a:88:ce:bc:40:d8:d9:1d:4f:48:72: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:00:D8:CB:E1:5E:8B:D4:E0:CE:8C:3F:0D:26:26:8E:8F:A3:96:84 X509v3 Authority Key Identifier: keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:35:9a:e1:f8:1f:3a:87:05:2c:48:6b:24:c6:6d:f9:c8:74: 2a:b1:61:b7:8d:cb:a6:33:26:2d:16:e2:5e:e9:d1:4e:52:05: a6:1a:c4:80:47:72:a1:6a:66:14:f5:03:2d:5d:ea:ba:aa:50: aa:13:8b:15:39:0d:6b:75:cb:2e:ed:33:a9:33:06:04:1d:50: 20:e7:98:e2:8c:42:e0:ca:fd:ea:d3:24:21:ef:21:65:2c:fe: 39:7b:eb:63:50:65:92:b4:b0:c5:77:fd:53:bd:fb:23:59:11: 4b:ee:04:c3:d2:37:1d:9a:a9:ac:d4:44:ce:95:87:c5:42:80: 15:67:47:35:9c:17:b0:4f:da:9a:06:89:67:30:52:29:25:7e: 7c:02:09:e5:cb:4a:f3:78:81:05:61:ee:e7:2f:c7:8b:e7:ea: fa:34:f3:f7:20:f6:17:82:ef:17:d3:5d:f4:5e:c4:4a:c9:ec: 9e:0b:70:c0:56:b3:0d:f8:d3:25:69:da:b4:30:20:8f:dc:f1: c5:fe:b3:86:ac:3d:ca:1f:32:a0:a1:2a:59:2f:be:7e:e3:a1: e3:05:8e:ad:a6:50:64:d0:95:23:57:0f:65:ec:a9:63:e6:91: 1a:f6:c0:e9:f6:fa:fd:c0:d2:78:3a:76:13:a2:f7:f4:56:65: 62:9d:3d:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBNTUxMTAvBgNVBAUTKEM1RUIyNTQ2QkI3M0FDRTY5M0UxOUFCMTA3RDgzRjI2 NjYzMkNFRTgwHhcNMjYxMDA1MDgwNDI0WhcNMjYxMDEyMDgwNDI0WjAYMRYwFAYD VQQDEw02YWMzNWEwOS05MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9CZ8kDKkwuFYIA8zO/9m3h2lrNt4eWBbGPA5ZOQUt2UzC4X9LYP3COo6At5 Ef9QQQy9CS5C4qwJwYyfvLzYIqmmZq7z5mL9vcxRA7V/cKgrtekAnBYPtXp1tGHn Qa/7Zg8BrBbVClbPShYLL+bapuy4pEf7XjMmrl7at4kzQ6CRE01gbXLr4ezSJrzb 50iUYXURSByPdzoygJfQfhhuQRo8foEK8KCYxXhnkO0nlH7OhztVNLhIrWtQriIo ckW3qj5rYzrVEmAJlOOjjEgF19l/cB0dYgntfSBECSMbext1AOZEzBjBXudlRzO4 jUNfInJZiojOvEDY2R1PSHKztwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYA2Mvh XovU4M6MPw0mJo6Po5aEMB8GA1UdIwQYMBaAFMXrJUa7c6zmk+GasQfYPyZmMs7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E1NS9CMzJCNTAyOEY3 QTUxMUYwODdFNTFGMTY1NTZGNTZCQy94ZXNsUnJ0enJPYVQ0WnF4QjlnX0ptWXl6 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3hlc2xScnR6ck9hVDRacXhCOWdfSm1ZeXp1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E1NS9CMzJCNTAyOEY3QTUxMUYwODdFNTFGMTY1NTZGNTZCQy94ZXNsUnJ0enJP YVQ0WnF4QjlnX0ptWXl6dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABTWa4fgfOocFLEhrJMZt+ch0KrFht43LpjMmLRbiXunRTlIFphrEgEdyoWpm FPUDLV3quqpQqhOLFTkNa3XLLu0zqTMGBB1QIOeY4oxC4Mr96tMkIe8hZSz+OXvr Y1BlkrSwxXf9U737I1kRS+4Ew9I3HZqprNREzpWHxUKAFWdHNZwXsE/amgaJZzBS KSV+fAIJ5ctK83iBBWHu5y/Hi+fq+jTz9yD2F4LvF9Nd9F7ESsnsngtwwFazDfjT JWnatDAgj9zxxf6zhqw9yh8yoKEqWS++fuOh4wWOraZQZNCVI1cPZeypY+aRGvbA 6fb6/cDSeDp2E6L39FZlYp09jg== -----END CERTIFICATE-----Generated at Tue Oct 6 12:37:40 2026 by rpki-client