$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: TZOq8Fpv0Rh9nsjkc7a/JzLOjMyz5KvSKcWyQsmPjDI= Subject key identifier: 48:7B:18:51:83:13:39:6D:33:4A:0C:8D:34:BB:E9:8B:AF:22:57:AE Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0E19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0DDC Signing time: Sat 26 Sep 2026 17:58:17 +0000 Manifest this update: Sat 26 Sep 2026 17:58:16 +0000 Manifest next update: Sat 03 Oct 2026 17:58:16 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: Fr8XoMTc+uG8UO6oNlztRm7MrsrJHuYl8Iiju7mLClA=) 2: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) 3: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) 4: 762C16422E9811F1A14B442FB4833773.roa (hash: 6dVRqPwjNiBJWT/1IpcKvHD9YdgtV5RR7uiRlRvanfU=) 5: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) 6: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) 7: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3609 (0xe19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Sep 26 17:58:16 2026 GMT Not After : Oct 3 17:58:16 2026 GMT Subject: CN=6ab807b9-2b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:78:17:9a:3c:70:46:87:1a:f6:54:23:49: 7a:cb:3e:b5:77:e0:36:2e:59:a9:cd:c3:ca:42:78: b0:a4:b5:15:43:6f:50:1f:14:a9:06:a2:00:af:4b: 91:88:3b:71:dd:cb:93:c3:82:73:d2:c7:e6:92:c6: b9:6e:5f:37:f4:39:c1:be:50:15:6e:f9:af:4b:bc: 1e:7a:b2:81:06:83:0d:e7:e5:d0:4a:b9:98:60:de: a1:50:71:70:d7:f9:ba:8e:9c:32:ea:1f:d2:dc:56: 26:da:02:de:79:f4:b5:f0:ba:df:c4:5a:da:b6:85: 0f:4a:66:50:f0:c6:3e:fe:40:d0:f3:5a:4f:c4:2a: 49:d8:a4:0a:3a:11:01:7d:de:b6:e9:a3:c2:73:5c: ca:1e:c3:39:ca:fe:6f:2f:b8:4f:34:f9:14:0e:73: cd:62:aa:ec:ac:77:e0:73:83:83:e3:6c:3e:6b:8f: 85:15:73:4f:53:00:dd:d8:48:41:ef:bf:fa:9d:a2: 80:77:d1:b7:1f:a9:55:c0:19:de:bc:11:89:7c:71: 0e:17:00:2b:09:79:6f:48:21:06:62:85:27:af:e1: da:7d:97:52:af:f8:a4:2b:21:0e:ff:6e:43:5f:ef: d9:1d:cf:3f:a6:4f:01:75:9b:46:b6:4e:1c:2d:72: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7B:18:51:83:13:39:6D:33:4A:0C:8D:34:BB:E9:8B:AF:22:57:AE X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ef:4d:47:21:13:80:70:8c:0c:16:0c:be:c9:84:23:c7:48: b7:b8:0e:89:be:1a:ee:62:61:b2:3c:a8:9f:c2:76:7b:0f:40: bf:6d:73:90:2c:33:4b:2f:d9:0f:78:41:19:c3:e5:ef:e6:d0: d4:9c:05:c3:40:07:28:22:2c:4d:65:96:1c:34:c1:9d:b6:2f: c7:15:f5:3e:0c:03:da:62:9e:4e:c6:c3:2f:76:b8:3c:48:85: af:8c:9a:70:ed:69:43:a2:37:82:78:00:6e:e7:6c:19:dd:60: 59:f2:1e:2b:98:33:87:67:7b:67:2e:cc:69:6e:13:93:da:15: 22:74:40:36:a2:55:83:1b:61:ba:5b:ca:75:79:a1:0f:30:e2: 74:1d:60:70:d9:f4:59:9d:9b:3e:e9:00:01:be:d9:76:6a:88: 10:02:47:4d:b1:10:82:6f:2f:12:04:11:16:10:33:41:8b:13: 34:7c:3e:0f:23:94:a6:fb:7c:66:2c:88:ef:4e:ab:77:90:7a: 2c:ce:09:49:2c:a8:14:60:04:a5:63:b4:bd:c5:2e:51:45:3c: d9:4b:bc:6e:32:07:32:90:b9:2c:9c:87:77:96:8b:c2:41:b2: 8e:d3:45:74:b9:d6:a4:4c:01:03:6b:72:d0:0c:28:55:4a:03: d3:df:6f:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwOTI2MTc1ODE2WhcNMjYxMDAzMTc1ODE2WjAYMRYwFAYD VQQDEw02YWI4MDdiOS0yYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvip4F5o8cEaHGvZUI0l6yz61d+A2LlmpzcPKQniwpLUVQ29QHxSpBqIAr0uR iDtx3cuTw4Jz0sfmksa5bl839DnBvlAVbvmvS7weerKBBoMN5+XQSrmYYN6hUHFw 1/m6jpwy6h/S3FYm2gLeefS18LrfxFratoUPSmZQ8MY+/kDQ81pPxCpJ2KQKOhEB fd626aPCc1zKHsM5yv5vL7hPNPkUDnPNYqrsrHfgc4OD42w+a4+FFXNPUwDd2EhB 77/6naKAd9G3H6lVwBnevBGJfHEOFwArCXlvSCEGYoUnr+HafZdSr/ikKyEO/25D X+/ZHc8/pk8BdZtGtk4cLXLnPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEh7GFGD EzltM0oMjTS76YuvIleuMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEe9NRyETgHCMDBYMvsmEI8dIt7gOib4a7mJhsjyon8J2ew9Av21zkCwzSy/Z D3hBGcPl7+bQ1JwFw0AHKCIsTWWWHDTBnbYvxxX1PgwD2mKeTsbDL3a4PEiFr4ya cO1pQ6I3gngAbudsGd1gWfIeK5gzh2d7Zy7MaW4Tk9oVInRANqJVgxthulvKdXmh DzDidB1gcNn0WZ2bPukAAb7ZdmqIEAJHTbEQgm8vEgQRFhAzQYsTNHw+DyOUpvt8 ZiyI706rd5B6LM4JSSyoFGAEpWO0vcUuUUU82Uu8bjIHMpC5LJyHd5aLwkGyjtNF dLnWpEwBA2ty0AwoVUoD099v4A== -----END CERTIFICATE-----Generated at Sun Sep 27 00:21:38 2026 by rpki-client