$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: om5HdBKubVPaZmkpM0iEJztHH0rdSySH4IWHQ1bmmu0= Subject key identifier: D4:00:4B:B4:2A:9B:17:3F:54:02:1C:3B:19:DD:43:13:C3:93:EB:5E Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 35A4 Signing time: Tue 22 Sep 2026 14:18:41 +0000 Manifest this update: Tue 22 Sep 2026 14:18:41 +0000 Manifest next update: Tue 29 Sep 2026 14:18:41 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: a8xHKp4Gl8lDWY5eAt7+CqckPWpuSPaNbdrOvjJeRbk=) 2: B683232C65AA11F1B5A6BBF27847A888.roa (hash: ui+fKkNRAL+b96meDYqRb3fMZ9lGNQU6S4pF6IMCEJk=) 3: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: x81djxirc4TZ7LBWsfaYDwm6dEqBh0TJcdGGB4pBfl8=) 4: vq-jzurJvf_iwUA5gBqdHUdT-X4.asa (hash: XT2XymHIFcxFswC+pceRikbJHvEukoNfqTDYHUrpUNA=) 5: 1F40296A65AA11F1A2780DB67847A888.roa (hash: aRlf2HNOEY9j5M9MXEWB2McO60V4ZIRW70DicGrMpWQ=) 6: FFF66C16B1FA11F18EC9E9F94D11F970.roa (hash: 31r/NUhfJc3wBY0fXa2FzBDhQtZ+BRBErxgF/gnko1I=) 7: 1566F532B1C111F1A50EDCAD3B11F970.roa (hash: nZ5rLJSZK3TF2d6vh1wECL/1VzHDHGkITXzUvm/ljz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13780 (0x35d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Sep 22 14:18:41 2026 GMT Not After : Sep 29 14:18:41 2026 GMT Subject: CN=6ab28e41-bd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:d3:c1:61:5b:af:6c:44:55:0e:4e:17:3e: d4:62:a8:39:da:76:25:37:be:b2:eb:53:b9:f8:a2: 23:26:e4:1b:da:b4:e8:46:84:d0:3a:64:15:18:6c: f8:55:9c:c5:1c:ff:cd:7b:02:77:53:b0:5f:da:3b: 93:39:49:aa:31:5c:46:0f:04:11:98:b0:ee:07:56: e9:87:34:ff:40:52:40:fa:63:43:cd:1a:3c:8f:b2: 7b:1d:59:0b:6f:7a:3f:36:c1:a9:68:e8:e7:4e:e9: f3:f9:b0:9b:53:c0:a3:6f:01:4a:2e:2c:f7:e2:6c: c1:40:b7:a5:b3:72:d2:66:39:2e:2c:18:31:47:28: b0:1d:69:d0:a4:fb:6a:11:b2:a3:d7:7a:95:af:bf: f7:74:9b:35:55:00:85:b6:fd:99:fa:08:95:fd:57: d9:30:d2:08:a0:5b:0f:67:0a:36:20:56:51:40:84: cc:50:46:7b:68:02:f8:92:51:bc:0f:5d:09:20:c1: 89:2c:32:07:40:0c:c5:16:66:66:f0:99:d4:f6:3f: 55:b2:24:bc:cf:17:9d:fc:6f:21:77:f8:b5:69:7c: fe:b4:46:3b:77:d1:06:4c:b0:e3:2e:c2:2d:0a:9e: a3:ff:87:77:96:ce:3b:87:79:c6:9e:7b:3e:e8:3e: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:00:4B:B4:2A:9B:17:3F:54:02:1C:3B:19:DD:43:13:C3:93:EB:5E X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:27:31:82:59:0f:75:e0:f6:83:ad:16:8a:61:10:fa:75:8d: 93:e9:ce:68:bf:c7:8e:85:1d:7c:86:ef:1c:9c:a7:9d:cb:91: 83:e8:fd:84:97:85:d0:e1:39:07:20:56:b5:60:74:b8:48:79: a6:36:a2:a4:4b:6c:4f:cf:2a:96:f4:6b:da:8f:56:c0:3d:94: d3:60:3b:42:be:50:b6:0b:ee:b5:60:07:ec:ed:71:53:f4:93: 40:65:04:97:ed:77:ee:72:50:e6:07:b0:1a:40:a1:5c:ff:ce: a1:3b:4c:07:de:ca:be:8e:6b:53:fc:86:ad:12:17:6e:90:45: 5f:da:3c:2e:16:12:52:5e:dd:f8:10:b8:88:a5:7d:fb:83:dd: cb:3d:28:ed:0c:60:94:96:ba:71:a0:ec:4c:1f:2a:6c:ed:09: db:ce:41:c6:bb:60:73:58:5a:ff:a2:89:90:10:84:b1:43:ec: e1:79:7c:34:d4:12:57:39:29:d4:b7:96:95:35:e3:81:b1:04: d2:74:af:65:8e:20:dd:d4:36:65:3a:78:c3:82:9e:f7:08:13: 58:d4:51:17:ba:d4:f3:c8:14:c8:0b:11:68:07:3a:3b:e1:eb: 9f:e3:74:e7:a5:5b:41:cb:bf:11:49:b6:7f:0f:f6:e1:a7:62: 31:c0:8b:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwOTIyMTQxODQxWhcNMjYwOTI5MTQxODQxWjAYMRYwFAYD VQQDEw02YWIyOGU0MS1iZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIPTwWFbr2xEVQ5OFz7UYqg52nYlN76y61O5+KIjJuQb2rToRoTQOmQVGGz4 VZzFHP/NewJ3U7Bf2juTOUmqMVxGDwQRmLDuB1bphzT/QFJA+mNDzRo8j7J7HVkL b3o/NsGpaOjnTunz+bCbU8CjbwFKLiz34mzBQLels3LSZjkuLBgxRyiwHWnQpPtq EbKj13qVr7/3dJs1VQCFtv2Z+giV/VfZMNIIoFsPZwo2IFZRQITMUEZ7aAL4klG8 D10JIMGJLDIHQAzFFmZm8JnU9j9VsiS8zxed/G8hd/i1aXz+tEY7d9EGTLDjLsIt Cp6j/4d3ls47h3nGnns+6D5DCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQAS7Qq mxc/VAIcOxndQxPDk+teMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqCcxglkPdeD2g60WimEQ+nWNk+nOaL/HjoUdfIbvHJynncuRg+j9hJeF0OE5 ByBWtWB0uEh5pjaipEtsT88qlvRr2o9WwD2U02A7Qr5QtgvutWAH7O1xU/STQGUE l+137nJQ5gewGkChXP/OoTtMB97Kvo5rU/yGrRIXbpBFX9o8LhYSUl7d+BC4iKV9 +4Pdyz0o7QxglJa6caDsTB8qbO0J285Bxrtgc1ha/6KJkBCEsUPs4Xl8NNQSVzkp 1LeWlTXjgbEE0nSvZY4g3dQ2ZTp4w4Ke9wgTWNRRF7rU88gUyAsRaAc6O+Hrn+N0 56VbQcu/EUm2fw/24adiMcCL9w== -----END CERTIFICATE-----Generated at Wed Sep 23 00:26:29 2026 by rpki-client