$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: QxKOlS/qQVjAQYmTMgCXaS8e1Tn9A+b33hrItevOi+g= Subject key identifier: FF:11:E2:E6:54:FE:BE:41:DF:0D:CA:86:F0:7C:C7:E9:73:24:7C:B5 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 3590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 358A Signing time: Mon 28 Sep 2026 15:08:15 +0000 Manifest this update: Mon 28 Sep 2026 15:08:14 +0000 Manifest next update: Mon 05 Oct 2026 15:08:14 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: JZ3ZMOLKJgZFcJpNyMtHYi4By90rsAvHW9ZxZOAzbyY=) 2: 83440A96A05E11F1BD16176B4411F970.roa (hash: ibRZc0F5qz64ffBnyZag/XiuPhH/eRAyOQPliiCWC9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 15:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Sep 28 15:08:14 2026 GMT Not After : Oct 5 15:08:14 2026 GMT Subject: CN=6aba82df-aa7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:63:af:b2:fc:38:64:5b:0a:c5:e2:e1:39: 20:b3:26:98:54:b5:e3:78:6f:4e:f4:58:ce:23:4d: 46:f9:c5:16:05:c9:bf:72:80:e1:e0:08:38:2a:bc: d2:92:91:02:a6:f3:bf:98:41:d0:54:ee:8f:25:12: d0:d0:c6:36:4d:55:11:35:3d:3c:23:3a:df:97:2f: 0f:bf:29:74:59:ca:27:86:bc:0c:b5:6d:5c:cb:1d: a2:6a:ea:b8:a0:8b:44:2b:90:4f:94:3d:9b:32:64: b3:98:36:8b:88:0c:22:53:f2:2c:ad:bf:8c:93:a5: e0:c3:f0:4c:39:0e:0b:a3:04:c8:10:71:ba:48:90: 4d:2a:6e:03:d1:e4:6b:1c:b3:a1:61:ea:bf:89:95: 2d:96:eb:25:6a:f7:69:4e:a9:fc:9f:f9:2f:a1:33: 8e:04:64:75:65:4e:6d:96:c5:0c:23:41:1a:a5:8d: b3:13:2b:11:ef:ea:a9:ca:18:8e:fa:58:1c:99:bb: d3:0b:18:e3:d1:0f:00:ea:76:85:b2:41:e7:d2:27: 6e:0d:92:c1:30:82:3c:73:1d:79:21:35:f0:2c:fc: 7f:d7:84:1d:2c:b6:02:21:f0:3b:92:40:68:f6:a0: a1:47:6b:66:d2:c3:b9:8c:97:a2:a2:83:6c:20:14: 2c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:11:E2:E6:54:FE:BE:41:DF:0D:CA:86:F0:7C:C7:E9:73:24:7C:B5 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:dc:3c:a4:64:c0:a9:08:eb:85:11:3d:eb:da:84:22:47:b8: 3d:2b:bb:1e:eb:0e:16:56:b9:e7:d7:42:4f:a3:6c:81:61:2d: d7:15:64:18:f1:e8:35:23:1f:14:4d:dd:30:88:9d:f8:c4:2e: 1f:33:9e:d1:6d:14:79:37:40:9c:c7:98:80:17:0a:d5:fa:ce: be:a2:b5:9d:71:af:95:e2:be:67:ef:36:4b:3a:ac:8f:c6:a1: 8b:25:cb:68:e8:da:ab:6d:10:e3:3e:bd:b7:c7:ed:95:52:72: 41:b0:8a:43:21:61:de:86:cd:96:80:41:1e:5e:a8:d2:e1:3b: 3c:06:a5:61:03:ea:98:28:33:f2:d5:3e:90:21:c8:b6:9d:75: f6:42:f3:99:10:01:b3:dc:70:e6:ec:0a:b7:69:b5:f9:a9:8c: 4a:c4:d2:7b:0c:3d:63:43:c2:d9:51:5a:de:a5:3f:c7:c8:52: c2:c8:34:0f:47:18:7a:6e:f1:54:33:e9:cf:ef:c6:22:10:6a: 7b:cf:41:8b:8e:5e:6c:c5:32:8a:c0:50:04:dc:91:e6:60:7f: 53:55:3e:ed:4d:b9:cf:b5:d4:c8:74:d2:26:5d:6d:b4:85:21: e5:6a:7f:03:43:d4:48:2d:5e:51:65:47:0b:61:1b:4d:27:b0: ae:ee:26:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjYwOTI4MTUwODE0WhcNMjYxMDA1MTUwODE0WjAYMRYwFAYD VQQDEw02YWJhODJkZi1hYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zxjr7L8OGRbCsXi4TkgsyaYVLXjeG9O9FjOI01G+cUWBcm/coDh4Ag4KrzS kpECpvO/mEHQVO6PJRLQ0MY2TVURNT08Izrfly8Pvyl0WconhrwMtW1cyx2iauq4 oItEK5BPlD2bMmSzmDaLiAwiU/Isrb+Mk6Xgw/BMOQ4LowTIEHG6SJBNKm4D0eRr HLOhYeq/iZUtluslavdpTqn8n/kvoTOOBGR1ZU5tlsUMI0EapY2zEysR7+qpyhiO +lgcmbvTCxjj0Q8A6naFskHn0iduDZLBMII8cx15ITXwLPx/14QdLLYCIfA7kkBo 9qChR2tm0sO5jJeiooNsIBQscwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8R4uZU /r5B3w3KhvB8x+lzJHy1MB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACdw8pGTAqQjrhRE969qEIke4PSu7HusOFla559dCT6NsgWEt1xVkGPHoNSMf FE3dMIid+MQuHzOe0W0UeTdAnMeYgBcK1frOvqK1nXGvleK+Z+82Szqsj8ahiyXL aOjaq20Q4z69t8ftlVJyQbCKQyFh3obNloBBHl6o0uE7PAalYQPqmCgz8tU+kCHI tp119kLzmRABs9xw5uwKt2m1+amMSsTSeww9Y0PC2VFa3qU/x8hSwsg0D0cYem7x VDPpz+/GIhBqe89Bi45ebMUyisBQBNyR5mB/U1U+7U25z7XUyHTSJl1ttIUh5Wp/ A0PUSC1eUWVHC2EbTSewru4mRA== -----END CERTIFICATE-----Generated at Tue Sep 29 17:36:35 2026 by rpki-client