$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: 5k/JwbFfRiX6zREAH6OQkEnraMsGPUqzb7lACnos2Tc= Subject key identifier: 6B:B2:81:F1:6C:23:E5:73:AC:E9:EA:50:D0:37:A7:5E:C2:DD:48:24 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 0956 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 1944 Signing time: Sun 20 Sep 2026 17:25:43 +0000 Manifest this update: Sun 20 Sep 2026 17:25:42 +0000 Manifest next update: Sun 27 Sep 2026 17:25:42 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: DLwWDSr70XGTlOu6Vt3wpc+SIroP9/vK82BXiU4c9PQ=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: EK9kVyzeiWqOhwcTpeNVZN6VNsEzUxGtWn7Dne/n1iA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2390 (0x956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: Sep 20 17:25:42 2026 GMT Not After : Sep 27 17:25:42 2026 GMT Subject: CN=6ab01717-4c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:52:1b:80:55:60:f2:9b:0a:70:12:07:d1:04: b6:a9:3d:8f:3d:92:88:0a:a9:fe:9e:43:ef:64:73: e6:d8:8d:94:d4:16:c3:2c:c3:01:c1:29:9b:33:de: f8:f3:7f:58:79:25:af:4c:2a:1a:c6:db:ad:8b:09: b5:9a:68:8a:3d:ee:c2:89:fb:47:5d:72:81:b3:fa: 96:aa:be:a8:18:e0:17:66:cf:69:09:76:22:12:14: ed:da:48:ee:ab:9f:a6:44:ec:9e:fc:36:bc:bb:e4: 5c:b9:d4:a9:0e:90:53:97:cf:82:e4:3b:21:9f:ff: e3:87:b6:3a:b9:33:9b:79:2f:01:70:7f:13:e0:e5: c3:b7:b3:65:eb:9b:89:b3:39:8b:37:bb:bc:7d:29: 2d:d0:47:34:73:da:f2:23:89:27:62:37:d5:61:bf: d5:e9:2d:38:c3:59:b6:08:91:99:9a:36:c0:13:9c: 80:12:c0:c9:49:b5:03:75:44:3f:84:ca:14:65:ec: e3:b9:a1:9e:42:a6:dc:03:2e:a7:71:d8:46:40:57: 60:67:e0:55:fa:6a:6f:7e:34:36:0c:7c:d9:68:3c: cf:a9:b6:87:bc:1e:ec:02:0e:e8:cd:40:90:7d:bf: d6:50:7d:fd:28:b6:8b:7c:99:ba:1a:10:35:1e:4e: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:81:F1:6C:23:E5:73:AC:E9:EA:50:D0:37:A7:5E:C2:DD:48:24 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:95:0e:f0:ff:27:33:49:9a:46:d1:91:a5:3c:d8:a7:9a:18: 01:54:8b:2d:bc:c8:a1:d9:b5:59:34:30:ad:b1:2a:9a:ca:4e: 24:b4:f6:9d:7b:09:e4:41:4d:eb:86:4a:f3:c1:4f:84:c1:17: bc:45:3c:17:e6:a8:ba:c4:af:64:58:2a:20:36:b3:c6:c3:d9: 30:76:85:bb:5c:9b:ef:21:37:92:53:b6:d8:11:41:6c:2b:2f: ac:13:57:1b:da:06:d1:0d:31:df:95:ba:46:7c:7b:74:80:2d: d4:cf:f0:d3:9b:fa:b1:8c:49:e3:57:45:23:6a:60:db:39:c1: c0:8f:ca:a3:8a:06:93:9b:e9:3e:90:41:d4:ec:6e:30:d6:75: 17:92:20:88:c9:6f:d2:db:27:a7:a7:ea:ed:e6:a6:91:76:ef: 4e:6b:c1:54:e9:14:e2:14:d9:d5:58:4e:b9:4d:4a:0b:35:f4: 4a:7c:2c:87:be:b0:35:03:23:e7:e6:a7:66:68:c2:94:eb:fc: 61:b3:d5:f4:6c:30:7a:f1:26:e5:fc:16:7c:e5:21:14:9e:f4: 0e:60:0e:c8:cf:c0:a4:3a:36:ad:7b:39:41:34:c6:0a:27:98: a3:af:06:2f:08:f8:cc:8c:a9:64:6b:3b:05:1d:08:dc:7e:36: 86:c6:87:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjYwOTIwMTcyNTQyWhcNMjYwOTI3MTcyNTQyWjAYMRYwFAYD VQQDEw02YWIwMTcxNy00YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VIbgFVg8psKcBIH0QS2qT2PPZKICqn+nkPvZHPm2I2U1BbDLMMBwSmbM974 839YeSWvTCoaxtutiwm1mmiKPe7CiftHXXKBs/qWqr6oGOAXZs9pCXYiEhTt2kju q5+mROye/Da8u+RcudSpDpBTl8+C5Dshn//jh7Y6uTObeS8BcH8T4OXDt7Nl65uJ szmLN7u8fSkt0Ec0c9ryI4knYjfVYb/V6S04w1m2CJGZmjbAE5yAEsDJSbUDdUQ/ hMoUZezjuaGeQqbcAy6ncdhGQFdgZ+BV+mpvfjQ2DHzZaDzPqbaHvB7sAg7ozUCQ fb/WUH39KLaLfJm6GhA1Hk5x3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuygfFs I+VzrOnqUNA3p17C3UgkMB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbpUO8P8nM0maRtGRpTzYp5oYAVSLLbzIodm1WTQwrbEqmspOJLT2nXsJ5EFN 64ZK88FPhMEXvEU8F+aousSvZFgqIDazxsPZMHaFu1yb7yE3klO22BFBbCsvrBNX G9oG0Q0x35W6Rnx7dIAt1M/w05v6sYxJ41dFI2pg2znBwI/Ko4oGk5vpPpBB1Oxu MNZ1F5IgiMlv0tsnp6fq7eamkXbvTmvBVOkU4hTZ1VhOuU1KCzX0Snwsh76wNQMj 5+anZmjClOv8YbPV9GwwevEm5fwWfOUhFJ70DmAOyM/ApDo2rXs5QTTGCieYo68G Lwj4zIypZGs7BR0I3H42hsaHqA== -----END CERTIFICATE-----Generated at Tue Sep 22 17:38:16 2026 by rpki-client