$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: iZZIHsqY0DQlphSJfOEaWHLdMeFXQ3Qu9XN4oeqX60w= Subject key identifier: 8D:32:CF:51:27:48:54:8E:EE:D5:52:CA:8E:41:0E:4D:49:98:FE:CE Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 08B1 Signing time: Sat 26 Sep 2026 20:39:52 +0000 Manifest this update: Sat 26 Sep 2026 20:39:52 +0000 Manifest next update: Sat 03 Oct 2026 20:39:52 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: Fg1bAFhiomLqRXThOM1kiE1YttTAwAdnnvQtkYyNcgs=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: 5rrOVTWhZFhPeg37xthqwcVuXMjL6vt+NLzRbtYbxNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Sep 26 20:39:52 2026 GMT Not After : Oct 3 20:39:52 2026 GMT Subject: CN=6ab82d98-3474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e8:7b:f4:8c:be:84:64:50:bf:09:3b:23:21: 69:22:17:d9:d6:fd:fd:d7:31:17:e4:c2:9d:19:50: 6e:68:3f:42:3c:b7:75:ef:4d:d7:c5:b4:27:32:eb: 1e:c3:70:18:77:ea:6c:c5:24:91:ae:65:fd:11:1e: 67:41:72:b4:d2:b6:21:1d:87:63:65:f2:ad:4b:a3: 84:76:1f:60:32:cc:06:10:43:5d:6f:99:e1:6e:ae: 17:c3:a5:52:60:5a:c3:e1:a7:23:6b:40:b5:84:a4: 82:3b:5b:d0:1e:1d:c8:14:f6:37:ac:25:9d:ed:96: 1a:18:71:c1:49:32:80:0d:0d:aa:08:fc:ef:65:02: eb:e3:db:22:87:b9:3a:63:da:d6:f6:ac:d4:c6:91: 58:52:fe:d9:d0:ce:27:61:9d:70:38:2c:13:7b:3f: 18:76:4c:e3:d7:97:c9:74:e4:84:65:13:2f:f7:38: 5b:5d:05:d1:b4:2b:82:83:f6:c4:fb:51:c1:09:ae: 04:c5:ae:48:27:e1:52:af:c8:21:3d:20:40:fe:d5: aa:be:ba:51:7a:3e:3d:3c:a9:4b:92:2f:9f:db:53: c6:6e:3f:28:7c:42:9b:9f:11:68:a2:fc:e2:a3:96: a5:2a:1a:dd:c6:28:8f:78:d6:32:30:13:7f:b0:ea: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:32:CF:51:27:48:54:8E:EE:D5:52:CA:8E:41:0E:4D:49:98:FE:CE X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d8:b5:93:c2:c3:68:16:0d:a4:ad:77:70:8b:50:64:d2:13: f9:98:27:68:07:1e:d6:a0:2e:53:f6:b9:1a:8f:da:47:df:08: 30:3c:fc:b0:51:f7:35:91:9c:5b:bb:c5:2d:03:6a:ce:58:27: 78:d6:38:d6:3c:e2:9a:61:cb:bc:a1:d1:45:da:b4:6c:e7:9b: 9e:82:4f:b7:3f:61:08:0f:1f:4c:e9:ba:d7:cd:c9:27:ec:f7: a7:de:f9:2e:c3:4f:5b:83:c0:e1:b4:fc:66:d8:56:03:8f:35: 42:cb:ab:5f:05:40:5e:3c:0b:76:13:cb:57:cc:52:bd:b0:1a: ae:2a:3d:24:14:7b:8d:ca:11:20:c9:26:c0:a7:77:cc:4d:8b: 0b:9d:47:b7:b7:55:02:8f:96:5c:22:d9:a3:9a:20:3f:0d:44: 1f:bb:4b:d0:16:91:5b:3b:b0:cd:89:11:08:b9:d2:cd:e3:6b: 3c:56:29:63:22:7f:15:f1:d6:e3:f2:62:f3:c8:0e:f3:15:14: bf:c7:e0:3e:0c:a8:dd:1c:73:e9:a6:28:b6:ca:d1:b2:98:38: 4d:c6:e7:4b:33:34:8b:8b:8d:3a:79:82:05:d6:a2:2b:98:b7: ac:0a:32:cd:f1:49:d6:83:71:ee:a2:bc:b1:95:2f:bc:53:46: 25:6b:04:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjYwOTI2MjAzOTUyWhcNMjYxMDAzMjAzOTUyWjAYMRYwFAYD VQQDEw02YWI4MmQ5OC0zNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Oh79Iy+hGRQvwk7IyFpIhfZ1v391zEX5MKdGVBuaD9CPLd1703XxbQnMuse w3AYd+psxSSRrmX9ER5nQXK00rYhHYdjZfKtS6OEdh9gMswGEENdb5nhbq4Xw6VS YFrD4acja0C1hKSCO1vQHh3IFPY3rCWd7ZYaGHHBSTKADQ2qCPzvZQLr49sih7k6 Y9rW9qzUxpFYUv7Z0M4nYZ1wOCwTez8Ydkzj15fJdOSEZRMv9zhbXQXRtCuCg/bE +1HBCa4Exa5IJ+FSr8ghPSBA/tWqvrpRej49PKlLki+f21PGbj8ofEKbnxFoovzi o5alKhrdxiiPeNYyMBN/sOoOIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0yz1En SFSO7tVSyo5BDk1JmP7OMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO9i1k8LDaBYNpK13cItQZNIT+ZgnaAce1qAuU/a5Go/aR98IMDz8sFH3NZGc W7vFLQNqzlgneNY41jzimmHLvKHRRdq0bOebnoJPtz9hCA8fTOm6183JJ+z3p975 LsNPW4PA4bT8ZthWA481QsurXwVAXjwLdhPLV8xSvbAario9JBR7jcoRIMkmwKd3 zE2LC51Ht7dVAo+WXCLZo5ogPw1EH7tL0BaRWzuwzYkRCLnSzeNrPFYpYyJ/FfHW 4/Ji88gO8xUUv8fgPgyo3Rxz6aYotsrRspg4TcbnSzM0i4uNOnmCBdaiK5i3rAoy zfFJ1oNx7qK8sZUvvFNGJWsEEA== -----END CERTIFICATE-----Generated at Mon Sep 28 22:32:59 2026 by rpki-client