$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: 4Opdsi7nCT2Pf0kKxYg4KcH+jVYvaPS1haXek9GrDPo= Subject key identifier: 2C:DE:5F:41:98:EC:30:CC:BC:2A:A0:CC:75:E6:28:D7:D3:E3:CF:93 Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: D9 Signing time: Thu 01 Oct 2026 08:00:08 +0000 Manifest this update: Thu 01 Oct 2026 08:00:07 +0000 Manifest next update: Thu 08 Oct 2026 08:00:07 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: 60NJ29jg4ABmxpjmHdodWAZ7Rd2pbTnOa55wowrbPJ4=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 08:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Oct 1 08:00:07 2026 GMT Not After : Oct 8 08:00:07 2026 GMT Subject: CN=6abe1308-34b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:07:1a:ee:0e:02:57:21:d4:2d:6f:7d:74:2e: b9:48:b7:27:69:7c:8e:aa:db:1e:54:14:ea:56:59: 04:86:9b:18:50:7e:40:a2:7c:5d:91:a8:a4:97:f8: 09:de:b0:90:a1:91:ab:fb:13:e3:e1:b2:12:52:e2: 83:3f:9c:11:bc:56:02:cc:f2:28:df:f5:da:03:a6: 16:4c:b1:ab:ee:38:b9:54:bd:0c:b1:d7:d9:53:c4: 42:ba:f4:3d:fb:a9:56:0a:6f:76:44:75:45:55:b0: b3:28:ed:16:71:ae:74:20:9f:74:51:54:b8:e7:2b: 32:eb:51:2f:5b:e5:dd:27:60:1b:90:20:b3:a3:d8: a7:6a:c7:2f:01:ba:5e:b0:0a:5d:66:3b:0d:33:55: 4c:e9:47:0c:3f:f6:ac:8e:c9:b4:00:b5:12:3d:8d: 1b:3d:c9:b2:9c:9d:29:8d:5c:d6:c1:1b:c8:aa:36: 3f:1f:b7:86:95:98:26:13:40:9a:7d:50:8d:ae:b5: ee:e2:54:cb:fd:d7:99:45:e9:10:44:11:81:22:dc: fe:a3:13:53:ce:50:15:25:ba:bd:4a:65:e5:53:12: c2:55:5e:12:0b:c3:68:68:92:75:08:28:24:8e:5f: 4e:24:84:3b:b1:18:9b:21:5d:25:30:c3:8e:44:60: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:5F:41:98:EC:30:CC:BC:2A:A0:CC:75:E6:28:D7:D3:E3:CF:93 X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b1:55:36:95:74:b4:e6:40:9b:c9:41:3c:e2:47:11:90:94: ce:93:d7:03:da:be:a2:67:cf:88:b9:07:91:a8:5c:4c:32:1f: 2e:06:8e:8b:34:60:a2:74:6e:d2:82:c2:b1:8e:7d:d4:8a:3e: ff:72:91:b0:c6:c2:36:d8:4a:a9:a3:f6:5e:89:2b:1d:70:95: 2a:5d:be:3b:a0:32:a1:ea:d2:de:43:19:82:dd:8b:bd:63:64: f3:17:90:a6:54:e8:5c:b1:9c:76:a5:16:c0:53:55:58:f4:fe: 3f:20:0b:e8:aa:18:90:64:57:3e:f9:44:41:51:58:b9:62:d9: c2:a8:14:d8:21:6d:ed:e4:54:0d:ae:96:58:87:91:cf:0a:c2: d0:25:0f:ea:10:a0:cb:6d:b1:73:0c:55:98:f3:f4:1b:d2:34: 64:ae:19:bf:b6:b2:ef:4d:2f:7b:f4:2c:cd:54:5c:cd:73:6f: f3:24:b7:f1:a5:d3:9d:ea:be:ff:e0:2a:60:97:f8:12:3b:df: 76:5e:24:4c:6d:16:ae:ff:20:bf:6d:5a:2d:d7:91:fd:57:df: b8:17:c1:96:71:8a:f5:37:e6:b2:c8:72:31:d3:02:61:8b:2a: 8c:37:e3:d9:bc:c0:e3:5c:2f:cf:16:34:21:94:b4:cd:d8:87: 37:36:58:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNTkxMTAvBgNVBAUTKDQ5N0JCNzI3MTgyNzlEQkNDOTg1REJBNkQzOUIzNjU2 N0Y0NEU3QUEwHhcNMjYxMDAxMDgwMDA3WhcNMjYxMDA4MDgwMDA3WjAYMRYwFAYD VQQDEw02YWJlMTMwOC0zNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gca7g4CVyHULW99dC65SLcnaXyOqtseVBTqVlkEhpsYUH5Aonxdkaikl/gJ 3rCQoZGr+xPj4bISUuKDP5wRvFYCzPIo3/XaA6YWTLGr7ji5VL0MsdfZU8RCuvQ9 +6lWCm92RHVFVbCzKO0Wca50IJ90UVS45ysy61EvW+XdJ2AbkCCzo9inascvAbpe sApdZjsNM1VM6UcMP/asjsm0ALUSPY0bPcmynJ0pjVzWwRvIqjY/H7eGlZgmE0Ca fVCNrrXu4lTL/deZRekQRBGBItz+oxNTzlAVJbq9SmXlUxLCVV4SC8NoaJJ1CCgk jl9OJIQ7sRibIV0lMMOORGCt0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzeX0GY 7DDMvCqgzHXmKNfT48+TMB8GA1UdIwQYMBaAFEl7tycYJ528yYXbptObNlZ/ROeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA1OS9CMkNFQTdGNjc5 RjYxMUYwOUNFOUMzMjhDNEY5QUUwMi9TWHUzSnhnbm5iekpoZHVtMDVzMlZuOUU1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA1OS9CMkNFQTdGNjc5RjYxMUYwOUNFOUMzMjhDNEY5QUUwMi9TWHUzSnhnbm5i ekpoZHVtMDVzMlZuOUU1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLFVNpV0tOZAm8lBPOJHEZCUzpPXA9q+omfPiLkHkahcTDIfLgaOizRgonRu 0oLCsY591Io+/3KRsMbCNthKqaP2XokrHXCVKl2+O6AyoerS3kMZgt2LvWNk8xeQ plToXLGcdqUWwFNVWPT+PyAL6KoYkGRXPvlEQVFYuWLZwqgU2CFt7eRUDa6WWIeR zwrC0CUP6hCgy22xcwxVmPP0G9I0ZK4Zv7ay700ve/QszVRczXNv8yS38aXTneq+ /+AqYJf4Ejvfdl4kTG0Wrv8gv21aLdeR/VffuBfBlnGK9TfmsshyMdMCYYsqjDfj 2bzA41wvzxY0IZS0zdiHNzZYeg== -----END CERTIFICATE-----Generated at Sat Oct 3 08:33:14 2026 by rpki-client