$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft File: X8FhrArBnYiSpuQmdvsPqdTO2yw.mft (raw, json) Hash identifier: 68kHypsJrRzBjOZehaelyOWXZhSq3xYuu3Zex8UIZQc= Subject key identifier: 5A:46:19:AE:BA:49:F7:85:B7:28:69:CC:B9:55:A3:EC:86:E3:41:5D Authority key identifier: 5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C Certificate issuer: /CN=A912A45D/serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft Manifest number: 30 Signing time: Mon 21 Sep 2026 08:45:36 +0000 Manifest this update: Mon 21 Sep 2026 08:45:36 +0000 Manifest next update: Mon 28 Sep 2026 08:45:36 +0000 Files and hashes: 1: X8FhrArBnYiSpuQmdvsPqdTO2yw.crl (hash: gWQ+Y+x0ulspTIhS/tmp23RvkH7rN8vIHust5rSmI1k=) 2: A55B56FC812311F1A313CCFA74A30FBC.roa (hash: CgCaAsuhKr/vo6vaRhDPC36Dwd42AzMK9hLer8QqUaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A45D, serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C Validity Not Before: Sep 21 08:45:36 2026 GMT Not After : Sep 28 08:45:36 2026 GMT Subject: CN=6ab0eeb0-d7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:e6:56:53:2c:d3:fa:a7:e6:00:34:59:9c: 98:09:f6:64:ab:26:e6:bb:01:2a:58:1b:f0:45:42: 8f:b8:8e:f2:56:ae:29:c0:6b:17:40:ff:ee:06:42: b6:e0:82:4f:1e:b5:f1:8e:e6:f5:2e:88:ee:52:65: 2f:02:5e:02:f9:48:29:13:ee:76:a3:88:05:62:92: 13:65:ca:7d:a0:c7:6b:dc:be:a8:4d:7b:3a:d4:c9: d3:71:bd:e1:aa:b2:8a:ac:47:0e:49:96:d9:18:a5: c6:9e:26:3d:ec:42:07:d9:d9:e8:3b:76:ca:50:b3: ef:23:b6:df:0d:2c:ac:09:c3:63:c2:6b:a5:b0:59: 63:96:f6:d9:9e:71:b5:a7:20:00:ce:98:45:5e:bf: 07:a8:65:0d:5b:07:73:72:46:b0:5a:39:22:9d:d1: 98:05:a0:4c:fe:1b:e5:5f:b8:44:7b:c8:f3:92:11: 40:c0:55:cb:0a:c2:85:b6:14:88:32:cd:97:b7:81: c9:36:03:b6:1f:2a:9d:63:69:c4:21:70:6c:54:38: 72:ac:f8:2a:97:01:93:50:cd:31:f6:f3:d7:23:1a: 01:37:8e:92:c4:a9:e1:db:10:23:cd:2f:76:73:7a: 85:15:b7:57:fb:d7:05:de:c6:cf:18:65:d1:b7:21: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:19:AE:BA:49:F7:85:B7:28:69:CC:B9:55:A3:EC:86:E3:41:5D X509v3 Authority Key Identifier: keyid:5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e4:94:a5:fb:02:e1:fe:6c:b1:20:fb:45:c8:97:6b:e6:1e: a6:15:66:ed:87:85:e0:1e:29:96:57:42:57:4f:e3:79:4a:55: 15:b6:8e:8f:2d:d9:86:06:8d:55:c2:7a:f6:11:75:96:1f:24: 43:dd:04:ae:9d:b7:2e:32:f7:a5:7d:67:4e:ae:f6:4b:4c:cd: a3:0b:7d:b8:de:4b:e8:69:37:f6:b6:47:a3:38:e8:ef:15:f0: f0:d8:c4:be:1e:4c:1c:c7:32:95:9e:f6:3f:3d:0e:5e:91:bf: f9:2e:ab:0f:e0:59:ca:3c:d4:ad:ef:0f:c2:5f:f6:9f:e7:98: d4:ff:57:34:41:af:8e:48:a1:b7:68:28:b7:2b:71:8c:bf:c8: 53:b5:a0:16:14:43:4a:3e:84:e8:00:45:e5:2b:b6:6c:bc:76: 29:14:1c:f7:f3:18:11:63:14:16:7b:7f:83:0f:67:a9:a9:54: 29:7b:c1:c9:40:e5:bc:f2:eb:09:82:f7:e5:0c:65:41:dd:bb: 9e:96:15:6b:a4:81:e0:ba:f9:5c:cb:c3:3a:0b:54:61:29:16: e0:6c:3c:75:4a:ec:b0:e7:7e:78:bd:1c:2b:ed:b8:04:4a:14: f7:fc:e3:f8:c9:38:4d:20:6a:9b:3e:49:11:d9:e2:0f:5b:f9: c7:2d:c7:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTQ1RDExMC8GA1UEBRMoNUZDMTYxQUMwQUMxOUQ4ODkyQTZFNDI2NzZGQjBGQTlE NENFREIyQzAeFw0yNjA5MjEwODQ1MzZaFw0yNjA5MjgwODQ1MzZaMBgxFjAUBgNV BAMTDTZhYjBlZWIwLWQ3YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOmOZWUyzT+qfmADRZnJgJ9mSrJua7ASpYG/BFQo+4jvJWrinAaxdA/+4GQrbg gk8etfGO5vUuiO5SZS8CXgL5SCkT7najiAVikhNlyn2gx2vcvqhNezrUydNxveGq soqsRw5JltkYpcaeJj3sQgfZ2eg7dspQs+8jtt8NLKwJw2PCa6WwWWOW9tmecbWn IADOmEVevweoZQ1bB3NyRrBaOSKd0ZgFoEz+G+VfuER7yPOSEUDAVcsKwoW2FIgy zZe3gck2A7YfKp1jacQhcGxUOHKs+CqXAZNQzTH289cjGgE3jpLEqeHbECPNL3Zz eoUVt1f71wXexs8YZdG3IV+PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWkYZrrpJ 94W3KGnMuVWj7IbjQV0wHwYDVR0jBBgwFoAUX8FhrArBnYiSpuQmdvsPqdTO2yww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNDVELzc2NTI4QjA2N0I5 QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllpU3B1UW1kdnNQcWRUTzJ5 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWDhGaHJBckJuWWlTcHVRbWR2c1BxZFRPMnl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NDVELzc2NTI4QjA2N0I5QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllp U3B1UW1kdnNQcWRUTzJ5dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAS5JSl+wLh/myxIPtFyJdr5h6mFWbth4XgHimWV0JXT+N5SlUVto6PLdmGBo1V wnr2EXWWHyRD3QSunbcuMvelfWdOrvZLTM2jC3243kvoaTf2tkejOOjvFfDw2MS+ HkwcxzKVnvY/PQ5ekb/5LqsP4FnKPNSt7w/CX/af55jU/1c0Qa+OSKG3aCi3K3GM v8hTtaAWFENKPoToAEXlK7ZsvHYpFBz38xgRYxQWe3+DD2epqVQpe8HJQOW88usJ gvflDGVB3buelhVrpIHguvlcy8M6C1RhKRbgbDx1Suyw5354vRwr7bgEShT3/OP4 yThNIGqbPkkR2eIPW/nHLcef -----END CERTIFICATE-----Generated at Tue Sep 22 14:01:19 2026 by rpki-client