$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: Hhd+XcQoGNWO/DfljUrJ73fWRr3msxmaRgyz3mAvvlg= Subject key identifier: 77:0F:C4:9B:BE:7C:00:38:FC:5F:0C:29:29:49:42:71:E9:9E:14:CA Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 02A3 Signing time: Fri 09 Oct 2026 02:10:12 +0000 Manifest this update: Fri 09 Oct 2026 02:10:11 +0000 Manifest next update: Fri 16 Oct 2026 02:10:11 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: 31JhIMO0uGFYCnR2Yppbp82vtxpEj9MupImeag4EtOc=) 2: B2DDF724B8FC11F1A8F661794011F970.roa (hash: ic1OJEHCSeM+RtMU+p3P86VGV/YehpNvpr9sRvOWDpY=) 3: F8D9DD88B8FC11F1BF1A80ED4011F970.roa (hash: H0FKlshXl0D4srmT01cH307SR+SUUWcxlZRuNMPuvp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: Oct 9 02:10:11 2026 GMT Not After : Oct 16 02:10:11 2026 GMT Subject: CN=6ac84d04-2d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6b:be:7f:df:20:f3:b0:0d:f3:43:af:44:83: 9a:6a:de:52:3a:fa:71:dd:fe:e7:59:29:d1:5e:56: 54:43:d8:2e:ac:51:25:0a:37:3b:1f:9c:fa:4d:f4: b8:54:b4:e6:2d:28:ba:9e:73:43:c6:15:59:95:d4: 88:b3:8c:40:a7:d5:32:69:2e:ca:b1:0d:c4:f5:a9: 93:5c:29:69:4d:1b:76:40:2b:df:b8:0e:71:b6:73: 77:76:2f:02:bb:79:02:ba:4c:4d:f5:ef:9e:67:96: a6:90:c4:69:45:9b:84:e2:fc:e6:c1:3c:cc:9e:f1: b5:c2:4c:35:56:fd:f0:c0:96:0e:f0:b6:ad:d6:f1: d5:e7:2b:bd:7b:5f:32:88:3e:c7:ef:49:d2:f7:48: d5:ce:9a:95:8e:e6:17:c9:67:7c:45:51:50:98:41: 05:bd:cf:15:17:ba:22:91:00:ee:c8:1d:06:42:57: 17:09:d8:c3:bc:5b:6c:ac:1d:ff:67:68:e3:cb:e8: 00:a4:a1:27:fd:e6:ba:10:20:3c:f7:16:97:6f:ef: f6:f9:6c:53:ff:eb:83:fb:e9:ca:e7:e2:47:37:b5: 9a:7c:b2:cb:97:10:2b:ff:c0:de:92:23:37:2e:5b: f4:52:bd:51:89:8e:a3:9f:34:31:85:fc:e3:f9:e4: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0F:C4:9B:BE:7C:00:38:FC:5F:0C:29:29:49:42:71:E9:9E:14:CA X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f0:d4:91:aa:ff:d6:f3:17:22:c0:91:a2:2a:73:71:6f:ab: aa:4b:00:a4:b8:39:27:2f:d3:e0:0f:c0:83:87:c4:44:2f:0f: 62:07:6d:3f:f7:b0:08:85:70:c2:d1:cc:68:14:8e:6b:e8:be: 12:d3:34:84:53:38:74:a4:9b:04:f1:0c:2c:db:ba:5d:d7:e3: dc:38:2b:cb:7a:ae:40:38:cd:95:5c:d2:16:1c:2d:5c:e7:c6: d5:49:58:06:9b:dc:94:b0:c3:66:2b:4b:57:0f:67:46:48:7c: 25:04:be:3a:3b:11:29:cc:30:a5:63:6c:87:49:0e:b1:88:e0: 84:3d:f6:b4:9d:91:4e:ff:56:81:b8:41:6f:f1:e1:73:3a:36: 16:a9:75:06:0f:d6:bf:58:47:b4:94:3b:f3:ed:37:44:da:46: 53:43:2a:8a:3d:c6:0a:34:d4:c0:e9:49:97:0b:5d:2e:2a:83: af:fa:3c:f6:4f:b3:eb:57:22:ab:cc:74:b0:1f:a4:53:b0:1d: fd:d0:31:f3:27:92:6e:ca:4b:9a:48:85:ff:61:55:c9:5c:d5: 58:0d:ea:db:54:18:a1:65:18:86:e3:ee:2e:82:94:14:d2:bc: 8d:d1:91:49:45:b1:42:fd:e1:6c:cd:4c:02:4f:53:43:30:91: b5:d0:46:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjYxMDA5MDIxMDExWhcNMjYxMDE2MDIxMDExWjAYMRYwFAYD VQQDEw02YWM4NGQwNC0yZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52u+f98g87AN80OvRIOaat5SOvpx3f7nWSnRXlZUQ9gurFElCjc7H5z6TfS4 VLTmLSi6nnNDxhVZldSIs4xAp9UyaS7KsQ3E9amTXClpTRt2QCvfuA5xtnN3di8C u3kCukxN9e+eZ5amkMRpRZuE4vzmwTzMnvG1wkw1Vv3wwJYO8Lat1vHV5yu9e18y iD7H70nS90jVzpqVjuYXyWd8RVFQmEEFvc8VF7oikQDuyB0GQlcXCdjDvFtsrB3/ Z2jjy+gApKEn/ea6ECA89xaXb+/2+WxT/+uD++nK5+JHN7WafLLLlxAr/8DekiM3 Llv0Ur1RiY6jnzQxhfzj+eQxzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcPxJu+ fAA4/F8MKSlJQnHpnhTKMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOfDUkar/1vMXIsCRoipzcW+rqksApLg5Jy/T4A/Ag4fERC8PYgdtP/ewCIVw wtHMaBSOa+i+EtM0hFM4dKSbBPEMLNu6Xdfj3Dgry3quQDjNlVzSFhwtXOfG1UlY BpvclLDDZitLVw9nRkh8JQS+OjsRKcwwpWNsh0kOsYjghD32tJ2RTv9WgbhBb/Hh czo2Fql1Bg/Wv1hHtJQ78+03RNpGU0Mqij3GCjTUwOlJlwtdLiqDr/o89k+z61ci q8x0sB+kU7Ad/dAx8yeSbspLmkiF/2FVyVzVWA3q21QYoWUYhuPuLoKUFNK8jdGR SUWxQv3hbM1MAk9TQzCRtdBGGw== -----END CERTIFICATE-----Generated at Sat Oct 10 17:32:14 2026 by rpki-client