$ rpki-client -vvvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: VQ3RUJawXfVaMol//yF9Jjx3KtdM97LH0vFantudTw0= Subject key identifier: 37:D0:5D:DA:1D:91:A6:ED:30:9C:09:02:D1:35:2A:3D:88:19:B3:FD Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7E9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 492C Signing time: Sun 20 Sep 2026 16:52:15 +0000 Manifest this update: Sun 20 Sep 2026 16:52:14 +0000 Manifest next update: Sun 27 Sep 2026 16:52:14 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: 7ahU2SQptE6yN8G1JKzexDvLSYEeZoAn3HUlbxH2a7E=) 2: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: BQdV6ndcECrItHdc1IEW8WyLJSqfh/iCl7ffuQz9nnQ=) 3: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: 9nTKPawfGHtPhjNOmWn8l90W8nDxOehnoaoOT9irCWw=) 4: 2DE2AC2669E311F18E29D967A047A888.roa (hash: y0np8i3XvwHRXGyvtfQ1quYALwf4BO+BBv/DSGvYscU=) 5: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: VBI4G1ovmwOYXsiKsWVJkf1feKjFHnDDeRgP+rbu+5k=) 6: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: EARXDyWWNkzvluDdghdjO0DJ2CbqIZ55pIns0B024Rg=) 7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: /V12Eqf620PvsHyjHjC7SsTrYWKzvxlGrdEZ3jISFaE=) 8: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: 1NJm7ZOzu65GXUg/3DBxh7cNb5VPBWgXao2O9h+yjbY=) 9: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: cSJqj5g48JTcjBcGFsAbqitb62jbctH5OWGGZ2nY5TY=) 10: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: qG1F9oSfTBN5NOm4LXLgIPHtejfdqzXmcuKvzt+5uSQ=) 11: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: GCPP3Zkeb88CMAM4ecp19R2oGr0s67YLKK0lItldtcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32410 (0x7e9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Sep 20 16:52:14 2026 GMT Not After : Sep 27 16:52:14 2026 GMT Subject: CN=6ab00f3e-1aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:06:9b:f7:f0:d2:37:95:f0:7d:21:01:fb: 83:92:ba:37:28:e8:02:42:b0:48:9f:53:b6:45:49: 18:a3:4a:da:12:a7:e0:9a:17:9b:fe:38:23:66:9f: 61:cd:df:3b:a7:07:02:af:30:bd:e3:74:ba:95:53: 87:cd:81:78:97:27:48:73:f7:35:29:f9:f0:72:fd: 1e:2a:21:f8:df:c2:62:3e:9c:c4:35:8a:25:6e:69: 7b:55:6a:7d:0d:fb:26:2e:e6:6f:c2:4a:79:46:8a: f7:53:21:8a:9e:fd:0b:1e:27:f6:00:55:91:94:68: a8:ef:f6:38:55:13:77:35:1f:52:f7:c7:7b:63:38: 24:ba:6b:53:f3:9d:7f:cc:dd:ac:85:3d:23:e7:d9: 2e:01:56:57:1f:ff:7d:54:62:99:d5:d5:9c:53:7a: 26:ed:4e:e3:c0:be:40:b9:7e:2a:d3:ec:55:4b:0a: db:28:7b:ee:a7:56:c5:3d:90:ea:63:f9:61:13:61: af:0d:7d:99:d1:fd:f1:b1:dc:9b:b1:91:78:7a:90: 1a:19:3c:7b:da:98:86:27:5c:e9:28:13:32:86:ba: db:29:3f:3c:32:c0:3c:b9:dd:01:ce:f4:bf:0a:24: 40:d7:16:14:87:b2:99:bb:03:c1:76:a6:8e:43:88: bc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:5D:DA:1D:91:A6:ED:30:9C:09:02:D1:35:2A:3D:88:19:B3:FD X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:b1:57:a6:f4:2f:da:30:e7:c5:2b:47:e1:cc:7a:41:3e:d9: 84:e2:57:89:45:3c:18:d8:8b:a7:0a:85:23:44:c2:54:15:34: 39:2c:82:d2:2b:d8:ec:ca:34:93:13:a7:5e:47:6a:c8:ba:df: 65:22:de:65:ee:d8:8e:75:b7:39:e9:74:d1:54:ec:e1:ea:ba: 2b:77:64:90:15:57:44:94:b2:22:09:26:16:00:63:ac:73:90: 60:80:69:a6:bd:16:47:87:fc:ee:e2:a5:60:4e:8c:f2:f5:d4: 6d:89:d1:a5:f9:58:08:ba:7d:4f:ad:d2:f0:a6:6d:38:43:60: 25:53:ba:a1:26:c6:48:b2:dd:be:55:1b:b0:53:1a:19:e0:e7: e8:e7:b3:f2:cc:39:11:92:13:48:96:72:99:a7:fa:03:d7:f6: 7e:bf:ac:6d:da:6d:ae:f7:66:2b:b4:1a:26:03:8f:87:78:8a: 69:54:88:d7:66:01:26:9e:9d:e7:ea:ec:e5:3f:be:e6:bb:2c: 79:3d:c9:f2:b6:70:06:26:28:39:db:72:62:6a:d2:e1:5a:d4: 13:ca:87:ee:fa:99:e0:36:69:e1:45:24:e3:8c:7a:73:8d:d9: 74:6c:01:1e:11:b0:08:3f:c1:cc:8e:6c:bf:51:b0:9a:7e:38: 2e:20:69:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICfpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjYwOTIwMTY1MjE0WhcNMjYwOTI3MTY1MjE0WjAYMRYwFAYD VQQDEw02YWIwMGYzZS0xYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TAGm/fw0jeV8H0hAfuDkro3KOgCQrBIn1O2RUkYo0raEqfgmheb/jgjZp9h zd87pwcCrzC943S6lVOHzYF4lydIc/c1Kfnwcv0eKiH438JiPpzENYolbml7VWp9 DfsmLuZvwkp5Ror3UyGKnv0LHif2AFWRlGio7/Y4VRN3NR9S98d7YzgkumtT851/ zN2shT0j59kuAVZXH/99VGKZ1dWcU3om7U7jwL5AuX4q0+xVSwrbKHvup1bFPZDq Y/lhE2GvDX2Z0f3xsdybsZF4epAaGTx72piGJ1zpKBMyhrrbKT88MsA8ud0BzvS/ CiRA1xYUh7KZuwPBdqaOQ4i8rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfQXdod kabtMJwJAtE1Kj2IGbP9MB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx7FXpvQv2jDnxStH4cx6QT7ZhOJXiUU8GNiLpwqFI0TCVBU0OSyC0ivY7Mo0 kxOnXkdqyLrfZSLeZe7YjnW3Oel00VTs4eq6K3dkkBVXRJSyIgkmFgBjrHOQYIBp pr0WR4f87uKlYE6M8vXUbYnRpflYCLp9T63S8KZtOENgJVO6oSbGSLLdvlUbsFMa GeDn6Oez8sw5EZITSJZymaf6A9f2fr+sbdptrvdmK7QaJgOPh3iKaVSI12YBJp6d 5+rs5T++5rsseT3J8rZwBiYoOdtyYmrS4VrUE8qH7vqZ4DZp4UUk44x6c43ZdGwB HhGwCD/BzI5sv1Gwmn44LiBppQ== -----END CERTIFICATE-----Generated at Mon Sep 21 16:36:09 2026 by rpki-client