$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: yb2NtZkOlKlc8eepZ7cLdor1y6H5NAaKsylf09qyWR0= Subject key identifier: F3:58:A7:20:9B:08:8C:18:14:D2:22:06:6E:73:D4:D3:6A:F1:45:63 Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 075E Signing time: Sun 20 Sep 2026 21:37:41 +0000 Manifest this update: Sun 20 Sep 2026 21:37:40 +0000 Manifest next update: Sun 27 Sep 2026 21:37:40 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: HQpHvHwjzB6S/hkbZsHbOs68G20tgtSoxE9g/lzwk24=) 2: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: b8Yrg5yhwwS9mUXMLcQ3eIUl5GT4DbquZ+/h34i5hc0=) 3: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Sep 20 21:37:40 2026 GMT Not After : Sep 27 21:37:40 2026 GMT Subject: CN=6ab05225-39fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:fc:ee:d3:14:60:73:1e:ae:0a:cf:0d:da: e4:b4:2e:36:6b:c7:6a:5d:38:cd:5e:86:05:3d:4a: ea:5b:66:7b:70:2f:d6:08:33:c7:f7:65:5e:1d:76: e4:b4:2b:ce:65:fe:f6:09:1e:08:71:af:81:04:da: d7:17:bb:22:ba:8b:1d:51:13:e5:aa:56:40:1c:77: 84:c6:93:93:5b:79:c0:8a:b0:7c:ab:f6:16:56:c5: df:f5:bc:5c:d8:d1:d6:32:3f:ec:cf:7f:64:c0:a6: da:2c:43:e2:60:df:8a:6c:d0:cf:6c:24:1d:20:f6: ac:1d:de:14:b5:3c:5f:b7:33:6b:43:8a:2b:89:5e: 84:d4:bd:87:cf:da:8c:35:95:a1:d9:1a:ec:6f:65: 63:97:25:75:1a:f9:a6:bd:59:7e:a9:df:4f:c2:7b: 4c:fc:76:0a:25:21:3c:99:34:76:c2:b3:ac:d7:70: 5d:de:52:66:db:a5:4d:cf:ea:af:23:04:cf:cc:36: 1e:31:cb:25:49:9e:19:b2:0a:e5:b4:56:79:72:37: 1f:49:fd:18:59:04:49:05:e6:2e:d7:e7:16:e6:e0: ea:3d:92:2a:23:42:27:06:d9:5b:47:6f:ce:47:39: 0c:0e:40:6c:b0:42:0d:50:cd:f3:ca:af:e9:cc:23: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:58:A7:20:9B:08:8C:18:14:D2:22:06:6E:73:D4:D3:6A:F1:45:63 X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:33:30:63:03:8b:67:79:fb:aa:1a:e3:5b:85:6a:c3:5d:8f: b7:38:da:9c:6c:b8:96:23:25:20:87:28:0f:a3:b4:5c:db:7b: f3:df:a3:02:98:a6:77:4f:8a:72:f7:1b:ae:dc:80:aa:38:8e: 42:c3:e0:9d:08:bc:6a:1e:c0:e1:32:7a:ff:f4:09:c8:5d:e5: f9:7a:cf:d6:c4:ad:97:92:e7:a4:0b:67:b6:de:bf:35:33:70: 00:00:2a:ea:3a:67:33:76:66:18:06:79:8a:db:95:b4:1a:87: a8:62:0c:01:f4:79:ec:aa:ea:c0:7b:8b:7c:aa:3d:32:d3:7b: 69:b7:07:80:0f:0f:0d:ca:be:ad:c0:e0:a9:b6:80:0f:7e:16: fa:a7:31:e1:c2:b4:63:ae:16:24:f6:46:0c:90:04:d8:c3:c8: 82:9a:39:07:f7:28:9f:77:a1:29:59:36:29:11:8b:c8:90:cd: f1:95:9c:32:ba:dc:2d:4e:68:be:43:3d:33:0b:87:8e:25:4c: 8d:17:e8:86:af:43:82:d4:b3:d0:4e:4d:72:d8:25:51:4d:ce: c4:56:df:a7:10:8e:86:52:97:56:d2:8d:99:05:fb:07:db:a7: 17:9e:99:86:b8:21:c4:cd:82:ee:67:a2:3e:c2:5f:a6:2d:f3: ce:06:4f:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjYwOTIwMjEzNzQwWhcNMjYwOTI3MjEzNzQwWjAYMRYwFAYD VQQDEw02YWIwNTIyNS0zOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzer87tMUYHMergrPDdrktC42a8dqXTjNXoYFPUrqW2Z7cC/WCDPH92VeHXbk tCvOZf72CR4Ica+BBNrXF7siuosdURPlqlZAHHeExpOTW3nAirB8q/YWVsXf9bxc 2NHWMj/sz39kwKbaLEPiYN+KbNDPbCQdIPasHd4UtTxftzNrQ4oriV6E1L2Hz9qM NZWh2Rrsb2VjlyV1GvmmvVl+qd9PwntM/HYKJSE8mTR2wrOs13Bd3lJm26VNz+qv IwTPzDYeMcslSZ4ZsgrltFZ5cjcfSf0YWQRJBeYu1+cW5uDqPZIqI0InBtlbR2/O RzkMDkBssEINUM3zyq/pzCPqmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNYpyCb CIwYFNIiBm5z1NNq8UVjMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkDMwYwOLZ3n7qhrjW4Vqw12PtzjanGy4liMlIIcoD6O0XNt789+jApimd0+K cvcbrtyAqjiOQsPgnQi8ah7A4TJ6//QJyF3l+XrP1sStl5LnpAtntt6/NTNwAAAq 6jpnM3ZmGAZ5ituVtBqHqGIMAfR57KrqwHuLfKo9MtN7abcHgA8PDcq+rcDgqbaA D34W+qcx4cK0Y64WJPZGDJAE2MPIgpo5B/con3ehKVk2KRGLyJDN8ZWcMrrcLU5o vkM9MwuHjiVMjRfohq9DgtSz0E5NctglUU3OxFbfpxCOhlKXVtKNmQX7B9unF56Z hrghxM2C7meiPsJfpi3zzgZPOg== -----END CERTIFICATE-----Generated at Tue Sep 22 09:24:01 2026 by rpki-client