$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: o0aNr+Z1jaYZdMZwWZPMfG8QOjisgrzBUjHK5gJNH28= Subject key identifier: DA:AA:9D:7C:A8:B3:D9:1A:C5:CD:88:8F:B2:CE:1A:6D:39:EC:EB:5F Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 08DE Signing time: Sun 20 Sep 2026 20:19:54 +0000 Manifest this update: Sun 20 Sep 2026 20:19:54 +0000 Manifest next update: Sun 27 Sep 2026 20:19:54 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: NILvHJ10DevnarlRfNinUa9Tl8ayCXax/IfMIy6qNOE=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Sep 20 20:19:54 2026 GMT Not After : Sep 27 20:19:54 2026 GMT Subject: CN=6ab03fea-3a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:77:ee:f3:6a:b2:d9:67:d1:6e:db:08:7d: 8c:19:11:1c:4c:74:83:f0:36:26:65:40:5a:50:c6: d7:e3:73:37:f4:2e:78:0f:d9:82:59:e8:97:49:63: b7:65:c5:d3:33:f8:c9:be:63:7a:87:4c:2a:cf:a6: 68:35:a4:60:b7:0a:5d:33:73:8f:1d:a4:d7:8e:dc: d8:d1:7d:c5:5f:ef:10:4e:0e:57:19:46:3e:e9:df: 39:f1:99:20:c5:45:ae:b1:61:af:ec:a2:6b:fc:75: fd:f6:59:75:c1:dd:7b:08:e2:4c:e4:fc:f5:4d:1b: 1e:6f:92:ab:dd:f5:59:94:0a:ae:b3:e8:58:28:96: e8:ab:b1:bf:23:6e:9d:a6:04:14:5a:ba:17:99:d8: 63:28:3b:7f:c5:6f:ae:6b:42:90:d5:92:a7:27:b7: 1e:5c:50:6f:81:d9:61:a9:83:f6:c3:e3:55:ba:f5: 30:0e:31:36:47:b2:94:ad:31:2f:9b:07:c2:82:5c: f6:d6:56:53:f2:f0:42:c1:6a:e2:70:f8:92:b6:0e: ce:86:f0:9c:f1:53:9d:bd:05:e3:f7:66:67:49:cc: 34:5a:e0:79:f6:bb:11:7e:64:38:e8:e2:ae:44:1c: f7:df:79:86:19:1a:b2:7d:a4:a0:f6:91:ef:87:f6: 43:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AA:9D:7C:A8:B3:D9:1A:C5:CD:88:8F:B2:CE:1A:6D:39:EC:EB:5F X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ba:46:2f:2e:eb:cd:ed:ea:98:21:6e:e8:73:5b:1f:cf:f4: c0:42:13:ac:2f:e2:51:9f:59:41:64:32:2e:df:04:56:8c:42: 03:07:30:72:c9:0b:43:c8:f6:7c:a8:2a:47:73:ad:d4:aa:49: 4a:40:40:fd:dd:13:14:95:72:40:3e:76:1b:14:3c:33:06:7d: 4d:91:b9:ce:94:49:b8:14:3d:64:81:98:b6:ce:23:13:52:76: 65:57:0c:18:ec:e0:50:4c:6c:af:3f:8d:13:72:09:b2:66:7a: 47:e8:b0:7d:f6:8c:b8:12:c5:69:70:e3:ab:6a:ea:d3:90:4a: d1:e2:70:50:53:0e:38:51:a2:e3:4b:c7:08:e9:04:86:fb:46: c6:56:b1:48:a5:57:3f:c1:da:fb:d4:95:9f:c7:4d:c0:11:50: 3a:fd:36:de:56:d5:f5:33:18:c2:0d:80:ce:e3:a6:12:b6:5b: 3a:ee:05:76:66:b4:44:a6:89:bc:e8:b0:0e:87:5b:07:d9:cc: ab:77:36:bd:77:d8:72:52:4c:65:3d:f0:dc:6b:34:36:92:d9: ac:7b:78:60:f1:48:25:40:ae:fa:44:8a:cc:a5:f1:64:ae:4c: a9:4b:40:d4:e9:a2:62:db:1d:14:91:2f:44:b2:e7:da:1e:50: ca:9c:08:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjYwOTIwMjAxOTU0WhcNMjYwOTI3MjAxOTU0WjAYMRYwFAYD VQQDEw02YWIwM2ZlYS0zYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKt37vNqstln0W7bCH2MGREcTHSD8DYmZUBaUMbX43M39C54D9mCWeiXSWO3 ZcXTM/jJvmN6h0wqz6ZoNaRgtwpdM3OPHaTXjtzY0X3FX+8QTg5XGUY+6d858Zkg xUWusWGv7KJr/HX99ll1wd17COJM5Pz1TRseb5Kr3fVZlAqus+hYKJboq7G/I26d pgQUWroXmdhjKDt/xW+ua0KQ1ZKnJ7ceXFBvgdlhqYP2w+NVuvUwDjE2R7KUrTEv mwfCglz21lZT8vBCwWricPiStg7OhvCc8VOdvQXj92ZnScw0WuB59rsRfmQ46OKu RBz333mGGRqyfaSg9pHvh/ZDUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqqnXyo s9kaxc2Ij7LOGm057OtfMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgbpGLy7rze3qmCFu6HNbH8/0wEITrC/iUZ9ZQWQyLt8EVoxCAwcwcskLQ8j2 fKgqR3Ot1KpJSkBA/d0TFJVyQD52GxQ8MwZ9TZG5zpRJuBQ9ZIGYts4jE1J2ZVcM GOzgUExsrz+NE3IJsmZ6R+iwffaMuBLFaXDjq2rq05BK0eJwUFMOOFGi40vHCOkE hvtGxlaxSKVXP8Ha+9SVn8dNwBFQOv023lbV9TMYwg2AzuOmErZbOu4Fdma0RKaJ vOiwDodbB9nMq3c2vXfYclJMZT3w3Gs0NpLZrHt4YPFIJUCu+kSKzKXxZK5MqUtA 1OmiYtsdFJEvRLLn2h5QypwI0w== -----END CERTIFICATE-----Generated at Tue Sep 22 12:16:57 2026 by rpki-client