$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: 1MBSm/42fVekwroTAjGJYiXzxMIovmp9FmT3evAMzx4= Subject key identifier: 11:B4:A7:D6:42:AA:3F:41:C1:1E:B3:E1:96:3C:DE:42:04:BB:94:CB Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 08BB Signing time: Sun 20 Sep 2026 20:27:38 +0000 Manifest this update: Sun 20 Sep 2026 20:27:38 +0000 Manifest next update: Sun 27 Sep 2026 20:27:38 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: 8RTewVOpdjlZTdkntiU9UF8c2b/tCGi1nQ+85/+QtMw=) 2: 8FB8171E1D2C11F18BD061F8153D8C67.roa (hash: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo=) 3: 137DD3E8E60C11F0A18B1E57676F56BC.roa (hash: uV78r469K9kpBYYycBaJqz/OEoI2cFdGsz5vaAFm0kA=) 4: B08421401D2C11F1AC765BFB153D8C67.roa (hash: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU=) 5: DFBB127A1FD911F18338B27E3F3D8C67.roa (hash: /SYY7WeR+aA+gbxGrf5qM5FajASTqqxf81wX3CNIlA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Sep 20 20:27:38 2026 GMT Not After : Sep 27 20:27:38 2026 GMT Subject: CN=6ab041ba-aea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6c:a0:1e:fb:2c:92:93:ee:c3:7a:75:55:0e: 78:95:b9:1c:a2:20:9e:8a:de:25:d6:bd:b9:61:7e: ef:f4:2d:71:4f:e6:89:03:de:3f:a3:25:17:35:fe: bf:2c:9a:19:3b:74:c5:bf:19:ee:e5:a7:e3:55:b2: 15:12:e1:b4:6d:fe:de:1b:62:9c:0c:cb:fd:6d:45: 32:86:04:13:67:04:27:0a:39:34:04:3b:dd:c1:18: d1:5e:09:e3:ca:79:fa:a6:6c:19:29:84:81:5a:62: 3f:91:03:b8:1e:a8:41:69:50:2c:c3:7e:bc:26:69: d5:36:65:4a:5c:7a:6a:91:a9:69:9d:5f:3d:53:9d: 63:3b:df:99:45:55:4b:16:0c:d4:70:25:f7:d6:28: 23:32:60:fd:86:a2:ea:14:43:c8:c4:68:44:cb:c6: 8e:ed:ad:1d:55:60:64:80:6b:23:c3:00:e0:a7:f9: 86:91:a0:4d:14:c8:a5:29:70:48:71:32:8d:70:ca: 21:d7:50:0b:29:54:5f:23:20:51:1c:c9:91:22:14: e3:c7:e8:c0:a2:56:7a:ff:4a:e0:24:62:7b:64:44: 87:ef:15:54:25:04:86:80:09:9f:08:45:d6:a1:13: d1:3f:ac:8b:d0:6e:44:43:03:5c:1b:b6:32:9f:59: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:A7:D6:42:AA:3F:41:C1:1E:B3:E1:96:3C:DE:42:04:BB:94:CB X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:25:f3:e1:39:65:87:fd:63:e0:45:f2:4b:19:65:17:73:70: 64:47:42:0c:0d:7f:e8:82:dc:69:9b:78:42:94:23:82:8e:a6: af:3a:f0:97:94:8e:e1:c5:c3:5b:8b:3d:27:94:92:75:51:ee: 8b:a5:a5:a4:24:99:65:59:51:2e:77:63:1c:71:8a:c1:1b:11: 7f:f2:65:8f:f9:28:f0:49:a2:b7:05:07:bf:4f:bd:96:98:cb: 6a:63:0b:a6:f2:c5:1c:00:67:1f:c6:22:54:22:c8:6d:8b:a0: 2f:bd:35:4b:e9:dc:fa:f6:41:b7:e5:4e:07:8f:d4:61:41:35: 37:86:56:d5:1b:7a:56:0e:9e:c6:56:e0:d6:75:df:f6:19:df: d0:9b:98:e1:ab:c4:7b:bd:69:98:36:0c:02:cc:12:e6:ca:09: b3:92:f9:09:3d:ee:77:dc:17:69:60:4a:f7:eb:82:37:ab:33: 75:5b:bc:fc:ef:15:f4:29:47:f4:0e:9f:71:b3:49:f9:76:0a: ad:9a:45:87:e5:31:ef:89:ab:b2:e5:58:d8:a7:7c:f3:16:f9: e6:24:66:88:22:ce:32:77:fa:39:22:45:8c:55:7c:bb:05:df: 0d:60:2f:34:47:85:88:c5:41:93:c3:d9:8c:e0:49:4c:81:c4: 12:7c:7f:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjYwOTIwMjAyNzM4WhcNMjYwOTI3MjAyNzM4WjAYMRYwFAYD VQQDEw02YWIwNDFiYS1hZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgmygHvsskpPuw3p1VQ54lbkcoiCeit4l1r25YX7v9C1xT+aJA94/oyUXNf6/ LJoZO3TFvxnu5afjVbIVEuG0bf7eG2KcDMv9bUUyhgQTZwQnCjk0BDvdwRjRXgnj ynn6pmwZKYSBWmI/kQO4HqhBaVAsw368JmnVNmVKXHpqkalpnV89U51jO9+ZRVVL FgzUcCX31igjMmD9hqLqFEPIxGhEy8aO7a0dVWBkgGsjwwDgp/mGkaBNFMilKXBI cTKNcMoh11ALKVRfIyBRHMmRIhTjx+jAolZ6/0rgJGJ7ZESH7xVUJQSGgAmfCEXW oRPRP6yL0G5EQwNcG7Yyn1koXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBG0p9ZC qj9BwR6z4ZY83kIEu5TLMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFCXz4Tllh/1j4EXySxllF3NwZEdCDA1/6ILcaZt4QpQjgo6mrzrwl5SO4cXD W4s9J5SSdVHui6WlpCSZZVlRLndjHHGKwRsRf/Jlj/ko8EmitwUHv0+9lpjLamML pvLFHABnH8YiVCLIbYugL701S+nc+vZBt+VOB4/UYUE1N4ZW1Rt6Vg6exlbg1nXf 9hnf0JuY4avEe71pmDYMAswS5soJs5L5CT3ud9wXaWBK9+uCN6szdVu8/O8V9ClH 9A6fcbNJ+XYKrZpFh+Ux74mrsuVY2Kd88xb55iRmiCLOMnf6OSJFjFV8uwXfDWAv NEeFiMVBk8PZjOBJTIHEEnx/fA== -----END CERTIFICATE-----Generated at Tue Sep 22 12:56:18 2026 by rpki-client