$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: tJer0THWJPH6PzwGvAa/gNHcAmK+okl73/MUzeUZcog= Subject key identifier: D5:A7:23:19:E2:16:84:DC:16:EF:9F:58:7B:85:44:68:CB:47:44:C9 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 02F4 Signing time: Mon 21 Sep 2026 01:17:23 +0000 Manifest this update: Mon 21 Sep 2026 01:17:23 +0000 Manifest next update: Mon 28 Sep 2026 01:17:23 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: TNy1mqKjDI+/oBfWpdwNLhY4FGpFzuTRhSaBaOGooYU=) 2: 7CA6F1307B7911F1827C4FFF64A30FBC.roa (hash: Tq9vsCWRXkvNtDkZddfWUPe9BltG2TgKGlmV/arRNXY=) 3: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: hEDDBmqy+g3mjjmXrYH6est6UxbODSRokkdRBGwdWwU=) 4: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: LvzFZJPcWbboIZyMcvq7oiMq8P9XXU2SZUanebQgAx4=) 5: 6121C23230AC11F08C150767C4F9AE02.roa (hash: ql7HqZquAr8Z2RwRKCcdgaigOpq48VyYBqN4A7YQqcU=) 6: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: /o4SLgeuUU9OSfiAD7UJtOCCqvNSUtLbtPYkogIfFeQ=) 7: 946E7D7C660E11F192F6B2999847A888.roa (hash: UPxwASkRaCM0BmW/75/VdGF2qprJhUWAyXmzhw5bK/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Sep 21 01:17:23 2026 GMT Not After : Sep 28 01:17:23 2026 GMT Subject: CN=6ab085a3-b0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:76:97:36:55:86:c0:b9:19:e3:1c:43:77: a6:98:9d:5d:4b:bf:9f:11:25:14:ea:20:cc:b4:e2: 25:46:76:29:94:3f:bc:2c:54:bd:2a:c8:46:3f:af: 68:5c:13:04:af:8f:25:bc:68:5e:af:ec:ef:d5:a7: 48:f4:90:55:1e:13:4d:ba:1b:27:f4:9b:4f:b4:8c: 08:3b:a2:db:72:43:e9:b8:26:c4:b8:7a:37:0a:46: 1b:db:32:b9:2d:06:74:6e:7b:93:ec:6a:55:81:5d: dd:8d:30:62:76:e2:d2:9b:1b:a9:74:c4:c3:b4:fa: ed:e9:e6:2f:6e:82:38:88:d3:be:24:2c:66:83:ba: bc:92:ed:85:5d:b5:e3:da:05:12:17:27:67:ad:4f: 8f:f1:19:ed:80:6b:29:5c:96:3a:67:36:0a:e1:83: c5:46:fb:82:64:cd:bd:88:7a:f1:76:47:34:22:c1: 4f:9d:09:44:47:42:dd:5a:10:46:1e:fd:57:82:41: 60:2f:98:0c:82:65:b5:4d:35:e4:27:07:38:38:20: 33:87:a9:4a:46:43:23:c8:70:ff:fa:09:2b:d7:bf: 37:b1:80:e0:ba:06:f4:9b:74:76:6b:08:be:63:fa: 78:1d:28:53:0f:dc:64:e8:5f:57:f8:b0:4e:14:c3: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:23:19:E2:16:84:DC:16:EF:9F:58:7B:85:44:68:CB:47:44:C9 X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ce:fb:ac:4c:e6:8a:a7:de:f7:a4:bb:83:0e:f4:8f:18:f4: 6c:cf:a9:b5:ca:57:ec:82:07:22:54:cd:0b:14:d5:34:79:fa: 70:0c:66:61:ac:fd:f2:bb:f2:ac:c6:6e:32:2b:d8:aa:52:07: b2:e1:61:7e:06:64:fd:94:3e:3c:69:de:af:4b:bf:e0:a2:b6: bd:e4:b8:0d:16:10:37:7f:7a:6b:53:2a:19:9e:44:a8:ba:fe: a5:df:53:1f:41:2c:ab:89:2d:24:77:64:cf:24:4a:7a:9c:c9: 7b:ad:d9:ca:98:45:6d:1e:b0:bd:fd:cf:18:03:7c:99:61:a7: c7:e4:9a:d4:78:b8:7f:a2:52:e1:de:72:8b:24:49:bc:78:de: 77:b2:18:68:22:79:2f:9c:e7:2a:d8:4c:e7:a0:51:f4:85:0c: 24:3d:23:8a:97:30:f2:97:3d:84:14:21:91:51:63:29:06:34: 50:a9:c1:e8:1e:4c:13:12:1e:1c:2f:0a:d0:16:6c:46:e1:8c: 30:e6:27:93:06:17:fd:48:1e:2f:ac:cc:09:a3:ad:d4:a1:82: 07:65:5d:03:02:de:10:e1:66:45:35:44:9c:7f:ac:6f:70:0d: f6:ab:d7:16:bd:b3:19:03:4e:e8:76:87:47:c3:d5:48:47:39: b0:95:87:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjYwOTIxMDExNzIzWhcNMjYwOTI4MDExNzIzWjAYMRYwFAYD VQQDEw02YWIwODVhMy1iMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01x2lzZVhsC5GeMcQ3emmJ1dS7+fESUU6iDMtOIlRnYplD+8LFS9KshGP69o XBMEr48lvGher+zv1adI9JBVHhNNuhsn9JtPtIwIO6LbckPpuCbEuHo3CkYb2zK5 LQZ0bnuT7GpVgV3djTBiduLSmxupdMTDtPrt6eYvboI4iNO+JCxmg7q8ku2FXbXj 2gUSFydnrU+P8RntgGspXJY6ZzYK4YPFRvuCZM29iHrxdkc0IsFPnQlER0LdWhBG Hv1XgkFgL5gMgmW1TTXkJwc4OCAzh6lKRkMjyHD/+gkr1783sYDgugb0m3R2awi+ Y/p4HShTD9xk6F9X+LBOFMNcyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWnIxni FoTcFu+fWHuFRGjLR0TJMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG877rEzmiqfe96S7gw70jxj0bM+ptcpX7IIHIlTNCxTVNHn6cAxmYaz98rvy rMZuMivYqlIHsuFhfgZk/ZQ+PGner0u/4KK2veS4DRYQN396a1MqGZ5EqLr+pd9T H0Esq4ktJHdkzyRKepzJe63ZyphFbR6wvf3PGAN8mWGnx+Sa1Hi4f6JS4d5yiyRJ vHjed7IYaCJ5L5znKthM56BR9IUMJD0jipcw8pc9hBQhkVFjKQY0UKnB6B5MExIe HC8K0BZsRuGMMOYnkwYX/UgeL6zMCaOt1KGCB2VdAwLeEOFmRTVEnH+sb3AN9qvX Fr2zGQNO6HaHR8PVSEc5sJWH8Q== -----END CERTIFICATE-----Generated at Tue Sep 22 14:09:10 2026 by rpki-client