$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: 0bsWuQNCVFYG8Qbw9Q8s0L8fK70eE0b4nwAqOkCR4Bs= Subject key identifier: ED:D0:0F:4B:73:14:19:9D:90:C7:6E:65:AD:65:BC:BB:F7:4F:7A:80 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0485 Signing time: Tue 22 Sep 2026 23:42:02 +0000 Manifest this update: Tue 22 Sep 2026 23:42:02 +0000 Manifest next update: Tue 29 Sep 2026 23:42:02 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: Nkj3DGht/y6qidRLbg3zYo53KFlrGK09PO0bItfOTb4=) 2: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: US3zQpwIIKbs6wAdZrpkun85NZn/CcgVmY5RXTFLp6U=) 3: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: C2xe2xSt+zG2ZuMpvD0jHOEIkW1+AE92r/FDO/VZFwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Sep 22 23:42:02 2026 GMT Not After : Sep 29 23:42:02 2026 GMT Subject: CN=6ab3124a-2e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:69:8e:7e:21:8c:b2:5b:80:a8:44:6b:28: 52:ed:a3:27:e3:c7:ad:43:ef:c3:05:2d:ef:0c:56: db:55:5e:3f:63:55:6e:7b:5a:ca:4e:ba:dc:8f:3e: e7:56:cb:1c:14:61:92:ad:03:3e:9a:56:06:e6:8b: 7e:19:2e:00:28:4b:e7:6c:a7:50:d7:f0:03:cf:4f: e9:e1:85:96:05:e4:00:ba:90:3a:11:76:49:84:5a: 69:ea:8d:31:79:db:db:1a:6b:a4:6a:88:fb:25:97: bb:d5:94:6f:f3:e5:c7:11:73:f2:e0:39:dd:95:aa: d0:5a:24:0e:93:80:ef:dd:3e:cb:f4:7d:2a:4a:1e: 2b:ca:a8:08:0b:e5:fb:11:8c:83:d9:f5:a0:38:29: a1:df:b7:73:8c:82:24:34:01:39:ab:ca:60:97:37: 89:ea:e9:aa:f5:6b:93:94:24:8a:5e:90:de:52:66: 12:87:8a:00:3c:10:3d:ca:be:77:53:86:c0:45:f4: e1:ab:3a:fd:e4:b6:54:ca:42:3e:26:7d:28:c2:c8: 39:12:a2:94:68:50:b9:53:b1:77:91:6c:05:92:ce: 9e:32:6c:3f:fe:7e:d0:bd:26:3b:a9:5f:44:de:04: f0:c6:5f:0d:1e:ad:c6:a1:e7:5d:95:11:40:62:e4: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D0:0F:4B:73:14:19:9D:90:C7:6E:65:AD:65:BC:BB:F7:4F:7A:80 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b1:d7:d1:84:a7:db:72:b5:e6:eb:aa:38:ec:0f:55:ce:e4: 98:f7:af:05:2f:d7:bd:65:2c:8f:81:82:0a:83:c7:d5:a0:ee: 22:fe:31:a2:8c:b8:a5:f9:8e:b5:67:b2:23:6c:f1:7b:b5:68: 68:57:4e:7a:09:f2:91:d4:86:cf:60:c8:05:fc:7b:88:cf:34: d2:f9:08:78:51:9b:d2:b4:ee:71:f7:75:c0:0a:4d:6f:fb:aa: 46:e9:46:66:66:13:11:fc:33:d9:96:3c:db:16:e7:3f:4a:b3: 5d:5f:33:21:bc:6e:62:52:9e:41:83:c2:96:6b:be:5d:4a:10: cd:85:24:56:1b:8a:49:b1:6a:6f:4a:4b:b9:73:2e:67:f2:97: ee:95:43:fc:79:fe:e6:9c:df:35:b7:10:63:87:83:e2:f3:67: aa:54:12:13:85:a2:0f:f5:52:5e:81:0f:f1:ba:3a:fa:3a:d5: 99:d2:41:a1:14:87:0c:2e:b4:46:83:3e:f8:83:3c:8e:9f:a2: 41:d6:e1:e0:2e:49:a9:f9:cb:36:f1:c7:73:8f:60:c6:42:d5: 46:20:dd:e7:95:84:c7:5d:0c:85:8c:43:91:2c:fc:d8:c0:70: de:93:d7:21:98:f9:3c:d2:fe:bb:c8:4b:5d:49:59:9c:c9:a5: bb:f0:a1:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYwOTIyMjM0MjAyWhcNMjYwOTI5MjM0MjAyWjAYMRYwFAYD VQQDEw02YWIzMTI0YS0yZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdlpjn4hjLJbgKhEayhS7aMn48etQ+/DBS3vDFbbVV4/Y1Vue1rKTrrcjz7n VsscFGGSrQM+mlYG5ot+GS4AKEvnbKdQ1/ADz0/p4YWWBeQAupA6EXZJhFpp6o0x edvbGmukaoj7JZe71ZRv8+XHEXPy4DndlarQWiQOk4Dv3T7L9H0qSh4ryqgIC+X7 EYyD2fWgOCmh37dzjIIkNAE5q8pglzeJ6umq9WuTlCSKXpDeUmYSh4oAPBA9yr53 U4bARfThqzr95LZUykI+Jn0owsg5EqKUaFC5U7F3kWwFks6eMmw//n7QvSY7qV9E 3gTwxl8NHq3GoeddlRFAYuRZYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3QD0tz FBmdkMduZa1lvLv3T3qAMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7HX0YSn23K15uuqOOwPVc7kmPevBS/XvWUsj4GCCoPH1aDuIv4xooy4pfmO tWeyI2zxe7VoaFdOegnykdSGz2DIBfx7iM800vkIeFGb0rTucfd1wApNb/uqRulG ZmYTEfwz2ZY82xbnP0qzXV8zIbxuYlKeQYPClmu+XUoQzYUkVhuKSbFqb0pLuXMu Z/KX7pVD/Hn+5pzfNbcQY4eD4vNnqlQSE4WiD/VSXoEP8bo6+jrVmdJBoRSHDC60 RoM++IM8jp+iQdbh4C5JqfnLNvHHc49gxkLVRiDd55WEx10MhYxDkSz82MBw3pPX IZj5PNL+u8hLXUlZnMmlu/Chaw== -----END CERTIFICATE-----Generated at Wed Sep 23 04:30:56 2026 by rpki-client