$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: l8TvbxCdCt0opCQawxXiHh0MBP5s/K7JfwXL76Tmo8A= Subject key identifier: 3C:AD:63:6B:B8:F9:5F:0E:F6:46:20:27:2A:2B:02:8B:A9:E5:C7:0E Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0D36 Signing time: Sun 20 Sep 2026 18:09:57 +0000 Manifest this update: Sun 20 Sep 2026 18:09:57 +0000 Manifest next update: Sun 27 Sep 2026 18:09:57 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: 8S5mUR9sTbg2Wi1fn781NSKQbaKEApNEmc/OLXVfXVE=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3394 (0xd42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Sep 20 18:09:57 2026 GMT Not After : Sep 27 18:09:57 2026 GMT Subject: CN=6ab02175-a9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f9:bd:50:d2:09:b2:c7:fe:9f:8b:a1:5e:4b: 97:61:64:25:7c:b2:ae:bd:f2:ec:7a:56:61:b5:8f: 7c:0f:60:96:ab:f7:d3:0e:fc:e6:df:91:0e:62:f4: 9f:1b:53:7f:d8:ba:45:9f:00:64:e9:25:8b:14:82: 20:f4:3b:78:32:a6:1c:20:a1:c7:a9:0e:f6:2a:21: 3b:54:0a:2f:a7:4b:fb:52:27:22:dd:c2:3d:11:e4: a0:d9:ae:97:d2:4f:f4:7f:f4:d8:41:f8:d5:32:66: 4d:b3:42:72:24:a2:16:ef:18:7f:21:fb:3b:fb:0f: ce:76:17:a8:ab:e1:0f:c0:8c:65:9a:3c:02:61:73: 18:cc:c2:a0:26:f3:d0:2d:0f:15:14:75:15:1f:23: e9:9f:3e:86:8b:c1:29:a7:12:75:d8:a5:91:a4:54: 5a:8f:15:aa:9e:a5:b3:b3:ae:7e:a0:00:d8:6f:34: ba:7c:36:44:e2:c5:2d:c0:7f:f6:b7:89:ff:99:49: 93:82:46:cc:bd:02:ef:50:1b:31:c8:83:45:90:33: 9a:26:d1:9b:c7:64:33:c4:27:1d:12:cf:95:ba:6e: 3a:dc:14:df:09:7d:6f:e8:de:f2:b5:61:8b:50:2a: 29:51:74:f4:e1:1e:71:62:7c:19:c3:59:7b:cf:a7: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AD:63:6B:B8:F9:5F:0E:F6:46:20:27:2A:2B:02:8B:A9:E5:C7:0E X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:28:36:fe:70:68:f3:95:0b:3f:4d:f0:12:e5:04:e2:35:19: 28:a7:4e:78:c3:b8:72:ad:86:13:fb:20:43:79:14:6f:cd:75: c3:25:a1:16:d1:16:cb:5d:d1:68:db:c7:ab:cd:49:e2:fa:05: 4c:b4:84:5f:81:26:a0:c7:b7:64:25:fc:63:a2:85:7f:a0:53: ae:32:e9:26:80:3b:d9:95:90:46:dc:7e:9a:db:63:f4:66:a2: cd:db:71:39:d2:65:23:44:ae:e4:1b:13:d4:be:5b:6c:eb:d9: be:84:a7:c4:44:f2:48:10:53:c0:95:97:a7:cd:4a:79:f6:6f: f7:1e:05:b3:b2:2c:48:1d:91:c9:a1:ba:c7:62:46:e2:91:d8: 71:ab:02:c9:78:45:c9:34:2a:ca:7b:75:35:4c:a2:64:4b:0f: 91:d0:d6:46:34:7e:88:ee:ac:51:9b:d3:94:15:f3:1a:c2:1b: bd:36:07:ad:8d:e1:b8:ab:d2:7f:9c:fd:fc:8f:17:89:0e:ca: 5b:9d:a6:07:11:9c:55:67:dd:4a:a7:e9:7e:1f:e1:cd:f3:71: a5:29:52:f0:39:7d:2e:10:92:d8:fb:f5:29:dc:01:ae:d5:95: 6e:98:99:3d:ea:5d:10:a6:81:1d:0a:74:94:8a:9f:32:ed:e0: 62:36:59:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjYwOTIwMTgwOTU3WhcNMjYwOTI3MTgwOTU3WjAYMRYwFAYD VQQDEw02YWIwMjE3NS1hOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vm9UNIJssf+n4uhXkuXYWQlfLKuvfLselZhtY98D2CWq/fTDvzm35EOYvSf G1N/2LpFnwBk6SWLFIIg9Dt4MqYcIKHHqQ72KiE7VAovp0v7Uici3cI9EeSg2a6X 0k/0f/TYQfjVMmZNs0JyJKIW7xh/Ifs7+w/Odheoq+EPwIxlmjwCYXMYzMKgJvPQ LQ8VFHUVHyPpnz6Gi8EppxJ12KWRpFRajxWqnqWzs65+oADYbzS6fDZE4sUtwH/2 t4n/mUmTgkbMvQLvUBsxyINFkDOaJtGbx2QzxCcdEs+Vum463BTfCX1v6N7ytWGL UCopUXT04R5xYnwZw1l7z6eIUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDytY2u4 +V8O9kYgJyorAoup5ccOMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANCg2/nBo85ULP03wEuUE4jUZKKdOeMO4cq2GE/sgQ3kUb811wyWhFtEWy13R aNvHq81J4voFTLSEX4EmoMe3ZCX8Y6KFf6BTrjLpJoA72ZWQRtx+mttj9Gaizdtx OdJlI0Su5BsT1L5bbOvZvoSnxETySBBTwJWXp81KefZv9x4Fs7IsSB2RyaG6x2JG 4pHYcasCyXhFyTQqynt1NUyiZEsPkdDWRjR+iO6sUZvTlBXzGsIbvTYHrY3huKvS f5z9/I8XiQ7KW52mBxGcVWfdSqfpfh/hzfNxpSlS8Dl9LhCS2Pv1KdwBrtWVbpiZ PepdEKaBHQp0lIqfMu3gYjZZxg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:58:07 2026 by rpki-client