$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: itte0EzqHoED3C4bN8hdStOMDeYcb9A11OAY5MMAgjw= Subject key identifier: E8:C8:D4:FF:9F:3C:19:BB:F8:FE:7D:3B:13:19:C9:D0:D0:4C:D7:9E Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 02CD Signing time: Mon 21 Sep 2026 01:19:47 +0000 Manifest this update: Mon 21 Sep 2026 01:19:46 +0000 Manifest next update: Mon 28 Sep 2026 01:19:46 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: y6+X8H0BdHFwEVcdn6571BwUFq7lgDX0XgYFVhpyeK8=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: JzIeNUelrcBSaSYEzJUiPtXr7HS7Gw0/GJK//93BhoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Sep 21 01:19:46 2026 GMT Not After : Sep 28 01:19:46 2026 GMT Subject: CN=6ab08633-1230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:0b:1e:ee:de:c8:c9:0a:0b:63:af:c2:2b: 57:72:ed:ad:34:f4:5e:e7:82:21:75:27:e9:4d:f3: c7:78:e7:28:5a:14:de:6d:27:b4:c3:a0:2f:47:4d: da:60:93:e0:9e:fe:46:10:3c:d5:3f:a9:2d:cd:97: 1a:72:38:6a:fa:2e:c3:5c:b0:26:c6:72:0e:7a:db: 88:5c:d6:39:4f:81:d0:72:9f:b3:d6:0e:01:2b:d7: 08:a8:85:de:88:20:ef:07:ab:a6:52:03:fa:c9:0d: ba:67:f5:a6:11:17:4f:3d:42:06:e0:ca:4d:94:f2: 7a:1f:4c:74:e1:d6:55:1c:fa:7f:4e:56:2a:f6:9b: f7:bc:c2:57:2b:06:3c:bd:b8:cc:2b:e1:f3:fe:4b: 51:48:40:1a:b8:dc:d9:46:3e:e8:f5:b6:38:d1:b7: 48:37:8b:98:19:76:0b:64:30:28:16:b6:31:b8:65: ab:21:73:98:a9:e2:d1:2e:ca:5b:bc:aa:e6:39:ef: 3f:40:03:8f:30:fc:a3:13:6f:5a:8e:b6:cc:7d:bb: 55:f6:d4:de:37:0b:21:c0:91:d6:d9:b4:21:12:2f: 2d:8d:fd:47:ab:ae:71:7c:7a:42:53:ad:7d:2b:16: cf:f9:4f:cd:5a:46:bf:60:8e:68:ca:ef:72:d2:66: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C8:D4:FF:9F:3C:19:BB:F8:FE:7D:3B:13:19:C9:D0:D0:4C:D7:9E X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:06:b2:da:1e:ad:eb:fe:1f:9b:39:90:f4:14:b9:8d:56:ba: 33:9c:1e:ed:c9:68:9f:b0:7b:52:b7:3a:07:25:5b:7b:0f:30: bf:7e:1c:07:61:13:49:b0:f4:bd:b1:3c:d0:75:17:2a:24:15: 78:fa:66:14:b8:2d:fd:d4:ed:68:cf:f3:46:71:c7:d7:d2:c5: f7:51:fb:af:9f:81:66:13:1a:a9:04:7e:e4:3c:ab:fc:1b:a0: c0:0e:34:c4:c2:9c:87:cd:37:33:1f:b9:50:11:f9:ca:09:80: dc:23:4e:ca:22:a4:5d:a4:cf:d5:1c:38:65:6b:e9:75:42:31: d2:29:7e:15:52:ec:69:2a:2c:26:82:c7:ca:a0:d6:a0:cf:ef: e8:85:f8:a1:e9:c6:4b:d5:00:c4:fc:7d:55:71:b6:50:42:fc: ce:a2:5d:b6:d5:a3:e7:fa:36:79:d7:a2:e3:27:86:63:50:cb: 97:d1:1b:98:bc:d0:1e:7f:3e:e9:b4:ab:45:fc:3c:8b:90:82: 6e:68:d8:47:0e:db:92:c9:c9:e1:88:34:4c:30:7c:37:a1:0e: 1a:49:ba:6a:2e:5f:c2:13:ed:e3:d7:52:17:da:60:20:f3:62: 42:dd:29:1a:a7:e0:5d:43:56:11:52:fa:b3:9f:64:fd:32:e2: e1:a7:34:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjYwOTIxMDExOTQ2WhcNMjYwOTI4MDExOTQ2WjAYMRYwFAYD VQQDEw02YWIwODYzMy0xMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxScLHu7eyMkKC2OvwitXcu2tNPRe54IhdSfpTfPHeOcoWhTebSe0w6AvR03a YJPgnv5GEDzVP6ktzZcacjhq+i7DXLAmxnIOetuIXNY5T4HQcp+z1g4BK9cIqIXe iCDvB6umUgP6yQ26Z/WmERdPPUIG4MpNlPJ6H0x04dZVHPp/TlYq9pv3vMJXKwY8 vbjMK+Hz/ktRSEAauNzZRj7o9bY40bdIN4uYGXYLZDAoFrYxuGWrIXOYqeLRLspb vKrmOe8/QAOPMPyjE29ajrbMfbtV9tTeNwshwJHW2bQhEi8tjf1Hq65xfHpCU619 KxbP+U/NWka/YI5oyu9y0mYPOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjI1P+f PBm7+P59OxMZydDQTNeeMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXQay2h6t6/4fmzmQ9BS5jVa6M5we7clon7B7Urc6ByVbew8wv34cB2ETSbD0 vbE80HUXKiQVePpmFLgt/dTtaM/zRnHH19LF91H7r5+BZhMaqQR+5Dyr/BugwA40 xMKch803Mx+5UBH5ygmA3CNOyiKkXaTP1Rw4ZWvpdUIx0il+FVLsaSosJoLHyqDW oM/v6IX4oenGS9UAxPx9VXG2UEL8zqJdttWj5/o2edei4yeGY1DLl9EbmLzQHn8+ 6bSrRfw8i5CCbmjYRw7bksnJ4Yg0TDB8N6EOGkm6ai5fwhPt49dSF9pgIPNiQt0p GqfgXUNWEVL6s59k/TLi4ac0Yw== -----END CERTIFICATE-----Generated at Mon Sep 21 09:48:11 2026 by rpki-client