$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json) Hash identifier: nY+CxEss4xfcDzSBgT9CFVccVLTIt2A5P+xgyZpU7i0= Subject key identifier: A7:DE:1A:35:3F:3D:10:A4:71:43:2F:E9:3F:9A:FE:8D:76:3F:BB:0A Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft Manifest number: 02DF Signing time: Mon 21 Sep 2026 01:04:19 +0000 Manifest this update: Mon 21 Sep 2026 01:04:18 +0000 Manifest next update: Mon 28 Sep 2026 01:04:18 +0000 Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: uSZ35PS4Q6bSnHZKuYPHSr2hve6OHILElzlst8i3R5g=) 2: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=) 3: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: 18O7Lp0T09zqzj1uz2UvboEJEAG8f//RjAML5YNM31g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Validity Not Before: Sep 21 01:04:18 2026 GMT Not After : Sep 28 01:04:18 2026 GMT Subject: CN=6ab08293-1a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:31:21:78:ae:a6:66:f0:5f:40:ae:ff:ee: 95:e1:26:05:a3:47:12:f3:01:fb:cb:17:f2:d1:2e: d2:05:17:f2:95:3c:7a:33:d1:a0:c3:85:03:22:74: c2:78:77:ff:ab:dc:f0:ef:94:83:b7:af:a0:ec:97: 3b:27:e2:ee:f4:72:a3:4b:43:88:c3:ff:af:eb:2f: 93:0e:77:61:52:db:79:f1:a8:af:8b:0c:ba:5a:61: 3d:e1:cb:e6:4c:7d:36:01:f5:d2:32:f4:92:05:3d: 14:34:a8:7f:4c:45:52:96:49:ad:19:20:01:27:65: c1:c7:59:a1:c8:3e:d0:77:90:76:eb:51:19:07:2f: 2e:af:63:1c:bc:f5:21:e8:0e:a7:99:b7:f1:fc:a7: d7:a5:dd:ef:b4:a3:32:b7:63:7c:8e:a3:5e:f8:00: 37:38:fd:4a:00:9b:df:bd:9d:af:80:51:9f:d1:fb: b6:b2:17:19:d1:f6:e6:c5:6b:d9:fb:18:08:0c:d0: b4:3c:4e:7a:d0:c1:12:ec:ed:86:62:3c:5d:7d:5a: 2a:e8:86:84:63:59:59:24:fb:7b:de:4a:71:9d:bb: 43:1a:7e:0e:80:61:d4:0b:4e:23:2a:b2:53:bc:fd: 7b:0d:28:87:66:e9:4f:20:6e:f5:eb:e6:0c:06:d9: 58:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DE:1A:35:3F:3D:10:A4:71:43:2F:E9:3F:9A:FE:8D:76:3F:BB:0A X509v3 Authority Key Identifier: keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6c:11:72:9c:e6:17:9f:88:e9:34:d1:61:30:5f:55:6d:c3: d5:8d:4f:e4:df:97:d1:f1:95:44:8b:d6:c0:49:17:11:1a:39: ff:f3:bb:b7:5d:3e:c5:86:b1:65:a2:10:4b:83:6f:2a:10:e5: c3:20:5a:c9:39:c2:87:55:7e:8c:b0:89:6e:73:90:45:7a:83: 14:89:fe:f3:2f:ff:2c:44:8f:19:9e:67:7f:75:9f:ca:cd:20: e7:3c:15:8a:4a:c6:8d:3d:d7:3d:5f:ef:94:77:d2:31:c0:19: 18:4e:59:30:02:bb:8b:7b:c3:2a:12:6c:40:ce:2c:2f:5c:3b: ef:b2:be:ab:4f:c3:9e:e2:ff:53:e6:93:8e:14:01:f5:b1:58: 7d:d3:62:5a:2b:f2:e3:6a:5d:6c:45:5e:59:6b:3c:17:ad:96: 52:35:9f:8b:01:68:60:c7:0c:24:37:25:6e:e3:be:bf:89:08: 46:d5:7f:fd:a7:50:19:8c:7a:75:39:00:be:a0:f4:7a:e0:39: 54:17:85:20:1c:ab:23:4b:9d:fe:a8:02:d9:b5:5d:c1:f2:f4: 60:7d:9b:a6:40:53:ff:00:12:d4:5a:0b:61:e3:a2:ee:43:03: d8:12:8d:bd:2e:5e:9d:2d:39:79:e2:d8:cc:ac:27:62:fa:a0: 79:80:43:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx NTAwQURDNzYwHhcNMjYwOTIxMDEwNDE4WhcNMjYwOTI4MDEwNDE4WjAYMRYwFAYD VQQDEw02YWIwODI5My0xYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1UxIXiupmbwX0Cu/+6V4SYFo0cS8wH7yxfy0S7SBRfylTx6M9Ggw4UDInTC eHf/q9zw75SDt6+g7Jc7J+Lu9HKjS0OIw/+v6y+TDndhUtt58aiviwy6WmE94cvm TH02AfXSMvSSBT0UNKh/TEVSlkmtGSABJ2XBx1mhyD7Qd5B261EZBy8ur2McvPUh 6A6nmbfx/KfXpd3vtKMyt2N8jqNe+AA3OP1KAJvfvZ2vgFGf0fu2shcZ0fbmxWvZ +xgIDNC0PE560MES7O2GYjxdfVoq6IaEY1lZJPt73kpxnbtDGn4OgGHUC04jKrJT vP17DSiHZulPIG716+YMBtlYHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfeGjU/ PRCkcUMv6T+a/o12P7sKMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB SXhzc1N4TklHLUVWQUszSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbWwRcpzmF5+I6TTRYTBfVW3D1Y1P5N+X0fGVRIvWwEkXERo5//O7t10+xYax ZaIQS4NvKhDlwyBayTnCh1V+jLCJbnOQRXqDFIn+8y//LESPGZ5nf3Wfys0g5zwV ikrGjT3XPV/vlHfSMcAZGE5ZMAK7i3vDKhJsQM4sL1w777K+q0/DnuL/U+aTjhQB 9bFYfdNiWivy42pdbEVeWWs8F62WUjWfiwFoYMcMJDclbuO+v4kIRtV//adQGYx6 dTkAvqD0euA5VBeFIByrI0ud/qgC2bVdwfL0YH2bpkBT/wAS1FoLYeOi7kMD2BKN vS5enS05eeLYzKwnYvqgeYBDAQ== -----END CERTIFICATE-----Generated at Tue Sep 22 17:01:44 2026 by rpki-client