$ rpki-client -vvvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json) Hash identifier: jCPcOu9qC1Yz4o0L9mgBJ4FrfRm6l+SflVLCvf6okos= Subject key identifier: 9F:AE:DB:0E:D7:4A:88:A1:A9:41:EC:DD:A8:B4:1B:F5:B3:D9:24:AE Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft Manifest number: 0CE0 Signing time: Sat 26 Sep 2026 18:31:30 +0000 Manifest this update: Sat 26 Sep 2026 18:31:30 +0000 Manifest next update: Sat 03 Oct 2026 18:31:30 +0000 Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: VPa5jEAcuG3fp1gtpsomEOQnQOazNuXTfy4OOMusOgw=) 2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: 6Jlbz9YCTOxj8BHJ5VQcqowb7B2cLMhVTVG5B00nvR8=) 3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: T3MJXs/ZtQniwR9QjRHP8UIXyIKxMfvi1d+U/3Dj980=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Validity Not Before: Sep 26 18:31:30 2026 GMT Not After : Oct 3 18:31:30 2026 GMT Subject: CN=6ab80f82-7349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:14:80:72:ca:ab:0b:81:0c:fe:a0:e7:b5: b7:9b:19:90:d9:c0:15:48:be:5a:f1:bd:da:ba:d6: cb:74:83:16:6b:03:68:28:f7:f7:6e:39:51:21:df: 28:f5:ff:9c:29:6d:2f:d2:ac:96:cb:2d:1a:61:9d: 7a:af:19:93:c7:f2:d6:af:1c:0f:db:1c:bd:b0:c7: 8d:69:a4:cd:ca:cf:9d:65:cc:86:b5:1c:33:4c:83: dc:68:29:87:88:a2:74:e6:12:a8:b8:f1:8b:28:91: 6b:7e:99:e8:95:de:cc:62:54:93:c9:f3:f1:ec:00: 48:90:34:2a:53:e4:0d:d4:1a:37:bd:1c:66:00:a9: dc:43:60:61:95:b0:25:50:b7:8b:5a:97:1f:06:31: 9b:0d:d3:a0:70:e3:3c:6a:b5:b2:2c:cc:fa:cc:36: 80:e8:42:9b:22:aa:b2:32:02:8b:85:2a:ef:39:cd: 24:6f:01:7f:a6:95:c7:f6:d1:90:fd:da:e4:44:e6: 38:3d:8e:e2:43:45:40:13:ca:e5:c5:5e:f4:42:3e: 2f:22:0f:4f:4b:76:c7:ce:ad:28:19:50:bf:96:f8: 85:ea:65:a9:db:32:70:0b:9f:ec:e4:d5:84:bf:b3: db:ef:cb:c2:0d:d8:ef:b4:5b:a0:1e:cc:94:12:73: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AE:DB:0E:D7:4A:88:A1:A9:41:EC:DD:A8:B4:1B:F5:B3:D9:24:AE X509v3 Authority Key Identifier: keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:3b:f3:e9:fc:a8:57:d9:a1:d5:1b:34:a5:90:44:78:e3:70: 7f:1e:69:cc:bd:4e:09:89:84:79:fe:5d:df:de:d2:ac:ba:a8: 87:1d:00:e3:ae:4f:39:52:4f:e8:2f:14:98:65:2e:8e:85:7d: e1:e4:44:08:91:14:88:ab:e8:e2:34:36:fa:55:8d:1e:27:9d: de:a5:42:c7:4d:75:6b:01:2f:b1:d5:92:ac:21:11:f0:62:1f: 62:2c:05:21:40:86:98:e2:63:4c:88:2c:7e:e2:95:ac:06:37: c2:4f:c4:a9:dd:bf:f5:97:38:30:e6:d6:d4:92:9f:66:73:fc: d7:59:ae:f2:ee:a0:2b:5d:1e:c5:85:33:13:2a:a0:90:fc:4d: a5:5d:31:ac:f6:af:01:f7:84:df:75:23:31:ce:ba:23:e9:44: 9e:47:5c:17:1f:83:91:e9:ae:74:ae:cd:99:4f:23:f6:69:66: da:df:ba:62:57:1e:96:4a:6d:00:e6:af:62:83:3e:83:e4:41: 2f:56:ae:0b:3f:1c:a7:3b:f5:4c:9a:c8:25:9b:58:79:dd:67: bd:a2:01:94:6e:56:b0:f9:f9:68:17:62:9d:3d:d3:a2:cb:35: bc:04:c5:da:05:9a:5b:5a:06:cf:f2:67:91:fe:39:0f:b2:ce: 2f:c1:8c:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND OEZEODU5MzkwHhcNMjYwOTI2MTgzMTMwWhcNMjYxMDAzMTgzMTMwWjAYMRYwFAYD VQQDEw02YWI4MGY4Mi03MzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwkUgHLKqwuBDP6g57W3mxmQ2cAVSL5a8b3autbLdIMWawNoKPf3bjlRId8o 9f+cKW0v0qyWyy0aYZ16rxmTx/LWrxwP2xy9sMeNaaTNys+dZcyGtRwzTIPcaCmH iKJ05hKouPGLKJFrfpnold7MYlSTyfPx7ABIkDQqU+QN1Bo3vRxmAKncQ2BhlbAl ULeLWpcfBjGbDdOgcOM8arWyLMz6zDaA6EKbIqqyMgKLhSrvOc0kbwF/ppXH9tGQ /drkROY4PY7iQ0VAE8rlxV70Qj4vIg9PS3bHzq0oGVC/lviF6mWp2zJwC5/s5NWE v7Pb78vCDdjvtFugHsyUEnNNxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+u2w7X SoihqUHs3ai0G/Wz2SSuMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ OWJaUi1HU1RKZlBJX1lXVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABjvz6fyoV9mh1Rs0pZBEeONwfx5pzL1OCYmEef5d397SrLqohx0A465POVJP 6C8UmGUujoV94eRECJEUiKvo4jQ2+lWNHied3qVCx011awEvsdWSrCER8GIfYiwF IUCGmOJjTIgsfuKVrAY3wk/Eqd2/9Zc4MObW1JKfZnP811mu8u6gK10exYUzEyqg kPxNpV0xrPavAfeE33UjMc66I+lEnkdcFx+DkemudK7NmU8j9mlm2t+6Ylcelkpt AOavYoM+g+RBL1auCz8cpzv1TJrIJZtYed1nvaIBlG5WsPn5aBdinT3Toss1vATF 2gWaW1oGz/Jnkf45D7LOL8GMVQ== -----END CERTIFICATE-----Generated at Mon Sep 28 04:31:10 2026 by rpki-client