$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: o/PCb8UdUuOOJcacpFzIWE7y1tQosREcOQFDaQydWgw= Subject key identifier: 2F:4C:6E:04:61:66:1D:8F:D8:4C:87:8B:98:E9:6A:2B:C4:0A:8E:9E Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 0491 Signing time: Fri 09 Oct 2026 00:16:09 +0000 Manifest this update: Fri 09 Oct 2026 00:16:09 +0000 Manifest next update: Fri 16 Oct 2026 00:16:09 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: z0y7RgcN3RKOkWDvGR6/IceR4c4004HDFmW4Re1UmLE=) 2: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: W4goqtPYzyLcCdBI7xc2Qn8MqCV+FsXgvw4MFdwTxhk=) 3: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: Xwopv44IWtrA47h99nFS1HcICRmL98rRNkBLnVkufOs=) 4: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: htWOUsGCluqo+bDLkY52m9kGHamjAwjskMqRyVdOAVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Oct 9 00:16:09 2026 GMT Not After : Oct 16 00:16:09 2026 GMT Subject: CN=6ac83249-38f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:90:77:33:75:11:85:50:2c:58:b7:2e:82: 46:4d:20:06:9e:aa:82:e0:93:d5:37:f9:a9:e7:0c: c9:47:0f:4c:12:bf:44:41:f4:20:99:c1:97:3f:87: 0d:72:4a:a2:66:fb:3a:55:4a:ad:71:b3:82:6a:38: d8:78:34:46:89:ea:7d:09:89:bf:a3:97:31:26:67: cf:df:79:d5:20:29:9a:bd:4f:25:ba:7b:c5:48:8c: aa:e2:a2:c4:aa:12:5b:8b:fc:81:27:a2:5f:e2:80: 1d:ed:3f:11:fb:05:de:97:7f:8f:d7:34:c6:d4:7a: 21:2a:3d:28:00:7f:3c:9a:29:f2:19:99:8b:72:ed: c3:0e:cd:ca:dd:be:4f:e0:39:8d:01:65:42:4c:68: ae:53:3b:7b:54:76:05:92:b9:b2:97:3e:3c:43:eb: af:40:f4:09:26:9b:f3:53:ee:3c:5f:68:d8:e8:d6: d7:ed:27:38:15:b5:41:d8:ab:77:0f:7e:da:f3:bd: 9f:a5:09:aa:00:47:df:c3:90:24:98:d0:f9:37:a2: b5:0c:3d:0f:61:26:c0:33:e0:37:b3:02:ef:04:58: 6f:d2:df:29:40:7e:8c:57:be:44:de:8e:a7:7a:fc: 44:13:b7:6f:86:65:cf:5c:95:1a:f3:9d:75:c7:1e: b8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4C:6E:04:61:66:1D:8F:D8:4C:87:8B:98:E9:6A:2B:C4:0A:8E:9E X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f6:b2:30:9d:38:e5:dd:90:de:aa:5c:61:d7:a3:2f:0c:0a: 20:d1:09:24:ef:e6:d7:73:13:7c:16:fa:c1:6d:33:1c:23:52: b0:9e:a7:b7:46:12:13:95:47:f8:39:53:e7:cf:31:4f:a0:e6: e8:db:55:d7:96:9c:eb:5c:ae:62:3f:a0:1c:aa:dc:fc:6d:ab: b6:d5:48:21:71:5e:bc:68:13:19:cf:a1:8c:d2:62:1e:ab:3e: 03:37:e2:ae:3d:c6:2f:eb:38:3b:5d:a6:42:e0:a2:90:6e:a6: be:4c:1d:ca:f7:87:bd:fa:28:65:89:61:6a:1f:4b:36:bc:36: 69:e5:81:19:91:d7:aa:50:cf:f3:66:ae:f5:83:81:86:4e:bc: a4:77:d5:59:58:0d:a4:53:39:d9:fd:63:51:52:dc:06:1c:0d: 52:5c:e0:c3:d8:06:79:d9:be:ac:a3:18:3e:09:0f:9a:0d:b4: 93:29:25:47:27:8f:c6:6b:66:3e:a7:06:1d:fd:a6:f3:48:a0: 15:93:b7:38:a1:11:03:d1:f5:96:9a:86:db:05:bf:d0:27:59: f8:28:83:42:23:6f:b3:f8:a7:df:e8:36:95:d8:07:d9:f0:dc: 07:e7:0b:52:3c:26:85:5e:34:16:26:de:4e:58:85:e0:de:80: b1:ea:ff:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjYxMDA5MDAxNjA5WhcNMjYxMDE2MDAxNjA5WjAYMRYwFAYD VQQDEw02YWM4MzI0OS0zOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOuQdzN1EYVQLFi3LoJGTSAGnqqC4JPVN/mp5wzJRw9MEr9EQfQgmcGXP4cN ckqiZvs6VUqtcbOCajjYeDRGiep9CYm/o5cxJmfP33nVICmavU8lunvFSIyq4qLE qhJbi/yBJ6Jf4oAd7T8R+wXel3+P1zTG1HohKj0oAH88minyGZmLcu3DDs3K3b5P 4DmNAWVCTGiuUzt7VHYFkrmylz48Q+uvQPQJJpvzU+48X2jY6NbX7Sc4FbVB2Kt3 D37a872fpQmqAEffw5AkmND5N6K1DD0PYSbAM+A3swLvBFhv0t8pQH6MV75E3o6n evxEE7dvhmXPXJUa8511xx64IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9MbgRh Zh2P2EyHi5jpaivECo6eMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACfayMJ045d2Q3qpcYdejLwwKINEJJO/m13MTfBb6wW0zHCNSsJ6nt0YSE5VH +DlT588xT6Dm6NtV15ac61yuYj+gHKrc/G2rttVIIXFevGgTGc+hjNJiHqs+Azfi rj3GL+s4O12mQuCikG6mvkwdyveHvfooZYlhah9LNrw2aeWBGZHXqlDP82au9YOB hk68pHfVWVgNpFM52f1jUVLcBhwNUlzgw9gGedm+rKMYPgkPmg20kyklRyePxmtm PqcGHf2m80igFZO3OKERA9H1lpqG2wW/0CdZ+CiDQiNvs/in3+g2ldgH2fDcB+cL UjwmhV40FibeTliF4N6Aser/OQ== -----END CERTIFICATE-----Generated at Sat Oct 10 16:36:15 2026 by rpki-client