$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: LZ7fFA+jGWUgnWkDa7kUz1FJrsV0pD8lWApUZqGJ+vU= Subject key identifier: CB:BB:72:C5:F0:C6:4A:94:7B:DE:25:91:91:49:18:54:59:55:DC:42 Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 0101 Signing time: Sun 27 Sep 2026 06:46:03 +0000 Manifest this update: Sun 27 Sep 2026 06:46:02 +0000 Manifest next update: Sun 04 Oct 2026 06:46:02 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: 70t3v94N+GCYcZn4xAbzc0Ss6dwYI2XRhFqthnfonZk=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: NgYA//gR87ggutPm5mFctVw4RgX1V6AvPzMOoW8iMZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Sep 27 06:46:02 2026 GMT Not After : Oct 4 06:46:02 2026 GMT Subject: CN=6ab8bbab-11c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:53:93:cb:fe:b9:8a:41:52:8a:44:4a:d4:7f: 0d:25:c3:07:27:bc:48:83:f2:7b:1c:a9:26:45:24: a8:9b:6f:04:e1:5e:80:4f:a3:bd:05:4c:d3:6c:db: 64:e6:e9:87:36:7d:65:49:85:50:7c:f7:0f:64:a6: 9b:92:41:58:70:88:60:d1:f8:7c:51:02:89:e7:71: 4c:5a:ce:e6:80:75:c5:6f:11:4a:1c:a4:94:e4:a3: 9f:6a:fb:a6:7c:eb:9e:9a:4e:c3:e4:10:2a:33:ed: 30:0f:d4:77:ab:45:63:ac:99:35:af:a1:b8:a7:f8: 37:9f:52:0c:77:35:4c:3f:ba:47:da:91:b7:24:a4: 96:d2:d9:f6:49:7f:ad:6a:18:06:db:87:33:b8:a8: 6b:ed:9c:d2:dc:2a:de:d0:b2:aa:01:44:b2:a4:fc: ae:71:d7:7b:54:ba:10:c6:2b:ab:b0:be:09:a4:51: 4b:c3:b5:69:b0:e3:bd:53:6b:ad:c8:a1:eb:02:00: 53:f7:aa:57:cc:2e:2d:84:94:52:a4:b3:55:fc:f7: 7f:38:2f:3a:22:de:b2:f2:9b:cb:13:29:f1:25:f3: 8f:97:79:35:9d:3b:90:94:0f:f4:ea:ae:c2:c8:5a: c0:8c:2e:09:be:6b:f4:6d:23:74:db:7d:bc:af:d6: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BB:72:C5:F0:C6:4A:94:7B:DE:25:91:91:49:18:54:59:55:DC:42 X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:74:06:0c:26:fc:88:e0:03:df:51:82:98:46:3e:e7:7a:ef: eb:4c:58:2c:87:14:2f:e0:c7:90:02:2c:eb:63:a4:0f:e8:0c: 2e:fc:d1:fd:e4:83:71:6a:e7:8c:b6:c2:32:56:e8:15:e6:d4: c9:8d:1e:ba:59:ae:85:80:a3:5c:ba:00:8d:9b:f2:22:c7:d7: 68:65:ac:a6:b2:ce:fe:fd:ce:b5:1c:2f:5d:0c:d8:00:ba:a5: 9f:52:c8:a9:6a:72:74:65:46:1b:51:9d:68:da:96:dc:ca:90: 0f:ae:fc:7f:ed:07:11:1d:f4:63:da:c7:d7:fc:2f:d0:d7:87: d2:87:01:8a:b1:02:98:db:f3:19:93:47:1f:ed:c2:0f:f8:7b: 31:8f:b8:15:e3:d1:6c:12:bc:d9:7b:50:f3:76:83:de:59:d1: 76:e8:20:6a:a9:11:76:2a:1a:32:1e:1f:6f:92:0b:9e:dd:1a: cb:78:3d:1c:04:99:8c:42:89:43:6c:e3:53:68:f7:59:1e:62: 38:14:5e:d2:de:12:99:87:9f:9e:0c:25:96:25:9e:13:77:b3: 2e:76:b8:d5:6b:57:01:8d:11:11:7e:aa:72:ec:88:a8:e8:88: ec:1e:81:7c:de:fb:8d:b8:77:e4:07:6f:96:6d:8e:b3:27:e7: 4d:1f:1c:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKEM0MjZENDI2NDAwNjc2NTU1OTczREZFREU0RUIyNjQ0 QkVFRDI4NzMwHhcNMjYwOTI3MDY0NjAyWhcNMjYxMDA0MDY0NjAyWjAYMRYwFAYD VQQDEw02YWI4YmJhYi0xMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FOTy/65ikFSikRK1H8NJcMHJ7xIg/J7HKkmRSSom28E4V6AT6O9BUzTbNtk 5umHNn1lSYVQfPcPZKabkkFYcIhg0fh8UQKJ53FMWs7mgHXFbxFKHKSU5KOfavum fOuemk7D5BAqM+0wD9R3q0VjrJk1r6G4p/g3n1IMdzVMP7pH2pG3JKSW0tn2SX+t ahgG24czuKhr7ZzS3Cre0LKqAUSypPyucdd7VLoQxiursL4JpFFLw7VpsOO9U2ut yKHrAgBT96pXzC4thJRSpLNV/Pd/OC86It6y8pvLEynxJfOPl3k1nTuQlA/06q7C yFrAjC4Jvmv0bSN02328r9aIhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMu7csXw xkqUe94lkZFJGFRZVdxCMB8GA1UdIwQYMBaAFMQm1CZABnZVWXPf7eTrJkS+7Shz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DMUY3MzA3MjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2RsVlpjOV90NU9zbVJMN3RL SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DMUY3MzA3MjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2Rs VlpjOV90NU9zbVJMN3RLSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADnQGDCb8iOAD31GCmEY+53rv60xYLIcUL+DHkAIs62OkD+gMLvzR/eSDcWrn jLbCMlboFebUyY0eulmuhYCjXLoAjZvyIsfXaGWsprLO/v3OtRwvXQzYALqln1LI qWpydGVGG1GdaNqW3MqQD678f+0HER30Y9rH1/wv0NeH0ocBirECmNvzGZNHH+3C D/h7MY+4FePRbBK82XtQ83aD3lnRduggaqkRdioaMh4fb5ILnt0ay3g9HASZjEKJ Q2zjU2j3WR5iOBRe0t4SmYefngwlliWeE3ezLna41WtXAY0REX6qcuyIqOiI7B6B fN77jbh35Advlm2OsyfnTR8cVw== -----END CERTIFICATE-----Generated at Mon Sep 28 23:12:06 2026 by rpki-client