$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft File: xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft (raw, json) Hash identifier: JYUyv+moj6LDxXGBd/k+zkRMlBQ7UhKR8NsVtJY4S+U= Subject key identifier: 8D:31:6F:F4:4A:A0:0B:63:C7:E1:E2:08:67:39:18:38:DF:DA:09:35 Authority key identifier: C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64 Certificate issuer: /CN=A917D488/serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft Manifest number: A3 Signing time: Sun 27 Sep 2026 07:44:54 +0000 Manifest this update: Sun 27 Sep 2026 07:44:54 +0000 Manifest next update: Sun 04 Oct 2026 07:44:54 +0000 Files and hashes: 1: xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl (hash: +A50Ts4nJk5uTpfhUhXXBdk5tavB/Qgj4k+FnrNQcwA=) 2: 038304DEC11F11F0A9F08209C4F9AE02.roa (hash: Y37EvjA3svHQwyGXd0a+TXPBLOFhRYmTcbPi/KdjSGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 07:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D488, serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64 Validity Not Before: Sep 27 07:44:54 2026 GMT Not After : Oct 4 07:44:54 2026 GMT Subject: CN=6ab8c976-3875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:aa:ae:ad:a8:c0:01:e6:95:18:01:f6:c4: 92:9b:cb:ed:e2:90:d6:36:67:53:8c:64:7c:97:25: ea:f4:94:7f:16:2b:72:03:d8:99:09:88:fc:33:50: 8c:2f:5a:11:0a:86:f0:0e:d7:d1:22:dd:0b:57:71: 28:89:f9:03:fd:c9:63:65:07:3f:22:9f:73:14:03: ae:2b:24:68:e3:9c:1b:a5:56:5c:20:33:0e:e7:7d: 63:8a:0a:e3:c2:4e:cb:7d:af:c9:a1:71:6e:b3:c9: 6d:08:79:f2:3c:fe:bf:36:d9:ee:e3:a6:20:82:7d: 84:1e:6b:65:0b:3b:2e:8b:fd:ff:96:87:e0:b1:38: 2a:12:34:f0:e2:8b:a2:f8:2f:fd:83:df:6d:12:53: ef:e2:91:5c:7d:fb:d5:37:57:ea:df:fd:ad:de:9e: 38:7a:9d:92:06:0f:02:77:36:de:14:3f:64:3f:87: 2e:90:b0:be:68:5d:9f:3f:9f:b3:9a:72:b8:fd:bf: d3:ea:a4:94:b3:1f:b2:22:49:cb:e6:f4:55:60:c6: 71:a7:88:ec:06:ac:f3:de:35:a6:e0:e0:1f:02:6a: dc:25:e6:c6:de:23:fb:c6:e9:00:f7:3f:e3:7e:6a: 52:f4:47:65:cc:8d:83:78:94:b2:bb:2c:56:5b:9e: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:6F:F4:4A:A0:0B:63:C7:E1:E2:08:67:39:18:38:DF:DA:09:35 X509v3 Authority Key Identifier: keyid:C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:50:e6:1c:89:b1:5c:9a:8e:03:03:07:14:7f:9b:dc:c7:0e: d1:ac:93:a7:ef:63:dc:4a:12:02:18:78:13:a4:dd:16:5e:6d: 73:51:06:d1:ee:cd:64:24:46:2f:45:45:6e:6e:a8:36:e9:ed: 6f:69:12:44:fc:a1:5d:ca:0d:cc:b1:0a:05:0f:7a:8a:37:5c: 3c:eb:18:f5:6a:51:9f:1e:c1:db:39:0e:f0:39:da:15:e1:26: ad:87:dd:0d:bf:b7:5f:07:89:42:99:bc:8b:8e:df:4c:2c:45: 8a:3f:53:c4:19:94:25:c6:03:b9:b8:6e:29:b8:97:36:33:d6: da:72:67:c4:1b:02:fb:51:ab:d2:88:43:09:11:2b:00:49:7e: c5:da:35:58:d3:9e:9d:39:76:92:1e:1a:b9:37:18:33:63:6b: b0:d5:a4:9a:fb:30:42:66:01:50:88:f6:6d:4b:fa:49:e4:b2: 4a:b1:4b:f4:ad:20:b7:25:ca:fb:2c:a1:e3:de:f2:a9:ba:36: 11:31:66:15:c6:35:ba:05:9f:e0:2f:0c:15:86:17:df:b5:b9: 99:30:40:4a:90:f7:57:90:b3:ee:24:6c:18:a9:5e:eb:1e:9c: 9a:97:b3:7e:85:63:41:28:ea:35:6c:cf:4d:ea:bd:a7:98:93: c0:75:20:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0ODgxMTAvBgNVBAUTKEM0M0M4RkVEQTQ1NTEwNTkyMjk4QjVCOTUzRTI3OUZC QUNFNDVBNjQwHhcNMjYwOTI3MDc0NDU0WhcNMjYxMDA0MDc0NDU0WjAYMRYwFAYD VQQDEw02YWI4Yzk3Ni0zODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUuqrq2owAHmlRgB9sSSm8vt4pDWNmdTjGR8lyXq9JR/FityA9iZCYj8M1CM L1oRCobwDtfRIt0LV3EoifkD/cljZQc/Ip9zFAOuKyRo45wbpVZcIDMO531jigrj wk7Lfa/JoXFus8ltCHnyPP6/Ntnu46Yggn2EHmtlCzsui/3/lofgsTgqEjTw4oui +C/9g99tElPv4pFcffvVN1fq3/2t3p44ep2SBg8CdzbeFD9kP4cukLC+aF2fP5+z mnK4/b/T6qSUsx+yIknL5vRVYMZxp4jsBqzz3jWm4OAfAmrcJebG3iP7xukA9z/j fmpS9EdlzI2DeJSyuyxWW55cnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0xb/RK oAtjx+HiCGc5GDjf2gk1MB8GA1UdIwQYMBaAFMQ8j+2kVRBZIpi1uVPiefus5Fpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ4OC84RDczM0FDQUMx MUUxMUYwOERERTg3ODdDNEY5QUUwMi94RHlQN2FSVkVGa2ltTFc1VS1KNS02emtX bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEeVA3YVJWRUZraW1MVzVVLUo1LTZ6a1dtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDQ4OC84RDczM0FDQUMxMUUxMUYwOERERTg3ODdDNEY5QUUwMi94RHlQN2FSVkVG a2ltTFc1VS1KNS02emtXbVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVFDmHImxXJqOAwMHFH+b3McO0ayTp+9j3EoSAhh4E6TdFl5tc1EG0e7NZCRG L0VFbm6oNuntb2kSRPyhXcoNzLEKBQ96ijdcPOsY9WpRnx7B2zkO8DnaFeEmrYfd Db+3XweJQpm8i47fTCxFij9TxBmUJcYDubhuKbiXNjPW2nJnxBsC+1Gr0ohDCREr AEl+xdo1WNOenTl2kh4auTcYM2NrsNWkmvswQmYBUIj2bUv6SeSySrFL9K0gtyXK +yyh497yqbo2ETFmFcY1ugWf4C8MFYYX37W5mTBASpD3V5Cz7iRsGKle6x6cmpez foVjQSjqNWzPTeq9p5iTwHUgcw== -----END CERTIFICATE-----Generated at Mon Sep 28 19:08:34 2026 by rpki-client