$ rpki-client -vvvf rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft File: xW0du4pgFr90xqhFxeNGKMJ4dzI.mft (raw, json) Hash identifier: CU7AEm2J1Ksdt3b/pBOkxTrS/Ry/U49tip8RL0ewRiU= Subject key identifier: E5:A2:45:22:A0:56:92:5B:BF:A8:FB:43:64:CD:06:AB:22:E0:5F:7D Authority key identifier: C5:6D:1D:BB:8A:60:16:BF:74:C6:A8:45:C5:E3:46:28:C2:78:77:32 Certificate issuer: /CN=A918110B/serialNumber=C56D1DBB8A6016BF74C6A845C5E34628C2787732 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft Manifest number: 2B Signing time: Fri 09 Oct 2026 09:33:28 +0000 Manifest this update: Fri 09 Oct 2026 09:33:27 +0000 Manifest next update: Fri 16 Oct 2026 09:33:27 +0000 Files and hashes: 1: xW0du4pgFr90xqhFxeNGKMJ4dzI.crl (hash: xp55soKVgA0PYee2meaSAZEkS7temwAODnrdNsfnERg=) 2: 8B5CA276955811F18B37A4936511F970.roa (hash: zA1G9LW2r1LXBPTfNsx/98LKYwa23E3TbJ+FMzKzcd0=) 3: 044B9692869F11F18E46D7236FA30FBC.roa (hash: I7p/0pECs9pLSsuX4d892DqcQ7FtCtuQLKWoIDde+T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.crl rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918110B, serialNumber=C56D1DBB8A6016BF74C6A845C5E34628C2787732 Validity Not Before: Oct 9 09:33:27 2026 GMT Not After : Oct 16 09:33:27 2026 GMT Subject: CN=6ac8b4e8-48b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:01:3e:f9:77:bc:58:a1:56:df:c4:9d:8a: a9:d8:59:53:f7:c9:e2:88:e1:a4:e8:41:c1:5d:81: 0f:58:f2:93:a6:65:a9:5e:27:5b:08:a9:14:2f:70: e7:a7:b8:86:94:d5:ff:64:d7:f3:ec:41:e0:8c:8b: 3a:c5:66:db:17:64:18:13:8d:0b:1f:10:73:5a:20: 87:8c:cd:4e:23:50:53:db:73:d4:b6:ef:ad:fc:79: c9:ed:d4:bf:7e:89:84:89:46:8f:b2:91:e9:ca:cb: b3:1b:aa:4a:e5:6f:7e:09:a6:08:e8:9e:c7:e9:5c: 5b:62:37:47:fd:7f:dc:61:68:93:85:d2:c0:34:90: c8:fd:bf:a2:37:fd:79:a3:a5:2b:98:19:9c:fc:fa: be:8a:51:42:f3:7f:3e:f2:c9:35:96:a6:9a:6b:cb: 12:54:97:f8:32:58:8c:b5:d3:02:e6:7c:9a:aa:36: 6e:31:48:12:a0:d0:1b:79:6b:85:78:69:53:a3:c7: 1b:a7:41:f3:cf:27:c3:74:f7:78:ae:e4:69:97:e4: 59:b4:c6:a8:8f:c2:19:97:ae:69:e5:3d:c1:9b:9d: 3c:e0:7c:c9:4b:72:36:b9:77:a0:65:68:fb:1e:27: 8a:11:0b:40:29:da:72:77:91:f9:26:13:24:3e:c5: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A2:45:22:A0:56:92:5B:BF:A8:FB:43:64:CD:06:AB:22:E0:5F:7D X509v3 Authority Key Identifier: keyid:C5:6D:1D:BB:8A:60:16:BF:74:C6:A8:45:C5:E3:46:28:C2:78:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7a:7d:5a:79:8d:8d:21:9b:6d:86:da:30:7f:da:68:97:da: d9:20:d8:a5:67:ba:78:32:c3:21:bb:83:bb:a2:0b:71:17:92: c1:7a:69:1f:d5:71:cf:8a:a2:66:07:d8:bb:80:a6:3c:96:31: a0:92:fb:80:e0:74:b6:9d:50:a0:b2:eb:aa:d2:90:31:4f:8f: d2:2d:d6:42:5f:e6:fb:72:0b:1f:e1:e6:d8:27:4b:2c:e5:8b: 0c:87:3b:b1:e7:e0:69:43:02:24:be:a6:a4:89:c2:58:c9:b4: 28:09:d8:13:7d:28:3d:5d:52:65:00:75:2f:66:27:fd:e3:ae: b5:0b:0b:df:40:b3:d9:fe:5b:73:5d:9b:4f:ba:90:f6:5a:8b: 8b:1b:2b:f4:c1:4e:ef:34:a5:2d:5b:b2:5d:57:3c:9f:d6:74: c5:0b:7a:69:bc:bc:d2:63:92:d7:19:62:07:5a:c2:24:dd:2a: d8:90:f2:95:5d:d4:c5:f4:7a:1d:ce:2e:62:23:d4:62:f0:c6: aa:62:a0:c3:df:ce:f5:ed:70:9e:ca:b4:fc:6d:55:69:4a:a3: 6a:b0:46:c6:7f:71:7e:77:6e:9c:59:d4:1d:22:e0:75:7f:e6: df:0a:11:ed:38:a5:de:e1:6f:28:44:70:58:bc:a6:6d:9d:75: 72:b0:45:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTEwQjExMC8GA1UEBRMoQzU2RDFEQkI4QTYwMTZCRjc0QzZBODQ1QzVFMzQ2MjhD Mjc4NzczMjAeFw0yNjEwMDkwOTMzMjdaFw0yNjEwMTYwOTMzMjdaMBgxFjAUBgNV BAMTDTZhYzhiNGU4LTQ4YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3vwE++Xe8WKFW38SdiqnYWVP3yeKI4aToQcFdgQ9Y8pOmZaleJ1sIqRQvcOen uIaU1f9k1/PsQeCMizrFZtsXZBgTjQsfEHNaIIeMzU4jUFPbc9S27638ecnt1L9+ iYSJRo+ykenKy7Mbqkrlb34JpgjonsfpXFtiN0f9f9xhaJOF0sA0kMj9v6I3/Xmj pSuYGZz8+r6KUULzfz7yyTWWpppryxJUl/gyWIy10wLmfJqqNm4xSBKg0Bt5a4V4 aVOjxxunQfPPJ8N093iu5GmX5Fm0xqiPwhmXrmnlPcGbnTzgfMlLcja5d6BlaPse J4oRC0Ap2nJ3kfkmEyQ+xbiFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5aJFIqBW klu/qPtDZM0GqyLgX30wHwYDVR0jBBgwFoAUxW0du4pgFr90xqhFxeNGKMJ4dzIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMTBCL0JBRUYwNzkwODY5 RTExRjFCMEMzRTBGMzZFQTMwRkJDL3hXMGR1NHBnRnI5MHhxaEZ4ZU5HS01KNGR6 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveFcwZHU0cGdGcjkweHFoRnhlTkdLTUo0ZHpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MTBCL0JBRUYwNzkwODY5RTExRjFCMEMzRTBGMzZFQTMwRkJDL3hXMGR1NHBnRnI5 MHhxaEZ4ZU5HS01KNGR6SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApen1aeY2NIZtthtowf9pol9rZINilZ7p4MsMhu4O7ogtxF5LBemkf1XHPiqJm B9i7gKY8ljGgkvuA4HS2nVCgsuuq0pAxT4/SLdZCX+b7cgsf4ebYJ0ss5YsMhzux 5+BpQwIkvqakicJYybQoCdgTfSg9XVJlAHUvZif94661CwvfQLPZ/ltzXZtPupD2 WouLGyv0wU7vNKUtW7JdVzyf1nTFC3ppvLzSY5LXGWIHWsIk3SrYkPKVXdTF9Hod zi5iI9Ri8MaqYqDD38717XCeyrT8bVVpSqNqsEbGf3F+d26cWdQdIuB1f+bfChHt OKXe4W8oRHBYvKZtnXVysEWq -----END CERTIFICATE-----Generated at Sat Oct 10 12:46:32 2026 by rpki-client