$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: 5OGuq7BjwNXtJEUhPkPwHzj2Hu89Yc14/DMGMLkWhhs= Subject key identifier: D3:56:93:C0:30:A8:01:3D:B6:CB:8A:75:2E:76:B2:5C:0D:B0:4F:FA Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 02E2 Signing time: Fri 25 Sep 2026 01:05:27 +0000 Manifest this update: Fri 25 Sep 2026 01:05:26 +0000 Manifest next update: Fri 02 Oct 2026 01:05:26 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: FTTr4q8vFl8UWcxoY6NUFyRGQjDplyHbA3gNvWwklxs=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: oF8S7Pot7FDKo2GEEMdlADVMTbeltD2yj2mRKY200Ag=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: uMB1cvVhprKp86XWev+HO3mpwPNrzk9do4ee899gfzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Sep 25 01:05:26 2026 GMT Not After : Oct 2 01:05:26 2026 GMT Subject: CN=6ab5c8d6-7ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:ad:4f:05:d6:83:fe:79:ec:af:e9:f5:4c: 20:f9:19:dd:4c:dd:2b:20:9c:a5:d5:5d:3e:75:0a: 27:ed:25:b9:ce:08:48:a2:25:43:af:13:e3:ff:34: d1:72:f5:ab:1f:c0:40:a4:cd:b3:e4:d1:6e:71:74: 97:b2:0a:1c:c4:1f:08:ba:96:5b:19:d9:45:dc:ed: 40:90:f7:f4:09:88:d4:2b:2b:4f:7a:28:dc:e6:b5: 64:3c:c3:c6:80:c5:c0:2d:9f:dc:35:4f:8d:cf:c9: ba:fe:e3:21:ce:45:af:6d:bb:a1:87:f2:5c:69:62: 53:ff:c0:d6:6b:26:59:08:72:31:42:63:39:9a:5c: 02:bd:61:24:f3:d8:13:5a:30:ba:d3:07:4a:d7:7e: b6:27:f0:64:5b:c5:e9:81:c0:e2:f6:79:43:d6:78: d7:01:40:e0:8e:ac:e6:ca:2a:c5:40:eb:c5:0d:57: ee:10:06:2d:15:65:cc:11:12:0c:a6:2b:f2:bb:10: 01:63:36:e9:37:e5:96:52:09:d9:30:00:fa:ba:1b: 1f:d9:58:4a:72:e4:70:48:d7:cc:19:db:63:85:5d: d5:1f:e4:15:64:95:62:42:be:77:6d:9f:e4:f0:c8: 2d:d0:80:44:41:73:49:02:a6:b2:70:8f:f3:bd:fe: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:56:93:C0:30:A8:01:3D:B6:CB:8A:75:2E:76:B2:5C:0D:B0:4F:FA X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ea:3a:86:68:cf:78:25:e0:2f:c5:54:8d:02:66:a6:13:4a: c2:34:b1:93:5e:7e:69:59:7f:a0:94:1f:57:51:b0:6d:c7:f7: f2:8a:f1:cd:bf:57:a8:50:4a:f0:c7:9a:4d:be:71:06:f1:06: 31:4b:66:ed:32:2c:27:e0:0d:6b:f5:ce:32:e4:05:2f:54:5b: 12:9b:34:b6:41:d6:51:de:bc:92:47:7e:e6:11:e1:3b:dd:02: 67:38:4a:bb:00:b3:05:03:d3:98:76:cd:62:c5:49:98:47:66: c0:13:e0:a5:6b:82:a5:e3:7d:dc:7c:d8:ca:b3:db:fe:7c:69: bd:d3:70:6c:a7:6d:d6:68:b0:e7:63:0b:e1:79:15:f0:a9:0d: b1:e6:68:1c:47:e9:ad:b4:5c:00:95:fb:90:16:37:ec:96:d7: 0b:19:3e:a0:83:3b:98:eb:b2:34:95:bb:b2:bf:83:ab:e6:c9: 14:4b:d4:47:e5:85:1b:b0:7c:df:89:cb:55:d0:c5:e7:6a:0e: bc:7c:ed:ef:52:65:49:83:80:16:17:15:b5:05:40:0f:26:e5: c7:7e:d8:f4:10:5f:a8:1f:1f:72:80:3a:66:0c:bd:1d:a4:53: 64:ec:4c:49:27:7a:04:58:7f:6a:96:a2:20:b3:38:35:6c:9c: 0e:f2:e6:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjYwOTI1MDEwNTI2WhcNMjYxMDAyMDEwNTI2WjAYMRYwFAYD VQQDEw02YWI1YzhkNi03YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+CtTwXWg/557K/p9Uwg+RndTN0rIJyl1V0+dQon7SW5zghIoiVDrxPj/zTR cvWrH8BApM2z5NFucXSXsgocxB8IupZbGdlF3O1AkPf0CYjUKytPeijc5rVkPMPG gMXALZ/cNU+Nz8m6/uMhzkWvbbuhh/JcaWJT/8DWayZZCHIxQmM5mlwCvWEk89gT WjC60wdK1362J/BkW8XpgcDi9nlD1njXAUDgjqzmyirFQOvFDVfuEAYtFWXMERIM pivyuxABYzbpN+WWUgnZMAD6uhsf2VhKcuRwSNfMGdtjhV3VH+QVZJViQr53bZ/k 8Mgt0IBEQXNJAqaycI/zvf6KqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNWk8Aw qAE9tsuKdS52slwNsE/6MB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABeo6hmjPeCXgL8VUjQJmphNKwjSxk15+aVl/oJQfV1Gwbcf38orxzb9XqFBK 8MeaTb5xBvEGMUtm7TIsJ+ANa/XOMuQFL1RbEps0tkHWUd68kkd+5hHhO90CZzhK uwCzBQPTmHbNYsVJmEdmwBPgpWuCpeN93HzYyrPb/nxpvdNwbKdt1miw52ML4XkV 8KkNseZoHEfprbRcAJX7kBY37JbXCxk+oIM7mOuyNJW7sr+Dq+bJFEvUR+WFG7B8 34nLVdDF52oOvHzt71JlSYOAFhcVtQVADyblx37Y9BBfqB8fcoA6Zgy9HaRTZOxM SSd6BFh/apaiILM4NWycDvLmLA== -----END CERTIFICATE-----Generated at Sun Sep 27 02:58:17 2026 by rpki-client