$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft File: XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft (raw, json) Hash identifier: IafQLJ622GPBiAPJdPtQouvjnDsmkzukuIS+QOlBInw= Subject key identifier: 16:66:4B:E7:6B:44:FB:66:E0:8E:E1:AB:AC:5D:27:D3:5F:5C:8F:17 Authority key identifier: 5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50 Certificate issuer: /CN=A918D584/serialNumber=5F215F14BF066EE008E4A766FAE9D9115324BE50 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft Manifest number: 1B Signing time: Mon 21 Sep 2026 08:58:59 +0000 Manifest this update: Mon 21 Sep 2026 08:58:58 +0000 Manifest next update: Mon 28 Sep 2026 08:58:58 +0000 Files and hashes: 1: XyFfFL8GbuAI5Kdm-unZEVMkvlA.crl (hash: KXd7o7z1F5CDy7rw3Et73UXS2p5vb3fUTwi2yVGrcDA=) 2: D734C78E960511F1BEC32C725911F970.roa (hash: fnk0wbqiXuJRxkyLavqlisJqxLT77Z7etsUUv1BsVLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.crl rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D584, serialNumber=5F215F14BF066EE008E4A766FAE9D9115324BE50 Validity Not Before: Sep 21 08:58:58 2026 GMT Not After : Sep 28 08:58:58 2026 GMT Subject: CN=6ab0f1d2-489f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:81:6c:f0:eb:6a:d1:6c:a0:48:16:93:79: 06:d8:3e:f2:b3:cc:82:b7:ac:dd:64:e0:df:e4:ec: c8:c8:e5:da:30:ee:9f:dc:29:0f:44:5c:65:d8:4f: e5:c8:a8:39:53:fb:0d:6d:5b:50:c9:56:f8:03:09: 0f:6f:eb:88:7c:a2:cf:0a:5a:90:20:1a:2b:e3:e4: 3b:a4:d3:81:00:bf:8b:fc:99:9d:7d:a3:c2:39:b3: 99:2b:fc:03:d6:39:d9:68:16:5e:3d:0a:90:60:7e: c0:dc:83:25:88:aa:fc:6e:51:a2:da:2b:94:2e:0c: 30:ff:57:79:2b:25:1e:34:9e:34:b7:93:04:71:86: b9:ac:a7:cb:6b:d6:b6:a2:96:42:24:c2:d3:74:9e: d2:9a:d5:cb:49:25:84:51:77:d9:21:a2:db:02:c3: 77:48:f7:c9:34:72:84:22:f9:d7:da:b3:c4:9d:90: 46:84:84:c1:ec:46:69:a8:a3:d2:eb:40:78:90:44: 8e:f0:f3:89:ab:5d:5c:23:1d:57:ef:66:00:12:ea: 1e:16:e8:cf:f6:da:6f:4d:5c:69:ea:f3:66:52:b4: b9:e5:ee:2a:f0:55:f1:ad:9b:91:21:17:2f:11:74: 28:84:9d:f6:88:fc:33:fc:c5:9f:1a:e9:13:c8:e8: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:4B:E7:6B:44:FB:66:E0:8E:E1:AB:AC:5D:27:D3:5F:5C:8F:17 X509v3 Authority Key Identifier: keyid:5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f2:28:86:ed:b1:8b:66:fe:c8:81:29:69:e6:70:6f:34:bd: 5b:84:ec:1f:24:7c:e8:fd:08:03:ac:aa:aa:df:07:9c:57:8d: 2d:4d:0a:77:00:bc:df:f6:a7:34:c6:69:43:37:c2:03:81:5b: 13:e1:79:27:7f:a8:15:40:4e:8f:06:7f:fc:7a:c2:98:70:c0: 9d:47:6e:51:db:8c:e2:d3:88:31:2b:8d:8a:37:91:d4:34:b9: 14:da:c0:61:67:e7:5f:07:2b:3a:7d:c4:e3:f4:38:69:20:fb: c1:49:29:4b:d8:8b:bd:22:30:fb:f3:6c:c5:1f:43:11:95:d9: 6e:c7:03:69:d0:00:bb:bc:b7:d8:84:8e:15:93:aa:8c:40:83: 30:ec:f0:62:5c:1a:a2:7c:35:54:67:4d:5f:9d:54:f1:05:6c: 76:25:29:bd:cc:f1:7f:42:d1:f4:eb:da:09:54:a8:84:db:12: 44:31:cb:21:7f:e3:44:b2:26:05:e6:9a:17:20:90:89:a4:ea: b2:03:71:d8:a1:82:d1:a7:a6:e1:0a:c4:14:13:57:13:71:84: 59:3d:05:a5:80:75:71:35:1d:a7:d0:f0:73:6b:28:97:57:34: 9b:99:db:5e:fd:ee:99:cd:19:df:4b:52:76:40:3b:ca:b5:1f: 65:06:9f:94 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDU4NDExMC8GA1UEBRMoNUYyMTVGMTRCRjA2NkVFMDA4RTRBNzY2RkFFOUQ5MTE1 MzI0QkU1MDAeFw0yNjA5MjEwODU4NThaFw0yNjA5MjgwODU4NThaMBgxFjAUBgNV BAMTDTZhYjBmMWQyLTQ4OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMhoFs8Otq0WygSBaTeQbYPvKzzIK3rN1k4N/k7MjI5dow7p/cKQ9EXGXYT+XI qDlT+w1tW1DJVvgDCQ9v64h8os8KWpAgGivj5Duk04EAv4v8mZ19o8I5s5kr/APW OdloFl49CpBgfsDcgyWIqvxuUaLaK5QuDDD/V3krJR40njS3kwRxhrmsp8tr1rai lkIkwtN0ntKa1ctJJYRRd9khotsCw3dI98k0coQi+dfas8SdkEaEhMHsRmmoo9Lr QHiQRI7w84mrXVwjHVfvZgAS6h4W6M/22m9NXGnq82ZStLnl7irwVfGtm5EhFy8R dCiEnfaI/DP8xZ8a6RPI6MHxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFmZL52tE +2bgjuGrrF0n019cjxcwHwYDVR0jBBgwFoAUXyFfFL8GbuAI5Kdm+unZEVMkvlAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENTg0LzMxQjJBQzY2OTVF RTExRjE5RjY0NDZEMjUxMTFGOTcwL1h5RmZGTDhHYnVBSTVLZG0tdW5aRVZNa3Zs QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHlGZkZMOEdidUFJNUtkbS11blpFVk1rdmxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NTg0LzMxQjJBQzY2OTVFRTExRjE5RjY0NDZEMjUxMTFGOTcwL1h5RmZGTDhHYnVB STVLZG0tdW5aRVZNa3ZsQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB58iiG7bGLZv7IgSlp5nBvNL1bhOwfJHzo/QgDrKqq3wecV40tTQp3ALzf9qc0 xmlDN8IDgVsT4Xknf6gVQE6PBn/8esKYcMCdR25R24zi04gxK42KN5HUNLkU2sBh Z+dfBys6fcTj9DhpIPvBSSlL2Iu9IjD782zFH0MRldluxwNp0AC7vLfYhI4Vk6qM QIMw7PBiXBqifDVUZ01fnVTxBWx2JSm9zPF/QtH069oJVKiE2xJEMcshf+NEsiYF 5poXIJCJpOqyA3HYoYLRp6bhCsQUE1cTcYRZPQWlgHVxNR2n0PBzayiXVzSbmdte /e6ZzRnfS1J2QDvKtR9lBp+U -----END CERTIFICATE-----Generated at Tue Sep 22 16:26:52 2026 by rpki-client