$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: ICSg0bLY6ByvXA0DuE9PFrXVfbVK6qEse7A2OQbydMg= Subject key identifier: 0C:C6:83:34:56:6B:E5:BE:D9:05:D9:D9:CE:44:99:F5:DE:8A:29:22 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 2463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 2441 Signing time: Sat 10 Oct 2026 15:47:31 +0000 Manifest this update: Sat 10 Oct 2026 15:47:31 +0000 Manifest next update: Sat 17 Oct 2026 15:47:31 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: MA9kQQY+EcYQnci4hc8mEbw4Cz8IFFf30d9Ey3oAqg4=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: MDPP/VIQwu8qPe+/SiKWS6o/CY6nGMpyQ4F+e1jNL0g=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: WHFTgTdN91JmiwgkjLTnaveiREzYpYdH00fsH4EjbJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9315 (0x2463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Oct 10 15:47:31 2026 GMT Not After : Oct 17 15:47:31 2026 GMT Subject: CN=6aca5e13-84cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:ab:cd:c3:03:32:10:cd:65:c9:61:80:0a: fa:0f:bf:ec:b2:eb:0a:c6:0a:cf:f7:0a:f8:56:a8: 73:94:75:f3:39:09:36:d5:bb:98:83:2a:43:00:07: 43:7f:27:dd:0a:80:9b:ad:4f:2a:bc:08:d3:c1:2f: a8:f0:c1:36:95:5c:3c:28:7d:6b:e1:a0:0b:63:a6: 44:4f:72:1e:86:7e:2f:d4:a6:dd:97:cb:57:f0:0a: 6b:43:c9:84:37:84:f7:bb:8f:16:d7:6f:58:7e:dd: c0:4b:e1:a7:a3:d6:99:bd:53:a1:5f:52:84:71:50: 6b:f4:bc:fc:be:ec:41:2e:16:1f:39:c6:a3:1e:28: 68:02:40:bc:2e:8d:64:d8:71:8f:a7:d4:f8:6b:58: 31:6f:42:2f:c5:16:9c:f9:69:1d:01:a9:16:ff:ae: a0:67:85:87:9a:c9:f1:77:18:9f:56:76:8e:fc:d0: 20:1e:07:a0:2e:e8:78:67:ca:10:d6:a1:9b:e3:fe: 41:4c:68:c8:53:45:e3:0e:97:91:6f:35:05:6f:65: 14:6e:ee:2c:73:59:49:86:ed:f9:66:5d:c3:2f:16: 4f:9e:d3:27:db:9e:91:a8:36:24:73:25:b1:d1:42: f8:e4:a7:49:97:c3:70:3f:4c:4a:dc:0f:d6:44:75: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C6:83:34:56:6B:E5:BE:D9:05:D9:D9:CE:44:99:F5:DE:8A:29:22 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5b:a4:5b:6c:6a:f8:cc:a7:25:5d:ca:99:fd:c0:ff:ab:0f: 58:6b:86:0e:ae:90:60:52:09:85:40:2d:8f:fc:28:4b:0d:bc: d6:16:e7:f3:99:e1:55:73:95:e5:fb:21:65:2b:cf:af:6d:3f: f1:64:8b:e0:ce:07:13:f3:ad:bd:c6:d8:98:60:17:a7:b1:4b: 79:99:b6:90:a8:7b:8e:46:42:6b:86:94:1e:52:74:d7:e2:6f: a2:68:99:a7:a7:b7:d7:d0:dd:6b:b4:c0:be:f5:48:20:71:4e: 3d:d6:0f:25:dc:62:7e:3f:bb:f8:07:fb:e1:41:be:53:36:3b: 73:3c:67:69:1e:e8:43:ef:6d:21:c3:d2:0d:a1:57:3d:62:97: 3f:a7:f4:4d:9c:d8:8e:19:18:b3:b5:44:df:51:bd:64:82:76: 22:6d:aa:3a:94:39:53:52:73:3f:55:7b:59:3b:31:cb:3d:ef: 13:74:ef:cb:9f:53:ee:b5:bd:bb:89:2d:6f:f9:2a:fc:d3:da: 4f:6d:7b:90:49:2c:e4:b9:19:8c:db:7b:f1:a4:88:1e:a3:44: eb:6e:1f:8e:11:8a:3b:fe:c6:60:38:59:7d:d1:0e:a6:bd:ac: f1:82:3e:3a:0e:65:83:17:d4:35:fb:94:43:5c:6d:50:00:82: db:8a:cf:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjYxMDEwMTU0NzMxWhcNMjYxMDE3MTU0NzMxWjAYMRYwFAYD VQQDEw02YWNhNWUxMy04NGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VerzcMDMhDNZclhgAr6D7/ssusKxgrP9wr4VqhzlHXzOQk21buYgypDAAdD fyfdCoCbrU8qvAjTwS+o8ME2lVw8KH1r4aALY6ZET3Iehn4v1Kbdl8tX8AprQ8mE N4T3u48W129Yft3AS+Gno9aZvVOhX1KEcVBr9Lz8vuxBLhYfOcajHihoAkC8Lo1k 2HGPp9T4a1gxb0IvxRac+WkdAakW/66gZ4WHmsnxdxifVnaO/NAgHgegLuh4Z8oQ 1qGb4/5BTGjIU0XjDpeRbzUFb2UUbu4sc1lJhu35Zl3DLxZPntMn256RqDYkcyWx 0UL45KdJl8NwP0xK3A/WRHUgEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzGgzRW a+W+2QXZ2c5EmfXeiikiMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiVukW2xq+MynJV3Kmf3A/6sPWGuGDq6QYFIJhUAtj/woSw281hbn85nhVXOV 5fshZSvPr20/8WSL4M4HE/OtvcbYmGAXp7FLeZm2kKh7jkZCa4aUHlJ01+JvomiZ p6e319Dda7TAvvVIIHFOPdYPJdxifj+7+Af74UG+UzY7czxnaR7oQ+9tIcPSDaFX PWKXP6f0TZzYjhkYs7VE31G9ZIJ2Im2qOpQ5U1JzP1V7WTsxyz3vE3Tvy59T7rW9 u4ktb/kq/NPaT217kEks5LkZjNt78aSIHqNE624fjhGKO/7GYDhZfdEOpr2s8YI+ Og5lgxfUNfuUQ1xtUACC24rPHQ== -----END CERTIFICATE-----Generated at Sun Oct 11 18:29:05 2026 by rpki-client