$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft File: xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json) Hash identifier: DJPllAG3BrfuEi7BRB1E808mRLjq3SnHi4wGtl/L9no= Subject key identifier: 1F:75:E6:6E:55:FE:E0:0C:98:DA:F6:8E:C7:77:A3:F1:65:95:8A:21 Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft Manifest number: 8D Signing time: Fri 09 Oct 2026 08:20:34 +0000 Manifest this update: Fri 09 Oct 2026 08:20:33 +0000 Manifest next update: Fri 16 Oct 2026 08:20:33 +0000 Files and hashes: 1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: SuryjZf23hjqtMtWfC37al4uyG6/a14smIkrBGq27Ww=) 2: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=) 3: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Validity Not Before: Oct 9 08:20:33 2026 GMT Not After : Oct 16 08:20:33 2026 GMT Subject: CN=6ac8a3d2-e956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f1:89:90:8c:47:04:a1:80:59:bb:b8:e1:d6: 9f:5e:19:a4:82:1e:e6:82:9a:c0:40:d7:18:f2:bd: 9b:02:95:43:aa:55:e2:fc:78:8d:20:b0:95:5e:ab: f8:6c:e2:27:1a:40:51:1b:4c:09:92:0a:2d:d3:88: e2:87:d6:e3:74:a2:a7:7a:c7:5e:bb:64:34:56:28: 77:9d:7a:ce:91:ab:96:07:ea:2f:22:81:f4:a1:47: 85:1a:b6:6e:1c:56:6b:8c:57:00:8c:ec:53:05:3b: 9e:03:02:79:b3:c3:16:8a:62:d3:1a:cb:8f:fe:6a: c5:0b:1d:fc:7b:33:2f:f6:3b:17:24:26:b7:88:0d: 87:a5:7e:97:a7:65:20:c6:91:1e:64:83:69:b6:89: d5:4b:ac:20:74:c7:12:0f:09:a0:3b:8d:50:f3:0c: 88:e4:ab:95:94:6c:cb:ef:4a:78:de:2e:3b:21:4f: 6e:ef:0c:44:e7:66:2f:c0:53:62:0d:c3:3f:ef:43: 0f:f9:62:a4:0a:32:21:49:46:f4:c4:05:a7:f3:6c: fe:53:8d:4f:09:ee:03:d9:b7:53:bc:0f:89:9e:5d: 52:68:21:03:28:90:f9:6c:14:ec:4c:22:2a:78:8a: 36:7d:49:cc:f2:4a:a6:37:93:c1:47:59:3e:7a:67: 28:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:75:E6:6E:55:FE:E0:0C:98:DA:F6:8E:C7:77:A3:F1:65:95:8A:21 X509v3 Authority Key Identifier: keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b7:a8:db:58:26:79:58:f2:b5:7c:de:70:ca:63:ed:81:78: 71:5e:ed:af:d4:c3:a9:ac:51:60:a8:7f:30:c7:44:b5:e9:37: 73:42:60:63:86:90:5a:46:ab:5b:57:81:fb:d9:f1:92:fd:32: 7a:35:e7:30:ad:3e:84:3a:bf:3a:07:5a:90:5f:f3:03:5d:ce: 71:a3:b8:10:ed:b5:c3:e1:d4:66:44:ab:31:4a:bc:6e:5b:b2: 37:be:71:41:0e:e5:2a:8c:4c:98:7d:fb:4a:d9:35:70:d9:d9: 5c:99:e2:dd:29:b3:b6:d5:3e:d5:87:51:5d:f3:14:cf:a7:a2: 08:c1:17:a6:e9:81:38:99:cf:88:12:dd:27:e8:ed:4d:4d:22: 9c:48:3f:f1:46:02:2a:c1:b7:d6:0b:5f:bf:34:04:a3:c9:44: 8c:01:c7:d9:d6:69:26:31:c2:2e:03:03:63:85:05:32:d5:2d: e1:3a:f3:20:74:91:67:de:cc:05:f3:f6:58:95:02:4c:05:e0: 0d:e6:b9:a2:73:28:68:34:eb:1c:4f:3c:d0:2f:b7:b3:b5:e6: be:ce:aa:14:64:48:e0:09:5d:bb:94:30:56:e1:10:1c:5f:fd: 54:b5:5f:39:7e:14:2d:19:9c:02:23:4d:b2:67:56:d1:93:63: 70:d8:0f:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBNTUxMTAvBgNVBAUTKEM1RUIyNTQ2QkI3M0FDRTY5M0UxOUFCMTA3RDgzRjI2 NjYzMkNFRTgwHhcNMjYxMDA5MDgyMDMzWhcNMjYxMDE2MDgyMDMzWjAYMRYwFAYD VQQDEw02YWM4YTNkMi1lOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/GJkIxHBKGAWbu44dafXhmkgh7mgprAQNcY8r2bApVDqlXi/HiNILCVXqv4 bOInGkBRG0wJkgot04jih9bjdKKnesdeu2Q0Vih3nXrOkauWB+ovIoH0oUeFGrZu HFZrjFcAjOxTBTueAwJ5s8MWimLTGsuP/mrFCx38ezMv9jsXJCa3iA2HpX6Xp2Ug xpEeZINptonVS6wgdMcSDwmgO41Q8wyI5KuVlGzL70p43i47IU9u7wxE52YvwFNi DcM/70MP+WKkCjIhSUb0xAWn82z+U41PCe4D2bdTvA+Jnl1SaCEDKJD5bBTsTCIq eIo2fUnM8kqmN5PBR1k+emcoCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB915m5V /uAMmNr2jsd3o/FllYohMB8GA1UdIwQYMBaAFMXrJUa7c6zmk+GasQfYPyZmMs7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E1NS9CMzJCNTAyOEY3 QTUxMUYwODdFNTFGMTY1NTZGNTZCQy94ZXNsUnJ0enJPYVQ0WnF4QjlnX0ptWXl6 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3hlc2xScnR6ck9hVDRacXhCOWdfSm1ZeXp1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E1NS9CMzJCNTAyOEY3QTUxMUYwODdFNTFGMTY1NTZGNTZCQy94ZXNsUnJ0enJP YVQ0WnF4QjlnX0ptWXl6dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHLeo21gmeVjytXzecMpj7YF4cV7tr9TDqaxRYKh/MMdEtek3c0JgY4aQWkar W1eB+9nxkv0yejXnMK0+hDq/OgdakF/zA13OcaO4EO21w+HUZkSrMUq8bluyN75x QQ7lKoxMmH37Stk1cNnZXJni3SmzttU+1YdRXfMUz6eiCMEXpumBOJnPiBLdJ+jt TU0inEg/8UYCKsG31gtfvzQEo8lEjAHH2dZpJjHCLgMDY4UFMtUt4TrzIHSRZ97M BfP2WJUCTAXgDea5onMoaDTrHE880C+3s7Xmvs6qFGRI4Aldu5QwVuEQHF/9VLVf OX4ULRmcAiNNsmdW0ZNjcNgPUg== -----END CERTIFICATE-----Generated at Sat Oct 10 16:23:30 2026 by rpki-client