$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: wRirDhHbeFhHn+InC4c1UD7LP5RfUiRISuWmiqfX6po= Subject key identifier: 11:BB:02:91:D7:1F:88:90:03:7D:4A:46:1C:64:47:2A:14:1E:A4:F7 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 35A3 Signing time: Sun 20 Sep 2026 14:18:22 +0000 Manifest this update: Sun 20 Sep 2026 14:18:22 +0000 Manifest next update: Sun 27 Sep 2026 14:18:22 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: K6j/1iEF37Ee51SmVZ7JNBu2TgJIT383TFRskWEbCQQ=) 2: 1F40296A65AA11F1A2780DB67847A888.roa (hash: aRlf2HNOEY9j5M9MXEWB2McO60V4ZIRW70DicGrMpWQ=) 3: vq-jzurJvf_iwUA5gBqdHUdT-X4.asa (hash: XT2XymHIFcxFswC+pceRikbJHvEukoNfqTDYHUrpUNA=) 4: B683232C65AA11F1B5A6BBF27847A888.roa (hash: ui+fKkNRAL+b96meDYqRb3fMZ9lGNQU6S4pF6IMCEJk=) 5: FFF66C16B1FA11F18EC9E9F94D11F970.roa (hash: 31r/NUhfJc3wBY0fXa2FzBDhQtZ+BRBErxgF/gnko1I=) 6: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: x81djxirc4TZ7LBWsfaYDwm6dEqBh0TJcdGGB4pBfl8=) 7: 1566F532B1C111F1A50EDCAD3B11F970.roa (hash: nZ5rLJSZK3TF2d6vh1wECL/1VzHDHGkITXzUvm/ljz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13779 (0x35d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Sep 20 14:18:22 2026 GMT Not After : Sep 27 14:18:22 2026 GMT Subject: CN=6aafeb2e-ca9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:b5:77:09:27:72:fe:e7:2f:13:3f:c9:1a: b2:61:3f:c2:3b:e0:cf:c7:5a:cf:e8:b8:b4:be:b7: 14:69:f3:18:fd:62:d0:92:03:e5:6c:bf:e7:db:fb: 58:b3:0e:9b:49:d6:4e:b6:6e:36:77:45:46:27:6c: df:b3:21:49:29:2c:71:d8:47:12:1d:39:20:42:af: e0:f8:6f:b2:5d:db:35:86:10:f0:3a:16:b5:46:64: a6:00:ae:10:62:76:39:7f:7a:a8:01:19:a0:76:39: 2b:e2:2b:24:1d:8c:9b:73:27:af:ba:26:be:94:43: 53:7f:01:ce:a4:79:c3:d5:41:3b:e8:dd:91:64:7e: 5d:99:ed:32:2c:1b:27:81:34:57:6d:8c:35:8d:36: 93:cc:c5:3a:3a:20:41:8f:13:8f:37:9e:64:91:7f: 52:2e:f1:cf:0b:00:12:31:e4:0b:d7:79:f1:2d:f4: bc:9d:f7:f5:35:fd:9f:cc:56:f6:9c:41:94:5f:9f: a7:ca:aa:be:13:a4:aa:e1:9a:bc:a2:b4:6e:a2:de: ed:4a:50:c6:99:43:f8:c3:40:d4:9f:bf:ea:a7:2c: 13:5b:8d:a6:87:b5:c7:f0:68:f2:3b:f7:33:09:7c: e4:48:10:f2:69:08:63:7b:8d:d8:b2:29:17:a1:aa: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BB:02:91:D7:1F:88:90:03:7D:4A:46:1C:64:47:2A:14:1E:A4:F7 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:a4:7e:de:20:77:72:f0:43:30:2a:cb:94:d1:25:b2:d8:0c: 3c:d7:4e:34:d3:34:eb:5d:2b:b2:d0:3d:46:93:88:b0:98:07: 41:e1:3b:a5:eb:e3:da:38:66:e6:7f:24:ad:6a:5d:53:b8:97: 3c:d0:c6:be:d6:53:0f:80:97:8a:66:19:86:3f:c4:56:7a:c4: cc:a7:54:f0:7e:d4:6d:cc:57:33:42:e3:9d:c4:85:4f:4d:e9: 0f:f5:9b:89:3d:14:75:6d:80:74:57:b2:b9:8b:6d:64:3a:b3: 38:52:74:77:1d:2f:f7:fe:d3:c1:6a:a8:88:2a:ab:77:7b:24: 24:6e:d2:30:80:b4:0f:a1:5d:b0:35:21:a3:0a:31:7d:f4:b3: c6:ab:46:21:96:3c:46:e4:d9:c2:47:fe:82:e9:92:63:da:7b: 26:fc:96:54:2e:a4:dc:21:b1:e6:57:e7:e7:67:8d:6f:6b:3a: f8:4f:c6:af:60:bb:1d:fd:d3:c0:54:a9:45:1b:ad:d3:03:56: dd:d5:e0:24:6c:8b:f9:4e:68:69:39:24:d5:e3:bb:08:12:07: 24:f3:4b:e0:ad:0d:4d:7b:b1:f8:1f:16:d9:e6:c8:d6:82:d5: 5e:57:bd:3d:d9:af:b7:45:08:e4:7a:0a:3f:25:9b:c8:c9:76: 5e:d0:82:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwOTIwMTQxODIyWhcNMjYwOTI3MTQxODIyWjAYMRYwFAYD VQQDEw02YWFmZWIyZS1jYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArS+1dwkncv7nLxM/yRqyYT/CO+DPx1rP6Li0vrcUafMY/WLQkgPlbL/n2/tY sw6bSdZOtm42d0VGJ2zfsyFJKSxx2EcSHTkgQq/g+G+yXds1hhDwOha1RmSmAK4Q YnY5f3qoARmgdjkr4iskHYybcyevuia+lENTfwHOpHnD1UE76N2RZH5dme0yLBsn gTRXbYw1jTaTzMU6OiBBjxOPN55kkX9SLvHPCwASMeQL13nxLfS8nff1Nf2fzFb2 nEGUX5+nyqq+E6Sq4Zq8orRuot7tSlDGmUP4w0DUn7/qpywTW42mh7XH8GjyO/cz CXzkSBDyaQhje43YsikXoaqiLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBG7ApHX H4iQA31KRhxkRyoUHqT3MB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyKR+3iB3cvBDMCrLlNElstgMPNdONNM0610rstA9RpOIsJgHQeE7pevj2jhm 5n8krWpdU7iXPNDGvtZTD4CXimYZhj/EVnrEzKdU8H7UbcxXM0LjncSFT03pD/Wb iT0UdW2AdFeyuYttZDqzOFJ0dx0v9/7TwWqoiCqrd3skJG7SMIC0D6FdsDUhowox ffSzxqtGIZY8RuTZwkf+gumSY9p7JvyWVC6k3CGx5lfn52eNb2s6+E/Gr2C7Hf3T wFSpRRut0wNW3dXgJGyL+U5oaTkk1eO7CBIHJPNL4K0NTXux+B8W2ebI1oLVXle9 Pdmvt0UI5HoKPyWbyMl2XtCCXg== -----END CERTIFICATE-----Generated at Sun Sep 20 23:15:29 2026 by rpki-client