$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json) Hash identifier: rSXMGiO0vtgbiwju1NGtIPoAq20I9AL5YTx3v2rb5gk= Subject key identifier: 7C:A3:27:BD:BE:AC:7C:DE:4F:D1:08:21:BE:B4:80:D3:60:21:D4:5D Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft Manifest number: 056C Signing time: Fri 04 Sep 2026 23:08:01 +0000 Manifest this update: Fri 04 Sep 2026 23:08:00 +0000 Manifest next update: Fri 11 Sep 2026 23:08:00 +0000 Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: EhgSLxjLuX/x+Aa5CnF8nSN5f2wHUCRZoLRXwZ3mWBI=) 2: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: TtIgh6p3MeT87i0AxcRjiCaJmw5Zn2R/2iZkAkCBffQ=) 3: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xF2IvoVXmAincHuvdv8xT2emt6/vG3hUCriU6a0X2F4=) 4: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: YlLnh1haCAguuDMWLHxz+klHykWczeyMGFHRpbzDxJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Validity Not Before: Sep 4 23:08:00 2026 GMT Not After : Sep 11 23:08:00 2026 GMT Subject: CN=6a9b4f51-6e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:82:82:e4:0d:ac:32:40:88:b2:70:e8:c8: 4f:45:a1:51:e6:eb:24:82:1a:28:82:49:d9:2e:a8: c5:86:6b:4b:0f:f8:ea:da:54:16:96:94:b5:ea:b1: db:b1:76:ac:d2:ac:71:a3:74:ec:63:70:5a:8d:49: 7b:e9:6e:73:de:c8:0d:56:c1:39:d2:10:9b:8c:6f: 78:1b:b2:b9:0c:ec:2c:48:5f:b5:ed:4d:2a:71:84: c3:c1:c2:c2:d9:04:99:99:ff:6c:f4:17:75:fe:e0: 63:b6:ff:49:25:e7:8b:1d:52:b4:e7:e4:a7:09:20: af:df:e7:1c:ba:da:6c:db:c4:63:e5:03:a1:92:7c: 4f:01:7f:8d:e6:13:89:42:ea:4f:1e:df:a9:89:73: 37:2c:20:4c:b9:41:b4:db:7e:90:58:92:51:99:43: 6b:85:8c:37:5f:34:bd:6a:c4:c1:ef:5b:94:cc:1d: 1d:43:3a:2d:b1:60:9f:01:52:77:3d:ac:12:6b:18: d2:60:b3:16:8d:64:be:5d:c5:72:c1:bb:29:29:32: 09:a4:b8:3d:a0:a0:ec:3d:85:19:4e:72:1b:6b:fc: f0:b7:06:71:6e:cf:3a:7b:b5:f1:88:7e:4c:36:af: 84:e4:d6:5d:13:6f:f5:37:1d:f9:62:e1:22:1e:96: ba:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A3:27:BD:BE:AC:7C:DE:4F:D1:08:21:BE:B4:80:D3:60:21:D4:5D X509v3 Authority Key Identifier: keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:04:89:d8:c3:fc:5c:9c:da:af:e9:39:c7:3e:bd:99:0d:7a: b6:89:a0:52:af:98:43:eb:35:89:b0:8f:1f:df:f5:52:13:84: 68:f6:f5:ee:49:04:e3:ad:bb:1f:ee:fd:86:c6:49:da:9a:3f: 28:72:e5:a0:11:82:07:66:13:16:f8:e8:23:0a:83:25:0e:b2: 12:6b:34:f3:8d:fe:c4:16:45:c2:0e:7f:67:ed:de:da:8a:52: e6:34:cd:11:a6:72:15:7c:e0:a8:63:3e:1b:5d:68:18:c4:3e: ad:0c:8a:e3:af:23:82:03:b3:28:02:ed:25:62:12:80:d1:d7: cb:8b:7d:7d:90:2b:1e:5c:83:43:b9:74:10:1d:4a:51:ed:d4: 38:ae:a3:6e:74:ec:d0:25:91:f7:3c:3d:c7:35:b4:e2:49:36: a8:d0:d2:63:3d:4f:2b:46:8b:53:98:df:f6:cc:47:d1:a1:a6: 01:9e:b8:1d:5d:c2:04:e5:6d:b1:82:43:7f:60:ea:f1:08:71: 91:49:78:ba:6d:8c:61:3e:35:cb:a2:4a:23:4f:7b:c9:b1:5c: 4d:75:d6:e9:a4:9d:b3:e8:37:39:e2:78:1b:7d:14:18:ea:25: 21:73:b0:58:20:87:e9:c5:b3:74:f7:d3:be:82:54:37:46:c4: 8b:68:1e:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC NzQ1NkI3MTMwHhcNMjYwOTA0MjMwODAwWhcNMjYwOTExMjMwODAwWjAYMRYwFAYD VQQDEw02YTliNGY1MS02ZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodeCguQNrDJAiLJw6MhPRaFR5uskghoogknZLqjFhmtLD/jq2lQWlpS16rHb sXas0qxxo3TsY3BajUl76W5z3sgNVsE50hCbjG94G7K5DOwsSF+17U0qcYTDwcLC 2QSZmf9s9Bd1/uBjtv9JJeeLHVK05+SnCSCv3+ccutps28Rj5QOhknxPAX+N5hOJ QupPHt+piXM3LCBMuUG0236QWJJRmUNrhYw3XzS9asTB71uUzB0dQzotsWCfAVJ3 PawSaxjSYLMWjWS+XcVywbspKTIJpLg9oKDsPYUZTnIba/zwtwZxbs86e7XxiH5M Nq+E5NZdE2/1Nx35YuEiHpa6RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyjJ72+ rHzeT9EIIb60gNNgIdRdMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2 QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0 eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0 QWVwVUdMejZOUEczUld0eE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqwSJ2MP8XJzar+k5xz69mQ16tomgUq+YQ+s1ibCPH9/1UhOEaPb17kkE4627 H+79hsZJ2po/KHLloBGCB2YTFvjoIwqDJQ6yEms0843+xBZFwg5/Z+3e2opS5jTN EaZyFXzgqGM+G11oGMQ+rQyK468jggOzKALtJWISgNHXy4t9fZArHlyDQ7l0EB1K Ue3UOK6jbnTs0CWR9zw9xzW04kk2qNDSYz1PK0aLU5jf9sxH0aGmAZ64HV3CBOVt sYJDf2Dq8QhxkUl4um2MYT41y6JKI097ybFcTXXW6aSds+g3OeJ4G30UGOolIXOw WCCH6cWzdPfTvoJUN0bEi2geWA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:54:22 2026 by rpki-client