$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: SOLf4AVCCnAEiWh5Z2o0haImYbboPpr+PYls/s75iWI= Subject key identifier: D5:B7:B0:D8:BA:8C:39:E0:3C:F8:6F:1F:69:8A:D2:5F:53:94:EA:76 Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 0576 Signing time: Sat 24 Oct 2026 23:16:48 +0000 Manifest this update: Sat 24 Oct 2026 23:16:48 +0000 Manifest next update: Sat 31 Oct 2026 23:16:48 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: ueIqxQ/jI2Qs7SuRfJ2pPXettvJOsZFuHgLSH085nW4=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: Oct 24 23:16:48 2026 GMT Not After : Oct 31 23:16:48 2026 GMT Subject: CN=6add3c60-96b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:1f:db:5f:79:6e:63:87:07:26:2e:a0:4b: 58:19:f8:ea:0c:dc:3d:69:98:e3:bd:c1:57:77:fb: 62:fe:6e:a6:81:6f:0a:ae:fb:c1:c5:1c:8a:32:ec: 53:66:42:f2:05:12:dd:ac:62:14:d2:39:9d:16:a3: d5:ed:bb:00:ed:8b:62:99:1a:63:98:fa:90:73:69: 7b:57:5d:c2:fe:bb:ff:b1:9d:00:1e:10:89:13:5a: 2b:e2:94:1d:50:9a:c3:77:eb:75:5c:fb:c2:d6:5e: 38:ff:6e:97:68:a2:d3:4f:aa:f9:c0:bb:97:3f:dc: 6b:29:51:67:89:e8:8f:7f:f1:83:40:9a:0a:18:5a: f0:13:75:b2:9e:84:4f:d3:48:64:61:8e:59:95:82: 75:b5:f2:6b:1d:5e:de:46:f0:c6:ff:0c:36:97:53: d1:ee:7d:7d:05:34:a6:b8:ae:b1:f0:5f:1c:d8:bc: b2:3a:c0:2f:d0:65:9e:7d:b1:54:92:29:85:0e:87: 3a:0b:ff:e7:2e:3b:e7:d5:e2:25:b1:71:80:b8:09: 8b:cc:62:60:e1:38:b9:61:39:0c:42:db:9c:f1:31: d4:3f:49:a7:95:ec:06:c9:43:f9:90:43:88:e5:31: 91:a2:7a:de:e1:f4:15:01:6f:e4:ba:a3:4d:ed:8d: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B7:B0:D8:BA:8C:39:E0:3C:F8:6F:1F:69:8A:D2:5F:53:94:EA:76 X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ff:71:12:71:bd:38:be:38:2b:0a:df:0a:3a:c4:ce:9f:63: 86:0f:ef:ba:60:a5:7a:8d:13:41:b9:4a:9e:03:7a:da:b2:0b: d9:ed:a0:f5:07:05:5c:ab:87:62:b9:eb:89:d5:c8:ac:48:01: bb:80:2a:c9:74:db:a5:de:2f:57:36:49:7e:02:44:67:31:9c: 3c:30:76:a3:76:43:a2:98:ed:ae:9f:0f:dd:8a:49:32:27:7c: 2d:55:82:ae:2f:b5:73:ab:00:12:3d:9e:5d:e5:69:af:a4:fd: b8:6d:eb:05:1b:a7:99:e2:f7:e0:92:65:46:55:4d:44:c4:11: ca:ff:0e:6e:05:08:e6:ea:4b:c9:86:29:a4:30:4f:10:9b:fd: ba:33:8c:3c:7e:a0:30:2a:d7:8c:2b:8f:c8:cc:c7:25:9f:46: d4:6a:17:29:86:9f:81:8f:7b:e9:c5:a5:e2:e5:5d:b5:82:94: 40:b5:6c:1b:34:ed:69:ed:aa:12:11:17:bd:64:54:e8:66:27: 31:bf:f2:ea:c5:2f:96:7b:14:8d:b1:da:c4:e3:47:d4:c1:08: c5:6c:b7:ac:34:ae:61:38:60:09:a4:eb:8a:c8:64:41:b5:2e: 98:5c:47:59:a6:09:ae:44:e0:0e:96:23:2a:68:cb:4c:6e:c5: 89:48:ce:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjYxMDI0MjMxNjQ4WhcNMjYxMDMxMjMxNjQ4WjAYMRYwFAYD VQQDEw02YWRkM2M2MC05NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro8f2195bmOHByYuoEtYGfjqDNw9aZjjvcFXd/ti/m6mgW8KrvvBxRyKMuxT ZkLyBRLdrGIU0jmdFqPV7bsA7YtimRpjmPqQc2l7V13C/rv/sZ0AHhCJE1or4pQd UJrDd+t1XPvC1l44/26XaKLTT6r5wLuXP9xrKVFnieiPf/GDQJoKGFrwE3WynoRP 00hkYY5ZlYJ1tfJrHV7eRvDG/ww2l1PR7n19BTSmuK6x8F8c2LyyOsAv0GWefbFU kimFDoc6C//nLjvn1eIlsXGAuAmLzGJg4Ti5YTkMQtuc8THUP0mnlewGyUP5kEOI 5TGRonre4fQVAW/kuqNN7Y3zdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNW3sNi6 jDngPPhvH2mK0l9TlOp2MB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM/9xEnG9OL44KwrfCjrEzp9jhg/vumCleo0TQblKngN62rIL2e2g9QcFXKuH YrnridXIrEgBu4AqyXTbpd4vVzZJfgJEZzGcPDB2o3ZDopjtrp8P3YpJMid8LVWC ri+1c6sAEj2eXeVpr6T9uG3rBRunmeL34JJlRlVNRMQRyv8ObgUI5upLyYYppDBP EJv9ujOMPH6gMCrXjCuPyMzHJZ9G1GoXKYafgY976cWl4uVdtYKUQLVsGzTtae2q EhEXvWRU6GYnMb/y6sUvlnsUjbHaxONH1MEIxWy3rDSuYThgCaTrishkQbUumFxH WaYJrkTgDpYjKmjLTG7FiUjOYw== -----END CERTIFICATE-----Generated at Mon Oct 26 17:05:21 2026 by rpki-client