$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: 6e7pRcO11bTsto/VTxQ0XisHDG9gyalsJ+fX8+4CAMk= Subject key identifier: 40:B5:A8:A0:13:DD:8A:1B:1A:7B:3D:4A:66:41:47:DC:D4:85:E6:ED Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 0879 Signing time: Mon 31 Aug 2026 20:47:06 +0000 Manifest this update: Mon 31 Aug 2026 20:47:05 +0000 Manifest next update: Mon 07 Sep 2026 20:47:05 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: rWHyksKLEQ8Kt6ISEnilZc20JOAsNara6/sMj5jNAXs=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: YSshHnrBitWJflcXZv9vZjmuWryahdL3ueeQ/8L7cts=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 4KpiEW9W9pRgd3+FQVTWJZ0pxE+Z+z9l6OeSvbZgOVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 20:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Aug 31 20:47:05 2026 GMT Not After : Sep 7 20:47:05 2026 GMT Subject: CN=6a95e84a-a215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2c:70:34:a9:d1:5d:c3:49:61:89:a3:8d:24: 18:dd:4e:61:dc:73:df:44:bd:67:07:a8:6c:ae:75: ae:6e:ce:21:6a:6f:e5:07:75:64:e6:b8:0c:fa:99: b0:13:fd:85:35:68:e4:95:28:82:53:8c:d7:bc:53: 31:8d:95:69:29:c1:1c:0c:ab:84:68:b1:ad:06:5b: ba:a6:88:43:d8:99:7a:5a:2e:30:83:e3:92:0f:0e: 1d:76:2c:48:55:f9:f8:19:80:d8:88:fb:bc:bb:01: 74:d7:e4:3b:46:32:74:c8:d7:15:d0:74:19:c4:8a: 10:cc:7b:8d:db:12:7f:f5:68:28:5d:0a:1e:81:14: f1:bf:0c:f5:b4:59:9f:4a:02:2b:d8:91:dc:61:8f: 81:f6:51:10:2f:98:04:d3:a4:52:69:11:72:62:fa: 81:0d:1d:bd:74:63:fd:41:de:48:2c:d7:c2:d5:c6: 6d:91:b9:76:e2:17:c6:b4:47:2f:fd:a1:e0:04:4a: 08:33:fd:48:f0:83:14:71:f0:72:c4:cc:93:ed:c8: d1:6d:68:c3:6d:7f:b0:d5:11:3e:5d:39:55:12:31: bd:8a:69:61:43:66:f8:c9:26:a4:3f:b4:06:c6:ea: 0f:27:ff:e8:b8:3e:58:de:81:5e:b4:a2:51:0f:98: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B5:A8:A0:13:DD:8A:1B:1A:7B:3D:4A:66:41:47:DC:D4:85:E6:ED X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a7:45:31:d7:14:64:dc:51:5f:39:3e:53:fb:52:5e:fe:06: 7d:13:cc:cf:eb:3d:56:b2:5e:f4:5c:dd:30:f8:b6:6b:e3:6c: 92:28:e7:55:28:24:6d:3b:28:13:25:0f:f0:92:2f:29:a3:6f: dc:34:e8:ce:05:39:ff:26:00:f0:9a:e9:e0:06:f9:93:b6:5c: d9:40:25:0e:4e:22:cf:b2:33:7d:84:b7:cc:e2:f7:26:61:28: ee:0a:ce:92:13:03:85:1a:54:93:50:e7:0b:17:cc:2f:2d:71: d6:b5:da:a9:f4:3c:d2:7a:ea:04:4b:53:3c:88:3f:30:66:13: 2f:dd:71:9b:11:fa:5f:54:29:db:78:79:34:36:d0:15:98:8e: 98:96:5d:b2:c0:f6:fa:3a:d9:ae:5c:6a:f8:d7:ae:f0:ba:80: 3b:c8:94:0f:27:3a:bc:19:64:91:7e:81:14:0f:40:c2:72:cb: f5:41:4a:11:63:c2:87:18:a0:ed:2d:2b:f0:aa:3d:61:9e:7e: b2:83:42:73:e2:62:8e:4d:e2:a5:77:99:bd:9a:51:20:51:0f: 63:bf:e8:24:aa:b1:f8:7e:d6:9c:53:12:c9:03:bc:18:32:3d: 4b:09:68:bc:a8:70:3d:e4:8f:a9:fb:58:87:b6:2a:3e:ce:bf: 40:58:6f:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjYwODMxMjA0NzA1WhcNMjYwOTA3MjA0NzA1WjAYMRYwFAYD VQQDEw02YTk1ZTg0YS1hMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ixwNKnRXcNJYYmjjSQY3U5h3HPfRL1nB6hsrnWubs4ham/lB3Vk5rgM+pmw E/2FNWjklSiCU4zXvFMxjZVpKcEcDKuEaLGtBlu6pohD2Jl6Wi4wg+OSDw4ddixI Vfn4GYDYiPu8uwF01+Q7RjJ0yNcV0HQZxIoQzHuN2xJ/9WgoXQoegRTxvwz1tFmf SgIr2JHcYY+B9lEQL5gE06RSaRFyYvqBDR29dGP9Qd5ILNfC1cZtkbl24hfGtEcv /aHgBEoIM/1I8IMUcfByxMyT7cjRbWjDbX+w1RE+XTlVEjG9imlhQ2b4ySakP7QG xuoPJ//ouD5Y3oFetKJRD5jQGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEC1qKAT 3YobGns9SmZBR9zUhebtMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVKdFMdcUZNxRXzk+U/tSXv4GfRPMz+s9VrJe9FzdMPi2a+NskijnVSgkbTso EyUP8JIvKaNv3DTozgU5/yYA8Jrp4Ab5k7Zc2UAlDk4iz7IzfYS3zOL3JmEo7grO khMDhRpUk1DnCxfMLy1x1rXaqfQ80nrqBEtTPIg/MGYTL91xmxH6X1Qp23h5NDbQ FZiOmJZdssD2+jrZrlxq+Neu8LqAO8iUDyc6vBlkkX6BFA9AwnLL9UFKEWPChxig 7S0r8Ko9YZ5+soNCc+Jijk3ipXeZvZpRIFEPY7/oJKqx+H7WnFMSyQO8GDI9Swlo vKhwPeSPqftYh7YqPs6/QFhv5w== -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:58 2026 by rpki-client