$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft File: X8FhrArBnYiSpuQmdvsPqdTO2yw.mft (raw, json) Hash identifier: y1wtAoxX+OG3eCpaLI3gjNaG0d99LK/we/Bg3OZOADM= Subject key identifier: BF:B1:BB:E5:43:07:1D:8E:8E:90:0B:7C:B9:43:44:34:1C:31:42:B8 Authority key identifier: 5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C Certificate issuer: /CN=A912A45D/serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft Manifest number: 38 Signing time: Wed 07 Oct 2026 09:18:06 +0000 Manifest this update: Wed 07 Oct 2026 09:18:05 +0000 Manifest next update: Wed 14 Oct 2026 09:18:05 +0000 Files and hashes: 1: X8FhrArBnYiSpuQmdvsPqdTO2yw.crl (hash: gjqOrXqIq4DD5rBBXZlOC2vpE8jgm8wILPq6/XOcITk=) 2: A55B56FC812311F1A313CCFA74A30FBC.roa (hash: CgCaAsuhKr/vo6vaRhDPC36Dwd42AzMK9hLer8QqUaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A45D, serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C Validity Not Before: Oct 7 09:18:05 2026 GMT Not After : Oct 14 09:18:05 2026 GMT Subject: CN=6ac60e4e-0840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:21:f7:e3:e6:b7:dc:d5:b0:41:aa:1b:0b: 43:57:fe:2c:dc:3d:c9:e7:7e:a5:9f:ae:b9:e9:dd: ab:01:a2:c2:bb:ef:54:e1:12:b8:44:7b:c5:a1:21: 2a:6a:c1:de:ce:78:49:36:a4:06:44:6b:d8:3e:d9: 7c:c7:ef:27:3b:b4:43:de:81:f3:23:b9:33:6b:01: ec:06:2f:fa:ef:ff:86:2b:02:18:93:36:80:95:6d: 9c:63:ab:ec:17:57:8b:c7:8d:6d:5e:4b:1e:07:19: 45:8e:e2:79:20:1c:20:31:28:27:7e:b4:0f:f0:1b: db:d2:21:0d:92:8f:26:15:77:df:ec:09:69:8e:e1: 45:16:fc:81:2f:0a:79:cd:22:3b:02:2e:97:2b:44: 4d:63:b4:5c:7f:62:da:ac:d0:e5:4b:ac:a7:76:7b: b1:af:b1:4f:6b:2a:97:b8:8a:1d:22:57:16:fa:ee: e8:f3:b9:06:72:51:45:c3:2d:a1:c0:7a:7d:01:0e: 48:5b:2b:48:a1:24:91:6d:b0:3e:17:34:95:d1:4b: 43:16:69:33:e0:1d:f7:a9:55:b5:8f:27:ff:87:b2: 1e:c1:a2:21:41:fa:2c:d3:8a:e8:e0:e7:d5:f0:3c: 3c:7d:03:d2:02:f1:d6:a8:b7:8a:42:af:06:ce:7e: 98:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B1:BB:E5:43:07:1D:8E:8E:90:0B:7C:B9:43:44:34:1C:31:42:B8 X509v3 Authority Key Identifier: keyid:5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:cd:2b:93:22:10:e0:4e:e3:26:3d:23:26:70:14:6d:5f:e2: 24:e0:b4:52:61:04:b8:5d:36:5f:2d:47:ce:d7:88:6f:6f:47: 7a:15:27:ae:b5:c3:7e:d4:f9:c3:18:3b:df:03:b3:8b:8c:2b: 61:1c:19:46:4d:2e:b2:29:9a:69:6a:7c:69:24:76:c1:0c:84: 84:ed:57:ee:de:e6:70:0c:81:1c:af:d3:01:4c:fa:11:7b:9e: d3:3d:bb:ac:b0:f5:a4:91:06:89:08:49:b5:1e:c5:df:fe:35: 88:fa:6c:1b:78:9f:c3:d7:59:20:92:c8:ed:db:92:c5:84:7e: 30:87:e6:ee:64:49:21:31:62:a6:ef:fd:86:61:80:b0:11:9f: 88:f5:4e:e1:a5:95:32:f4:d0:44:c7:b4:e0:6a:7e:3a:0c:13: 8a:8f:0b:a0:8f:3b:af:b2:51:25:9d:7c:1c:cb:c2:2e:25:ac: cc:49:89:eb:13:d0:7a:e7:52:2d:c1:55:77:1e:16:8e:97:ad: 9b:c9:b4:72:fd:e1:82:65:5a:a6:a4:d6:5f:2f:84:d3:f2:fe: 79:14:6f:f3:8a:cd:de:e3:26:c2:dc:c2:42:59:2f:c5:ae:31: 10:46:01:12:90:48:3b:7f:e2:8f:18:cf:35:8b:0c:81:8b:8d: f3:0c:ee:ee -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTQ1RDExMC8GA1UEBRMoNUZDMTYxQUMwQUMxOUQ4ODkyQTZFNDI2NzZGQjBGQTlE NENFREIyQzAeFw0yNjEwMDcwOTE4MDVaFw0yNjEwMTQwOTE4MDVaMBgxFjAUBgNV BAMTDTZhYzYwZTRlLTA4NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC85SH34+a33NWwQaobC0NX/izcPcnnfqWfrrnp3asBosK771ThErhEe8WhISpq wd7OeEk2pAZEa9g+2XzH7yc7tEPegfMjuTNrAewGL/rv/4YrAhiTNoCVbZxjq+wX V4vHjW1eSx4HGUWO4nkgHCAxKCd+tA/wG9vSIQ2SjyYVd9/sCWmO4UUW/IEvCnnN IjsCLpcrRE1jtFx/Ytqs0OVLrKd2e7GvsU9rKpe4ih0iVxb67ujzuQZyUUXDLaHA en0BDkhbK0ihJJFtsD4XNJXRS0MWaTPgHfepVbWPJ/+Hsh7BoiFB+izTiujg59Xw PDx9A9IC8daot4pCrwbOfphbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv7G75UMH HY6OkAt8uUNENBwxQrgwHwYDVR0jBBgwFoAUX8FhrArBnYiSpuQmdvsPqdTO2yww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNDVELzc2NTI4QjA2N0I5 QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllpU3B1UW1kdnNQcWRUTzJ5 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWDhGaHJBckJuWWlTcHVRbWR2c1BxZFRPMnl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NDVELzc2NTI4QjA2N0I5QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllp U3B1UW1kdnNQcWRUTzJ5dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAizSuTIhDgTuMmPSMmcBRtX+Ik4LRSYQS4XTZfLUfO14hvb0d6FSeutcN+1PnD GDvfA7OLjCthHBlGTS6yKZppanxpJHbBDISE7Vfu3uZwDIEcr9MBTPoRe57TPbus sPWkkQaJCEm1HsXf/jWI+mwbeJ/D11kgksjt25LFhH4wh+buZEkhMWKm7/2GYYCw EZ+I9U7hpZUy9NBEx7Tgan46DBOKjwugjzuvslElnXwcy8IuJazMSYnrE9B651It wVV3HhaOl62bybRy/eGCZVqmpNZfL4TT8v55FG/zis3e4ybC3MJCWS/FrjEQRgES kEg7f+KPGM81iwyBi43zDO7u -----END CERTIFICATE-----Generated at Thu Oct 8 08:48:54 2026 by rpki-client