$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: QS9SBQnAsYYkZl19qRTZWjaYLV8DTZRjq6r/+13B2uI= Subject key identifier: 2F:5C:36:BA:50:A0:05:98:B1:91:C2:1E:A5:0E:F4:0B:65:5E:A1:10 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0739 Signing time: Tue 06 Oct 2026 22:21:04 +0000 Manifest this update: Tue 06 Oct 2026 22:21:03 +0000 Manifest next update: Tue 13 Oct 2026 22:21:03 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: FQ42lbw2MUOyJyfbNXwGOL85OaWQuUwek5+x9rJVBEM=) 2: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: sM6Ff5Btr2H1Za3+xr7nTyk868AOvBu9Fccxr6yah7k=) 3: E1201A0422D611EFAE700044C4F9AE02.roa (hash: VfZcIRpYWsXv2sQHMltNI7KlcM5kOmrXtKUtk3vzF9g=) 4: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: AReViyH8qYJmKjUIQ8QrviAg/eKIeslm79IJrfhFTIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Oct 6 22:21:03 2026 GMT Not After : Oct 13 22:21:03 2026 GMT Subject: CN=6ac5744f-8254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:5a:3a:1d:d0:5b:73:17:07:bc:91:9e:99: 49:15:0c:76:f3:eb:92:29:c7:dc:b0:41:60:aa:1f: 78:a1:6b:59:5e:a4:3d:94:b7:2e:41:92:3d:70:0d: 57:00:c2:0f:90:ff:72:5f:f1:72:31:24:f4:45:f2: d7:6d:5f:01:15:f7:d9:4c:20:15:52:7a:0a:f0:93: cf:0c:94:f2:a0:dc:3a:3f:74:e3:a3:d9:49:d9:ae: 39:de:8b:4e:d1:78:b6:f9:78:44:b4:c7:12:ef:89: 41:7d:fd:7e:f4:e3:e4:91:c7:97:7c:cb:64:54:20: 98:16:b6:7f:3e:ad:12:b7:6b:62:ee:b2:4b:ea:7a: c2:a5:2e:29:67:1f:45:aa:04:e1:98:08:e3:bd:02: c8:51:43:7b:d4:ee:cc:c7:c8:49:b3:72:6e:74:19: 61:eb:fb:8f:6e:c4:8e:e8:c7:ac:8a:98:56:f3:8c: 95:0f:9b:79:62:fc:06:f4:25:59:54:b8:6e:41:84: 80:be:aa:6f:f9:5c:74:4c:2a:59:b2:ca:e7:2f:03: d5:0a:ad:2d:03:ee:ba:d5:85:7f:fb:d2:af:56:61: 1b:d7:c9:29:ba:2d:4c:f9:c2:ab:a1:7f:f0:b6:f9: 84:22:18:f1:1f:a6:7d:a0:4e:c7:68:4d:70:55:c2: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5C:36:BA:50:A0:05:98:B1:91:C2:1E:A5:0E:F4:0B:65:5E:A1:10 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:ed:70:dc:3f:9a:69:cd:4b:81:32:06:d0:25:ab:fa:85: c1:46:a1:8a:2b:b8:08:62:a6:70:06:df:ab:03:fd:3b:58:2a: cb:b0:cb:a4:aa:38:19:6c:14:e1:a6:6f:25:33:04:b7:dc:7c: e3:85:6a:48:75:33:be:72:a8:7b:f9:67:5d:c0:39:51:c2:5f: 24:07:da:54:60:09:c3:ba:ae:2c:a3:d5:5e:43:e1:9a:9e:03: 4d:34:41:7b:bd:23:bb:4b:14:3d:bf:b8:f0:ac:72:8d:12:bc: 8d:52:50:18:5d:87:e6:21:1d:b0:e2:fd:1b:44:d6:90:57:2d: a8:23:8d:53:ef:d9:85:72:ce:7c:62:98:0a:e5:ad:b9:76:8f: 55:64:c1:c1:da:54:3f:43:d2:04:55:a3:20:a0:35:14:ad:c3: bd:28:dc:29:e9:4f:f8:97:0e:87:8a:37:d1:07:48:11:e8:ec: c4:fe:38:c6:e7:82:de:e4:a2:88:57:aa:ce:b9:7c:9d:93:81: 66:e0:65:41:a5:41:17:76:93:e7:91:5c:85:e0:4f:b7:80:a6: ca:88:9f:dc:00:1f:39:ef:20:4e:4a:6f:bf:66:f7:36:68:1a: 12:90:03:a0:45:f4:8a:1d:f6:de:de:4b:2c:a7:b8:02:65:88: fa:0c:c6:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjYxMDA2MjIyMTAzWhcNMjYxMDEzMjIyMTAzWjAYMRYwFAYD VQQDEw02YWM1NzQ0Zi04MjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCtaOh3QW3MXB7yRnplJFQx28+uSKcfcsEFgqh94oWtZXqQ9lLcuQZI9cA1X AMIPkP9yX/FyMST0RfLXbV8BFffZTCAVUnoK8JPPDJTyoNw6P3Tjo9lJ2a453otO 0Xi2+XhEtMcS74lBff1+9OPkkceXfMtkVCCYFrZ/Pq0St2ti7rJL6nrCpS4pZx9F qgThmAjjvQLIUUN71O7Mx8hJs3JudBlh6/uPbsSO6MesiphW84yVD5t5YvwG9CVZ VLhuQYSAvqpv+Vx0TCpZssrnLwPVCq0tA+661YV/+9KvVmEb18kpui1M+cKroX/w tvmEIhjxH6Z9oE7HaE1wVcI2YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9cNrpQ oAWYsZHCHqUO9AtlXqEQMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHQ3tcNw/mmnNS4EyBtAlq/qFwUahiiu4CGKmcAbfqwP9O1gqy7DLpKo4GWwU 4aZvJTMEt9x844VqSHUzvnKoe/lnXcA5UcJfJAfaVGAJw7quLKPVXkPhmp4DTTRB e70ju0sUPb+48KxyjRK8jVJQGF2H5iEdsOL9G0TWkFctqCONU+/ZhXLOfGKYCuWt uXaPVWTBwdpUP0PSBFWjIKA1FK3DvSjcKelP+JcOh4o30QdIEejsxP44xueC3uSi iFeqzrl8nZOBZuBlQaVBF3aT55FcheBPt4Cmyoif3AAfOe8gTkpvv2b3NmgaEpAD oEX0ih323t5LLKe4AmWI+gzG6w== -----END CERTIFICATE-----Generated at Thu Oct 8 20:04:27 2026 by rpki-client