$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: gwYTN7ackTkEyMEmAygmnAi1OUKoBKukgl3G0R+Uy+s= Subject key identifier: 50:EF:26:CB:74:3E:DD:4D:8A:45:68:A6:7E:C4:D2:43:97:00:6E:7D Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 0211 Signing time: Sat 05 Sep 2026 02:49:28 +0000 Manifest this update: Sat 05 Sep 2026 02:49:28 +0000 Manifest next update: Sat 12 Sep 2026 02:49:28 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: sMyI0bR0/pe4NLqXrScasE+o7DEUOYh8GKIs92JptFE=) 2: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: 9nJcymyhJdyjosWxKF37Ye2GxMONKGYPO84iI01RFGA=) 3: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: m2Uv3v7XUW3vXrCq6wyXHCyPqWh0u6BnyHOlUQ7XuZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Sep 5 02:49:28 2026 GMT Not After : Sep 12 02:49:28 2026 GMT Subject: CN=6a9b8338-780a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:a7:31:4a:e6:50:4e:4a:ae:9c:29:96:3c: 05:4d:44:1a:fa:59:bd:ff:bd:23:13:bc:92:ba:81: be:28:53:a5:34:be:66:05:9d:f1:ac:9c:18:b6:e4: 1b:21:f2:25:28:fd:ef:2f:23:f4:14:cf:70:33:ce: 93:4c:93:20:dd:40:a4:c9:58:f7:6c:eb:f5:4d:9b: 96:2e:5e:b6:8c:18:d4:10:e9:28:d9:56:2c:15:8c: 18:1d:f1:04:36:7e:ac:68:ba:4f:85:19:16:ec:61: 76:29:7c:c0:39:59:35:c2:0b:40:67:fe:5a:36:de: 5c:4b:70:7e:ee:89:82:8b:a7:69:92:2e:d3:a0:3a: 57:cd:2f:e5:7c:33:53:64:d2:46:56:1c:e7:ca:af: f3:5e:d8:bf:a1:f4:4b:70:f3:69:44:0e:d4:04:59: 68:00:15:36:49:be:7b:c3:23:50:c0:cc:f5:75:a9: 2d:60:07:c2:6d:8a:5b:ec:23:74:92:44:e0:d5:85: 50:b3:d0:ff:b6:fa:10:ef:11:6d:55:95:e5:cc:22: 3f:cb:65:74:6c:39:83:50:34:4b:15:7e:25:3b:6d: f6:f7:f8:6e:d5:75:6d:fa:03:96:53:ee:7b:9a:99: 6b:6f:81:a3:e3:f7:2b:15:96:99:17:37:5a:fa:33: b7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EF:26:CB:74:3E:DD:4D:8A:45:68:A6:7E:C4:D2:43:97:00:6E:7D X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:97:93:dd:62:32:c1:67:78:ef:91:63:2e:3b:64:56:e9:e1: 4e:09:8f:45:94:7b:4c:62:88:f3:e1:72:4d:03:fc:c5:76:5e: 29:17:dc:06:55:bd:56:1c:3f:35:f5:79:11:8d:95:32:07:34: d0:20:0a:e3:e9:ea:5a:2a:3d:c7:70:33:e2:f6:67:2f:e4:4b: b3:1a:ef:d1:92:e0:31:ca:25:14:b3:23:fa:0e:7d:27:ba:a9: 13:f4:8e:23:c1:b6:84:d8:ce:af:54:f8:93:eb:f9:29:9a:9a: 38:75:7d:7a:78:89:2d:1d:a8:d1:9a:46:fd:9c:75:24:3a:31: 76:3e:e3:ce:75:4b:55:5e:88:90:90:83:df:71:4a:d6:d8:fd: 10:03:6a:a4:b7:e8:76:a3:be:35:4c:3f:58:4b:f4:b7:8e:a6: 27:0b:22:3b:e6:e3:42:9f:a6:48:14:b8:9f:c4:4e:80:f1:5b: 71:95:25:d3:bd:f0:3f:f6:95:46:51:01:0d:3b:60:ff:ad:19: fb:d4:5b:05:c3:f0:1e:d2:98:68:7e:5d:92:aa:5a:10:51:c3: c1:9a:bc:9e:9f:6a:51:d6:ea:97:13:b5:bd:c5:2c:60:83:8b: 15:f6:cd:ea:91:c1:c1:bb:aa:b0:62:44:e1:38:f6:eb:43:14: 11:80:b7:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjYwOTA1MDI0OTI4WhcNMjYwOTEyMDI0OTI4WjAYMRYwFAYD VQQDEw02YTliODMzOC03ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfunMUrmUE5KrpwpljwFTUQa+lm9/70jE7ySuoG+KFOlNL5mBZ3xrJwYtuQb IfIlKP3vLyP0FM9wM86TTJMg3UCkyVj3bOv1TZuWLl62jBjUEOko2VYsFYwYHfEE Nn6saLpPhRkW7GF2KXzAOVk1wgtAZ/5aNt5cS3B+7omCi6dpki7ToDpXzS/lfDNT ZNJGVhznyq/zXti/ofRLcPNpRA7UBFloABU2Sb57wyNQwMz1daktYAfCbYpb7CN0 kkTg1YVQs9D/tvoQ7xFtVZXlzCI/y2V0bDmDUDRLFX4lO2329/hu1XVt+gOWU+57 mplrb4Gj4/crFZaZFzda+jO3bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDvJst0 Pt1NikVopn7E0kOXAG59MB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH5eT3WIywWd475FjLjtkVunhTgmPRZR7TGKI8+FyTQP8xXZeKRfcBlW9Vhw/ NfV5EY2VMgc00CAK4+nqWio9x3Az4vZnL+RLsxrv0ZLgMcolFLMj+g59J7qpE/SO I8G2hNjOr1T4k+v5KZqaOHV9eniJLR2o0ZpG/Zx1JDoxdj7jznVLVV6IkJCD33FK 1tj9EANqpLfodqO+NUw/WEv0t46mJwsiO+bjQp+mSBS4n8ROgPFbcZUl073wP/aV RlEBDTtg/60Z+9RbBcPwHtKYaH5dkqpaEFHDwZq8np9qUdbqlxO1vcUsYIOLFfbN 6pHBwbuqsGJE4Tj260MUEYC3Yw== -----END CERTIFICATE-----Generated at Sat Sep 5 06:49:05 2026 by rpki-client