$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: zATkmURsWSsadzgocaRciAbDoKq+QzGRemajcB0jcLc= Subject key identifier: AF:5C:C8:B1:80:82:23:A9:48:72:F5:62:CF:51:B5:90:2F:43:51:03 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 02ED Signing time: Mon 07 Sep 2026 01:10:52 +0000 Manifest this update: Mon 07 Sep 2026 01:10:52 +0000 Manifest next update: Mon 14 Sep 2026 01:10:52 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: rUaPC3/ZTsyf++0zyTtZS6HzaQHGu7wT06Byu77Skxk=) 2: 6121C23230AC11F08C150767C4F9AE02.roa (hash: ql7HqZquAr8Z2RwRKCcdgaigOpq48VyYBqN4A7YQqcU=) 3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: /o4SLgeuUU9OSfiAD7UJtOCCqvNSUtLbtPYkogIfFeQ=) 4: 946E7D7C660E11F192F6B2999847A888.roa (hash: UPxwASkRaCM0BmW/75/VdGF2qprJhUWAyXmzhw5bK/Y=) 5: 7CA6F1307B7911F1827C4FFF64A30FBC.roa (hash: Tq9vsCWRXkvNtDkZddfWUPe9BltG2TgKGlmV/arRNXY=) 6: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: hEDDBmqy+g3mjjmXrYH6est6UxbODSRokkdRBGwdWwU=) 7: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: LvzFZJPcWbboIZyMcvq7oiMq8P9XXU2SZUanebQgAx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 01:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Sep 7 01:10:52 2026 GMT Not After : Sep 14 01:10:52 2026 GMT Subject: CN=6a9e0f1c-cd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:96:70:1f:95:df:4c:0f:6d:f6:9f:9c:3b: 25:34:7c:6e:2a:f9:52:e6:cb:10:ac:16:e1:d2:36: 64:13:e2:94:1d:2e:a3:d8:bc:e1:5d:84:4c:8d:f8: ad:03:d4:d4:a6:d0:9c:b5:72:a4:d5:ee:57:13:62: 5b:59:da:c8:83:7d:6e:e1:44:0c:1f:b6:27:24:13: a3:b9:ff:bb:83:95:3e:b7:bf:a9:29:89:61:e7:bb: f4:89:cb:50:ca:fe:ca:64:a2:a2:d5:b7:ce:e0:2c: d1:7b:8b:cb:f8:d5:b8:ae:3b:fc:14:7e:12:ff:91: 15:06:89:14:6f:12:36:8d:20:12:84:6f:5e:a6:0d: 13:90:f3:68:ab:a0:30:d1:2c:62:fc:5a:67:b0:a3: be:04:26:0a:8b:91:68:4e:a1:d0:f7:1c:24:5d:0c: d8:3a:eb:cb:9b:29:dd:01:b5:9e:18:1d:a8:8c:2d: 5c:1d:42:60:19:51:62:74:26:4c:cc:b4:43:3b:90: 58:c1:91:79:13:18:48:f4:c7:65:e9:4a:d0:08:64: ee:be:ca:f0:a4:f1:1d:c9:bc:61:41:a7:02:6d:59: f0:b7:49:60:6c:3e:55:2b:83:32:16:2b:8a:c5:40: d9:fc:0d:57:7c:8a:72:39:14:b1:8c:96:70:8f:5b: 0e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5C:C8:B1:80:82:23:A9:48:72:F5:62:CF:51:B5:90:2F:43:51:03 X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:55:2c:52:14:85:b2:c7:e3:2c:81:ae:1b:d8:73:7c:a4:fa: ad:ab:04:d5:d8:4d:0c:4d:55:72:b2:cb:4b:cc:82:77:ee:02: 55:4d:57:b7:13:12:bd:30:f9:bb:d6:a3:d0:b4:62:26:9e:17: 6c:b1:1e:1f:c9:5a:99:a2:9c:f3:f3:db:ad:39:3d:6a:1e:c6: fa:33:33:72:80:ea:15:1a:91:2c:c0:7f:53:7f:c3:8d:2d:f2: 99:57:38:65:4d:08:cb:86:ee:fb:f4:da:e5:c6:62:18:4c:44: f7:26:61:06:d8:a4:9e:9c:bd:cf:e7:8e:37:2e:3f:7c:a7:82: 6f:b0:c3:fb:6e:81:16:13:81:a8:77:50:ad:06:53:d3:a0:b8: 94:cc:c4:34:5b:5e:5e:54:6e:3b:22:41:85:57:03:c0:72:67: dc:c6:f8:d0:83:e4:94:3b:ec:05:db:78:02:a6:62:d2:ca:cd: 81:bd:95:39:df:2f:72:b4:ac:ab:17:b5:dc:f8:20:8b:70:83: e4:28:a7:35:26:f2:f3:1e:e6:3e:c0:69:6a:20:fd:72:51:34: a5:21:40:e4:0b:bd:26:66:dc:3f:36:49:8f:80:8c:72:f3:6a: e0:ed:bd:38:2a:0a:11:00:ea:bc:fa:fc:59:d3:a5:97:d7:85: 20:10:f7:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjYwOTA3MDExMDUyWhcNMjYwOTE0MDExMDUyWjAYMRYwFAYD VQQDEw02YTllMGYxYy1jZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6SWcB+V30wPbfafnDslNHxuKvlS5ssQrBbh0jZkE+KUHS6j2LzhXYRMjfit A9TUptCctXKk1e5XE2JbWdrIg31u4UQMH7YnJBOjuf+7g5U+t7+pKYlh57v0ictQ yv7KZKKi1bfO4CzRe4vL+NW4rjv8FH4S/5EVBokUbxI2jSAShG9epg0TkPNoq6Aw 0Sxi/FpnsKO+BCYKi5FoTqHQ9xwkXQzYOuvLmyndAbWeGB2ojC1cHUJgGVFidCZM zLRDO5BYwZF5ExhI9Mdl6UrQCGTuvsrwpPEdybxhQacCbVnwt0lgbD5VK4MyFiuK xUDZ/A1XfIpyORSxjJZwj1sOdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9cyLGA giOpSHL1Ys9RtZAvQ1EDMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiVUsUhSFssfjLIGuG9hzfKT6rasE1dhNDE1VcrLLS8yCd+4CVU1XtxMSvTD5 u9aj0LRiJp4XbLEeH8lamaKc8/PbrTk9ah7G+jMzcoDqFRqRLMB/U3/DjS3ymVc4 ZU0Iy4bu+/Ta5cZiGExE9yZhBtiknpy9z+eONy4/fKeCb7DD+26BFhOBqHdQrQZT 06C4lMzENFteXlRuOyJBhVcDwHJn3Mb40IPklDvsBdt4AqZi0srNgb2VOd8vcrSs qxe13Pggi3CD5CinNSby8x7mPsBpaiD9clE0pSFA5Au9JmbcPzZJj4CMcvNq4O29 OCoKEQDqvPr8WdOll9eFIBD3xQ== -----END CERTIFICATE-----Generated at Tue Sep 8 21:56:47 2026 by rpki-client