$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: /BL0HQ+hhu5/qJLH8VGpRyL45nto0R0/Dwy16L7nFUo= Subject key identifier: F4:3E:07:7F:FC:8C:2B:C9:B0:D0:98:AC:4C:FE:49:31:18:E1:73:E2 Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0D48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0D3C Signing time: Fri 02 Oct 2026 18:24:43 +0000 Manifest this update: Fri 02 Oct 2026 18:24:42 +0000 Manifest next update: Fri 09 Oct 2026 18:24:42 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: 2pShydJZ/8UC+LH8ovO3rSvq/qQXPCcLZMZhmIRfx/I=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Oct 2 18:24:42 2026 GMT Not After : Oct 9 18:24:42 2026 GMT Subject: CN=6abff6eb-100a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:cc:a6:47:64:1e:b0:7c:ab:d7:62:ac:7d: 96:56:56:b6:1e:c2:62:00:1e:57:a3:4b:59:97:e2: 5f:7c:e0:7e:9b:e9:4f:7a:d0:55:ef:48:54:47:55: 50:83:e5:94:db:cf:4c:b4:be:f4:66:85:d1:b3:41: 33:d0:84:e0:a5:b9:ae:5f:43:fd:98:8c:ef:82:39: 9b:2a:de:98:3c:00:ca:ee:2b:26:b2:93:12:53:e3: 2a:27:2c:b1:1d:c8:2f:7b:1f:67:b0:c8:34:2d:29: c5:8e:79:e5:ba:ac:70:4e:f4:70:9e:0a:7e:cf:73: 79:2c:9d:7b:e9:0b:7d:c5:90:c4:2c:1d:89:d4:95: 1b:29:df:cd:eb:f4:76:ac:0f:e3:75:f9:6e:99:24: 85:a4:9d:a5:55:89:ef:78:3c:23:a6:2c:41:6f:9a: 10:0a:bb:3f:e2:d9:95:94:4c:4a:be:42:40:47:00: 15:6e:8c:37:07:07:c3:80:14:b4:fa:eb:d1:6d:51: f8:78:db:5d:22:74:14:9b:81:9c:ee:f6:19:bd:8f: 39:5e:18:46:48:76:e3:b8:a6:cf:f3:07:be:75:b1: a5:3c:72:36:09:69:a7:59:09:4e:d7:b2:90:60:f7: 3e:f1:73:9b:b1:f5:20:75:d2:16:a5:7d:fb:c0:2b: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3E:07:7F:FC:8C:2B:C9:B0:D0:98:AC:4C:FE:49:31:18:E1:73:E2 X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:93:14:4c:97:b6:41:f2:54:d9:ed:87:c0:da:c6:e4:20:62: 0a:4f:d7:0f:6f:0f:86:b3:2d:09:79:a1:25:cd:35:3d:0e:24: d4:07:b6:0a:ff:0f:68:af:cd:66:c3:d2:2a:4f:e8:a5:66:f1: ce:a5:cc:b9:ae:b0:f8:46:d2:7b:4b:b1:9d:2f:37:f4:0f:68: ac:85:89:a5:88:1d:68:ab:ff:31:bd:74:f5:4e:2b:e0:79:f6: 95:e1:35:88:9a:f1:0e:55:62:9f:3d:3e:87:18:e2:ac:05:ab: 52:48:27:4e:06:64:1e:f4:cc:ab:b1:65:fb:8e:fe:8f:24:28: d4:f8:30:ff:4d:3d:d6:de:04:22:06:02:c0:6f:fd:97:42:02: 52:78:bd:08:81:61:8d:ec:e1:21:a9:9a:f1:3f:18:9a:65:67: 47:b7:10:4c:67:57:7b:48:24:b6:99:35:40:79:36:cf:46:3f: 21:78:a4:83:a5:4e:cb:f2:68:c8:53:8c:f0:c5:f9:ee:9d:00: 57:c1:70:c7:10:4d:7f:14:2b:98:36:26:79:81:b3:a7:30:5b: 70:dd:1e:b4:19:6a:ab:a1:65:5c:32:0b:96:43:d5:fc:87:bb: 4a:08:6c:00:75:c3:3d:2f:f8:d9:2b:19:d9:71:cd:a7:e2:40: b2:ee:86:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjYxMDAyMTgyNDQyWhcNMjYxMDA5MTgyNDQyWjAYMRYwFAYD VQQDEw02YWJmZjZlYi0xMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32jMpkdkHrB8q9dirH2WVla2HsJiAB5Xo0tZl+JffOB+m+lPetBV70hUR1VQ g+WU289MtL70ZoXRs0Ez0ITgpbmuX0P9mIzvgjmbKt6YPADK7ismspMSU+MqJyyx Hcgvex9nsMg0LSnFjnnluqxwTvRwngp+z3N5LJ176Qt9xZDELB2J1JUbKd/N6/R2 rA/jdflumSSFpJ2lVYnveDwjpixBb5oQCrs/4tmVlExKvkJARwAVbow3BwfDgBS0 +uvRbVH4eNtdInQUm4Gc7vYZvY85XhhGSHbjuKbP8we+dbGlPHI2CWmnWQlO17KQ YPc+8XObsfUgddIWpX37wCtdwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQ+B3/8 jCvJsNCYrEz+STEY4XPiMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5MUTJe2QfJU2e2HwNrG5CBiCk/XD28PhrMtCXmhJc01PQ4k1Ae2Cv8PaK/N ZsPSKk/opWbxzqXMua6w+EbSe0uxnS839A9orIWJpYgdaKv/Mb109U4r4Hn2leE1 iJrxDlVinz0+hxjirAWrUkgnTgZkHvTMq7Fl+47+jyQo1Pgw/0091t4EIgYCwG/9 l0ICUni9CIFhjezhIama8T8YmmVnR7cQTGdXe0gktpk1QHk2z0Y/IXikg6VOy/Jo yFOM8MX57p0AV8FwxxBNfxQrmDYmeYGzpzBbcN0etBlqq6FlXDILlkPV/Ie7Sghs AHXDPS/42SsZ2XHNp+JAsu6GiA== -----END CERTIFICATE-----Generated at Sun Oct 4 11:20:33 2026 by rpki-client