$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft File: XZRtT0edN7zhcAywut1RosPfYg8.mft (raw, json) Hash identifier: T1AQ9PYdkfmuvW8LCIYB5IPBM5/tkXaRCCvc9lvF+E8= Subject key identifier: 71:AA:8E:DF:B6:11:80:7A:14:5F:41:65:C7:7B:5F:90:30:1B:9C:DE Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F Certificate issuer: /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft Manifest number: 017A Signing time: Fri 09 Oct 2026 05:26:09 +0000 Manifest this update: Fri 09 Oct 2026 05:26:09 +0000 Manifest next update: Fri 16 Oct 2026 05:26:09 +0000 Files and hashes: 1: XZRtT0edN7zhcAywut1RosPfYg8.crl (hash: iPgqYdZI+tXKaaTdWeRmCm/VevC2LUM5AD7/fUMDpkk=) 2: CB24F37C033711F0B76A8520C4F9AE02.roa (hash: 6FOSG+PDOX8IQ8IkU4F+r2ZxK7Ap4wqnXAN3PEPi5FM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 05:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Validity Not Before: Oct 9 05:26:09 2026 GMT Not After : Oct 16 05:26:09 2026 GMT Subject: CN=6ac87af1-609c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:21:3e:d9:9a:5f:1b:93:6e:c8:40:7f:97: 82:c7:fc:46:48:75:44:41:03:fa:1c:67:99:95:2e: ea:1d:46:77:60:e5:be:09:41:0d:85:4b:84:01:16: 62:5f:c4:d0:f8:f0:1c:20:79:32:1a:32:51:fe:8d: 38:16:3b:08:7a:ac:56:3e:2a:e3:47:6b:22:73:4f: 0c:f4:51:9f:88:f1:da:f6:8f:c4:bd:08:79:59:b5: c0:77:66:88:ac:fb:3f:dd:01:09:20:d2:ef:cc:53: d1:39:f2:00:9a:b5:14:ba:a4:f8:e1:eb:f8:7a:57: 14:a1:14:dc:63:90:30:6b:1f:94:d0:9c:e1:58:24: b3:1c:e1:b8:0e:1b:e8:03:3c:bd:33:cd:1d:01:bd: 6c:c0:f1:b4:df:ff:9c:4e:d9:97:94:c7:78:fc:38: 8c:04:ae:22:d8:fb:0b:57:a2:11:3f:4d:75:6c:8e: 7a:19:97:d6:2b:a9:0c:c8:96:bc:f6:58:b7:70:38: 53:50:cb:18:2d:a1:57:97:64:19:16:86:d3:74:79: 6c:cf:04:1d:93:68:b5:e4:8a:93:cb:a1:6c:09:a4: 28:e1:c1:78:20:e9:a4:13:6f:cd:e6:97:16:47:cc: 25:31:b5:7b:a6:3a:e8:c2:71:73:94:39:91:94:d3: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:8E:DF:B6:11:80:7A:14:5F:41:65:C7:7B:5F:90:30:1B:9C:DE X509v3 Authority Key Identifier: keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f0:76:66:46:99:5c:95:1c:e4:e4:26:d2:67:d5:7b:4f:b8: f7:5c:21:06:fc:5d:2b:79:1f:83:de:b7:ab:30:3f:04:8b:e0: 25:84:8b:c2:78:e7:c5:8d:9f:52:c7:d0:86:33:79:7b:8c:1f: 8e:32:e9:45:73:49:67:3e:37:89:f4:5d:b3:dc:93:ad:c1:4a: 32:2c:3e:80:31:96:d0:b7:89:52:a4:99:a7:f5:37:45:2c:54: 95:05:58:73:4c:c4:c3:cc:60:7e:3b:9b:44:47:db:43:92:f6: d4:2e:cc:1e:26:dd:56:85:e0:15:37:85:3d:f0:fe:90:e7:33: 38:08:53:fe:d8:a5:89:c2:81:b3:17:dc:b5:67:b9:23:57:83: f2:94:ae:c1:dc:b4:34:dd:2e:01:9a:c0:36:4f:b1:97:5e:b2: 66:f2:d2:f9:e1:a6:95:b0:1f:4a:2d:2d:90:d3:4c:92:81:49: 60:1d:21:ab:70:aa:9b:16:6e:fb:39:b8:bc:05:08:ad:d1:cc: 29:3c:0b:0c:f8:83:9e:cb:51:58:38:f5:9a:50:d5:58:46:07: f0:ea:3c:5c:11:ba:6b:eb:7b:e5:a0:72:0d:1b:1c:7d:d7:94: c3:13:1f:3a:c3:8a:d7:73:e7:2e:ee:44:f3:43:9b:57:bf:07: 74:03:ce:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3ODcxMTAvBgNVBAUTKDVEOTQ2RDRGNDc5RDM3QkNFMTcwMENCMEJBREQ1MUEy QzNERjYyMEYwHhcNMjYxMDA5MDUyNjA5WhcNMjYxMDE2MDUyNjA5WjAYMRYwFAYD VQQDEw02YWM4N2FmMS02MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7UhPtmaXxuTbshAf5eCx/xGSHVEQQP6HGeZlS7qHUZ3YOW+CUENhUuEARZi X8TQ+PAcIHkyGjJR/o04FjsIeqxWPirjR2sic08M9FGfiPHa9o/EvQh5WbXAd2aI rPs/3QEJINLvzFPROfIAmrUUuqT44ev4elcUoRTcY5Awax+U0JzhWCSzHOG4Dhvo Azy9M80dAb1swPG03/+cTtmXlMd4/DiMBK4i2PsLV6IRP011bI56GZfWK6kMyJa8 9li3cDhTUMsYLaFXl2QZFobTdHlszwQdk2i15IqTy6FsCaQo4cF4IOmkE2/N5pcW R8wlMbV7pjrownFzlDmRlNM5LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGqjt+2 EYB6FF9BZcd7X5AwG5zeMB8GA1UdIwQYMBaAFF2UbU9HnTe84XAMsLrdUaLD32IP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yMjg2NTYyQThG NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi9YWlJ0VDBlZE43emhjQXl3dXQxUm9zUGZZ ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1haUnRUMGVkTjd6aGNBeXd1dDFSb3NQZllnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mjc4Ny8yMjg2NTYyQThGNzkxMUVGOTJBQzc4MUVDNEY5QUUwMi9YWlJ0VDBlZE43 emhjQXl3dXQxUm9zUGZZZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqPB2ZkaZXJUc5OQm0mfVe0+491whBvxdK3kfg963qzA/BIvgJYSLwnjnxY2f UsfQhjN5e4wfjjLpRXNJZz43ifRds9yTrcFKMiw+gDGW0LeJUqSZp/U3RSxUlQVY c0zEw8xgfjubREfbQ5L21C7MHibdVoXgFTeFPfD+kOczOAhT/tilicKBsxfctWe5 I1eD8pSuwdy0NN0uAZrANk+xl16yZvLS+eGmlbAfSi0tkNNMkoFJYB0hq3CqmxZu +zm4vAUIrdHMKTwLDPiDnstRWDj1mlDVWEYH8Oo8XBG6a+t75aByDRscfdeUwxMf OsOK13PnLu5E80ObV78HdAPOeQ== -----END CERTIFICATE-----Generated at Sun Oct 11 06:20:26 2026 by rpki-client