$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: L/ZawXk2ZdGrwrHgJFT8y4KCOLWDkDti20BKhNmsmMw= Subject key identifier: 83:9C:AA:56:C9:7C:A9:14:9D:F1:A1:93:EC:F2:F7:D5:28:80:81:49 Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 0483 Signing time: Thu 10 Sep 2026 23:59:28 +0000 Manifest this update: Thu 10 Sep 2026 23:59:28 +0000 Manifest next update: Thu 17 Sep 2026 23:59:28 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: qQawvIjGQh8n3lyTNW1eCkJ375A/gyA/TkoXI6B2jhA=) 2: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: htWOUsGCluqo+bDLkY52m9kGHamjAwjskMqRyVdOAVI=) 3: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: Xwopv44IWtrA47h99nFS1HcICRmL98rRNkBLnVkufOs=) 4: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: W4goqtPYzyLcCdBI7xc2Qn8MqCV+FsXgvw4MFdwTxhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Sep 10 23:59:28 2026 GMT Not After : Sep 17 23:59:28 2026 GMT Subject: CN=6aa34460-9538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:b1:bb:50:9a:67:98:46:bf:4c:5c:f9:96: bc:6a:4d:37:ab:11:fd:86:a2:ec:15:98:f2:d1:a0: 3f:a8:f0:6c:c6:e6:d9:c7:88:f4:26:0a:02:0f:b6: 15:95:f7:8d:bd:4e:2e:c1:b1:df:83:a5:83:0f:b7: f1:d8:ef:d7:03:46:5a:25:86:20:c5:9b:ff:39:85: b3:11:c5:99:5b:de:ed:28:e6:c2:fd:2a:02:60:ae: 7f:58:07:a8:57:1a:71:77:fa:92:8b:bd:c4:9f:04: 4d:b3:3f:76:b2:bb:c8:63:72:01:72:17:03:30:7e: ac:73:b3:f7:e4:f2:f1:07:58:6e:e4:c6:1b:52:a8: ea:50:4f:e0:a6:2c:9f:a9:9d:f0:8a:e9:79:55:f1: 13:36:ed:f5:bc:1d:68:42:41:64:28:b4:f1:7d:2c: 78:ad:8e:64:74:19:11:0f:db:64:10:96:51:1a:12: f0:5c:1e:04:cb:61:81:04:c3:1e:68:2f:46:11:0b: 9a:46:ac:a3:b9:ab:e7:9a:12:5a:a3:39:1d:61:39: 9a:f7:8d:6d:6f:0a:5d:cf:81:5f:7e:88:5a:f7:f4: 0e:c2:f3:8f:dc:7d:88:ec:f8:ca:3d:c1:52:47:24: 71:06:dd:14:96:76:9b:f5:e7:bb:1e:d0:00:20:1a: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:AA:56:C9:7C:A9:14:9D:F1:A1:93:EC:F2:F7:D5:28:80:81:49 X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:56:1c:9c:e4:65:db:10:c3:70:e7:da:dd:cd:03:ef:4c:32: d0:c7:7e:8a:26:17:f0:db:35:5d:20:73:52:55:e7:17:36:72: 45:18:7f:94:ac:f6:4c:49:ca:a4:68:8f:81:f6:60:f4:e3:0b: f6:87:b8:19:de:e5:39:1c:8f:e1:d9:69:ce:28:ed:d5:ea:d3: 0f:ee:22:44:55:13:69:ef:5b:2e:10:5e:71:01:b3:17:39:e0: 4a:b4:27:6b:59:55:d0:bb:e5:e2:e1:0a:1c:9f:e8:d0:c8:42: 67:4f:df:9d:44:91:b7:a4:ac:c0:92:bf:b7:fc:3b:01:af:41: 83:e5:58:79:d4:69:9a:7e:a2:e7:65:a3:dc:f6:73:8f:6b:36: cf:c6:b2:98:61:e1:a1:b4:98:f3:26:b2:9d:87:ce:1b:75:32: 84:91:16:0a:86:e4:6c:59:b5:de:50:01:4c:e0:dc:df:d4:f9: 09:a0:3a:f6:de:4f:72:6f:93:c0:4c:97:82:b1:9c:97:76:8d: 5a:14:68:b0:8b:41:a6:de:34:b7:2f:37:33:c1:4d:66:25:81: ff:42:03:78:7a:81:25:e6:2b:46:a3:76:14:cd:26:02:6c:23: 76:ec:92:b4:4e:83:7a:81:74:1d:5d:84:e6:80:77:04:3c:50: dd:e9:4f:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjYwOTEwMjM1OTI4WhcNMjYwOTE3MjM1OTI4WjAYMRYwFAYD VQQDEw02YWEzNDQ2MC05NTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtD+xu1CaZ5hGv0xc+Za8ak03qxH9hqLsFZjy0aA/qPBsxubZx4j0JgoCD7YV lfeNvU4uwbHfg6WDD7fx2O/XA0ZaJYYgxZv/OYWzEcWZW97tKObC/SoCYK5/WAeo Vxpxd/qSi73EnwRNsz92srvIY3IBchcDMH6sc7P35PLxB1hu5MYbUqjqUE/gpiyf qZ3wiul5VfETNu31vB1oQkFkKLTxfSx4rY5kdBkRD9tkEJZRGhLwXB4Ey2GBBMMe aC9GEQuaRqyjuavnmhJaozkdYTma941tbwpdz4Fffoha9/QOwvOP3H2I7PjKPcFS RyRxBt0Ulnab9ee7HtAAIBq/CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOcqlbJ fKkUnfGhk+zy99UogIFJMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARVYcnORl2xDDcOfa3c0D70wy0Md+iiYX8Ns1XSBzUlXnFzZyRRh/lKz2TEnK pGiPgfZg9OML9oe4Gd7lORyP4dlpzijt1erTD+4iRFUTae9bLhBecQGzFzngSrQn a1lV0Lvl4uEKHJ/o0MhCZ0/fnUSRt6SswJK/t/w7Aa9Bg+VYedRpmn6i52Wj3PZz j2s2z8aymGHhobSY8yaynYfOG3UyhJEWCobkbFm13lABTODc39T5CaA69t5Pcm+T wEyXgrGcl3aNWhRosItBpt40ty83M8FNZiWB/0IDeHqBJeYrRqN2FM0mAmwjduyS tE6DeoF0HV2E5oB3BDxQ3elPCQ== -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:48 2026 by rpki-client