$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: 2npCRzC75oijtuIOdgdNIhd65699IY0gySIcmc9aikA= Subject key identifier: 53:57:91:6D:6A:7A:F7:C7:3E:0A:3E:9F:F2:5B:BB:FA:11:B9:25:5D Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: 01F1 Signing time: Tue 03 Nov 2026 04:14:20 +0000 Manifest this update: Tue 03 Nov 2026 04:14:19 +0000 Manifest next update: Tue 10 Nov 2026 04:14:19 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: pm0ryun7G9sEOvkV77FMGG9A+s6cGaowOCJVahExHwc=) 2: 1481122880F311F186C940A665A30FBC.roa (hash: PMTOPNCvK275VS9T+ov9NkbHzoz5VMbfUd/+yh/SAV0=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: At643elqRJd2BjPQAPdTeEaxQov7oAvsnBfXaIpuNvo=) 4: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: UDpxRFFH79in54JQo9jdMcxjvxE/p6jYvLLseV3aVBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 04:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: Nov 3 04:14:19 2026 GMT Not After : Nov 10 04:14:19 2026 GMT Subject: CN=6ae95f9c-e35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:42:8f:48:54:6a:84:e9:2d:5c:a9:f5:eb: 51:3f:5a:38:35:48:30:31:d4:74:33:61:69:a2:49: a5:32:51:19:78:80:f3:6e:77:e5:95:30:27:3b:e1: ec:22:c6:1e:c5:bf:df:cb:81:ee:be:5b:1a:49:18: d2:fd:a2:a7:f5:9d:3a:67:53:e0:05:00:75:fb:59: 36:4f:e6:a3:09:68:de:e4:49:24:c8:0d:00:a9:e4: ef:c5:52:d8:dc:b3:ce:27:73:4e:b2:ed:fa:af:6c: f7:39:78:ce:6a:50:fd:e3:71:f1:8e:70:7b:a3:fc: c0:30:27:34:01:67:7a:c3:7d:7c:a1:4d:9b:48:7e: 14:02:1b:f5:b7:fb:e4:66:bd:22:6e:69:e0:64:12: e7:cd:b5:cd:99:a0:f0:1f:85:52:b7:83:8f:da:58: 2a:e2:33:fd:5d:80:c7:d3:2b:28:fe:24:c1:18:da: 3c:e0:6f:4f:7d:45:5d:3c:f7:d7:23:ea:5d:ed:b3: 56:21:34:03:56:29:2b:68:7e:7e:d0:1f:05:ec:13: 00:ee:c2:f3:f7:e3:72:99:3e:e6:5e:28:72:de:af: b9:f0:ff:e0:ee:b4:af:ae:6c:e6:f1:10:41:46:55: 65:a1:25:9a:6b:bb:c7:ba:bb:a9:f0:12:87:fc:61: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:57:91:6D:6A:7A:F7:C7:3E:0A:3E:9F:F2:5B:BB:FA:11:B9:25:5D X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dc:a3:57:96:dd:5b:da:71:80:79:ac:37:74:6c:0c:5b:25: dc:0c:62:3d:1c:17:88:47:ee:ed:2c:22:cd:27:ca:07:44:0f: b9:77:fa:c3:4e:58:21:4f:ae:41:af:5b:01:12:e9:0e:90:dd: 7d:6c:18:f8:55:a4:0c:fc:f7:4e:5d:25:f1:8d:89:bb:46:79: b7:a3:9f:ab:06:7e:73:7c:d9:5b:c1:a2:86:4f:0a:5e:8f:c3: 67:56:5e:93:fc:3d:9a:d7:e5:46:41:60:4a:a0:d7:2b:0a:8e: 0e:87:2f:49:b1:78:4c:29:ec:1c:55:51:c7:8f:cf:d9:4c:4d: 52:b2:1d:c1:f2:63:43:99:0b:ab:e1:44:79:6d:9a:0f:ec:4a: d4:7e:49:56:8c:1a:b1:f8:f0:a6:63:a6:b7:ca:21:e2:cb:87: ea:69:e7:b8:8e:16:a3:77:1d:4e:d1:5d:9a:7d:53:f0:41:85: 4a:bf:23:25:f4:85:a0:e8:1b:ac:f2:0b:e8:36:4c:77:f6:4d: d4:ce:51:53:05:57:f8:51:89:19:95:d8:0c:63:93:1d:ef:c4: 15:67:38:20:84:91:9e:b3:bd:dc:80:57:f9:c7:5f:ff:59:76: ea:e3:a7:7f:c3:b3:e1:aa:15:c0:a1:be:70:93:cd:40:9b:16: 9c:57:14:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjYxMTAzMDQxNDE5WhcNMjYxMTEwMDQxNDE5WjAYMRYwFAYD VQQDEw02YWU5NWY5Yy1lMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlblCj0hUaoTpLVyp9etRP1o4NUgwMdR0M2FpokmlMlEZeIDzbnfllTAnO+Hs IsYexb/fy4HuvlsaSRjS/aKn9Z06Z1PgBQB1+1k2T+ajCWje5EkkyA0AqeTvxVLY 3LPOJ3NOsu36r2z3OXjOalD943HxjnB7o/zAMCc0AWd6w318oU2bSH4UAhv1t/vk Zr0ibmngZBLnzbXNmaDwH4VSt4OP2lgq4jP9XYDH0yso/iTBGNo84G9PfUVdPPfX I+pd7bNWITQDVikraH5+0B8F7BMA7sLz9+NymT7mXihy3q+58P/g7rSvrmzm8RBB RlVloSWaa7vHurup8BKH/GFmSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNXkW1q evfHPgo+n/Jbu/oRuSVdMB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAatyjV5bdW9pxgHmsN3RsDFsl3AxiPRwXiEfu7SwizSfKB0QPuXf6w05YIU+u Qa9bARLpDpDdfWwY+FWkDPz3Tl0l8Y2Ju0Z5t6OfqwZ+c3zZW8Gihk8KXo/DZ1Ze k/w9mtflRkFgSqDXKwqODocvSbF4TCnsHFVRx4/P2UxNUrIdwfJjQ5kLq+FEeW2a D+xK1H5JVowasfjwpmOmt8oh4suH6mnnuI4Wo3cdTtFdmn1T8EGFSr8jJfSFoOgb rPIL6DZMd/ZN1M5RUwVX+FGJGZXYDGOTHe/EFWc4IISRnrO93IBX+cdf/1l26uOn f8Oz4aoVwKG+cJPNQJsWnFcUaA== -----END CERTIFICATE-----Generated at Wed Nov 4 19:13:05 2026 by rpki-client