$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft File: xfPmCWA9MLk6tGt4klx63Q8s8hI.mft (raw, json) Hash identifier: tXdJfMr4/mKS3CjhBfqVUri5WaeNwWRxXJ48by4253c= Subject key identifier: 53:30:4B:5A:DE:74:0D:2E:CF:82:AE:3B:3D:67:A8:AB:70:2A:42:64 Authority key identifier: C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12 Certificate issuer: /CN=A917A689/serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft Manifest number: 35 Signing time: Sun 11 Oct 2026 09:18:46 +0000 Manifest this update: Sun 11 Oct 2026 09:18:46 +0000 Manifest next update: Sun 18 Oct 2026 09:18:46 +0000 Files and hashes: 1: xfPmCWA9MLk6tGt4klx63Q8s8hI.crl (hash: 8Joz7R5J7pvIAQ6XAu8oWVGacaZxSBgqSUdNj2OOef8=) 2: E9204B7A922D11F1B2D6A4FE6B11F970.roa (hash: 2QbsP2/BdY1Pzqt33Iq3WFHZOUUILNdbR0H9vspv+aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A689, serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212 Validity Not Before: Oct 11 09:18:46 2026 GMT Not After : Oct 18 09:18:46 2026 GMT Subject: CN=6acb5476-6398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:a6:ad:7c:32:a7:26:81:d3:fb:c4:1e:d3: 5e:17:6c:28:2d:5a:b4:28:b5:7d:a5:ae:03:bb:5d: 96:9c:ad:36:8d:fc:6f:93:ac:ab:51:80:1f:af:56: 15:97:c3:95:2e:33:89:df:11:2a:1d:d5:fc:2a:dc: c0:bf:99:ba:3b:55:f7:c2:b8:1d:21:1a:5a:d4:ff: fa:e1:20:71:81:12:96:2f:29:53:4b:05:85:48:ef: 50:a3:60:5a:50:79:04:7e:b0:29:53:9c:3c:8b:d2: 63:3c:c3:fd:39:62:83:35:a8:1c:a1:70:5a:ed:4e: a5:18:1f:e6:68:e9:a2:e0:80:bd:82:a1:5f:f9:58: 33:0d:40:ce:5e:12:9c:71:70:b2:62:ab:8d:48:d8: fb:7a:3d:3f:f9:55:72:bf:e7:2a:cb:34:fd:d0:54: 71:b2:9a:64:35:83:fd:b8:38:48:b2:89:cd:60:4b: 12:17:9d:76:c5:f2:f6:30:ce:ed:c1:21:32:e3:ee: f4:56:74:12:62:70:d2:85:21:d4:de:ce:4d:44:db: 42:84:b6:58:fe:c4:f0:c8:2c:a6:17:39:75:78:ff: e5:eb:cd:e0:ec:c9:3f:72:20:08:39:ce:28:78:c8: 3f:8d:dd:77:d5:07:5a:fe:a6:86:ef:78:20:53:d9: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:4B:5A:DE:74:0D:2E:CF:82:AE:3B:3D:67:A8:AB:70:2A:42:64 X509v3 Authority Key Identifier: keyid:C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2d:f5:1e:0a:a0:7e:ba:84:c4:ff:f8:2a:27:44:18:3d:c6: 53:0e:be:c7:39:95:55:af:46:21:d0:bb:9e:e6:61:0f:1e:2b: e0:20:95:ab:e4:62:98:0f:a2:d0:75:4c:f2:ce:43:95:78:18: 35:76:18:a8:ad:a7:cd:20:ba:99:a8:ea:82:f0:d1:5a:df:c1: c5:52:de:96:47:ae:ee:4a:5c:a8:af:f1:a4:06:9e:20:30:10: 09:42:ff:88:a1:94:36:b5:80:ef:04:55:20:cd:24:7d:d8:d3: b2:d6:ac:5c:0a:67:48:e2:87:e0:1b:37:08:71:73:c9:d3:ce: bc:95:ad:f9:20:a4:8f:b5:ad:fa:02:f0:f1:19:05:4c:01:87: ae:a6:dd:a0:b9:30:d0:55:62:b6:bc:ca:75:be:06:e6:ab:24: c0:39:36:13:8b:de:37:63:71:87:a2:df:7a:05:4c:28:98:78: af:62:18:55:04:56:11:c6:d5:87:13:75:bf:44:fa:6f:74:55: 2a:98:a7:28:6a:f7:d8:57:6f:2d:dc:1d:85:cd:9f:59:ba:b3: 51:4a:f9:47:9f:16:ca:ab:69:f9:3f:14:82:02:f6:f4:9c:8d: 72:39:46:76:07:83:cf:5d:85:c5:76:6a:c6:a8:75:b6:c8:99: 37:23:79:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTY4OTExMC8GA1UEBRMoQzVGM0U2MDk2MDNEMzBCOTNBQjQ2Qjc4OTI1QzdBREQw RjJDRjIxMjAeFw0yNjEwMTEwOTE4NDZaFw0yNjEwMTgwOTE4NDZaMBgxFjAUBgNV BAMTDTZhY2I1NDc2LTYzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjHaatfDKnJoHT+8Qe014XbCgtWrQotX2lrgO7XZacrTaN/G+TrKtRgB+vVhWX w5UuM4nfESod1fwq3MC/mbo7VffCuB0hGlrU//rhIHGBEpYvKVNLBYVI71CjYFpQ eQR+sClTnDyL0mM8w/05YoM1qByhcFrtTqUYH+Zo6aLggL2CoV/5WDMNQM5eEpxx cLJiq41I2Pt6PT/5VXK/5yrLNP3QVHGymmQ1g/24OEiyic1gSxIXnXbF8vYwzu3B ITLj7vRWdBJicNKFIdTezk1E20KEtlj+xPDILKYXOXV4/+XrzeDsyT9yIAg5zih4 yD+N3XfVB1r+pobveCBT2f6JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUzBLWt50 DS7Pgq47PWeoq3AqQmQwHwYDVR0jBBgwFoAUxfPmCWA9MLk6tGt4klx63Q8s8hIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjg5LzhFOEM3NTU2N0E5 NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxrNnRHdDRrbHg2M1E4czho SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGZQbUNXQTlNTGs2dEd0NGtseDYzUThzOGhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB Njg5LzhFOEM3NTU2N0E5NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxr NnRHdDRrbHg2M1E4czhoSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCNLfUeCqB+uoTE//gqJ0QYPcZTDr7HOZVVr0Yh0Lue5mEPHivgIJWr5GKYD6LQ dUzyzkOVeBg1dhiorafNILqZqOqC8NFa38HFUt6WR67uSlyor/GkBp4gMBAJQv+I oZQ2tYDvBFUgzSR92NOy1qxcCmdI4ofgGzcIcXPJ0868la35IKSPta36AvDxGQVM AYeupt2guTDQVWK2vMp1vgbmqyTAOTYTi943Y3GHot96BUwomHivYhhVBFYRxtWH E3W/RPpvdFUqmKcoavfYV28t3B2FzZ9ZurNRSvlHnxbKq2n5PxSCAvb0nI1yOUZ2 B4PPXYXFdmrGqHW2yJk3I3nw -----END CERTIFICATE-----Generated at Tue Oct 13 00:27:09 2026 by rpki-client