$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json) Hash identifier: wxrMmzBhN1qZMHEJOzl5J7pioOYEvm2FYtQHR7D4/v0= Subject key identifier: E7:1B:68:97:D3:EA:78:0F:4C:BA:71:63:34:65:F1:25:72:C1:D8:6F Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft Manifest number: 0A70 Signing time: Sat 10 Oct 2026 19:42:30 +0000 Manifest this update: Sat 10 Oct 2026 19:42:29 +0000 Manifest next update: Sat 17 Oct 2026 19:42:29 +0000 Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: mEhTX3AzERBU9eBcyHR3DjMQxqbe/3AbnrsDSROZt64=) 2: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: phoNlFrzl7WYjyRvdppnlSL/FBRV8iS5x5iyLwB+dTc=) 3: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: V4TtDHDwWfSTPDtmdJxLiYpQrBPMzCI9Mup9QQhSTOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Validity Not Before: Oct 10 19:42:29 2026 GMT Not After : Oct 17 19:42:29 2026 GMT Subject: CN=6aca9525-663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:3b:97:5c:c3:74:7b:2d:f3:d8:4d:cd:a8: f6:b9:c1:09:94:2f:98:55:c1:6b:44:1a:95:9d:0d: 81:0d:b0:73:58:eb:bb:63:52:eb:ee:b6:84:1a:f2: 3d:58:6d:e2:18:d4:3d:9d:b7:5f:57:3d:4a:fd:7a: e7:eb:b9:62:9f:43:54:61:6d:60:0e:e1:ca:76:1a: d5:8c:dc:e3:40:7e:70:91:25:cf:26:e6:f3:eb:5c: 18:2c:c9:2a:41:1d:73:29:b8:04:f6:cb:a4:ce:41: 3a:13:61:13:3b:7e:4a:60:a0:ad:c2:94:b1:d1:81: 68:ae:57:67:ef:c2:1d:60:b1:9b:69:ae:d4:4e:17: db:b1:f3:49:48:6b:11:80:d3:d0:61:51:3e:80:0a: ed:01:03:6e:69:95:3d:9b:25:f3:3f:88:6d:5d:53: 99:a7:92:18:31:50:71:c7:7c:86:4b:63:d7:52:08: 3e:84:d9:f8:3b:7b:c9:4c:f8:5a:9e:13:81:60:a2: 7d:63:dc:3d:4f:aa:32:04:b1:d1:ee:1a:37:ea:29: d9:41:84:ad:1f:8b:0a:f2:88:db:dc:53:ac:9b:7f: e1:8a:66:9c:23:bf:44:08:c8:32:40:db:58:bf:68: d6:b5:f9:4b:18:66:67:ac:2f:5d:16:33:d0:8d:9f: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1B:68:97:D3:EA:78:0F:4C:BA:71:63:34:65:F1:25:72:C1:D8:6F X509v3 Authority Key Identifier: keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b7:15:7c:1a:3b:b3:7a:26:59:3b:f0:7e:18:be:bd:35:14: 8b:eb:ff:0a:7b:0e:af:14:a8:7e:44:37:1d:83:26:ca:7c:43: a6:27:5f:7f:f8:60:05:db:9c:9e:39:c3:c8:76:c7:bd:78:cd: c3:9e:d1:22:11:63:4d:b1:33:d9:b9:9d:23:38:6c:fe:a9:45: a7:1f:2c:0f:0e:35:7a:35:fb:a8:ec:8b:2c:df:d9:40:76:8e: ca:15:4e:0a:f3:e2:ff:aa:6f:29:3e:95:23:7c:9a:be:e3:a5: 1a:9c:b5:8a:46:98:64:20:70:41:22:0a:29:66:64:4a:06:b3: 3a:bc:65:2f:60:cb:aa:da:c6:05:a1:94:50:6e:8c:f8:35:88: 2c:6a:19:4b:ad:52:e5:87:8e:aa:32:3e:3c:a7:7d:69:ca:29: 25:a0:e6:8f:56:1f:02:e5:60:3d:48:6f:ca:08:a4:85:94:12: 0a:e2:9b:61:7f:3c:4a:3d:d6:bf:4a:e4:18:dc:5f:e9:5d:b3: a6:11:97:d6:a8:be:03:12:1d:54:db:83:e7:d5:71:a3:d5:42: 05:e8:c0:2f:19:29:49:3e:f5:4f:e8:1e:65:31:fc:4c:4d:df: e4:8f:85:be:eb:7a:4d:dc:39:ca:cc:e6:cf:03:63:3f:e2:e1: f0:cf:95:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4QTkxMTAvBgNVBAUTKDVDMEFCNDI1RjJCNDIzNUUxQzgxNTY4M0JENkM4RThC N0I4MEI3MjcwHhcNMjYxMDEwMTk0MjI5WhcNMjYxMDE3MTk0MjI5WjAYMRYwFAYD VQQDEw02YWNhOTUyNS02NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlU87l1zDdHst89hNzaj2ucEJlC+YVcFrRBqVnQ2BDbBzWOu7Y1Lr7raEGvI9 WG3iGNQ9nbdfVz1K/Xrn67lin0NUYW1gDuHKdhrVjNzjQH5wkSXPJubz61wYLMkq QR1zKbgE9sukzkE6E2ETO35KYKCtwpSx0YForldn78IdYLGbaa7UThfbsfNJSGsR gNPQYVE+gArtAQNuaZU9myXzP4htXVOZp5IYMVBxx3yGS2PXUgg+hNn4O3vJTPha nhOBYKJ9Y9w9T6oyBLHR7ho36inZQYStH4sK8ojb3FOsm3/himacI79ECMgyQNtY v2jWtflLGGZnrC9dFjPQjZ/d8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcbaJfT 6ngPTLpxYzRl8SVywdhvMB8GA1UdIwQYMBaAFFwKtCXytCNeHIFWg71sjot7gLcn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhBOS8yQUEwNDMzMDk0 RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkxNGNnVmFEdld5T2kzdUF0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBcTBKZkswSTE0Y2dWYUR2V3lPaTN1QXR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhBOS8yQUEwNDMzMDk0RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkx NGNnVmFEdld5T2kzdUF0eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkbcVfBo7s3omWTvwfhi+vTUUi+v/CnsOrxSofkQ3HYMmynxDpidff/hgBduc njnDyHbHvXjNw57RIhFjTbEz2bmdIzhs/qlFpx8sDw41ejX7qOyLLN/ZQHaOyhVO CvPi/6pvKT6VI3yavuOlGpy1ikaYZCBwQSIKKWZkSgazOrxlL2DLqtrGBaGUUG6M +DWILGoZS61S5YeOqjI+PKd9acopJaDmj1YfAuVgPUhvygikhZQSCuKbYX88Sj3W v0rkGNxf6V2zphGX1qi+AxIdVNuD59Vxo9VCBejALxkpST71T+geZTH8TE3f5I+F vut6Tdw5yszmzwNjP+Lh8M+VLw== -----END CERTIFICATE-----Generated at Sun Oct 11 06:20:27 2026 by rpki-client