$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json) Hash identifier: QPhDX7YkjxSb/QU8SKhnd/Gh67VPD1qnOehF1y/H0Dc= Subject key identifier: 91:FF:E1:BD:80:6F:08:38:82:20:E5:C4:D2:9B:61:E7:82:7A:3E:FB Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Certificate serial: 0A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft Manifest number: 0A6F Signing time: Thu 08 Oct 2026 19:46:17 +0000 Manifest this update: Thu 08 Oct 2026 19:46:17 +0000 Manifest next update: Thu 15 Oct 2026 19:46:17 +0000 Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: 3V87vmKD1KhnC9tr/0ZLPdWaJEFds+WLITRy2UDLvck=) 2: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: V4TtDHDwWfSTPDtmdJxLiYpQrBPMzCI9Mup9QQhSTOc=) 3: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: phoNlFrzl7WYjyRvdppnlSL/FBRV8iS5x5iyLwB+dTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2698 (0xa8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Validity Not Before: Oct 8 19:46:17 2026 GMT Not After : Oct 15 19:46:17 2026 GMT Subject: CN=6ac7f309-a0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:18:9e:e8:a8:01:8b:c8:cb:e1:f3:be:86: 22:5e:21:ce:fc:2f:b3:62:a3:f1:d2:2b:ce:8d:7f: 04:cf:6d:ca:4d:0e:52:d3:0e:d9:cf:12:8e:4a:99: 68:7b:11:59:ba:70:39:d8:6a:8a:07:66:93:d7:21: 82:13:38:eb:b6:26:01:50:5c:61:c1:cd:51:41:58: 49:dd:dd:d1:92:da:39:09:e9:09:c0:62:7c:72:1e: c8:17:63:51:46:17:e1:ac:87:a9:f3:a0:b2:8a:c0: 5c:fb:8c:21:09:0a:fa:1d:63:b9:d5:10:2c:b5:05: 69:e3:bc:12:d9:49:74:b6:3f:22:d7:ad:76:70:27: 5f:26:9e:2f:97:59:f3:bd:6d:54:f0:eb:2c:d5:c5: 32:2f:57:c7:46:95:b0:de:92:6a:3f:08:a6:41:41: df:1c:c9:66:5c:a2:d6:2d:ba:5a:7b:14:93:69:98: 85:c4:82:71:9d:53:ee:b3:cd:f3:59:91:d7:a0:33: ef:03:5f:a3:76:c5:d4:53:a9:cf:8e:45:46:50:44: 21:86:6f:7a:5e:f4:ea:e4:8d:9b:9b:82:89:20:06: 87:51:41:c1:20:a6:7b:30:08:4f:f3:f6:97:27:94: b4:4f:7b:b0:30:98:1e:74:64:0a:c9:e7:22:2f:0b: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FF:E1:BD:80:6F:08:38:82:20:E5:C4:D2:9B:61:E7:82:7A:3E:FB X509v3 Authority Key Identifier: keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a9:ca:96:63:f6:ac:05:4b:b7:c1:88:cb:9a:fa:72:81:9c: 56:3c:fa:71:60:f5:81:f4:1f:c8:2e:d0:1d:96:60:ea:4b:3b: 84:7b:a2:41:ad:ba:77:e8:14:6d:9b:fa:1d:57:97:5c:ff:aa: 31:30:7c:8d:07:2d:b4:cc:f5:4e:f7:fe:f0:59:39:69:60:8c: 03:02:54:51:80:36:00:46:58:e6:f4:27:0e:18:cc:34:b4:63: 54:ce:9f:e4:b9:d1:b1:a5:77:ec:72:fc:cd:52:eb:35:e2:f9: 62:65:53:f6:45:88:d1:99:c9:6e:7d:8f:bf:31:11:44:f3:46: be:15:d3:7d:c2:c5:7e:19:da:8f:1b:3a:b7:c2:04:45:aa:a7: 7d:01:02:71:f0:28:2c:f4:71:18:fc:12:f8:5b:63:c6:e7:1f: 64:d9:ea:49:0f:86:dd:63:2b:d7:33:87:8c:4e:d3:96:e0:e7: 3d:6b:53:5d:27:2b:7c:e2:dc:a3:b6:60:fe:c0:62:85:06:d7: df:4f:33:8f:f0:b1:7c:2b:c2:7e:6b:da:3f:25:b2:d7:cf:5f: 2f:70:40:57:c2:38:0d:5f:94:d0:26:18:cf:9f:af:02:5e:7e: f5:d6:1b:2c:81:01:69:06:ae:55:d7:05:24:da:f8:82:9c:aa: 9b:91:c3:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4QTkxMTAvBgNVBAUTKDVDMEFCNDI1RjJCNDIzNUUxQzgxNTY4M0JENkM4RThC N0I4MEI3MjcwHhcNMjYxMDA4MTk0NjE3WhcNMjYxMDE1MTk0NjE3WjAYMRYwFAYD VQQDEw02YWM3ZjMwOS1hMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNIYnuioAYvIy+HzvoYiXiHO/C+zYqPx0ivOjX8Ez23KTQ5S0w7ZzxKOSplo exFZunA52GqKB2aT1yGCEzjrtiYBUFxhwc1RQVhJ3d3Rkto5CekJwGJ8ch7IF2NR RhfhrIep86CyisBc+4whCQr6HWO51RAstQVp47wS2Ul0tj8i1612cCdfJp4vl1nz vW1U8Oss1cUyL1fHRpWw3pJqPwimQUHfHMlmXKLWLbpaexSTaZiFxIJxnVPus83z WZHXoDPvA1+jdsXUU6nPjkVGUEQhhm96XvTq5I2bm4KJIAaHUUHBIKZ7MAhP8/aX J5S0T3uwMJgedGQKyeciLwtBKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJH/4b2A bwg4giDlxNKbYeeCej77MB8GA1UdIwQYMBaAFFwKtCXytCNeHIFWg71sjot7gLcn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhBOS8yQUEwNDMzMDk0 RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkxNGNnVmFEdld5T2kzdUF0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBcTBKZkswSTE0Y2dWYUR2V3lPaTN1QXR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhBOS8yQUEwNDMzMDk0RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkx NGNnVmFEdld5T2kzdUF0eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaKnKlmP2rAVLt8GIy5r6coGcVjz6cWD1gfQfyC7QHZZg6ks7hHuiQa26d+gU bZv6HVeXXP+qMTB8jQcttMz1Tvf+8Fk5aWCMAwJUUYA2AEZY5vQnDhjMNLRjVM6f 5LnRsaV37HL8zVLrNeL5YmVT9kWI0ZnJbn2PvzERRPNGvhXTfcLFfhnajxs6t8IE RaqnfQECcfAoLPRxGPwS+FtjxucfZNnqSQ+G3WMr1zOHjE7TluDnPWtTXScrfOLc o7Zg/sBihQbX308zj/CxfCvCfmvaPyWy189fL3BAV8I4DV+U0CYYz5+vAl5+9dYb LIEBaQauVdcFJNr4gpyqm5HD4Q== -----END CERTIFICATE-----Generated at Fri Oct 9 17:44:14 2026 by rpki-client