$ rpki-client -vvvf rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft File: xW0du4pgFr90xqhFxeNGKMJ4dzI.mft (raw, json) Hash identifier: G7Zs+NdE4gqTqvEMeMmkeAMx17z+KVyik74Vj9il+Ag= Subject key identifier: 90:E7:2E:BB:8B:79:27:A4:C3:C0:EA:DD:37:1D:2F:AE:15:55:1E:72 Authority key identifier: C5:6D:1D:BB:8A:60:16:BF:74:C6:A8:45:C5:E3:46:28:C2:78:77:32 Certificate issuer: /CN=A918110B/serialNumber=C56D1DBB8A6016BF74C6A845C5E34628C2787732 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft Manifest number: 1D Signing time: Fri 11 Sep 2026 09:01:22 +0000 Manifest this update: Fri 11 Sep 2026 09:01:21 +0000 Manifest next update: Fri 18 Sep 2026 09:01:21 +0000 Files and hashes: 1: xW0du4pgFr90xqhFxeNGKMJ4dzI.crl (hash: knnw89kojTU05VbKBYIsaSiSlRr/5R8sYKRRCRHXmLk=) 2: 044B9692869F11F18E46D7236FA30FBC.roa (hash: I7p/0pECs9pLSsuX4d892DqcQ7FtCtuQLKWoIDde+T4=) 3: 8B5CA276955811F18B37A4936511F970.roa (hash: zA1G9LW2r1LXBPTfNsx/98LKYwa23E3TbJ+FMzKzcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.crl rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918110B, serialNumber=C56D1DBB8A6016BF74C6A845C5E34628C2787732 Validity Not Before: Sep 11 09:01:21 2026 GMT Not After : Sep 18 09:01:21 2026 GMT Subject: CN=6aa3c362-ef04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:fd:ea:c9:f0:a2:4e:da:12:d1:b7:d0:6f: d0:6a:f8:cf:6e:9d:34:88:5b:75:b4:40:04:58:70: db:01:72:bf:91:96:37:8c:d9:46:9c:41:93:8c:54: fa:f8:aa:60:15:89:84:05:5f:aa:05:28:f0:e9:87: 8e:ca:ac:ce:44:81:2d:29:07:ef:59:69:af:91:2f: e0:f4:68:f0:23:a2:a7:d4:fd:98:44:08:47:7d:26: 09:80:49:2c:1f:7f:f6:64:ce:be:ed:1d:8a:58:73: 94:72:da:e4:bb:40:e2:38:1e:60:a2:de:b0:f0:d1: f6:a9:41:a8:b5:99:25:fd:76:68:be:e2:f1:dc:c3: d9:78:cf:54:51:a1:08:84:1f:97:cc:e3:06:e7:0c: 52:e4:71:4e:06:e1:a0:d2:53:77:4d:fc:79:a8:2a: 38:ae:1e:c6:85:cc:ac:03:f2:d9:52:4a:5d:2d:a4: 44:f7:a5:bd:d8:87:97:0b:9c:48:ce:fd:c3:08:10: b1:3e:70:76:c7:c8:72:52:b3:5f:d2:f1:5f:21:97: 2c:ad:44:2e:01:0d:97:16:ba:cf:35:c0:71:70:0b: 45:62:9a:cf:83:fa:b6:c2:98:98:06:70:d4:35:e9: 70:dc:aa:d5:df:15:3e:ac:fa:50:d0:4e:b7:f0:1b: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E7:2E:BB:8B:79:27:A4:C3:C0:EA:DD:37:1D:2F:AE:15:55:1E:72 X509v3 Authority Key Identifier: keyid:C5:6D:1D:BB:8A:60:16:BF:74:C6:A8:45:C5:E3:46:28:C2:78:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:be:e1:e5:84:22:b3:0e:10:f1:58:e0:ee:4a:95:b0:6a:54: 82:3a:89:a7:a3:09:b6:26:15:30:bc:2f:2d:b8:18:75:ca:a1: 28:b8:c6:63:bf:dd:41:20:1a:27:8a:68:5e:a2:53:78:3a:22: be:99:aa:18:0b:ab:5d:11:61:ce:ec:dd:e8:84:9e:9c:f0:4e: ba:c3:3f:2b:bc:55:24:8b:04:89:63:5d:72:09:e3:80:b4:af: 7f:8b:83:fe:d5:e4:eb:b9:64:7d:b7:7b:00:1a:0c:72:d7:8f: a0:88:19:24:77:5d:54:58:b8:bc:40:77:e9:ff:e5:d0:72:16: 90:ec:dd:17:f8:94:6e:21:d0:34:5b:a5:a4:a3:75:13:fe:98: 60:66:c9:a5:5d:9a:59:78:b4:7d:9e:93:b0:25:fe:48:61:c3: f8:f0:f6:f5:86:98:e2:ad:94:65:0b:76:a6:fb:ee:5e:4d:9c: 8a:48:a5:09:84:85:f3:b5:33:e4:9e:4a:6a:4d:6b:01:b7:aa: 32:3b:a8:26:b0:90:f3:02:c2:54:d8:65:14:5c:48:ea:7d:e2: 1f:9e:c9:13:e9:70:cc:6c:13:1c:bd:69:ab:7e:a9:1e:a8:2e: 7f:0d:3d:68:c3:32:4f:67:0f:28:d4:86:a6:d8:36:89:51:49: 40:e1:9e:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTEwQjExMC8GA1UEBRMoQzU2RDFEQkI4QTYwMTZCRjc0QzZBODQ1QzVFMzQ2MjhD Mjc4NzczMjAeFw0yNjA5MTEwOTAxMjFaFw0yNjA5MTgwOTAxMjFaMBgxFjAUBgNV BAMTDTZhYTNjMzYyLWVmMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSBP3qyfCiTtoS0bfQb9Bq+M9unTSIW3W0QARYcNsBcr+RljeM2UacQZOMVPr4 qmAViYQFX6oFKPDph47KrM5EgS0pB+9Zaa+RL+D0aPAjoqfU/ZhECEd9JgmASSwf f/Zkzr7tHYpYc5Ry2uS7QOI4HmCi3rDw0fapQai1mSX9dmi+4vHcw9l4z1RRoQiE H5fM4wbnDFLkcU4G4aDSU3dN/HmoKjiuHsaFzKwD8tlSSl0tpET3pb3Yh5cLnEjO /cMIELE+cHbHyHJSs1/S8V8hlyytRC4BDZcWus81wHFwC0Vims+D+rbCmJgGcNQ1 6XDcqtXfFT6s+lDQTrfwGxGXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkOcuu4t5 J6TDwOrdNx0vrhVVHnIwHwYDVR0jBBgwFoAUxW0du4pgFr90xqhFxeNGKMJ4dzIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMTBCL0JBRUYwNzkwODY5 RTExRjFCMEMzRTBGMzZFQTMwRkJDL3hXMGR1NHBnRnI5MHhxaEZ4ZU5HS01KNGR6 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveFcwZHU0cGdGcjkweHFoRnhlTkdLTUo0ZHpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MTBCL0JBRUYwNzkwODY5RTExRjFCMEMzRTBGMzZFQTMwRkJDL3hXMGR1NHBnRnI5 MHhxaEZ4ZU5HS01KNGR6SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhvuHlhCKzDhDxWODuSpWwalSCOomnowm2JhUwvC8tuBh1yqEouMZjv91BIBon imheolN4OiK+maoYC6tdEWHO7N3ohJ6c8E66wz8rvFUkiwSJY11yCeOAtK9/i4P+ 1eTruWR9t3sAGgxy14+giBkkd11UWLi8QHfp/+XQchaQ7N0X+JRuIdA0W6Wko3UT /phgZsmlXZpZeLR9npOwJf5IYcP48Pb1hpjirZRlC3am++5eTZyKSKUJhIXztTPk nkpqTWsBt6oyO6gmsJDzAsJU2GUUXEjqfeIfnskT6XDMbBMcvWmrfqkeqC5/DT1o wzJPZw8o1Iam2DaJUUlA4Z7g -----END CERTIFICATE-----Generated at Fri Sep 11 15:36:58 2026 by rpki-client