$ rpki-client -vvvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: bUpdZPei3BbczlJjVjqSxmCUQSh/WAJ6O6jI15eZr8k= Subject key identifier: 11:07:55:15:4F:65:55:8F:83:6F:50:3A:F0:77:5D:13:6D:46:AA:52 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0DEB Signing time: Fri 02 Oct 2026 18:04:57 +0000 Manifest this update: Fri 02 Oct 2026 18:04:56 +0000 Manifest next update: Fri 09 Oct 2026 18:04:56 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: UDBFfLPqQbH1Gcr6r8l30eiElcs016D/y91gMHdvsoQ=) 2: 438F11F056C311F181F3CD32B6833773.roa (hash: yjlsTkzpMnfS0rek53KiIgqiGpEW5frXpR+bs0ph5t0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3583 (0xdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Oct 2 18:04:56 2026 GMT Not After : Oct 9 18:04:56 2026 GMT Subject: CN=6abff249-ee11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:21:23:d8:6a:3e:b5:36:58:16:32:19:5f: b6:e2:ec:50:a4:80:59:dc:0c:02:b0:3d:dc:17:db: 54:95:43:e0:c7:14:94:6d:03:71:3b:e0:fd:48:8b: 4b:73:75:73:ff:97:21:29:53:29:6d:7f:5f:96:23: 9c:e3:0b:75:50:aa:bd:0b:31:36:f1:2a:ca:e1:a6: 7e:9c:2e:29:af:9e:a5:f4:b1:31:58:f7:44:c5:9a: 89:6e:8d:bc:ae:24:92:d2:5e:a0:57:06:27:fa:a8: e1:5d:5f:e2:62:bb:47:dc:f2:db:eb:2f:40:8c:4e: f2:22:ce:91:89:6f:6f:9c:67:44:83:42:68:54:28: d3:d3:7b:5a:12:d5:92:69:72:4a:52:43:98:c3:11: 7f:e8:10:8e:65:02:41:d6:95:23:6e:fb:15:a3:ce: 7d:b6:18:02:ff:d6:40:87:5d:44:91:2d:8c:a1:7a: 85:4f:f4:b6:55:cf:f6:6e:fc:fe:83:42:ed:ea:47: 69:26:59:72:87:0b:24:11:04:d7:46:5c:da:fb:e2: a4:c3:67:aa:82:cd:55:48:d2:1e:1c:18:a0:99:71: 4f:8b:44:66:76:46:9e:c9:15:ab:a9:6f:2d:ee:e0: eb:7f:68:31:0b:b0:64:9b:85:82:98:0f:95:5e:c5: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:07:55:15:4F:65:55:8F:83:6F:50:3A:F0:77:5D:13:6D:46:AA:52 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c8:27:28:05:94:68:d1:48:7e:88:80:7a:09:dd:8a:7e:b6: b8:63:ad:d5:1e:d8:a7:03:fc:2f:f3:65:17:ea:b9:0a:7a:dc: 57:09:f6:18:3e:09:96:ba:65:e8:be:be:3a:00:de:23:e9:ab: 6b:6d:de:ef:99:05:6c:f5:e5:b4:cc:bd:e4:60:bc:fa:d7:d9: ec:cb:71:30:1b:d4:e3:a2:4a:f6:72:1b:c1:89:07:24:4e:a2: eb:95:89:68:07:af:c9:3d:dd:af:9c:cb:1f:57:a7:ce:95:1a: 2a:51:4a:48:ac:63:7e:8b:a2:ab:9a:b2:a0:8b:83:32:4f:22: df:4c:c1:af:f2:76:61:cd:82:88:f2:be:30:50:31:39:05:b2: a7:e1:6b:fc:6f:a0:f0:bc:f4:d6:c8:f5:b6:e8:94:e9:2c:1f: 1f:4f:b6:7a:31:13:49:99:51:ff:e7:60:1b:3d:ac:75:d5:69: f2:b8:4c:90:d5:b6:29:9c:f7:23:54:1f:ca:af:b8:df:9e:c7: 37:d6:0c:24:7d:f6:ef:ab:c8:b2:fd:0e:55:26:8e:47:77:d7: 02:23:90:9e:51:ee:93:98:f3:75:30:5c:e7:fd:36:36:1f:e8: b0:3c:03:53:85:14:8d:3e:1a:48:fb:9b:b8:3f:fc:c8:87:cb: 1c:57:ba:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjYxMDAyMTgwNDU2WhcNMjYxMDA5MTgwNDU2WjAYMRYwFAYD VQQDEw02YWJmZjI0OS1lZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtawhI9hqPrU2WBYyGV+24uxQpIBZ3AwCsD3cF9tUlUPgxxSUbQNxO+D9SItL c3Vz/5chKVMpbX9fliOc4wt1UKq9CzE28SrK4aZ+nC4pr56l9LExWPdExZqJbo28 riSS0l6gVwYn+qjhXV/iYrtH3PLb6y9AjE7yIs6RiW9vnGdEg0JoVCjT03taEtWS aXJKUkOYwxF/6BCOZQJB1pUjbvsVo859thgC/9ZAh11EkS2MoXqFT/S2Vc/2bvz+ g0Lt6kdpJllyhwskEQTXRlza++Kkw2eqgs1VSNIeHBigmXFPi0RmdkaeyRWrqW8t 7uDrf2gxC7Bkm4WCmA+VXsX7GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBEHVRVP ZVWPg29QOvB3XRNtRqpSMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASMgnKAWUaNFIfoiAegndin62uGOt1R7YpwP8L/NlF+q5CnrcVwn2GD4Jlrpl 6L6+OgDeI+mra23e75kFbPXltMy95GC8+tfZ7MtxMBvU46JK9nIbwYkHJE6i65WJ aAevyT3dr5zLH1enzpUaKlFKSKxjfouiq5qyoIuDMk8i30zBr/J2Yc2CiPK+MFAx OQWyp+Fr/G+g8Lz01sj1tuiU6SwfH0+2ejETSZlR/+dgGz2sddVp8rhMkNW2KZz3 I1Qfyq+4357HN9YMJH3276vIsv0OVSaOR3fXAiOQnlHuk5jzdTBc5/02Nh/osDwD U4UUjT4aSPubuD/8yIfLHFe6Jg== -----END CERTIFICATE-----Generated at Sun Oct 4 09:43:15 2026 by rpki-client