$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: RWcEttxxmLrUVXzpmFDP4My8Y7jcrqeqrroS4d7CURM= Subject key identifier: 2F:EE:01:B6:12:FB:A4:E6:1D:5D:53:BC:C7:86:53:90:9F:B6:00:8B Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: 01CF Signing time: Wed 07 Oct 2026 04:15:07 +0000 Manifest this update: Wed 07 Oct 2026 04:15:07 +0000 Manifest next update: Wed 14 Oct 2026 04:15:07 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: 374N7dVgmKhazE9VdtqNqj6LyVCQV4S3TTg9Q3vmT7g=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: y7jb6cwIzoJ+j87zu0EqC/c/p/EowwP9+XVDIVZhy6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 04:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Oct 7 04:15:07 2026 GMT Not After : Oct 14 04:15:07 2026 GMT Subject: CN=6ac5c74b-6ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:ba:d1:15:6e:f1:c9:ac:19:89:8f:ea:8b: 38:42:aa:63:0b:a3:a1:6c:03:67:59:f7:a5:f3:f4: d2:eb:cd:8a:ae:13:ab:e4:a7:22:cc:ab:bb:d5:34: ce:f9:9c:f4:2a:ec:ac:84:46:5c:fc:6c:5a:ac:59: 4f:12:f5:0d:61:28:8d:43:6c:6a:f5:64:b6:2d:74: f8:00:e2:fe:0c:c6:66:fe:46:f4:1d:ac:09:d9:ef: 1c:ea:4a:94:a7:6e:e6:12:d0:50:30:99:da:48:58: c5:ae:e1:7b:51:99:0f:e2:18:bf:85:17:7e:98:46: 41:b4:8a:d3:88:8e:83:56:ae:13:90:dc:e8:b0:4a: 3a:99:47:21:c2:d3:6b:09:da:d3:00:60:54:27:57: 51:f3:8e:61:01:b4:b6:08:8e:e4:48:24:6d:22:bd: 2f:67:86:61:c2:d2:0f:f9:4d:d9:9b:be:b6:eb:55: c0:55:4e:a0:c4:21:0e:60:6f:f8:59:95:14:91:38: 37:d0:6c:6e:2b:06:d6:7d:b2:44:d9:47:46:dc:91: 74:ae:df:5f:24:3f:0a:19:66:ad:2a:ef:48:42:0f: 69:26:3e:19:cc:ec:98:67:f9:72:78:63:c2:76:34: 68:bb:56:57:d8:f7:11:04:e0:8f:ca:bb:72:c9:81: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EE:01:B6:12:FB:A4:E6:1D:5D:53:BC:C7:86:53:90:9F:B6:00:8B X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:41:3c:83:13:70:fa:86:7f:0e:a2:83:f8:b5:69:55:34:5d: b2:9a:48:e0:b5:b9:dc:2c:52:c6:32:51:c3:d6:b2:60:e1:ca: 43:7d:dd:06:2c:97:54:fc:4b:95:14:13:8b:85:08:be:50:a2: b6:8b:3e:c7:50:68:98:8a:e1:d1:a8:e1:8d:fa:73:4d:47:89: 11:0d:61:08:b4:0f:b2:33:ae:51:ed:44:df:5e:a8:3d:5a:27: e7:ee:0a:58:7b:d1:ae:9a:52:d9:ad:66:45:27:e4:83:82:78: 0b:5e:8b:21:1d:ef:91:61:3c:c9:f6:91:ed:3d:68:22:86:69: af:e8:31:6b:d8:41:21:cf:ad:50:cb:87:8e:19:d3:1a:f6:5b: e5:70:03:46:cc:6c:fa:f4:35:1f:37:d3:02:9f:65:e7:f5:79: 5d:77:b8:81:31:37:47:b5:06:1e:63:57:c6:ab:57:af:6f:c7: 73:56:48:6e:73:12:04:5a:62:24:f6:3a:96:ab:61:0a:b6:3c: a5:f8:f3:b7:05:73:50:47:38:8d:db:35:87:33:fb:43:de:21: 89:f0:c9:fe:0f:8e:08:46:04:bf:70:45:a9:a6:e3:86:39:d9: bc:61:b8:45:2a:c1:95:f4:02:b5:b4:6b:15:65:08:19:9a:dc: 2a:21:3a:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjYxMDA3MDQxNTA3WhcNMjYxMDE0MDQxNTA3WjAYMRYwFAYD VQQDEw02YWM1Yzc0Yi02YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIi60RVu8cmsGYmP6os4QqpjC6OhbANnWfel8/TS682KrhOr5KcizKu71TTO +Zz0KuyshEZc/GxarFlPEvUNYSiNQ2xq9WS2LXT4AOL+DMZm/kb0HawJ2e8c6kqU p27mEtBQMJnaSFjFruF7UZkP4hi/hRd+mEZBtIrTiI6DVq4TkNzosEo6mUchwtNr CdrTAGBUJ1dR845hAbS2CI7kSCRtIr0vZ4ZhwtIP+U3Zm76261XAVU6gxCEOYG/4 WZUUkTg30GxuKwbWfbJE2UdG3JF0rt9fJD8KGWatKu9IQg9pJj4ZzOyYZ/lyeGPC djRou1ZX2PcRBOCPyrtyyYEq8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/uAbYS +6TmHV1TvMeGU5CftgCLMB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgUE8gxNw+oZ/DqKD+LVpVTRdsppI4LW53CxSxjJRw9ayYOHKQ33dBiyXVPxL lRQTi4UIvlCitos+x1BomIrh0ajhjfpzTUeJEQ1hCLQPsjOuUe1E316oPVon5+4K WHvRrppS2a1mRSfkg4J4C16LIR3vkWE8yfaR7T1oIoZpr+gxa9hBIc+tUMuHjhnT GvZb5XADRsxs+vQ1HzfTAp9l5/V5XXe4gTE3R7UGHmNXxqtXr2/Hc1ZIbnMSBFpi JPY6lqthCrY8pfjztwVzUEc4jds1hzP7Q94hifDJ/g+OCEYEv3BFqabjhjnZvGG4 RSrBlfQCtbRrFWUIGZrcKiE6uQ== -----END CERTIFICATE-----Generated at Thu Oct 8 07:18:20 2026 by rpki-client