$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: PQEEF2KejI0rMppJDXTjp4zZiW4kSIXUbTnDqY3z4uA= Subject key identifier: AD:B0:DC:BD:14:C8:F4:A2:7C:F5:D4:EA:84:50:95:76:8D:FB:50:B2 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0E11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0DD4 Signing time: Thu 10 Sep 2026 17:53:54 +0000 Manifest this update: Thu 10 Sep 2026 17:53:54 +0000 Manifest next update: Thu 17 Sep 2026 17:53:54 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: A78278rVoAAbeBrd4rhCoEEVc7LiQVkFDOf/jTFzQI0=) 2: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) 3: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) 4: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) 5: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) 6: 762C16422E9811F1A14B442FB4833773.roa (hash: 6dVRqPwjNiBJWT/1IpcKvHD9YdgtV5RR7uiRlRvanfU=) 7: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3601 (0xe11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Sep 10 17:53:54 2026 GMT Not After : Sep 17 17:53:54 2026 GMT Subject: CN=6aa2eeb2-ac70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:7b:54:7f:02:ef:7f:35:a8:b1:95:ca:a1: 3f:25:30:d4:df:31:7c:fc:02:c8:af:26:98:b7:14: a6:c1:c7:a5:ae:df:20:8d:85:7a:fd:51:73:b8:c6: 3a:19:24:f5:74:45:60:6f:d6:55:a6:7b:d8:83:e0: 10:b8:97:8c:32:ae:6f:1e:82:50:85:1b:db:c6:b4: 9f:9f:ff:0c:18:b6:d1:58:38:c0:6d:5b:46:dd:74: 64:2d:3e:75:63:0f:7d:c4:03:d2:f7:13:1f:05:21: ca:e3:f1:bc:b3:97:69:25:0f:44:d9:aa:05:7d:fa: 49:9a:a3:3c:7c:df:9b:2a:9b:25:aa:df:57:65:3a: 62:22:78:5e:77:31:a2:ae:97:30:dd:eb:06:90:56: 91:62:03:46:1a:26:1e:8b:71:8f:6e:5e:80:98:3e: 0e:a6:b7:5f:02:aa:65:e3:35:74:20:cf:7a:48:cf: d0:e6:bc:10:b7:0e:1d:e2:37:43:e1:a9:32:59:5a: e7:0e:6a:33:e1:10:9a:70:43:8a:90:fc:71:f8:58: 82:46:7e:45:16:91:03:0b:7d:eb:4b:32:aa:25:4f: b6:7b:8e:c7:61:ac:50:da:af:ca:f9:19:5a:e3:5f: e4:db:e9:91:88:5b:66:94:69:a1:b9:14:16:63:90: d0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B0:DC:BD:14:C8:F4:A2:7C:F5:D4:EA:84:50:95:76:8D:FB:50:B2 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:bc:1b:39:b4:2f:fc:13:b7:86:d2:02:4d:55:df:7e:11:ff: d1:c0:c1:fc:12:9a:c9:e5:b6:27:90:36:da:4c:5e:3a:3e:39: a7:37:da:f8:dc:3c:28:60:ad:be:dc:47:23:1d:8f:eb:77:46: 8c:2a:3b:33:b5:7f:41:73:7a:60:93:29:14:62:a4:12:59:e1: f5:2e:9c:29:c9:e5:5a:13:e8:c8:80:08:f9:70:ac:d7:19:91: 1a:9d:9c:08:95:13:ed:2d:cf:77:ef:4a:40:7e:1f:bb:4e:05: 86:39:93:00:33:7a:0a:ca:b9:7e:0b:42:d8:bf:07:e3:0f:3a: dc:80:ad:11:be:83:2c:3e:3d:6a:d2:b4:e7:6c:15:f8:c7:ff: 3f:2c:fd:48:94:b5:ac:a0:0c:ca:23:de:04:8a:9d:a4:74:c7: 38:17:06:f3:03:82:9a:3c:d0:da:53:98:da:8d:82:37:fc:fe: 3d:73:50:f1:60:d5:d9:b5:31:0b:ef:ba:9a:7c:67:10:cc:8b: 97:1a:2d:46:c8:bb:0b:5d:ad:b3:f3:28:d3:7b:42:78:3b:40: df:b0:41:24:b2:47:ac:a8:a7:15:53:20:6d:2d:cd:75:35:d4: cf:cf:40:72:e0:fe:99:09:62:7e:fb:62:1b:2e:2c:85:f6:04: 7f:8f:76:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwOTEwMTc1MzU0WhcNMjYwOTE3MTc1MzU0WjAYMRYwFAYD VQQDEw02YWEyZWViMi1hYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq017VH8C7381qLGVyqE/JTDU3zF8/ALIryaYtxSmwcelrt8gjYV6/VFzuMY6 GST1dEVgb9ZVpnvYg+AQuJeMMq5vHoJQhRvbxrSfn/8MGLbRWDjAbVtG3XRkLT51 Yw99xAPS9xMfBSHK4/G8s5dpJQ9E2aoFffpJmqM8fN+bKpslqt9XZTpiInhedzGi rpcw3esGkFaRYgNGGiYei3GPbl6AmD4OprdfAqpl4zV0IM96SM/Q5rwQtw4d4jdD 4akyWVrnDmoz4RCacEOKkPxx+FiCRn5FFpEDC33rSzKqJU+2e47HYaxQ2q/K+Rla 41/k2+mRiFtmlGmhuRQWY5DQmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2w3L0U yPSifPXU6oRQlXaN+1CyMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACbwbObQv/BO3htICTVXffhH/0cDB/BKayeW2J5A22kxeOj45pzfa+Nw8KGCt vtxHIx2P63dGjCo7M7V/QXN6YJMpFGKkElnh9S6cKcnlWhPoyIAI+XCs1xmRGp2c CJUT7S3Pd+9KQH4fu04FhjmTADN6Csq5fgtC2L8H4w863ICtEb6DLD49atK052wV +Mf/Pyz9SJS1rKAMyiPeBIqdpHTHOBcG8wOCmjzQ2lOY2o2CN/z+PXNQ8WDV2bUx C++6mnxnEMyLlxotRsi7C12ts/Mo03tCeDtA37BBJLJHrKinFVMgbS3NdTXUz89A cuD+mQlifvtiGy4shfYEf492GQ== -----END CERTIFICATE-----Generated at Fri Sep 11 12:31:11 2026 by rpki-client