$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: Ri96D1c4p6xKvc4tSQe7o9N2QGthxS5k8fizzr3rInI= Subject key identifier: DA:FD:A1:BB:B1:04:F8:E0:AC:2E:DD:45:DE:5E:11:04:C3:E9:8B:CC Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 359B Signing time: Thu 10 Sep 2026 14:18:32 +0000 Manifest this update: Thu 10 Sep 2026 14:18:31 +0000 Manifest next update: Thu 17 Sep 2026 14:18:31 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: 0JbV4mY4fSQzNeOQu0mOmyT92FMO/0lQSMqM/geNOGM=) 2: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: x1jt7itPjnC6MQbNejsBQgbeqBxLH2bZYuNPNtNXfYM=) 3: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: kemAcHttVJ/67VTbPvla1uxc5lCQKg8ypYYWxu51V6g=) 4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: uTwgdWpEtjV1ALHAM8OqP3F4AfwGv1rbWW6ZiHZWVyg=) 5: vq-jzurJvf_iwUA5gBqdHUdT-X4.asa (hash: XT2XymHIFcxFswC+pceRikbJHvEukoNfqTDYHUrpUNA=) 6: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: x81djxirc4TZ7LBWsfaYDwm6dEqBh0TJcdGGB4pBfl8=) 7: B683232C65AA11F1B5A6BBF27847A888.roa (hash: ui+fKkNRAL+b96meDYqRb3fMZ9lGNQU6S4pF6IMCEJk=) 8: 1F40296A65AA11F1A2780DB67847A888.roa (hash: xCeE3NkSHLJX8hWD3lcocXTFRBLR4NjlfyWa7eSQ5Q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13768 (0x35c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Sep 10 14:18:31 2026 GMT Not After : Sep 17 14:18:31 2026 GMT Subject: CN=6aa2bc38-1ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:97:14:7c:a7:75:9f:54:03:c6:55:fb:79: 9a:63:88:a0:8b:05:a3:2a:cc:94:85:78:eb:92:91: 52:89:f4:82:89:2e:df:8b:54:eb:81:2c:44:8b:69: 66:e0:7e:d8:6c:f6:24:b1:0f:d2:06:8e:47:52:0c: 38:79:00:1b:4d:37:91:34:ec:2d:b2:52:df:be:05: 29:73:e4:ad:36:1f:a3:2f:2b:ac:7f:72:7e:88:cf: 38:45:67:cd:80:bd:29:37:c6:39:1b:6d:39:2e:cb: b1:0b:a4:c8:ec:58:b2:b3:87:8f:40:d6:8c:c7:70: 96:61:16:da:9b:66:a3:57:9f:79:a0:97:1e:af:66: f7:ae:d5:a1:bf:81:54:9d:7c:63:e1:30:4e:01:87: d3:e2:44:8d:51:a2:1b:7b:b2:c2:68:3d:cb:72:d6: 84:9a:07:6b:d4:d6:32:89:3f:67:66:26:93:eb:3e: dc:a5:de:03:b2:62:0b:f4:cf:35:97:7c:5e:7b:eb: a1:ee:01:6c:37:1d:18:0c:54:4e:c4:df:ba:1f:91: 3b:72:0a:21:3a:9b:ff:ce:98:81:8c:ca:b4:00:f3: d5:96:81:1c:b6:d8:23:e4:f9:1e:b3:5d:e4:8c:51: a7:6e:ae:26:b7:9a:e0:3d:e0:2c:8a:18:31:d7:d6: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FD:A1:BB:B1:04:F8:E0:AC:2E:DD:45:DE:5E:11:04:C3:E9:8B:CC X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8b:f0:24:6e:14:4f:32:ce:01:12:80:ea:d0:14:0b:b3:f1: 21:e0:73:00:e3:c9:5b:a9:98:8e:1c:50:29:38:56:ca:16:e8: 31:3f:f2:58:9a:24:03:13:27:e3:bb:25:2c:60:71:3d:70:ee: e8:42:d0:ea:e1:ec:04:03:ed:23:e2:17:6f:f4:c4:f2:31:15: 27:75:98:d0:62:ae:9b:a8:92:30:05:34:d2:52:42:cc:3f:77: d6:48:6a:9f:73:df:00:5a:a2:cb:ee:98:21:2d:43:d8:de:f5: ac:b0:68:30:cf:30:8a:98:1f:99:5e:f3:25:db:3b:9a:ff:62: e7:3c:0b:4d:63:61:89:88:5d:c3:8c:0c:79:39:23:2e:e8:2c: 29:e2:fc:58:86:b7:23:f1:32:35:ea:f3:35:a4:f0:ed:f3:51: 32:5c:e4:ec:73:39:ea:ba:63:e6:18:de:d1:27:37:7a:b4:61: 17:f6:3f:4f:44:37:d8:84:a1:0d:e7:95:7e:79:46:60:10:b7: ce:54:9e:ba:8f:2a:0b:31:79:a1:23:d7:ae:75:6b:0f:c7:e5: 7d:9d:2f:90:35:07:f8:27:61:ff:64:ef:15:b2:e4:5e:e5:89: da:4f:c5:17:cf:7b:3c:56:32:04:d3:70:d1:1f:8f:d4:9e:ab: c0:64:ef:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwOTEwMTQxODMxWhcNMjYwOTE3MTQxODMxWjAYMRYwFAYD VQQDEw02YWEyYmMzOC0xYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFmXFHyndZ9UA8ZV+3maY4igiwWjKsyUhXjrkpFSifSCiS7fi1TrgSxEi2lm 4H7YbPYksQ/SBo5HUgw4eQAbTTeRNOwtslLfvgUpc+StNh+jLyusf3J+iM84RWfN gL0pN8Y5G205LsuxC6TI7Fiys4ePQNaMx3CWYRbam2ajV595oJcer2b3rtWhv4FU nXxj4TBOAYfT4kSNUaIbe7LCaD3LctaEmgdr1NYyiT9nZiaT6z7cpd4DsmIL9M81 l3xee+uh7gFsNx0YDFROxN+6H5E7cgohOpv/zpiBjMq0APPVloEcttgj5Pkes13k jFGnbq4mt5rgPeAsihgx19ZStwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNr9obux BPjgrC7dRd5eEQTD6YvMMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfIvwJG4UTzLOARKA6tAUC7PxIeBzAOPJW6mYjhxQKThWyhboMT/yWJokAxMn 47slLGBxPXDu6ELQ6uHsBAPtI+IXb/TE8jEVJ3WY0GKum6iSMAU00lJCzD931khq n3PfAFqiy+6YIS1D2N71rLBoMM8wipgfmV7zJds7mv9i5zwLTWNhiYhdw4wMeTkj LugsKeL8WIa3I/EyNerzNaTw7fNRMlzk7HM56rpj5hje0Sc3erRhF/Y/T0Q32ISh DeeVfnlGYBC3zlSeuo8qCzF5oSPXrnVrD8flfZ0vkDUH+Cdh/2TvFbLkXuWJ2k/F F897PFYyBNNw0R+P1J6rwGTvMg== -----END CERTIFICATE-----Generated at Fri Sep 11 04:32:41 2026 by rpki-client