$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: Bd+8fzBcKovTKoL1UwYCFEEs7VpJTIVTYx3b5JV13po= Subject key identifier: 66:33:15:3B:04:68:6D:41:45:B7:ED:95:75:74:E1:C3:68:DE:0F:17 Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 1A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 1A22 Signing time: Thu 24 Sep 2026 16:19:32 +0000 Manifest this update: Thu 24 Sep 2026 16:19:32 +0000 Manifest next update: Thu 01 Oct 2026 16:19:32 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: tSfPBMo/sTyj/Fq2VyDOvL8DTTGT2Itdr0KG4RZBXX4=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: Q5RXgx4dgUAA3uIrCisaeBKpmiZ8wN+Pu4t9hbBvYuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6709 (0x1a35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Sep 24 16:19:32 2026 GMT Not After : Oct 1 16:19:32 2026 GMT Subject: CN=6ab54d94-4a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:05:c9:4d:90:30:66:fa:7c:7c:8d:ea:a8: 49:35:64:78:08:f7:5f:7a:8d:1c:e5:37:ed:71:c5: 05:b9:16:52:05:3b:ab:b0:91:e2:6a:f6:ee:e2:6a: a5:2b:18:cb:d7:a4:fe:4a:38:b6:62:6b:14:6d:16: 3e:45:d3:a3:7c:1c:55:31:f8:d5:47:a7:3c:91:6c: 6d:28:43:95:70:22:0f:55:90:96:14:c8:de:40:76: 28:95:ae:3b:d6:49:ce:c4:05:e6:88:d2:f7:fb:d3: 36:02:66:95:83:90:71:db:7d:92:dd:37:d8:f8:b9: e0:cf:57:8a:ab:05:4e:46:af:f2:5a:cf:d5:c4:33: 96:84:b8:f1:1c:15:42:c9:92:df:23:01:eb:c9:1c: 85:0f:8f:07:21:21:f5:46:81:5d:09:00:4b:61:02: 13:9f:70:86:e9:10:a0:41:f2:ef:27:60:29:71:23: 6f:4e:90:cc:4b:16:6a:89:74:bd:5f:1c:af:9b:68: 9a:4d:40:cb:83:f8:fe:35:3d:08:89:4f:ed:78:11: d0:e1:f0:b0:b3:2b:ba:c8:f3:43:1d:d9:12:6b:a6: e5:3c:c8:95:89:2b:f1:54:31:1f:66:2a:bd:9a:41: c0:92:38:c8:33:df:ba:a4:ab:2b:c3:4f:be:a9:26: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:33:15:3B:04:68:6D:41:45:B7:ED:95:75:74:E1:C3:68:DE:0F:17 X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:00:15:7a:37:67:c6:97:66:68:75:09:7b:1a:63:3e:94:c2: 6e:35:58:70:fd:cd:d5:97:59:2c:e4:1c:ef:43:86:ec:9e:7c: cd:ca:ae:f5:67:37:ab:8f:20:52:f4:f8:0e:54:be:b5:a4:aa: a4:89:f1:02:cf:1b:7e:fe:b5:c6:b2:87:0e:8a:61:f2:4b:2d: bf:cf:26:3d:51:f7:54:0f:38:f3:f7:60:dd:5b:0b:95:52:4a: 9c:ed:6c:52:80:32:ea:ed:38:b4:75:56:85:48:df:1f:12:1b: ec:eb:42:8d:1a:91:56:b4:f4:97:8e:31:08:50:c5:a7:c1:38: 79:69:32:c3:a4:61:c6:b2:d9:ea:5d:c3:7f:57:14:27:d1:be: a6:6a:9c:f8:26:71:92:f4:07:de:57:16:46:01:7d:f4:27:72: 64:d3:ee:78:7a:be:d1:ce:d0:be:e7:9c:8e:78:1d:07:6c:2a: 2c:94:cd:e0:78:65:47:1d:15:aa:d3:1e:b5:8d:a1:68:50:64: dd:45:53:fc:fb:6f:d2:29:1b:8a:54:fe:d7:58:32:49:49:f4: 0c:99:55:6c:9e:b3:1a:45:10:4a:7a:40:18:56:37:d9:20:c8: 7a:0a:16:8c:54:c2:1e:6e:cd:94:7b:69:73:63:c8:61:7f:60: 63:96:c9:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjYwOTI0MTYxOTMyWhcNMjYxMDAxMTYxOTMyWjAYMRYwFAYD VQQDEw02YWI1NGQ5NC00YTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xQFyU2QMGb6fHyN6qhJNWR4CPdfeo0c5TftccUFuRZSBTursJHiavbu4mql KxjL16T+Sji2YmsUbRY+RdOjfBxVMfjVR6c8kWxtKEOVcCIPVZCWFMjeQHYola47 1knOxAXmiNL3+9M2AmaVg5Bx232S3TfY+Lngz1eKqwVORq/yWs/VxDOWhLjxHBVC yZLfIwHryRyFD48HISH1RoFdCQBLYQITn3CG6RCgQfLvJ2ApcSNvTpDMSxZqiXS9 Xxyvm2iaTUDLg/j+NT0IiU/teBHQ4fCwsyu6yPNDHdkSa6blPMiViSvxVDEfZiq9 mkHAkjjIM9+6pKsrw0++qSYSlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGYzFTsE aG1BRbftlXV04cNo3g8XMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArgAVejdnxpdmaHUJexpjPpTCbjVYcP3N1ZdZLOQc70OG7J58zcqu9Wc3q48g UvT4DlS+taSqpInxAs8bfv61xrKHDoph8kstv88mPVH3VA848/dg3VsLlVJKnO1s UoAy6u04tHVWhUjfHxIb7OtCjRqRVrT0l44xCFDFp8E4eWkyw6RhxrLZ6l3Df1cU J9G+pmqc+CZxkvQH3lcWRgF99CdyZNPueHq+0c7QvuecjngdB2wqLJTN4HhlRx0V qtMetY2haFBk3UVT/Ptv0ikbilT+11gySUn0DJlVbJ6zGkUQSnpAGFY32SDIegoW jFTCHm7NlHtpc2PIYX9gY5bJHA== -----END CERTIFICATE-----Generated at Fri Sep 25 17:37:04 2026 by rpki-client