$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft File: _cdKKiafD6n8KnMlb6ydv4E4Opc.mft (raw, json) Hash identifier: veYbtyJgYgvLj9wF8oqURA/CBuL8KtIEiXTnlYrUt2s= Subject key identifier: 7D:7B:3D:99:00:9C:F7:AA:89:65:E3:87:18:4E:E1:BF:63:9F:EC:9E Authority key identifier: FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97 Certificate issuer: /CN=A911CCA8/serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft Manifest number: 03 Signing time: Wed 23 Sep 2026 09:03:43 +0000 Manifest this update: Wed 23 Sep 2026 09:03:42 +0000 Manifest next update: Wed 30 Sep 2026 09:03:42 +0000 Files and hashes: 1: _cdKKiafD6n8KnMlb6ydv4E4Opc.crl (hash: iIZp7IUUV9UpQP14r9HzXYKDFW37wo9RJUu3Ote+3+Y=) 2: E821F266B68411F18DFEAAE13C11F970.roa (hash: 0TWxdFHrS6IJ8bMY2Vz0tNm8SlhrYPq7b4MeIyIy6mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 09:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CCA8, serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97 Validity Not Before: Sep 23 09:03:42 2026 GMT Not After : Sep 30 09:03:42 2026 GMT Subject: CN=6ab395ee-525f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:be:53:48:9c:3a:0d:e1:ab:cb:64:aa:02: 73:fc:90:9d:c7:4b:24:9b:40:58:00:91:67:94:b1: 30:c1:45:4f:44:08:9a:e6:77:ba:32:71:44:33:b7: 6c:bf:73:22:ea:5b:44:f9:6e:0d:ff:ac:fe:38:57: 99:16:4f:0a:6f:96:ff:20:a9:d0:72:a2:6d:c6:46: 74:00:38:6c:99:9c:20:05:80:79:b4:47:4b:80:b6: b0:78:29:0b:33:9c:f0:0f:06:8f:40:dc:51:a3:c5: d7:f3:78:1f:55:ce:e7:01:12:e5:6a:fc:4d:9b:ac: 70:a9:71:e1:d7:1a:d7:47:99:77:d9:00:01:d9:f1: b4:b9:f4:bc:8e:48:0d:3a:19:d2:9d:9b:cc:72:67: 72:f2:71:48:5b:16:11:1d:67:28:c2:c8:fc:b4:4d: 73:69:8c:d1:54:b7:c2:2f:b6:3a:d7:1b:1d:49:a3: 8b:61:3b:1d:c0:11:87:62:fb:64:4a:4c:24:52:84: c8:ce:28:e3:c2:78:e0:03:a9:46:f7:f6:22:6e:8b: 7c:4a:7e:ee:a4:ef:95:d9:19:37:f3:72:af:16:73: ec:42:3d:a4:b6:36:fc:7f:65:b7:12:37:f5:19:70: 95:86:47:1e:7e:fd:da:52:ff:1b:99:63:fa:d5:ec: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7B:3D:99:00:9C:F7:AA:89:65:E3:87:18:4E:E1:BF:63:9F:EC:9E X509v3 Authority Key Identifier: keyid:FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:18:b3:e4:62:8d:96:52:af:6b:06:6a:1f:ee:85:a1:55:79: 02:47:c9:47:83:cf:a0:db:11:0c:41:cd:a6:c7:66:ca:c3:bb: 1e:da:1c:9e:fc:17:87:5e:46:de:b0:e2:09:a1:ec:81:d1:0a: fe:6a:a2:9a:87:a7:2c:f9:ee:f0:e8:cc:3c:3d:36:73:c9:32: bb:d8:2c:49:af:8e:af:a3:6e:e5:e1:c0:58:40:69:c0:32:7a: 35:5b:20:c4:64:91:38:34:61:b1:02:55:48:4d:02:6f:eb:e6: d0:e4:64:c8:17:17:2c:50:ac:5a:29:4a:e3:ec:40:34:3d:fb: af:52:66:bc:f6:3d:17:a2:15:7a:62:0a:2c:b4:46:db:80:da: 5b:0f:35:3d:a3:a6:02:b7:43:0c:f4:87:bd:74:8f:5c:8a:03: 65:2e:56:63:1e:70:d6:94:79:eb:e3:04:a4:66:73:55:7a:4b: 4b:75:71:dd:3a:16:b2:ea:20:eb:01:97:2a:2a:c2:ad:f4:a0: 2f:ec:54:97:e2:8d:95:e3:ac:a8:24:02:4a:9a:0a:a4:03:3d: fe:64:d9:10:14:87:0e:e6:49:aa:6a:93:ca:bc:69:a8:f1:9a: 0d:15:ac:f9:b5:eb:1c:af:e8:f5:18:77:2d:ac:bb:a8:69:3e: 51:9c:98:24 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0NBODExMC8GA1UEBRMoRkRDNzRBMkEyNjlGMEZBOUZDMkE3MzI1NkZBQzlEQkY4 MTM4M0E5NzAeFw0yNjA5MjMwOTAzNDJaFw0yNjA5MzAwOTAzNDJaMBgxFjAUBgNV BAMTDTZhYjM5NWVlLTUyNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHML5TSJw6DeGry2SqAnP8kJ3HSySbQFgAkWeUsTDBRU9ECJrmd7oycUQzt2y/ cyLqW0T5bg3/rP44V5kWTwpvlv8gqdByom3GRnQAOGyZnCAFgHm0R0uAtrB4KQsz nPAPBo9A3FGjxdfzeB9VzucBEuVq/E2brHCpceHXGtdHmXfZAAHZ8bS59LyOSA06 GdKdm8xyZ3LycUhbFhEdZyjCyPy0TXNpjNFUt8IvtjrXGx1Jo4thOx3AEYdi+2RK TCRShMjOKOPCeOADqUb39iJui3xKfu6k75XZGTfzcq8Wc+xCPaS2Nvx/ZbcSN/UZ cJWGRx5+/dpS/xuZY/rV7KffAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfXs9mQCc 96qJZeOHGE7hv2Of7J4wHwYDVR0jBBgwFoAU/cdKKiafD6n8KnMlb6ydv4E4Opcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQ0E4LzRFQTFBOTNFQjY4 MzExRjE5MEMyQkY2QTNDMTFGOTcwL19jZEtLaWFmRDZuOEtuTWxiNnlkdjRFNE9w Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2NkS0tpYWZENm44S25NbGI2eWR2NEU0T3BjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD Q0E4LzRFQTFBOTNFQjY4MzExRjE5MEMyQkY2QTNDMTFGOTcwL19jZEtLaWFmRDZu OEtuTWxiNnlkdjRFNE9wYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBbGLPkYo2WUq9rBmof7oWhVXkCR8lHg8+g2xEMQc2mx2bKw7se2hye/BeHXkbe sOIJoeyB0Qr+aqKah6cs+e7w6Mw8PTZzyTK72CxJr46vo27l4cBYQGnAMno1WyDE ZJE4NGGxAlVITQJv6+bQ5GTIFxcsUKxaKUrj7EA0PfuvUma89j0XohV6YgostEbb gNpbDzU9o6YCt0MM9Ie9dI9cigNlLlZjHnDWlHnr4wSkZnNVektLdXHdOhay6iDr AZcqKsKt9KAv7FSX4o2V46yoJAJKmgqkAz3+ZNkQFIcO5kmqapPKvGmo8ZoNFaz5 tescr+j1GHctrLuoaT5RnJgk -----END CERTIFICATE-----Generated at Thu Sep 24 08:26:58 2026 by rpki-client