$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft File: A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft (raw, json) Hash identifier: 1AeQQy0eHm2uwiatEKHburvffRJWdDe9dEy8IgfbmBo= Subject key identifier: 11:E0:9E:9C:9C:B2:42:CE:3B:FF:DB:AA:6D:D0:E6:F0:3A:0C:4E:27 Authority key identifier: 03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F Certificate issuer: /CN=A911E3C6/serialNumber=03867130401AFB1283677BC07309EA94C708C76F Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft Manifest number: 20 Signing time: Fri 25 Sep 2026 09:09:43 +0000 Manifest this update: Fri 25 Sep 2026 09:09:43 +0000 Manifest next update: Fri 02 Oct 2026 09:09:43 +0000 Files and hashes: 1: A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl (hash: M7AZjx05xqt8RctaOTGAGgyXjnqTL6L6ponyOGHp69w=) 2: 7FFE71389D3311F18AF9939B4911F970.roa (hash: EoUyUFsqGCvstD3CgILHZ4DcPcFszbAPPZuEKcHz5ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E3C6, serialNumber=03867130401AFB1283677BC07309EA94C708C76F Validity Not Before: Sep 25 09:09:43 2026 GMT Not After : Oct 2 09:09:43 2026 GMT Subject: CN=6ab63a57-f62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:fb:f0:fd:08:87:65:ce:47:3d:e5:f6:2c: ad:74:65:92:05:8a:8d:12:86:46:2a:58:68:f1:d2: 0d:3a:8e:82:2f:43:db:a3:9f:a0:9c:18:0a:c0:a7: e9:ab:94:d4:4e:11:54:23:73:58:c2:1e:4e:d8:2c: e8:54:58:35:b0:95:15:bf:90:aa:a6:b9:ad:e6:f7: b3:3f:95:3b:67:a5:73:71:7c:0b:8a:49:5e:25:4d: 23:8b:67:9c:20:34:e8:14:d4:3d:82:48:cf:b4:57: 95:56:aa:38:eb:f6:84:f6:bc:2c:80:bf:b4:20:a5: bd:94:75:2c:79:1a:c2:62:16:6f:0b:a1:d1:0c:ae: 37:77:b6:59:28:e0:2c:41:80:9f:27:49:d6:46:04: af:fc:ab:4c:02:e5:2a:41:7f:4e:07:1b:1f:d9:e7: 74:a5:48:be:7d:5e:50:31:b7:51:7e:bf:bd:7f:db: dc:48:f7:1a:f1:8f:08:1d:b6:08:89:72:42:a3:a5: 66:74:57:cf:aa:ea:41:8b:63:8c:aa:f7:cd:02:fc: 3b:c5:54:ee:74:a6:13:60:76:f9:95:03:73:bf:69: f8:88:ae:37:0f:28:21:29:6e:02:c2:79:ef:ff:30: c4:7c:03:3c:73:29:85:d7:e4:ce:c0:e1:02:6a:52: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:9E:9C:9C:B2:42:CE:3B:FF:DB:AA:6D:D0:E6:F0:3A:0C:4E:27 X509v3 Authority Key Identifier: keyid:03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b8:f3:37:de:cb:20:9c:0e:3e:c2:8e:ba:24:6d:84:ec:60: 29:07:8c:bc:25:ea:7d:4f:58:2d:ef:c3:2a:84:54:55:c8:df: dc:a5:0c:7b:1d:32:33:26:40:16:1c:f6:69:97:e4:ab:7e:c4: 9b:c7:9d:8c:4c:51:5f:3f:c8:f3:26:dd:a8:61:69:45:1d:a1: 7f:97:90:ab:b2:3a:25:13:bf:e6:bc:77:b6:cd:f9:f0:6a:a6: 84:c1:12:86:0a:cd:7d:0a:8b:c9:b4:fa:31:8a:18:4d:9d:a6: bb:9d:25:1a:24:de:89:92:f2:28:bb:a1:d7:4a:f7:b7:ab:4f: b4:ba:82:5b:c9:d4:93:c6:3a:68:98:c0:46:36:c2:a6:ea:ea: 8d:ac:cf:ae:86:2f:ca:43:d2:f1:14:5c:85:9e:3c:99:cf:6a: ac:95:e4:e5:1e:7d:34:7d:93:86:a3:6e:ba:c0:cc:0e:3e:61: f7:79:29:8d:f7:44:5f:f2:f0:93:1f:aa:de:cb:28:6a:27:5d: 9e:75:b2:13:fe:b4:26:07:b7:e6:f2:16:55:59:cf:f1:a5:c0: 3e:fc:61:fa:fd:30:a8:d0:d5:1e:cf:2f:a6:9f:cb:39:62:c0: a9:9a:7d:cb:f4:f7:26:de:0d:43:ad:39:da:a0:3a:25:79:80: 4a:92:0a:fd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTNDNjExMC8GA1UEBRMoMDM4NjcxMzA0MDFBRkIxMjgzNjc3QkMwNzMwOUVBOTRD NzA4Qzc2RjAeFw0yNjA5MjUwOTA5NDNaFw0yNjEwMDIwOTA5NDNaMBgxFjAUBgNV BAMTDTZhYjYzYTU3LWY2MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOkfvw/QiHZc5HPeX2LK10ZZIFio0ShkYqWGjx0g06joIvQ9ujn6CcGArAp+mr lNROEVQjc1jCHk7YLOhUWDWwlRW/kKqmua3m97M/lTtnpXNxfAuKSV4lTSOLZ5wg NOgU1D2CSM+0V5VWqjjr9oT2vCyAv7Qgpb2UdSx5GsJiFm8LodEMrjd3tlko4CxB gJ8nSdZGBK/8q0wC5SpBf04HGx/Z53SlSL59XlAxt1F+v71/29xI9xrxjwgdtgiJ ckKjpWZ0V8+q6kGLY4yq980C/DvFVO50phNgdvmVA3O/afiIrjcPKCEpbgLCee// MMR8AzxzKYXX5M7A4QJqUnF5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEeCenJyy Qs47/9uqbdDm8DoMTicwHwYDVR0jBBgwFoAUA4ZxMEAa+xKDZ3vAcwnqlMcIx28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFM0M2LzI1Rjk2MDQ0OTc0 MzExRjE5RDY2ODYwQTM4MTFGOTcwL0E0WnhNRUFhLXhLRFozdkFjd25xbE1jSXgy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTRaeE1FQWEteEtEWjN2QWN3bnFsTWNJeDI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF M0M2LzI1Rjk2MDQ0OTc0MzExRjE5RDY2ODYwQTM4MTFGOTcwL0E0WnhNRUFhLXhL RFozdkFjd25xbE1jSXgyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7uPM33ssgnA4+wo66JG2E7GApB4y8Jep9T1gt78MqhFRVyN/cpQx7HTIzJkAW HPZpl+SrfsSbx52MTFFfP8jzJt2oYWlFHaF/l5CrsjolE7/mvHe2zfnwaqaEwRKG Cs19CovJtPoxihhNnaa7nSUaJN6JkvIou6HXSve3q0+0uoJbydSTxjpomMBGNsKm 6uqNrM+uhi/KQ9LxFFyFnjyZz2qsleTlHn00fZOGo266wMwOPmH3eSmN90Rf8vCT H6reyyhqJ12edbIT/rQmB7fm8hZVWc/xpcA+/GH6/TCo0NUezy+mn8s5YsCpmn3L 9Pcm3g1DrTnaoDoleYBKkgr9 -----END CERTIFICATE-----Generated at Sat Sep 26 11:01:23 2026 by rpki-client