$ rpki-client -vvvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: U0K7Z0l7f86wNFe9chJEPGyLXrSLG5Y+rXeX1SfUi4g= Subject key identifier: 5D:AE:6C:FC:79:42:13:27:CF:54:E4:82:02:6C:F7:54:74:A6:9C:7E Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 09FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 09D8 Signing time: Sat 10 Oct 2026 19:58:13 +0000 Manifest this update: Sat 10 Oct 2026 19:58:13 +0000 Manifest next update: Sat 17 Oct 2026 19:58:13 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: JJppP5WmD1d6qxl6cv+DMI1cynfL4rPj+8bJkgfkwm4=) 2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: 6RXwgbnN2rBKh/2tqm5RTVGi0Iq1Kc0Yd6NErbg5XT4=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: Q8Dw0nOFQkliPbcwFzRrinH8y/mmTbLGc4WI/8vPvqg=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: NITUGIY3VUrXvrMgL7aqXfgZesSmrM25OMjQ5mv/ZQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2557 (0x9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Oct 10 19:58:13 2026 GMT Not After : Oct 17 19:58:13 2026 GMT Subject: CN=6aca98d5-4daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:56:dd:e6:d8:37:b0:37:dc:b5:c0:5d:fe: 9a:da:a6:f2:ac:e5:4e:dc:a8:00:49:15:a8:74:45: 0f:5c:61:5a:61:59:0f:b5:4c:d7:43:b2:6a:b6:86: d3:e5:e3:2a:81:44:7d:c4:7d:52:01:00:b0:7f:7d: 80:73:cf:d4:94:02:d1:17:ae:5a:69:35:9e:01:93: 38:33:31:e6:96:e9:2f:28:c7:0a:a7:58:24:bc:59: 7f:3e:1c:3b:81:24:dc:78:d7:2d:3d:42:73:e2:cb: 89:2e:f6:1b:ee:3b:c2:ef:a3:4e:ad:d0:e3:e0:02: 11:16:84:6e:61:ab:55:ad:db:a6:11:b5:d3:bd:1c: bb:89:ca:6a:c5:2c:81:9e:92:59:0b:b6:da:64:25: c5:51:d5:69:fd:26:6a:91:11:01:5f:97:92:41:d1: 1a:0f:2c:b4:b9:89:a2:cc:31:49:9c:fb:ab:da:f7: 71:01:bb:96:6f:a0:48:14:4e:02:02:9c:8d:8c:bb: 4c:2b:51:ce:8f:06:a6:15:9f:65:31:dc:60:79:42: 50:e0:95:a5:cc:b4:89:f0:bd:13:cb:14:3c:d0:2b: 49:87:5e:d8:91:55:28:ac:e8:74:8b:4b:cf:74:ae: 8d:61:0f:7a:97:b4:04:a3:c2:e7:dc:25:13:35:e5: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AE:6C:FC:79:42:13:27:CF:54:E4:82:02:6C:F7:54:74:A6:9C:7E X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2a:69:d7:3e:6e:69:f8:26:9d:1b:44:b4:2d:ff:93:f9:3a: 70:1c:55:79:07:57:5a:a4:58:17:9b:ac:7f:89:6e:1b:51:90: 9a:aa:b3:e9:20:25:89:80:2d:c7:4d:5a:4b:6a:00:9b:4e:9a: 8e:93:3e:bc:26:e0:7f:b8:17:9a:e7:18:47:6e:65:95:a1:f7: 76:d4:df:0d:26:ed:b8:e6:5a:2e:d7:94:6a:0b:91:26:c9:ea: 9c:97:f9:d3:27:d2:03:0c:e1:e1:16:4a:a8:3e:84:6f:53:d4: bf:9c:73:dd:3b:4e:cf:61:7c:d5:15:46:0e:5c:7c:f5:03:ea: 33:fd:9d:e9:7d:fd:af:31:60:0d:4b:07:aa:e2:01:0b:d5:30: c3:fa:e9:2c:35:d8:57:fb:d4:ed:4b:1f:75:87:1e:e9:9c:c8: 8d:25:8e:4f:d4:4c:d7:d6:80:98:b6:40:ad:ab:55:ad:bb:c1: d6:be:51:6e:a6:f1:0a:3c:b7:dd:3d:8a:fd:12:fc:51:97:1d: 61:8c:ef:03:19:94:36:c9:28:84:ac:85:c5:5d:8d:50:a3:dc: c1:4e:bd:90:42:44:45:00:70:34:9c:87:e7:fd:e9:73:d9:0b: 45:5e:e5:b1:fe:fe:26:1b:e9:97:91:05:40:b8:a3:fd:4a:da: 83:62:02:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjYxMDEwMTk1ODEzWhcNMjYxMDE3MTk1ODEzWjAYMRYwFAYD VQQDEw02YWNhOThkNS00ZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiRW3ebYN7A33LXAXf6a2qbyrOVO3KgASRWodEUPXGFaYVkPtUzXQ7JqtobT 5eMqgUR9xH1SAQCwf32Ac8/UlALRF65aaTWeAZM4MzHmlukvKMcKp1gkvFl/Phw7 gSTceNctPUJz4suJLvYb7jvC76NOrdDj4AIRFoRuYatVrdumEbXTvRy7icpqxSyB npJZC7baZCXFUdVp/SZqkREBX5eSQdEaDyy0uYmizDFJnPur2vdxAbuWb6BIFE4C ApyNjLtMK1HOjwamFZ9lMdxgeUJQ4JWlzLSJ8L0TyxQ80CtJh17YkVUorOh0i0vP dK6NYQ96l7QEo8Ln3CUTNeUnKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2ubPx5 QhMnz1TkggJs91R0ppx+MB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQypp1z5uafgmnRtEtC3/k/k6cBxVeQdXWqRYF5usf4luG1GQmqqz6SAliYAt x01aS2oAm06ajpM+vCbgf7gXmucYR25llaH3dtTfDSbtuOZaLteUaguRJsnqnJf5 0yfSAwzh4RZKqD6Eb1PUv5xz3TtOz2F81RVGDlx89QPqM/2d6X39rzFgDUsHquIB C9Uww/rpLDXYV/vU7UsfdYce6ZzIjSWOT9RM19aAmLZAratVrbvB1r5RbqbxCjy3 3T2K/RL8UZcdYYzvAxmUNskohKyFxV2NUKPcwU69kEJERQBwNJyH5/3pc9kLRV7l sf7+Jhvpl5EFQLij/Urag2IC9Q== -----END CERTIFICATE-----Generated at Sun Oct 11 19:07:15 2026 by rpki-client