$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft File: 4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json) Hash identifier: e0gEsK2OCgQphFJ9JKKpGxhkqz79aix9U6/Bj4Fowdg= Subject key identifier: 3B:1A:43:51:19:04:CD:0E:26:1A:A7:24:A3:A8:D4:98:27:D6:5B:2E Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft Manifest number: 02CD Signing time: Tue 29 Sep 2026 01:34:43 +0000 Manifest this update: Tue 29 Sep 2026 01:34:43 +0000 Manifest next update: Tue 06 Oct 2026 01:34:43 +0000 Files and hashes: 1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: zYzfFIRG+wzq+jXuL3UgfjdSW2IxrneocIeX0il7la4=) 2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: LdRxke1Bck5JxIBRCGjM9TpaCqk+l96r/JCtzyDPs+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 01:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Validity Not Before: Sep 29 01:34:43 2026 GMT Not After : Oct 6 01:34:43 2026 GMT Subject: CN=6abb15b3-2768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:de:df:6f:6f:35:bb:92:48:5b:54:50:f0:cd: 4f:a3:59:bd:d9:b9:dd:3f:19:b2:b3:2c:1f:f7:97: b9:0c:c5:aa:cc:32:ae:f8:55:11:b8:9b:db:c4:8e: c1:50:fe:50:e7:b0:31:8c:94:c7:29:c9:5d:c3:03: 15:9c:de:55:65:2c:ed:bd:e7:0a:9f:e4:10:4c:a7: b5:62:a9:b4:34:f3:55:37:42:87:61:db:66:99:7f: 93:ec:57:1f:e7:ce:38:72:8f:fa:b6:f5:41:e3:e3: c4:0f:3f:ba:c2:90:85:02:e0:f6:36:cf:74:cd:54: 68:cb:b7:ba:77:0e:74:84:31:8b:f8:f9:d3:37:ab: 21:b6:ab:d4:80:c5:fc:6c:f7:ab:4b:bf:69:7d:e8: e4:15:b7:55:e2:d2:0d:08:ae:33:0c:9b:8e:94:ca: 99:b2:c2:b2:37:11:a7:b0:33:d0:69:91:c6:df:4f: 9e:09:c0:c0:47:a5:f3:22:68:c1:69:4f:aa:0e:e9: bc:08:87:6f:74:67:35:b5:b8:1b:40:59:4d:1c:90: 94:8b:da:4a:76:4b:ea:54:41:8e:9d:79:85:f9:fa: 72:f6:a2:ad:0a:8d:12:dc:56:17:d2:e2:98:16:fc: 02:e3:e6:0a:e4:8a:d4:45:4a:70:7f:51:6a:d7:f9: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1A:43:51:19:04:CD:0E:26:1A:A7:24:A3:A8:D4:98:27:D6:5B:2E X509v3 Authority Key Identifier: keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:9f:88:7e:d1:7c:8b:dd:ef:00:14:a6:5d:12:46:50:af:ca: 49:27:bc:49:db:76:62:4f:ec:7e:57:ae:55:e7:48:f3:52:01: 0f:88:d5:e0:32:79:0e:ed:06:2c:db:a0:a4:dd:04:5e:0a:0e: 95:f6:c5:39:6a:40:a9:7e:1f:52:d1:79:a8:27:ed:93:3b:96: c1:7e:a4:ac:89:6f:b4:b6:ec:28:30:a0:ea:3b:e9:6b:e0:5b: 16:31:86:c1:5c:bf:ff:60:41:09:6a:41:1f:d6:4b:18:0f:3b: 62:6d:92:8d:6b:5f:49:49:cf:21:a1:69:ee:31:fa:d2:5c:18: 64:3d:81:cd:74:fd:3b:66:ce:a8:44:34:f6:e8:26:c7:54:5c: ec:26:b5:7a:ad:55:f6:0e:b0:a3:71:98:a7:83:d0:96:bc:98: f6:41:31:fa:4e:cd:79:b3:f5:06:48:a9:77:2f:de:1a:bb:20: 52:66:e1:9c:37:66:c2:6b:d2:c6:f7:68:c0:d4:ef:fe:82:b2: 09:66:76:b8:e1:d4:7f:82:41:bb:f6:fc:86:b0:49:3e:a3:88: 77:a7:15:a5:71:c6:a6:64:83:ad:82:9c:15:b0:80:55:ed:b5: 56:b1:d5:d0:52:e0:91:55:e6:cd:bd:4a:ac:f2:48:70:20:22: 07:53:4e:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1Q0IxMTAvBgNVBAUTKEUxNzMzQjk3MEZEREY3NjdGRjE5NTQyODQzN0UxMjQy QTM3NjkyNzcwHhcNMjYwOTI5MDEzNDQzWhcNMjYxMDA2MDEzNDQzWjAYMRYwFAYD VQQDEw02YWJiMTViMy0yNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8t7fb281u5JIW1RQ8M1Po1m92bndPxmysywf95e5DMWqzDKu+FURuJvbxI7B UP5Q57AxjJTHKcldwwMVnN5VZSztvecKn+QQTKe1Yqm0NPNVN0KHYdtmmX+T7Fcf 5844co/6tvVB4+PEDz+6wpCFAuD2Ns90zVRoy7e6dw50hDGL+PnTN6shtqvUgMX8 bPerS79pfejkFbdV4tINCK4zDJuOlMqZssKyNxGnsDPQaZHG30+eCcDAR6XzImjB aU+qDum8CIdvdGc1tbgbQFlNHJCUi9pKdkvqVEGOnXmF+fpy9qKtCo0S3FYX0uKY FvwC4+YK5IrURUpwf1Fq1/kCXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsaQ1EZ BM0OJhqnJKOo1Jgn1lsuMB8GA1UdIwQYMBaAFOFzO5cP3fdn/xlUKEN+EkKjdpJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVDQi81Mjg4RENFMDcw NDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDkyZl9HVlFvUTM0U1FxTjJr bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYTTdsd19kOTJmX0dWUW9RMzRTUXFOMmtuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTVDQi81Mjg4RENFMDcwNDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDky Zl9HVlFvUTM0U1FxTjJrbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhp+IftF8i93vABSmXRJGUK/KSSe8Sdt2Yk/sfleuVedI81IBD4jV4DJ5Du0G LNugpN0EXgoOlfbFOWpAqX4fUtF5qCftkzuWwX6krIlvtLbsKDCg6jvpa+BbFjGG wVy//2BBCWpBH9ZLGA87Ym2SjWtfSUnPIaFp7jH60lwYZD2BzXT9O2bOqEQ09ugm x1Rc7Ca1eq1V9g6wo3GYp4PQlryY9kEx+k7NebP1Bkipdy/eGrsgUmbhnDdmwmvS xvdowNTv/oKyCWZ2uOHUf4JBu/b8hrBJPqOId6cVpXHGpmSDrYKcFbCAVe21VrHV 0FLgkVXmzb1KrPJIcCAiB1NOpA== -----END CERTIFICATE-----Generated at Tue Sep 29 06:47:14 2026 by rpki-client