$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: c4ZpFFzBrM6xxhBwmpPvBDjeSHj4YSVAq6AEEPaWrBI= Subject key identifier: 29:91:8A:F9:09:DA:51:4A:09:C8:C4:7D:C3:9C:8E:CB:A7:A3:15:53 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 0375 Signing time: Wed 23 Sep 2026 00:26:27 +0000 Manifest this update: Wed 23 Sep 2026 00:26:26 +0000 Manifest next update: Wed 30 Sep 2026 00:26:26 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: QcyFd0sHoQmX9650R6JRtibiItvo9PDm1uVThu2axZo=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: A8vw3ItQVUZdYIDmr/9S8qW9fDbbnqv5e1BV2gI3Ago=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Sep 23 00:26:26 2026 GMT Not After : Sep 30 00:26:26 2026 GMT Subject: CN=6ab31cb3-68d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:ea:82:e5:04:bd:4b:ac:b9:39:96:22:24: 6d:e3:04:3a:f4:1c:5e:d0:66:1a:e3:72:b4:6f:0c: 50:67:6f:96:ff:a7:ff:e1:6f:9f:04:ac:6a:45:72: 7e:0a:a4:f6:d4:6e:47:ac:ea:5a:cb:86:2f:a7:55: 7f:fe:31:2e:a2:a2:59:d9:8a:be:be:7a:61:16:7e: fa:d3:42:eb:fa:1f:b3:28:43:0b:a7:df:7f:84:ff: 0e:36:e9:b6:a1:b9:02:b0:0b:ed:0a:5a:6b:bf:0f: 90:77:a4:f3:78:fc:87:8b:95:62:3f:e3:6f:64:05: f5:a5:f3:57:a7:02:74:58:e6:5e:d1:a6:42:33:23: 61:fb:ec:af:17:cf:d4:cb:e9:ca:fd:54:7f:25:d0: b8:ab:91:be:5d:b1:b6:67:a6:9c:04:4a:4e:00:21: 91:26:4c:54:f0:66:24:46:bd:71:50:5e:c4:97:72: af:1f:17:dd:f5:3b:18:6d:db:29:82:17:02:4b:b2: 24:50:bf:7c:9e:72:ec:2a:a8:f9:6c:56:3a:ae:6a: e3:7e:ba:9b:3d:cf:5e:70:2c:72:23:cd:b0:b3:4e: c3:e6:2f:1c:1b:ee:24:ff:7d:9b:e7:8c:2f:8e:e1: 22:0e:72:c8:7c:51:66:ce:96:07:13:a0:fe:92:7a: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:91:8A:F9:09:DA:51:4A:09:C8:C4:7D:C3:9C:8E:CB:A7:A3:15:53 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:98:ed:07:b0:d6:ef:fe:16:8d:f8:ac:be:e6:1e:94:99:06: 46:37:a8:59:4c:de:a7:4d:38:c3:5e:47:5c:f5:14:98:d4:4f: 26:b8:ea:95:5f:7f:6e:02:93:ce:e1:c1:dc:26:f3:16:83:1c: 09:32:83:ba:3d:3d:cb:c5:80:84:a0:9f:71:8c:44:6b:15:ac: 4b:1e:e1:84:1e:39:7b:85:13:10:db:e5:fc:29:b4:76:ca:50: 58:96:29:35:2c:a8:cb:d1:78:06:9e:ac:cc:a0:c7:72:74:df: 43:51:b0:ad:5f:0c:f0:d8:12:19:0f:9d:6a:c3:bb:35:06:5b: e6:76:05:09:ba:1d:2b:27:77:3a:c2:37:ef:f7:c4:dc:d5:0d: b3:3d:9f:5a:c6:5e:bb:c7:fa:ad:95:78:87:5e:ce:ad:45:23: 83:0e:ac:d2:06:8b:40:70:3a:00:fe:7e:70:79:63:c8:c1:55: e9:2d:6a:d3:6c:e5:af:8e:db:95:98:d6:db:70:91:51:b9:a9: 31:b2:00:70:2c:34:fd:18:cc:9f:71:9d:dc:56:6d:7c:9d:67: a1:56:69:2d:86:9c:3a:e5:a3:6c:8e:06:17:18:8e:00:ef:95: 2a:69:9a:07:09:86:ac:0f:a3:8f:80:76:45:28:bc:43:5d:7f: 2f:44:0d:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjYwOTIzMDAyNjI2WhcNMjYwOTMwMDAyNjI2WjAYMRYwFAYD VQQDEw02YWIzMWNiMy02OGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT3qguUEvUusuTmWIiRt4wQ69Bxe0GYa43K0bwxQZ2+W/6f/4W+fBKxqRXJ+ CqT21G5HrOpay4Yvp1V//jEuoqJZ2Yq+vnphFn7600Lr+h+zKEMLp99/hP8ONum2 obkCsAvtClprvw+Qd6TzePyHi5ViP+NvZAX1pfNXpwJ0WOZe0aZCMyNh++yvF8/U y+nK/VR/JdC4q5G+XbG2Z6acBEpOACGRJkxU8GYkRr1xUF7El3KvHxfd9TsYbdsp ghcCS7IkUL98nnLsKqj5bFY6rmrjfrqbPc9ecCxyI82ws07D5i8cG+4k/32b54wv juEiDnLIfFFmzpYHE6D+knrm5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmRivkJ 2lFKCcjEfcOcjsunoxVTMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUJjtB7DW7/4WjfisvuYelJkGRjeoWUzep004w15HXPUUmNRPJrjqlV9/bgKT zuHB3CbzFoMcCTKDuj09y8WAhKCfcYxEaxWsSx7hhB45e4UTENvl/Cm0dspQWJYp NSyoy9F4Bp6szKDHcnTfQ1GwrV8M8NgSGQ+dasO7NQZb5nYFCbodKyd3OsI37/fE 3NUNsz2fWsZeu8f6rZV4h17OrUUjgw6s0gaLQHA6AP5+cHljyMFV6S1q02zlr47b lZjW23CRUbmpMbIAcCw0/RjMn3Gd3FZtfJ1noVZpLYacOuWjbI4GFxiOAO+VKmma BwmGrA+jj4B2RSi8Q11/L0QNug== -----END CERTIFICATE-----Generated at Thu Sep 24 14:42:08 2026 by rpki-client