$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: sQtVHGaAhnms+bSq+AA/zPcQuwQ1sDyb+YoCHt1Uw8k= Subject key identifier: EB:97:BA:D0:10:3C:78:6B:93:D3:51:CB:B3:26:C5:B7:3D:BA:DF:DA Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 0844 Signing time: Thu 24 Sep 2026 20:56:56 +0000 Manifest this update: Thu 24 Sep 2026 20:56:55 +0000 Manifest next update: Thu 01 Oct 2026 20:56:55 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: A5FcqaxRYl59IpXLf0/56ZKOmSc34TZemK552TYqUbc=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: DoySYssI9dH/TsF5hpEDQa5+Fqg/aQb80V8U7maPDL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Sep 24 20:56:55 2026 GMT Not After : Oct 1 20:56:55 2026 GMT Subject: CN=6ab58e97-e021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:51:c6:20:52:08:10:a2:14:60:91:9a:2e: 85:6c:b8:12:17:8f:22:91:ef:8a:ca:14:b4:d3:73: da:2d:56:da:21:9a:06:d1:ad:e7:f3:70:db:9f:50: b3:08:63:51:96:0c:ac:7b:d4:18:44:d5:34:fa:20: a1:ac:c5:55:1b:c2:93:65:d4:18:4c:c3:f4:ff:f7: 11:1c:c2:c9:35:73:9e:3c:d6:c1:58:38:5f:66:a7: 8c:1c:76:6f:24:4d:fe:55:ff:af:c0:23:2e:58:8c: d2:3d:d9:9f:a5:c7:b6:29:09:d6:d9:b3:df:63:95: fc:51:44:62:4a:56:38:5f:60:b6:80:65:9d:72:53: 99:18:51:6a:ef:f2:b9:5f:2d:1a:70:09:ab:86:71: 99:2f:8e:5d:14:85:ee:66:ec:98:90:1c:fc:8a:bc: a3:8d:9e:54:2c:27:90:01:c1:7b:1e:93:21:36:e4: e5:c0:4c:2d:18:32:5d:f8:ad:90:ef:5c:fa:46:98: 65:3c:0e:ba:d5:d9:50:df:f0:0f:5d:e3:3b:ce:38: b3:c0:62:ee:da:98:ee:f9:b1:25:99:b5:3c:4b:ff: 0d:02:a0:8b:95:af:13:e4:65:8a:8d:0d:61:1c:42: 48:f0:d8:42:50:17:7a:57:2d:9c:22:4e:a7:b0:d5: 8f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:97:BA:D0:10:3C:78:6B:93:D3:51:CB:B3:26:C5:B7:3D:BA:DF:DA X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d7:e7:e4:e1:42:a7:ba:57:b8:a4:5b:ce:05:a4:88:0d:ac: d2:ab:85:66:5f:00:40:34:9e:64:bb:fb:06:59:8c:cc:9b:6c: 32:32:d5:1e:79:21:5c:75:22:80:bc:07:40:7e:77:fa:88:61: 7f:58:ba:5b:e9:f9:6e:e9:ec:47:e1:2a:c3:1c:4e:eb:dd:8b: 1c:01:d5:80:69:dc:d0:2c:dd:50:72:4e:0b:e7:d8:b2:20:e9: d4:e9:e5:17:18:e4:aa:69:f1:f1:87:0f:64:46:09:59:c6:32: 76:58:20:53:65:70:b8:ad:b9:8f:41:64:d1:bf:02:bc:16:57: 13:fd:1f:69:59:fc:d0:b5:8c:66:f4:f5:fa:fb:1e:3a:83:f3: d9:cd:df:1c:1e:ab:cb:07:09:00:25:fa:33:2b:4f:1e:81:03: e5:e3:a5:56:15:cb:7f:77:46:4a:c9:98:28:9f:bf:5c:2c:f4: 7f:a3:a5:61:6f:66:84:14:76:46:fb:2d:eb:d4:51:ab:c1:1d: 8e:d0:f6:7d:b6:99:3d:90:a9:be:d3:85:2e:89:8e:3c:0c:11: 1f:df:2a:97:34:a0:04:f3:47:6d:75:16:dd:16:d0:cf:e8:99: 54:95:3c:3e:b0:51:ed:01:24:21:0c:8d:d9:40:24:99:dd:e1: 31:60:0f:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjYwOTI0MjA1NjU1WhcNMjYxMDAxMjA1NjU1WjAYMRYwFAYD VQQDEw02YWI1OGU5Ny1lMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rlRxiBSCBCiFGCRmi6FbLgSF48ike+KyhS003PaLVbaIZoG0a3n83Dbn1Cz CGNRlgyse9QYRNU0+iChrMVVG8KTZdQYTMP0//cRHMLJNXOePNbBWDhfZqeMHHZv JE3+Vf+vwCMuWIzSPdmfpce2KQnW2bPfY5X8UURiSlY4X2C2gGWdclOZGFFq7/K5 Xy0acAmrhnGZL45dFIXuZuyYkBz8iryjjZ5ULCeQAcF7HpMhNuTlwEwtGDJd+K2Q 71z6RphlPA661dlQ3/APXeM7zjizwGLu2pju+bElmbU8S/8NAqCLla8T5GWKjQ1h HEJI8NhCUBd6Vy2cIk6nsNWPkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuXutAQ PHhrk9NRy7Mmxbc9ut/aMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHdfn5OFCp7pXuKRbzgWkiA2s0quFZl8AQDSeZLv7BlmMzJtsMjLVHnkhXHUi gLwHQH53+ohhf1i6W+n5bunsR+EqwxxO692LHAHVgGnc0CzdUHJOC+fYsiDp1Onl Fxjkqmnx8YcPZEYJWcYydlggU2VwuK25j0Fk0b8CvBZXE/0faVn80LWMZvT1+vse OoPz2c3fHB6rywcJACX6MytPHoED5eOlVhXLf3dGSsmYKJ+/XCz0f6OlYW9mhBR2 Rvst69RRq8EdjtD2fbaZPZCpvtOFLomOPAwRH98qlzSgBPNHbXUW3RbQz+iZVJU8 PrBR7QEkIQyN2UAkmd3hMWAPVQ== -----END CERTIFICATE-----Generated at Fri Sep 25 08:48:55 2026 by rpki-client