$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: jh8yXOerISd97OwWkLmBCSWNK7wmNX/jywrgMUSLk/k= Subject key identifier: 0B:36:BC:31:54:1E:41:85:F3:59:B1:73:D8:E4:F0:59:A2:49:5F:07 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 0286 Signing time: Sun 20 Sep 2026 22:36:10 +0000 Manifest this update: Sun 20 Sep 2026 22:36:09 +0000 Manifest next update: Sun 27 Sep 2026 22:36:09 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: +nNAwQRoT2WUkj+r+D/vsX4winOEa87UKvxpIbfLvSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Sep 20 22:36:09 2026 GMT Not After : Sep 27 22:36:09 2026 GMT Subject: CN=6ab05fda-b944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:03:15:ee:8e:ca:c4:aa:88:d7:3b:bf:b7: b6:70:7a:0e:44:e9:86:3b:f4:4b:a3:0e:4d:82:be: 42:7b:20:f3:d6:2c:e1:78:b6:f4:8e:19:53:f6:3e: 00:b1:9a:56:4d:b8:99:ab:57:5b:5d:55:5f:52:9c: e7:6b:9a:18:f2:e1:00:3d:08:31:5b:4c:77:7c:94: 6d:f2:22:6a:93:83:1d:e0:44:bb:06:3e:21:33:f3: 00:c6:f6:01:cb:b3:55:81:c6:6f:6d:8c:bb:a5:12: 9f:5a:e5:ef:20:ee:96:3e:7e:1c:53:dc:6f:81:63: da:69:f7:f3:fe:37:45:e9:b7:39:36:af:af:8b:46: db:ef:05:c4:e9:49:f1:01:b2:b8:13:b7:9b:a4:bc: c2:b2:4a:fe:cf:46:e8:ad:54:be:f6:9f:b7:0c:1d: c1:d5:84:7b:89:f6:ea:ff:ed:c5:f5:e7:f7:51:62: 4e:09:49:3f:7e:8e:e7:c8:d4:29:68:6a:07:c7:9f: 64:67:8d:8a:3a:e5:c5:53:91:15:b3:0c:99:32:4f: 8c:90:c4:9c:c2:f0:76:56:a6:a4:12:38:2b:98:fb: 06:9b:bb:47:c1:3c:93:ee:f3:8d:2b:b8:9b:b1:93: eb:1b:f7:94:7e:9c:f0:5f:af:27:3c:c2:c7:cc:fe: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:36:BC:31:54:1E:41:85:F3:59:B1:73:D8:E4:F0:59:A2:49:5F:07 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c4:9f:e0:38:3e:29:dd:9f:86:96:ba:93:c1:96:58:e0:98: 68:04:0a:db:5a:39:6a:d2:9c:8e:63:cc:8f:b8:91:20:55:02: e5:a4:49:cd:59:08:c5:b9:27:fe:b8:71:9a:e1:d0:24:2b:54: 49:ed:5b:35:77:f2:59:c4:40:23:e4:14:aa:ad:92:c8:6a:d1: 0c:ae:fe:77:b6:25:a2:70:d5:2c:65:56:98:e7:52:ea:e9:d0: ff:04:da:43:60:a8:b0:7c:91:ee:b1:14:11:fb:f8:fc:b6:a6: a3:74:53:26:bd:07:d8:5b:2e:dd:f1:4a:34:e7:9d:ab:56:a4: 12:7a:57:b7:90:69:03:b7:03:b6:4f:9d:b2:3d:0e:10:1c:80: d3:fc:2f:f2:27:8d:4b:bf:88:3e:b3:c4:8e:84:45:5c:0d:68: 39:b3:f2:e2:9f:df:09:b2:0b:1d:dd:94:c8:99:04:70:d5:70: bc:f7:b5:1b:2b:fb:a9:59:20:98:08:23:32:5b:3b:6c:46:97: 6f:8c:18:b2:ed:ad:1b:8f:28:57:5c:d0:f6:84:ad:1c:28:3d: cf:c5:7f:b5:04:e6:3f:59:d0:d2:bc:f9:ca:69:d9:a0:eb:92: fb:73:ef:4d:1f:a5:4f:6c:da:92:ce:5c:bd:48:29:bf:ca:04: a7:78:35:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjYwOTIwMjIzNjA5WhcNMjYwOTI3MjIzNjA5WjAYMRYwFAYD VQQDEw02YWIwNWZkYS1iOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0ADFe6OysSqiNc7v7e2cHoOROmGO/RLow5Ngr5CeyDz1izheLb0jhlT9j4A sZpWTbiZq1dbXVVfUpzna5oY8uEAPQgxW0x3fJRt8iJqk4Md4ES7Bj4hM/MAxvYB y7NVgcZvbYy7pRKfWuXvIO6WPn4cU9xvgWPaaffz/jdF6bc5Nq+vi0bb7wXE6Unx AbK4E7ebpLzCskr+z0borVS+9p+3DB3B1YR7ifbq/+3F9ef3UWJOCUk/fo7nyNQp aGoHx59kZ42KOuXFU5EVswyZMk+MkMScwvB2VqakEjgrmPsGm7tHwTyT7vONK7ib sZPrG/eUfpzwX68nPMLHzP49nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAs2vDFU HkGF81mxc9jk8FmiSV8HMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALsSf4Dg+Kd2fhpa6k8GWWOCYaAQK21o5atKcjmPMj7iRIFUC5aRJzVkIxbkn /rhxmuHQJCtUSe1bNXfyWcRAI+QUqq2SyGrRDK7+d7YlonDVLGVWmOdS6unQ/wTa Q2CosHyR7rEUEfv4/Lamo3RTJr0H2Fsu3fFKNOedq1akEnpXt5BpA7cDtk+dsj0O EByA0/wv8ieNS7+IPrPEjoRFXA1oObPy4p/fCbILHd2UyJkEcNVwvPe1Gyv7qVkg mAgjMls7bEaXb4wYsu2tG48oV1zQ9oStHCg9z8V/tQTmP1nQ0rz5ymnZoOuS+3Pv TR+lT2zaks5cvUgpv8oEp3g19g== -----END CERTIFICATE-----Generated at Tue Sep 22 22:07:37 2026 by rpki-client