$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json) Hash identifier: vnESEe0nBQuXeDsR0VCRo3zFaEnMel0+5njHvu0UZVk= Subject key identifier: 4F:A3:0A:B0:93:AA:4A:F2:4C:3D:6E:86:26:4D:9B:B1:53:EB:9C:7C Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft Manifest number: FA Signing time: Wed 23 Sep 2026 06:01:12 +0000 Manifest this update: Wed 23 Sep 2026 06:01:11 +0000 Manifest next update: Wed 30 Sep 2026 06:01:11 +0000 Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: /EDdO/z1Yatd9f+8UEeRj+h1ThSYvOx7NPBQlZRpyhc=) 2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: j7nDmBZXblO/tpvpaih+MGRhVNByB2VTssko4z3YvKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Validity Not Before: Sep 23 06:01:11 2026 GMT Not After : Sep 30 06:01:11 2026 GMT Subject: CN=6ab36b28-807c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:ff:aa:75:e3:f6:67:6c:9e:dc:ad:0a:b8: d7:7e:c3:d8:e0:04:39:53:32:f7:dd:b7:36:3b:0b: 5d:cd:8d:97:ce:cf:33:6f:43:51:2c:76:dc:c9:28: af:93:df:5b:a8:fb:2f:45:54:7b:99:0a:35:c8:c7: 38:91:ea:1f:d9:5d:5e:0a:da:81:e4:44:c1:c3:a0: 9e:de:06:3c:a4:33:b4:19:c1:bc:76:6b:12:75:60: 4d:a5:ca:2a:da:90:9b:db:13:86:96:0c:49:e2:5b: 53:71:0b:fb:0e:cb:81:2c:62:14:18:01:12:2b:7a: 9a:ea:0b:69:53:28:17:ac:26:63:51:08:80:e6:4b: d7:a7:51:03:f1:06:75:ed:31:80:3a:1e:84:5e:e1: 54:b9:18:7f:4b:ae:3d:ce:c3:0b:39:98:6d:03:90: a0:fd:68:90:c6:d9:10:b0:82:8f:d7:1b:46:c6:46: 12:c4:54:52:7f:45:b5:3b:a4:77:a2:ec:95:75:cc: 6b:21:03:c8:76:69:e4:20:52:6b:11:09:16:47:e5: 1a:0a:04:8b:7b:77:69:6e:45:a9:a2:cd:d9:ed:75: 37:b1:fd:38:68:6e:4e:68:f2:c7:22:00:3b:b7:2f: 33:db:c0:aa:31:b8:e2:87:ed:a3:4f:12:7e:c0:bf: 93:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A3:0A:B0:93:AA:4A:F2:4C:3D:6E:86:26:4D:9B:B1:53:EB:9C:7C X509v3 Authority Key Identifier: keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2b:f0:2d:cb:66:86:a2:a3:53:e4:66:9a:44:d2:9d:ce:6f: e4:79:eb:08:55:f9:25:cc:7a:ac:50:cc:ad:20:94:a2:94:32: 1f:44:81:75:8f:87:99:dc:c9:83:c5:81:d3:70:26:fe:6e:a7: d1:ef:6a:fc:0b:12:8b:84:af:98:22:e3:ba:b1:55:de:4e:44: bf:c0:12:4e:b2:85:f7:81:cb:83:60:10:84:41:a1:59:18:89: 0b:be:b5:5e:fb:ef:d8:e9:cd:ae:94:73:a1:1b:64:f9:d5:58: 79:dd:31:14:80:12:9a:98:25:1e:4e:93:d2:bf:1c:46:53:e2: e9:ff:5c:cc:ef:2e:ab:04:01:b9:f0:74:20:57:ad:e4:6a:43: ba:5f:d6:ea:7e:76:24:e5:13:bc:30:97:db:fb:a1:08:95:3a: 09:70:09:e2:e4:88:1d:7b:4c:9f:dc:47:49:12:ac:41:11:f7: 59:a8:ef:bc:18:77:50:3f:43:d6:77:5b:06:d1:9c:9d:85:d2: 59:27:fb:79:88:2f:af:cb:eb:51:e7:e8:53:17:e5:6d:ba:3a: b0:9f:04:f1:33:db:f9:ea:0e:dd:7d:e4:0d:9b:92:cc:36:4e: 5f:38:87:17:08:5b:4b:20:80:cd:be:7f:2c:c2:3e:76:7b:b6: 11:b6:65:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNzQxMTAvBgNVBAUTKEUyQ0I5NkYzQjA1QTYzRTlFNTQ3OTY1MjZFQ0NFOTRB MzU5MUU1RkMwHhcNMjYwOTIzMDYwMTExWhcNMjYwOTMwMDYwMTExWjAYMRYwFAYD VQQDEw02YWIzNmIyOC04MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocT/qnXj9mdsntytCrjXfsPY4AQ5UzL33bc2OwtdzY2Xzs8zb0NRLHbcySiv k99bqPsvRVR7mQo1yMc4keof2V1eCtqB5ETBw6Ce3gY8pDO0GcG8dmsSdWBNpcoq 2pCb2xOGlgxJ4ltTcQv7DsuBLGIUGAESK3qa6gtpUygXrCZjUQiA5kvXp1ED8QZ1 7TGAOh6EXuFUuRh/S649zsMLOZhtA5Cg/WiQxtkQsIKP1xtGxkYSxFRSf0W1O6R3 ouyVdcxrIQPIdmnkIFJrEQkWR+UaCgSLe3dpbkWpos3Z7XU3sf04aG5OaPLHIgA7 ty8z28CqMbjih+2jTxJ+wL+TbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+jCrCT qkryTD1uhiZNm7FT65x8MB8GA1UdIwQYMBaAFOLLlvOwWmPp5UeWUm7M6Uo1keX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3NC9BRjY0RTUxMDNC QUExMUYwOTY0MjgyMUNDNEY5QUUwMi80c3VXODdCYVktbmxSNVpTYnN6cFNqV1I1 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRzdVc4N0JhWS1ubFI1WlNic3pwU2pXUjVmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I3NC9BRjY0RTUxMDNCQUExMUYwOTY0MjgyMUNDNEY5QUUwMi80c3VXODdCYVkt bmxSNVpTYnN6cFNqV1I1ZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeyvwLctmhqKjU+RmmkTSnc5v5HnrCFX5Jcx6rFDMrSCUopQyH0SBdY+HmdzJ g8WB03Am/m6n0e9q/AsSi4SvmCLjurFV3k5Ev8ASTrKF94HLg2AQhEGhWRiJC761 Xvvv2OnNrpRzoRtk+dVYed0xFIASmpglHk6T0r8cRlPi6f9czO8uqwQBufB0IFet 5GpDul/W6n52JOUTvDCX2/uhCJU6CXAJ4uSIHXtMn9xHSRKsQRH3WajvvBh3UD9D 1ndbBtGcnYXSWSf7eYgvr8vrUefoUxflbbo6sJ8E8TPb+eoO3X3kDZuSzDZOXziH FwhbSyCAzb5/LMI+dnu2EbZllQ== -----END CERTIFICATE-----Generated at Thu Sep 24 08:03:47 2026 by rpki-client