$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: +AeuV3IoMadZPV196B/4sC2i1hKLTl0lLoVxy+1kV3k= Subject key identifier: A5:64:7A:19:3C:74:C9:27:03:8D:70:69:7C:54:1A:97:68:45:B8:07 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 0559 Signing time: Tue 22 Sep 2026 20:04:06 +0000 Manifest this update: Tue 22 Sep 2026 20:04:06 +0000 Manifest next update: Tue 29 Sep 2026 20:04:06 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: waZghfNpxLqfZ2sbaFJrgJzLj4bW6rzcxL7gezeqtcQ=) 2: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=) 3: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=) 4: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: YA17LyHTfthDzdk1fJZ4Q1wQt3Gaa9uu+WHv2HF57n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Sep 22 20:04:06 2026 GMT Not After : Sep 29 20:04:06 2026 GMT Subject: CN=6ab2df36-3fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:fe:44:f1:82:57:43:7a:70:a1:0e:13:0f: 04:c4:5b:8d:67:53:2d:ed:ea:5c:80:c6:9b:06:00: 8d:58:42:c3:3e:2b:38:73:12:90:33:e2:5d:6a:19: 83:1f:d8:23:24:08:70:58:52:cf:a7:63:4b:7d:a8: 4a:ae:5d:6f:31:bd:98:c4:fa:5f:eb:ea:c7:44:5b: a2:ae:3a:fb:c5:1e:b0:a5:9c:93:06:e5:20:ea:f1: 35:d6:68:a6:c8:78:ae:d8:6c:9a:ff:26:b4:bd:5c: 84:58:37:29:a4:7a:3b:ca:5d:7b:32:86:87:2a:39: a5:b0:c7:c2:6d:ba:13:03:a5:ba:63:a9:34:2d:17: c0:5b:c7:c0:31:c8:a4:05:f4:73:be:ce:49:b6:96: 45:a9:f2:4c:cf:8e:be:8b:0e:11:2b:c1:3e:3f:b1: a5:6d:a0:a8:bb:3d:b2:3e:70:e2:84:8d:0e:d8:a3: 8e:88:41:08:f9:90:66:ee:88:55:7a:09:e4:f2:58: 4e:d6:2c:d3:93:48:cd:24:4f:3d:c0:92:7f:b3:c4: cd:46:83:9e:5b:26:8b:19:b9:a1:1d:6c:e6:ab:a2: d3:0f:7a:b7:69:e6:fc:36:5f:f9:63:ca:5d:fa:e4: 74:64:f1:28:a5:a1:9a:f3:6c:5f:49:2a:85:63:11: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:64:7A:19:3C:74:C9:27:03:8D:70:69:7C:54:1A:97:68:45:B8:07 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2f:7a:cc:9c:4f:eb:b3:19:a9:6f:ff:5f:bb:ef:2e:4a:cf: 7a:c3:61:dc:d3:ef:9d:2b:4a:46:eb:65:fe:90:c0:f0:68:65: 53:7a:3c:c1:14:a8:20:cf:11:55:a6:8d:cd:40:44:47:01:66: 91:1a:2d:2c:b4:29:f3:96:56:57:ea:a4:48:c7:53:0f:01:8a: 40:4b:90:34:ef:81:2d:bf:a3:48:81:d6:28:f4:b6:dc:f3:3b: 0b:22:d0:74:75:82:89:d3:59:94:b0:59:7f:0b:1a:3b:90:61: f6:c8:51:55:aa:f5:ea:25:88:c0:d3:75:57:39:f2:91:61:7b: 1e:e2:33:ee:53:8b:d1:c1:7f:5f:33:83:91:a5:ac:af:33:4c: 96:99:be:4b:d4:c7:96:b3:81:ff:37:d0:60:a6:0d:56:b4:c3: 0c:33:64:b6:1d:9f:7a:5f:a8:5e:f4:69:bc:eb:16:ee:b7:f6: 69:96:99:e2:13:95:df:0f:f1:25:6f:ff:e8:bc:e7:48:fb:9f: 99:b4:15:90:73:01:2b:11:ee:57:eb:51:bb:5d:1a:07:35:76: fd:3d:3a:96:b4:3f:52:36:da:85:18:e6:a7:c3:2c:cd:e4:f3: 6f:0a:b6:89:1c:a8:a9:f5:dc:6d:03:a7:25:52:9d:63:d4:33: b2:df:a6:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjYwOTIyMjAwNDA2WhcNMjYwOTI5MjAwNDA2WjAYMRYwFAYD VQQDEw02YWIyZGYzNi0zZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoir+RPGCV0N6cKEOEw8ExFuNZ1Mt7epcgMabBgCNWELDPis4cxKQM+JdahmD H9gjJAhwWFLPp2NLfahKrl1vMb2YxPpf6+rHRFuirjr7xR6wpZyTBuUg6vE11mim yHiu2Gya/ya0vVyEWDcppHo7yl17MoaHKjmlsMfCbboTA6W6Y6k0LRfAW8fAMcik BfRzvs5JtpZFqfJMz46+iw4RK8E+P7GlbaCouz2yPnDihI0O2KOOiEEI+ZBm7ohV egnk8lhO1izTk0jNJE89wJJ/s8TNRoOeWyaLGbmhHWzmq6LTD3q3aeb8Nl/5Y8pd +uR0ZPEopaGa82xfSSqFYxEFdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVkehk8 dMknA41waXxUGpdoRbgHMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnS96zJxP67MZqW//X7vvLkrPesNh3NPvnStKRutl/pDA8GhlU3o8wRSoIM8R VaaNzUBERwFmkRotLLQp85ZWV+qkSMdTDwGKQEuQNO+BLb+jSIHWKPS23PM7CyLQ dHWCidNZlLBZfwsaO5Bh9shRVar16iWIwNN1VznykWF7HuIz7lOL0cF/XzODkaWs rzNMlpm+S9THlrOB/zfQYKYNVrTDDDNkth2fel+oXvRpvOsW7rf2aZaZ4hOV3w/x JW//6LznSPufmbQVkHMBKxHuV+tRu10aBzV2/T06lrQ/UjbahRjmp8MszeTzbwq2 iRyoqfXcbQOnJVKdY9Qzst+mIA== -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:23 2026 by rpki-client