$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: wAVkC5K09ljFHDAHICA2JOz8CSL5C21uREDqhB8KTpw= Subject key identifier: 4E:49:06:45:B6:D7:46:0E:0F:AC:71:33:D4:1A:28:52:42:43:A3:28 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0396 Signing time: Mon 05 Oct 2026 00:54:39 +0000 Manifest this update: Mon 05 Oct 2026 00:54:38 +0000 Manifest next update: Mon 12 Oct 2026 00:54:38 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: dEgWOhJPVFIX1ABofLx56mmzIA2HFXpco7zV8P5iVhg=) 2: 62B780C46EF811F1A12CAB807BA30FBC.roa (hash: WqvK9G7du0ZUPhPlzOYqfUxNooGlr51htpi5s+9yDqc=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: Zp1X1saUF8xeAN8dIa6PSZuihvrxW9yn1Q7v4yzeDZk=) 4: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 7JbMjB8d3ZxwfoscdTBgnl9vn7C/XbttuTcaCLuo0DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Oct 5 00:54:38 2026 GMT Not After : Oct 12 00:54:38 2026 GMT Subject: CN=6ac2f54f-6656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:62:4b:e6:0c:55:e3:f8:9b:5b:c3:2c:95: dc:0b:8b:d2:68:b9:1d:ca:1d:29:5c:dd:63:67:9b: e0:6d:b2:4d:d6:a2:ea:0d:c7:e9:e2:80:9a:01:25: 62:68:06:c7:06:a3:74:2a:57:96:66:8c:52:12:5d: c9:12:7c:01:c2:fc:a6:83:3c:52:3d:12:25:21:97: 83:c9:9e:db:0c:fa:42:36:fc:89:0a:8a:a7:22:22: 49:46:1d:5a:13:ba:f9:17:2b:99:17:f0:a3:9c:c7: a5:87:fc:05:89:b7:09:52:2c:9f:9e:34:9c:60:bc: 13:75:ee:a0:ec:b2:56:94:68:12:1d:17:77:22:e1: e4:47:25:6d:92:be:8e:7f:6b:a2:8d:96:0a:dc:7e: 88:a9:15:ae:a5:7b:58:a5:68:6e:b1:e8:8e:5f:f6: 6a:1f:33:b3:e2:d3:92:57:ce:74:70:ad:66:cd:74: 4f:fd:af:7a:69:f8:10:7c:fa:8f:65:43:d8:32:13: f5:09:69:08:22:99:1f:db:7d:a5:bd:e1:f4:40:0f: c4:44:56:24:f1:33:da:ac:97:43:7f:a0:79:3a:43: 32:e6:14:cc:a5:ca:57:59:b1:49:c7:1b:6f:4c:ba: ee:11:cf:c4:a2:12:c6:df:f3:4d:62:42:a6:22:45: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:49:06:45:B6:D7:46:0E:0F:AC:71:33:D4:1A:28:52:42:43:A3:28 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:26:29:b2:e3:d9:6d:96:d0:5f:d2:ae:dc:f2:ba:0c:41:de: 13:e3:cd:01:7a:94:7e:c0:01:c5:63:22:dd:a6:99:59:c6:3c: aa:8b:96:93:4e:ec:4b:f4:18:d6:d8:dd:23:7a:9f:84:60:8a: 50:8b:53:a3:9d:f3:a1:c6:b5:13:3c:0e:f4:01:0d:a5:39:f4: 7a:e7:e0:77:6c:85:b0:3a:8f:a7:ad:8f:81:51:63:28:ec:af: d1:5c:b7:98:ce:ea:3c:83:67:65:ef:db:4b:7b:e7:3f:a5:1a: 3a:89:b5:9d:64:2e:83:40:cc:95:14:c3:3c:43:92:7b:de:a0: d6:7e:9d:92:44:7b:e9:e5:0d:62:5b:ab:25:45:ef:51:8c:3b: 46:e4:80:1a:98:3e:6f:b8:ee:7d:8c:7c:3a:fa:36:a5:a0:2a: a0:b1:45:74:4d:4a:37:6b:d5:5b:42:d0:d3:1f:bb:3d:db:e3: 6a:83:70:8a:ac:ae:d5:17:a2:33:b6:5f:80:52:4c:c1:48:e9: b9:cd:fc:77:f8:73:40:c0:5c:95:d6:68:79:8d:3a:9c:7c:5a: 74:e9:64:37:41:90:4b:92:17:84:61:25:92:8e:25:bc:89:51: 10:44:c2:fb:aa:8b:b0:02:bf:84:db:f8:2f:a3:86:30:31:77: 03:2c:98:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjYxMDA1MDA1NDM4WhcNMjYxMDEyMDA1NDM4WjAYMRYwFAYD VQQDEw02YWMyZjU0Zi02NjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F5iS+YMVeP4m1vDLJXcC4vSaLkdyh0pXN1jZ5vgbbJN1qLqDcfp4oCaASVi aAbHBqN0KleWZoxSEl3JEnwBwvymgzxSPRIlIZeDyZ7bDPpCNvyJCoqnIiJJRh1a E7r5FyuZF/CjnMelh/wFibcJUiyfnjScYLwTde6g7LJWlGgSHRd3IuHkRyVtkr6O f2uijZYK3H6IqRWupXtYpWhuseiOX/ZqHzOz4tOSV850cK1mzXRP/a96afgQfPqP ZUPYMhP1CWkIIpkf232lveH0QA/ERFYk8TParJdDf6B5OkMy5hTMpcpXWbFJxxtv TLruEc/EohLG3/NNYkKmIkXjjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5JBkW2 10YOD6xxM9QaKFJCQ6MoMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFSYpsuPZbZbQX9Ku3PK6DEHeE+PNAXqUfsABxWMi3aaZWcY8qouWk07sS/QY 1tjdI3qfhGCKUItTo53zoca1EzwO9AENpTn0eufgd2yFsDqPp62PgVFjKOyv0Vy3 mM7qPINnZe/bS3vnP6UaOom1nWQug0DMlRTDPEOSe96g1n6dkkR76eUNYlurJUXv UYw7RuSAGpg+b7jufYx8Ovo2paAqoLFFdE1KN2vVW0LQ0x+7PdvjaoNwiqyu1Rei M7ZfgFJMwUjpuc38d/hzQMBcldZoeY06nHxadOlkN0GQS5IXhGElko4lvIlREETC +6qLsAK/hNv4L6OGMDF3AyyYSw== -----END CERTIFICATE-----Generated at Tue Oct 6 19:47:52 2026 by rpki-client