$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: lDXjq4fYG4IxAnjnxTsBaffAZiMoq2SnWJLeD+eHi70= Subject key identifier: C8:52:4D:89:41:0D:A9:26:01:97:7C:65:FC:49:F9:7F:0D:E1:FA:05 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 1944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 191B Signing time: Sat 26 Sep 2026 16:29:57 +0000 Manifest this update: Sat 26 Sep 2026 16:29:57 +0000 Manifest next update: Sat 03 Oct 2026 16:29:57 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: eZZy/qbLsMIZnCwQxueLUyKxbm+GR/+jyqrl1HfdZiY=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: u9b8xi9VJzwkucgePmf7GxJbrJFJHrJEf5pCf7m+hrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 16:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6468 (0x1944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Sep 26 16:29:57 2026 GMT Not After : Oct 3 16:29:57 2026 GMT Subject: CN=6ab7f305-a9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:b0:b3:c9:05:7f:c8:9b:3b:98:41:68:b9: 03:d3:9e:98:48:94:1e:19:29:54:c8:f0:0b:62:b3: 59:cd:b8:56:cc:56:11:0b:0e:2c:f8:23:ed:39:e1: 8a:c1:d5:c8:d4:3a:7f:5c:34:be:bc:e1:dd:df:ee: a6:cc:6c:0f:54:ed:be:27:66:c6:48:22:6d:5b:8c: 3e:fb:7c:2b:4d:7c:cb:03:0a:7e:20:dd:32:56:34: 29:a2:3e:8f:a5:98:1b:eb:bc:b9:68:0f:93:c7:e4: 12:5d:14:e1:90:63:54:84:aa:ff:7f:05:3a:1f:2d: cf:13:eb:fd:c3:05:a3:94:7b:5b:a5:83:19:24:6f: cd:f9:76:b5:4f:82:7c:ac:28:80:9e:de:30:c3:f5: c8:c8:3a:8a:41:0d:9f:b6:66:fc:56:d0:9a:06:ac: e6:57:9e:81:da:d1:bd:71:27:4c:e4:64:4d:15:dd: 93:0e:16:f5:bb:82:3c:02:8c:7d:c3:76:8f:c8:9c: b8:32:98:3f:b2:09:c0:74:20:0f:d1:87:9f:77:10: a2:e7:b5:fd:d4:31:60:ae:2f:fa:3d:cc:35:37:79: 65:84:b5:ab:74:59:f9:7c:f4:f2:1d:c7:45:3e:95: ce:a7:64:c9:47:63:c7:59:ca:28:05:6d:8b:cf:70: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:52:4D:89:41:0D:A9:26:01:97:7C:65:FC:49:F9:7F:0D:E1:FA:05 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:78:55:87:53:a3:b2:7f:78:95:93:2e:81:a7:f0:77:e0:28: 5a:7a:5f:76:2c:75:78:f5:ba:d8:20:d3:8f:e3:ba:84:e9:a4: 5c:ea:67:60:6e:97:86:1f:6a:82:36:d9:15:c2:96:1e:95:7a: 19:03:6c:54:9e:9d:29:f8:56:33:5d:42:ad:62:46:f1:37:ad: 5e:0d:d1:56:7d:b9:32:3b:24:5d:44:44:d1:b3:fd:ec:c1:b5: 38:f5:b8:0c:ed:0b:b2:fd:63:ab:cb:04:2d:7f:e0:2f:66:88: a5:08:7b:d8:eb:37:ff:7c:be:7b:9d:1f:8a:92:9d:05:a9:8a: a7:81:4e:38:a2:93:5b:27:a2:fe:17:f9:0a:af:90:6f:81:34: b1:2e:f1:e5:9f:94:67:d0:bf:d1:ff:b9:66:4b:94:f7:c9:7d: 5d:b2:d5:69:d1:50:1e:05:e5:37:e8:ee:40:ca:48:43:54:74: 41:fc:a3:f7:62:4a:9a:d7:98:46:56:bb:17:04:cf:89:b9:76: 9f:2e:35:3c:3c:6c:bf:fc:8d:08:d5:49:0b:c6:06:67:89:f9: d7:68:f7:1d:db:31:cf:ea:c5:41:1e:d6:de:ce:c3:9b:be:76: 5a:bb:20:65:8e:a4:00:c0:e3:99:d1:cf:65:bf:03:0b:3d:ec: b4:58:f3:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjYwOTI2MTYyOTU3WhcNMjYxMDAzMTYyOTU3WjAYMRYwFAYD VQQDEw02YWI3ZjMwNS1hOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SGws8kFf8ibO5hBaLkD056YSJQeGSlUyPALYrNZzbhWzFYRCw4s+CPtOeGK wdXI1Dp/XDS+vOHd3+6mzGwPVO2+J2bGSCJtW4w++3wrTXzLAwp+IN0yVjQpoj6P pZgb67y5aA+Tx+QSXRThkGNUhKr/fwU6Hy3PE+v9wwWjlHtbpYMZJG/N+Xa1T4J8 rCiAnt4ww/XIyDqKQQ2ftmb8VtCaBqzmV56B2tG9cSdM5GRNFd2TDhb1u4I8Aox9 w3aPyJy4Mpg/sgnAdCAP0YefdxCi57X91DFgri/6Pcw1N3llhLWrdFn5fPTyHcdF PpXOp2TJR2PHWcooBW2Lz3A5eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhSTYlB DakmAZd8ZfxJ+X8N4foFMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3hVh1Ojsn94lZMugafwd+AoWnpfdix1ePW62CDTj+O6hOmkXOpnYG6Xhh9q gjbZFcKWHpV6GQNsVJ6dKfhWM11CrWJG8TetXg3RVn25MjskXURE0bP97MG1OPW4 DO0Lsv1jq8sELX/gL2aIpQh72Os3/3y+e50fipKdBamKp4FOOKKTWyei/hf5Cq+Q b4E0sS7x5Z+UZ9C/0f+5ZkuU98l9XbLVadFQHgXlN+juQMpIQ1R0Qfyj92JKmteY Rla7FwTPibl2ny41PDxsv/yNCNVJC8YGZ4n512j3Hdsxz+rFQR7W3s7Dm752Wrsg ZY6kAMDjmdHPZb8DCz3stFjzgQ== -----END CERTIFICATE-----Generated at Sun Sep 27 11:29:14 2026 by rpki-client