$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft File: 40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json) Hash identifier: CB7z7NBAEVMxS6TIMU9hV3azW0SgMYuXMCA4iwSME8A= Subject key identifier: 19:3A:64:5C:95:B7:08:67:89:00:92:AA:A2:31:EC:A9:EE:07:F2:80 Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C Certificate issuer: /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C Certificate serial: 357D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft Manifest number: 357D Signing time: Tue 22 Sep 2026 14:39:45 +0000 Manifest this update: Tue 22 Sep 2026 14:39:45 +0000 Manifest next update: Tue 29 Sep 2026 14:39:45 +0000 Files and hashes: 1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: r8A7ja6uqJVml7Po+1LdSoTaGSquhYXfciACLqzFyYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13693 (0x357d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA4, serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C Validity Not Before: Sep 22 14:39:45 2026 GMT Not After : Sep 29 14:39:45 2026 GMT Subject: CN=6ab29331-2fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:a5:53:75:86:63:00:1a:62:f0:63:1e:4b: cf:08:ae:93:9b:2c:27:ca:32:c8:d6:0f:8e:3d:26: 0d:91:09:05:ff:37:16:c1:e9:be:2d:48:12:65:91: 77:fe:f9:e1:06:5c:9b:97:fb:93:b4:be:7a:13:ae: 60:b6:9f:be:ce:99:bb:0a:7f:77:73:00:4e:01:61: 7d:74:41:cf:50:da:ba:78:cd:3f:e4:6a:81:5c:61: 30:ca:10:5b:db:eb:3e:0e:c5:26:f0:ec:d5:10:46: 81:71:33:ad:08:1d:8d:9d:3f:bc:85:c7:bc:87:3f: e6:b3:db:f2:2d:3f:59:aa:6b:3d:25:3c:c0:ac:5e: bc:16:cc:ce:00:53:0f:b1:4c:d6:06:a5:12:08:44: 40:dd:79:e7:d3:50:9e:ff:a4:11:45:18:f1:56:cd: 81:1c:ee:eb:58:72:a2:e5:62:45:5e:97:15:d8:6c: 51:02:36:7d:b0:07:6f:ad:b3:8a:4e:23:9e:cf:52: bb:4d:dd:1c:14:97:f2:76:0e:52:6c:c3:48:43:e6: 55:1d:8f:cf:63:3b:2d:85:ea:35:f8:b4:41:79:4b: c0:ec:48:2f:e9:15:b9:c4:21:60:f2:f0:a7:6e:67: 8e:7b:77:b9:f4:bb:bb:29:0c:30:14:5f:38:d6:8c: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:64:5C:95:B7:08:67:89:00:92:AA:A2:31:EC:A9:EE:07:F2:80 X509v3 Authority Key Identifier: keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9c:ec:66:63:2a:bd:c0:b3:20:fa:3e:fd:a2:fc:8e:bc:10: 00:89:74:b4:c6:bf:62:be:0b:93:5e:26:ad:ee:ba:d0:b6:8e: 3e:18:df:e7:dd:e5:68:9e:ed:66:c1:d4:d3:37:30:94:eb:0b: d8:48:cb:93:8d:de:78:07:48:b2:90:31:4d:0c:4a:9e:b8:f6: 11:4d:8a:ce:3d:a4:89:3f:32:fa:22:42:7b:e3:03:13:79:b2: 11:6c:f9:34:cf:b9:0a:12:04:09:46:60:c6:a4:71:83:99:b1: 0b:c8:fb:ee:0d:be:81:d3:d7:52:ef:28:2f:5b:23:25:1d:b1: e1:86:2d:db:c3:bb:f6:53:d7:d4:45:e4:57:5a:e7:9f:ff:36: e2:48:74:ab:b3:a6:d3:fd:09:a5:13:0d:73:60:21:2f:86:b8: 50:fa:59:25:c8:65:7e:65:43:0d:89:18:68:cc:8b:eb:b3:39: 44:f3:b7:5f:62:cd:40:c0:a4:0b:77:3a:a5:9e:6b:1a:bb:84: 5a:d6:be:0e:ee:09:e8:58:3a:e5:10:f2:76:b4:e7:94:17:44: c4:b3:81:ed:2a:b4:01:b9:23:e7:cb:7f:1c:d8:06:b8:05:59: 27:76:95:f7:d0:ff:e9:0d:54:7d:26:15:8b:f5:df:c2:36:67: 88:6e:ab:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTQxMTAvBgNVBAUTKEUzNDIyRjRFREU1RTY4Q0VDOUFBQTdFM0M2RTMyNzhD NzMwRTFFN0MwHhcNMjYwOTIyMTQzOTQ1WhcNMjYwOTI5MTQzOTQ1WjAYMRYwFAYD VQQDEw02YWIyOTMzMS0yZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8OlU3WGYwAaYvBjHkvPCK6TmywnyjLI1g+OPSYNkQkF/zcWwem+LUgSZZF3 /vnhBlybl/uTtL56E65gtp++zpm7Cn93cwBOAWF9dEHPUNq6eM0/5GqBXGEwyhBb 2+s+DsUm8OzVEEaBcTOtCB2NnT+8hce8hz/ms9vyLT9Zqms9JTzArF68FszOAFMP sUzWBqUSCERA3Xnn01Ce/6QRRRjxVs2BHO7rWHKi5WJFXpcV2GxRAjZ9sAdvrbOK TiOez1K7Td0cFJfydg5SbMNIQ+ZVHY/PYzstheo1+LRBeUvA7Egv6RW5xCFg8vCn bmeOe3e59Lu7KQwwFF841oweLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBk6ZFyV twhniQCSqqIx7KnuB/KAMB8GA1UdIwQYMBaAFONCL07eXmjOyaqn48bjJ4xzDh58 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNC80NzNDNjQ1MDFE OEYxMUUyOEU5MTNERUUwOEIwMkNEMi80MEl2VHQ1ZWFNN0pxcWZqeHVNbmpITU9I bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwSXZUdDVlYU03SnFxZmp4dU1uakhNT0hudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNC80NzNDNjQ1MDFEOEYxMUUyOEU5MTNERUUwOEIwMkNEMi80MEl2VHQ1ZWFN N0pxcWZqeHVNbmpITU9IbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA5zsZmMqvcCzIPo+/aL8jrwQAIl0tMa/Yr4Lk14mre660LaOPhjf593laJ7t ZsHU0zcwlOsL2EjLk43eeAdIspAxTQxKnrj2EU2Kzj2kiT8y+iJCe+MDE3myEWz5 NM+5ChIECUZgxqRxg5mxC8j77g2+gdPXUu8oL1sjJR2x4YYt28O79lPX1EXkV1rn n/824kh0q7Om0/0JpRMNc2AhL4a4UPpZJchlfmVDDYkYaMyL67M5RPO3X2LNQMCk C3c6pZ5rGruEWta+Du4J6Fg65RDydrTnlBdExLOB7Sq0Abkj58t/HNgGuAVZJ3aV 99D/6Q1UfSYVi/XfwjZniG6rdg== -----END CERTIFICATE-----Generated at Thu Sep 24 11:01:48 2026 by rpki-client