$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: qWROC1tgbGW89i6sSz2KwjJ98wn4j7Dl9wjusLsHr34= Subject key identifier: CD:81:C9:D7:DC:7C:CC:94:58:BE:2A:2D:44:07:FC:CB:CE:FC:8C:61 Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: FF Signing time: Tue 22 Sep 2026 20:06:05 +0000 Manifest this update: Tue 22 Sep 2026 20:06:04 +0000 Manifest next update: Tue 29 Sep 2026 20:06:04 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: 4IkcJs47ntAHv8iwBZ0Ts7ej896ye7aQ4MNW7fYfRqw=) 2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: NPJSodbwWKPxaxqcL20NVvStl+UOM4gI9IHpj1XGIKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Sep 22 20:06:04 2026 GMT Not After : Sep 29 20:06:04 2026 GMT Subject: CN=6ab2dfac-8dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:7c:70:9b:ed:00:68:d2:21:07:d3:67:20: 2d:43:a8:44:78:ab:93:18:86:56:6e:52:0e:d7:c9: ba:6f:b3:d0:98:d9:5b:a9:99:18:13:e0:4a:bd:fc: 48:64:7b:92:b5:aa:3a:76:41:40:81:51:1e:ec:0f: 45:ac:7a:26:b8:7e:85:94:b9:99:f0:15:42:bd:5b: 65:c3:5a:fa:ca:18:6c:f8:e9:9f:1e:8c:52:92:04: 2a:31:b3:73:27:b3:20:be:b5:c3:82:ab:cf:13:b5: 94:dc:b6:20:10:e4:5d:7e:7a:d2:57:e6:97:a1:ad: 7f:10:7e:e9:40:ab:0e:fb:75:b0:14:d5:06:35:0c: 33:f6:ff:4b:6c:b5:d9:40:97:5c:6b:9d:20:72:f7: 34:27:83:74:a4:b8:32:68:72:d8:e3:0f:29:6a:81: 26:16:0e:1d:90:d1:e6:51:e1:b4:85:71:c3:81:0a: 98:d8:d3:e9:15:aa:cf:48:d0:37:90:10:0c:9f:69: 1b:cd:4a:cd:3e:f2:b7:a0:af:79:47:c6:16:fa:fa: 6e:34:58:bb:32:e5:27:6f:17:c6:fe:14:5e:39:10: 27:a6:46:b5:d0:7b:b6:04:84:b5:81:87:77:2c:68: ff:b0:c0:f6:76:64:c9:62:14:6f:3f:06:eb:7a:19: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:81:C9:D7:DC:7C:CC:94:58:BE:2A:2D:44:07:FC:CB:CE:FC:8C:61 X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0f:cc:f7:6a:72:8c:97:48:c5:7d:9a:c7:71:0c:e6:ed:c6: db:d7:d6:69:ba:dd:80:67:6c:9c:56:96:c4:4b:42:b3:a2:6f: dd:c8:5d:df:55:a4:71:57:af:69:32:3b:6e:eb:33:ac:0c:bb: 84:55:64:b8:6f:f6:5d:54:22:6d:3b:cb:ef:ac:7b:8f:7a:7e: 59:e8:af:a7:4a:d0:53:0c:86:ac:b1:4a:a1:ca:53:34:8f:20: a8:c6:62:21:69:1c:8b:0c:06:96:05:6b:94:a8:99:29:6c:16: de:36:2b:09:90:da:c2:f8:0c:a1:f7:64:c6:f1:94:80:36:84: 33:73:71:65:42:28:52:9f:9f:00:64:d9:d4:09:91:02:51:92: ea:7d:3d:85:1b:b6:75:86:57:2e:70:65:10:18:8a:fd:02:fc: 3c:e6:c5:3b:1d:a6:b4:69:e6:5e:50:07:51:ce:b5:2e:5f:5d: 09:1e:fa:c0:0a:44:dd:70:f4:7c:82:5c:31:27:65:ac:c0:66: ca:35:20:20:3f:77:57:31:30:cd:09:cd:ab:0d:9e:4d:e8:f8: 8d:9a:0c:cf:ce:93:56:73:7d:7d:13:cf:e3:ed:fe:df:62:92: c8:61:2a:3e:dc:60:84:09:63:a9:dc:f8:01:f5:41:ef:af:c4: 8f:ea:22:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKDE3ODAwOTZDQzkwQUI2QUVBRjA4RDc5QUIxOEM1NEM3 Qjc3QTUzQTAwHhcNMjYwOTIyMjAwNjA0WhcNMjYwOTI5MjAwNjA0WjAYMRYwFAYD VQQDEw02YWIyZGZhYy04ZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mV8cJvtAGjSIQfTZyAtQ6hEeKuTGIZWblIO18m6b7PQmNlbqZkYE+BKvfxI ZHuStao6dkFAgVEe7A9FrHomuH6FlLmZ8BVCvVtlw1r6yhhs+OmfHoxSkgQqMbNz J7MgvrXDgqvPE7WU3LYgEORdfnrSV+aXoa1/EH7pQKsO+3WwFNUGNQwz9v9LbLXZ QJdca50gcvc0J4N0pLgyaHLY4w8paoEmFg4dkNHmUeG0hXHDgQqY2NPpFarPSNA3 kBAMn2kbzUrNPvK3oK95R8YW+vpuNFi7MuUnbxfG/hReORAnpka10Hu2BIS1gYd3 LGj/sMD2dmTJYhRvPwbrehmxhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2Bydfc fMyUWL4qLUQH/MvO/IxhMB8GA1UdIwQYMBaAFBeACWzJCraurwjXmrGMVMe3elOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My9BQjcxOUZDRTNC NjUxMUYwODc0MkRBMzlDNEY5QUUwMi9GNEFKYk1rS3RxNnZDTmVhc1l4VXg3ZDZV NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My9BQjcxOUZDRTNCNjUxMUYwODc0MkRBMzlDNEY5QUUwMi9GNEFKYk1rS3Rx NnZDTmVhc1l4VXg3ZDZVNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHA/M92pyjJdIxX2ax3EM5u3G29fWabrdgGdsnFaWxEtCs6Jv3chd31WkcVev aTI7buszrAy7hFVkuG/2XVQibTvL76x7j3p+Weivp0rQUwyGrLFKocpTNI8gqMZi IWkciwwGlgVrlKiZKWwW3jYrCZDawvgMofdkxvGUgDaEM3NxZUIoUp+fAGTZ1AmR AlGS6n09hRu2dYZXLnBlEBiK/QL8PObFOx2mtGnmXlAHUc61Ll9dCR76wApE3XD0 fIJcMSdlrMBmyjUgID93VzEwzQnNqw2eTej4jZoMz86TVnN9fRPP4+3+32KSyGEq PtxghAljqdz4AfVB76/Ej+oiAA== -----END CERTIFICATE-----Generated at Wed Sep 23 21:12:18 2026 by rpki-client