$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft File: 4kseiTWUfEbxEc4paFpZGaGEgWI.mft (raw, json) Hash identifier: rHU0GlgRnb7zffXYmcT5aX/D3XIVxK1RZkEsYPRhojw= Subject key identifier: CC:31:8D:6F:E5:A0:8B:46:C1:6D:AC:8F:4E:1F:0D:BE:18:88:41:CC Authority key identifier: E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62 Certificate issuer: /CN=A91AC757/serialNumber=E24B1E8935947C46F111CE29685A5919A1848162 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft Manifest number: 19 Signing time: Thu 01 Oct 2026 10:25:23 +0000 Manifest this update: Thu 01 Oct 2026 10:25:23 +0000 Manifest next update: Thu 08 Oct 2026 10:25:23 +0000 Files and hashes: 1: 4kseiTWUfEbxEc4paFpZGaGEgWI.crl (hash: EqerkjFI0HxWGGdO4jYD9EeMm9WJsg7A/6aLEcFPkwU=) 2: F930E2AE9A0211F18F8C777D4D11F970.roa (hash: g0HTZkRvVAAIsmTQpLZEGBxeJYJHzsZAyNCmFjkA0Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.crl rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC757, serialNumber=E24B1E8935947C46F111CE29685A5919A1848162 Validity Not Before: Oct 1 10:25:23 2026 GMT Not After : Oct 8 10:25:23 2026 GMT Subject: CN=6abe3513-3d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:59:24:9b:99:49:91:8c:40:10:e2:41:0e: 17:a1:a3:37:ce:7b:bb:bd:e0:1c:4f:7f:2d:c5:e8: 5f:de:d4:90:db:af:88:05:29:a5:86:29:50:6f:f8: 31:3c:fd:e6:b4:5b:34:c5:9a:bc:36:56:be:69:82: b8:13:b5:ba:08:8c:70:b3:42:e5:0a:2c:1a:e9:5a: 50:ae:6d:24:31:09:fb:09:38:f9:12:a3:2c:64:02: ce:95:4c:5f:65:3e:18:41:cd:19:53:07:ae:e5:7a: 27:bf:18:b2:95:2a:a2:78:cb:82:32:ba:64:31:3f: 96:b7:76:ff:1d:1e:57:b7:cb:d7:48:7a:b4:42:8c: 9e:c1:8a:7d:b5:7a:2c:ab:d0:7c:d0:5e:50:01:3a: db:a7:06:cb:70:58:f4:e1:c0:fb:d7:88:2e:93:2f: 8f:cc:7a:25:d2:49:3c:7a:81:32:b6:0b:a2:ea:5f: 73:0e:60:ef:95:4e:3f:70:cc:e4:b6:34:28:43:48: 28:10:c9:fb:e0:de:4e:89:56:23:fc:9d:2d:f0:5c: 25:21:04:f0:17:d3:cb:ae:a7:9f:28:ec:01:bd:a2: 04:2b:9c:26:22:61:b7:09:9f:bf:78:d0:f2:67:92: 68:43:8e:e1:9a:74:23:d4:1d:0e:c9:bb:0d:9b:1c: 6f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:31:8D:6F:E5:A0:8B:46:C1:6D:AC:8F:4E:1F:0D:BE:18:88:41:CC X509v3 Authority Key Identifier: keyid:E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:89:b6:eb:5c:a4:5f:61:19:b7:1b:35:49:24:86:dc:d1:e0: 64:ac:0f:2b:ab:86:51:47:cd:fa:31:f8:20:0a:50:3d:7a:00: 1b:6c:1a:36:14:08:f9:e4:c2:c7:76:bb:83:af:c0:07:34:0c: 0b:d4:99:7e:b4:e1:16:8c:be:3e:11:db:91:f6:5c:4c:87:9d: 06:6a:23:60:99:e6:8a:67:ab:b9:3b:3b:4c:08:70:5d:9e:ce: 4a:bf:1b:fb:e7:d8:9d:05:23:78:eb:e7:af:66:9f:d6:39:43: 44:f2:1b:84:9e:25:75:48:a4:62:6a:6a:4e:fb:4d:9f:05:e2: d4:36:85:3c:a4:c0:6d:bf:50:bf:52:a4:9c:28:da:e4:fd:20: 6e:99:e4:c3:2a:99:a4:d8:83:a4:38:ff:6b:bc:ee:1f:8b:58: 0c:89:e8:d6:92:ef:69:0c:d2:5e:74:fb:19:e7:6b:7f:3b:6f: 37:26:4b:30:93:ba:57:0a:93:b2:6a:97:b7:ee:68:02:0b:67: bd:72:56:f0:de:e3:c2:83:f1:d7:c8:cd:99:84:12:da:d0:a6: af:9c:36:fe:4d:89:36:e3:db:96:25:02:f3:e4:d7:04:7a:b8: f6:35:14:f1:f9:cf:0a:68:aa:28:16:59:81:d6:e1:05:1c:5b: 4f:f7:ed:22 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Qzc1NzExMC8GA1UEBRMoRTI0QjFFODkzNTk0N0M0NkYxMTFDRTI5Njg1QTU5MTlB MTg0ODE2MjAeFw0yNjEwMDExMDI1MjNaFw0yNjEwMDgxMDI1MjNaMBgxFjAUBgNV BAMTDTZhYmUzNTEzLTNkODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUXlkkm5lJkYxAEOJBDhehozfOe7u94BxPfy3F6F/e1JDbr4gFKaWGKVBv+DE8 /ea0WzTFmrw2Vr5pgrgTtboIjHCzQuUKLBrpWlCubSQxCfsJOPkSoyxkAs6VTF9l PhhBzRlTB67leie/GLKVKqJ4y4IyumQxP5a3dv8dHle3y9dIerRCjJ7Bin21eiyr 0HzQXlABOtunBstwWPThwPvXiC6TL4/MeiXSSTx6gTK2C6LqX3MOYO+VTj9wzOS2 NChDSCgQyfvg3k6JViP8nS3wXCUhBPAX08uup58o7AG9ogQrnCYiYbcJn7940PJn kmhDjuGadCPUHQ7Juw2bHG/5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzDGNb+Wg i0bBbayPTh8NvhiIQcwwHwYDVR0jBBgwFoAU4kseiTWUfEbxEc4paFpZGaGEgWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNzU3LzVCMzhBQTM2OTlG RTExRjFBOURFOTk4MzRCMTFGOTcwLzRrc2VpVFdVZkVieEVjNHBhRnBaR2FHRWdX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGtzZWlUV1VmRWJ4RWM0cGFGcFpHYUdFZ1dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NzU3LzVCMzhBQTM2OTlGRTExRjFBOURFOTk4MzRCMTFGOTcwLzRrc2VpVFdVZkVi eEVjNHBhRnBaR2FHRWdXSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4ibbrXKRfYRm3GzVJJIbc0eBkrA8rq4ZRR836MfggClA9egAbbBo2FAj55MLH druDr8AHNAwL1Jl+tOEWjL4+EduR9lxMh50GaiNgmeaKZ6u5OztMCHBdns5Kvxv7 59idBSN46+evZp/WOUNE8huEniV1SKRiampO+02fBeLUNoU8pMBtv1C/UqScKNrk /SBumeTDKpmk2IOkOP9rvO4fi1gMiejWku9pDNJedPsZ52t/O283Jkswk7pXCpOy ape37mgCC2e9clbw3uPCg/HXyM2ZhBLa0KavnDb+TYk249uWJQLz5NcEerj2NRTx +c8KaKooFlmB1uEFHFtP9+0i -----END CERTIFICATE-----Generated at Fri Oct 2 08:32:27 2026 by rpki-client