$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: mNs81GjBkgP5zJl6v9QQaLz9qgDVSdJXWQoVkkqlCl4= Subject key identifier: 7D:E3:6F:0A:E5:97:9E:B2:0D:AF:F2:13:3D:45:A5:7E:76:E0:41:BC Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1B40 Signing time: Thu 24 Sep 2026 17:10:28 +0000 Manifest this update: Thu 24 Sep 2026 17:10:27 +0000 Manifest next update: Thu 01 Oct 2026 17:10:27 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: ioTyDwhhOmpXZ97dhapoLTONbJhT+nE7PLn2Wq9Ke84=) 2: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: xbADL7cJr+2vRtqNmInV63ZP0c0h+KFlCiFFTFNf4Uk=) 3: C3D424C4F4F611F0B230A1D14E6F56BC.roa (hash: eIWV2PVAmeguQkSyB8K0knff+OjMcoKXdZxZHafjh0o=) 4: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (hash: 7tv/5D9HntchiRfctALMuiuXJj9zM35Uyt8wDbjn1wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Sep 24 17:10:27 2026 GMT Not After : Oct 1 17:10:27 2026 GMT Subject: CN=6ab55983-c646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:20:be:23:b4:ca:fd:01:a2:ea:77:b8:49: 9e:14:b1:8f:e1:3f:08:5f:67:a2:32:1d:90:2f:d2: a2:1e:85:3a:8e:2c:f2:67:6a:93:9e:1c:b3:59:36: 54:19:43:e8:27:49:42:23:5a:71:39:94:0f:d0:7e: b8:60:9a:9f:66:d1:83:70:0f:2d:02:e1:85:91:38: 42:72:8d:0e:23:ac:e6:ee:15:a7:a7:5d:86:6d:69: 79:b5:16:df:a5:94:44:3f:ba:f8:01:77:bb:d8:69: 70:37:d8:40:26:6b:e0:45:11:95:31:a4:85:5b:01: 42:e4:e4:f0:3e:54:63:93:dc:2c:4b:82:2a:f4:bc: 8f:84:21:9d:25:00:21:1a:ea:1b:63:89:8e:92:d0: ea:d7:46:31:d1:1a:17:c1:d0:02:6b:01:ab:8c:39: f3:9d:2f:a9:9c:85:14:fa:53:fe:bb:0c:72:e2:c8: b7:58:8d:88:63:c7:9a:5e:cd:37:98:fc:54:b7:fe: 5c:86:47:8d:ef:35:a6:32:9d:65:bf:f8:c8:e6:2d: 3e:70:0f:77:b8:ba:47:51:d6:2d:6a:a0:45:15:43: 7b:de:91:f6:b5:ef:f0:8f:82:a8:1d:86:e5:14:94: aa:06:34:4c:53:e2:f9:99:dd:cf:1f:5e:fe:95:d2: af:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E3:6F:0A:E5:97:9E:B2:0D:AF:F2:13:3D:45:A5:7E:76:E0:41:BC X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:21:4e:6f:e0:bf:7c:c9:96:e6:f9:ba:98:95:00:e8:1c:98: b8:92:3a:5c:98:e7:02:53:a4:ef:d1:83:1f:58:dd:d9:e8:57: 54:a3:76:52:0a:95:b0:41:7f:31:48:58:22:87:f1:ea:e4:ed: 94:29:50:df:41:44:ff:3b:0a:3c:79:23:65:8a:1d:4b:82:34: 76:1e:e5:ab:99:47:85:0d:39:5f:16:26:33:2c:2e:15:2a:e9: df:b7:37:a6:dc:f2:3a:6b:a8:2a:1c:a1:83:15:6b:af:12:6c: f5:7a:35:4c:43:c6:db:b7:db:21:4f:44:63:24:d0:08:95:4a: 33:8f:7a:d7:82:93:e3:27:25:3e:e4:e7:8c:41:44:fc:6d:4f: e1:40:eb:44:1a:3b:d8:4c:f3:00:78:2a:37:88:77:d6:4c:63: c8:99:fe:e8:0b:a6:59:30:27:47:4d:41:57:c5:79:8b:d9:f4: 9a:2e:13:d1:5d:12:97:b4:ec:b1:31:ae:71:c9:b2:e4:66:4c: ff:97:e9:e6:79:42:11:b5:06:4f:70:a5:6e:4f:68:fe:40:d5: de:f7:60:31:29:53:3b:b4:2e:37:c5:93:36:d2:b4:cf:f8:89: d1:7b:cc:1e:89:74:ef:63:0b:f9:1e:13:44:cb:49:c2:57:52: 3b:9c:aa:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjYwOTI0MTcxMDI3WhcNMjYxMDAxMTcxMDI3WjAYMRYwFAYD VQQDEw02YWI1NTk4My1jNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOkgviO0yv0Boup3uEmeFLGP4T8IX2eiMh2QL9KiHoU6jizyZ2qTnhyzWTZU GUPoJ0lCI1pxOZQP0H64YJqfZtGDcA8tAuGFkThCco0OI6zm7hWnp12GbWl5tRbf pZREP7r4AXe72GlwN9hAJmvgRRGVMaSFWwFC5OTwPlRjk9wsS4Iq9LyPhCGdJQAh GuobY4mOktDq10Yx0RoXwdACawGrjDnznS+pnIUU+lP+uwxy4si3WI2IY8eaXs03 mPxUt/5chkeN7zWmMp1lv/jI5i0+cA93uLpHUdYtaqBFFUN73pH2te/wj4KoHYbl FJSqBjRMU+L5md3PH17+ldKvCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3jbwrl l56yDa/yEz1FpX524EG8MB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmyFOb+C/fMmW5vm6mJUA6ByYuJI6XJjnAlOk79GDH1jd2ehXVKN2UgqVsEF/ MUhYIofx6uTtlClQ30FE/zsKPHkjZYodS4I0dh7lq5lHhQ05XxYmMywuFSrp37c3 ptzyOmuoKhyhgxVrrxJs9Xo1TEPG27fbIU9EYyTQCJVKM49614KT4yclPuTnjEFE /G1P4UDrRBo72EzzAHgqN4h31kxjyJn+6AumWTAnR01BV8V5i9n0mi4T0V0Sl7Ts sTGuccmy5GZM/5fp5nlCEbUGT3Clbk9o/kDV3vdgMSlTO7QuN8WTNtK0z/iJ0XvM Hol072ML+R4TRMtJwldSO5yq3Q== -----END CERTIFICATE-----Generated at Fri Sep 25 23:59:04 2026 by rpki-client