$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json) Hash identifier: PVaMiFTmJBr/R58YsvIYTU+7BjyqyplRtJkKtud7f8w= Subject key identifier: 02:F0:2D:0A:D8:17:F1:19:87:51:5A:62:05:1E:60:C2:0D:0F:C6:BA Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft Manifest number: 1CD7 Signing time: Sat 26 Sep 2026 16:12:37 +0000 Manifest this update: Sat 26 Sep 2026 16:12:36 +0000 Manifest next update: Sat 03 Oct 2026 16:12:36 +0000 Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: biQ3NnEUSmvbwIlZu9bN82cHzvk3x/igSzD1wVghGqQ=) 2: 65D82706BACE11F0AAEC4611C4F9AE02.roa (hash: sqvmzo0nBMsekrGisDm87YPLKEUsc2Q0u1zWWfR7WgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 16:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7399 (0x1ce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Sep 26 16:12:36 2026 GMT Not After : Oct 3 16:12:36 2026 GMT Subject: CN=6ab7eef5-9c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:3c:f3:cd:b0:cd:d8:dc:ed:52:2c:07:93: 5c:b9:ae:64:0f:a3:5c:78:02:29:34:b2:e0:04:da: 2b:75:19:0a:cc:d2:83:c1:6a:aa:83:fb:85:46:fe: 06:84:c7:29:21:21:1b:3f:dd:3a:2c:a7:df:ae:26: b7:99:11:a0:55:6d:1d:3a:7b:8b:19:7b:5f:b6:88: d5:af:af:38:7e:5c:2f:14:01:e3:17:3a:b2:23:6a: aa:98:94:dd:0f:60:f7:fe:6a:16:3c:81:45:c6:74: 77:20:81:75:a0:5f:44:5a:1c:fb:df:46:b9:36:64: eb:c6:84:ee:03:1a:16:c9:d0:c1:b0:5a:65:15:ce: 33:38:1f:5f:58:55:26:ef:18:0f:b7:58:b1:91:28: c1:78:e8:d7:98:f0:68:2c:ff:6d:1e:f4:5c:aa:ea: 34:a9:7d:45:fc:99:25:51:2a:ce:b8:3b:c3:15:20: da:e5:39:7a:aa:16:30:4c:07:4a:c4:e9:68:b5:78: e8:3e:d9:8a:e7:e8:f3:d2:f2:50:58:cb:18:cf:cf: 05:11:39:04:77:19:48:a7:9b:78:46:fa:0b:00:3b: ff:43:9f:4b:b7:83:79:95:be:c8:0b:94:b7:59:c8: fd:49:c3:6e:4e:8e:db:65:db:e1:cd:39:e1:ed:30: 4a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:2D:0A:D8:17:F1:19:87:51:5A:62:05:1E:60:C2:0D:0F:C6:BA X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a1:3d:14:94:ef:90:ad:34:90:97:f8:35:85:af:ba:42:16: fa:1f:b6:39:59:8a:82:50:45:eb:df:da:bf:92:19:9e:d5:50: c6:c8:91:1a:67:43:35:17:65:83:ae:a0:f3:e0:ec:0d:77:71: 8b:c4:24:5f:b9:91:48:5e:25:c5:1c:0e:11:9d:0b:9d:6f:8e: e4:44:d4:46:2e:57:85:4f:2c:3f:18:4e:1a:ca:19:65:fe:c8: 61:f3:85:1f:14:98:a7:81:dc:50:15:37:f3:2e:dd:88:6f:be: e8:e0:a9:4f:a8:b5:57:b4:5b:f2:9c:d5:65:5c:ba:74:fc:3b: 5d:90:a2:d8:84:72:da:53:6d:36:21:5e:fd:20:8f:d1:ba:12: 71:69:a2:96:54:42:a8:db:53:96:be:f1:a7:08:a7:35:42:7f: 06:60:ce:f2:85:ca:fc:ad:8d:eb:be:f9:e5:e9:b4:cb:e4:93: 2b:7d:eb:bc:4a:a6:85:2b:ae:76:be:ef:b3:71:6c:0a:7c:97: 3a:7b:ab:f5:90:20:31:a0:83:1c:9d:6a:5a:e7:10:e6:63:a8: 3b:2d:3a:b2:0a:46:aa:61:6e:81:a3:24:1f:b6:69:21:95:52: 7f:fc:42:12:21:ba:f3:56:36:ed:ad:6e:2d:28:a5:d4:3a:6a: 0d:22:66:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjYwOTI2MTYxMjM2WhcNMjYxMDAzMTYxMjM2WjAYMRYwFAYD VQQDEw02YWI3ZWVmNS05YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmX48882wzdjc7VIsB5Ncua5kD6NceAIpNLLgBNordRkKzNKDwWqqg/uFRv4G hMcpISEbP906LKffria3mRGgVW0dOnuLGXtftojVr684flwvFAHjFzqyI2qqmJTd D2D3/moWPIFFxnR3IIF1oF9EWhz730a5NmTrxoTuAxoWydDBsFplFc4zOB9fWFUm 7xgPt1ixkSjBeOjXmPBoLP9tHvRcquo0qX1F/JklUSrOuDvDFSDa5Tl6qhYwTAdK xOlotXjoPtmK5+jz0vJQWMsYz88FETkEdxlIp5t4RvoLADv/Q59Lt4N5lb7IC5S3 Wcj9ScNuTo7bZdvhzTnh7TBK2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALwLQrY F/EZh1FaYgUeYMIND8a6MB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNGRS84MjVDRTlBQUY5RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25i c29kUmhPNE4xZWxOMTFlRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg6E9FJTvkK00kJf4NYWvukIW+h+2OVmKglBF69/av5IZntVQxsiRGmdDNRdl g66g8+DsDXdxi8QkX7mRSF4lxRwOEZ0LnW+O5ETURi5XhU8sPxhOGsoZZf7IYfOF HxSYp4HcUBU38y7diG++6OCpT6i1V7Rb8pzVZVy6dPw7XZCi2IRy2lNtNiFe/SCP 0boScWmillRCqNtTlr7xpwinNUJ/BmDO8oXK/K2N67755em0y+STK33rvEqmhSuu dr7vs3FsCnyXOnur9ZAgMaCDHJ1qWucQ5mOoOy06sgpGqmFugaMkH7ZpIZVSf/xC EiG681Y27a1uLSil1DpqDSJmgQ== -----END CERTIFICATE-----Generated at Sun Sep 27 08:14:39 2026 by rpki-client