$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json) Hash identifier: kW+G98X1OTaPmTZU55kf5A536JYq1vqa/AY9GgwfajE= Subject key identifier: 05:CF:8B:3D:1D:15:AB:4A:1A:F1:A2:2C:CF:5D:60:87:34:89:E5:52 Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 13D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft Manifest number: 13BE Signing time: Tue 22 Sep 2026 16:52:21 +0000 Manifest this update: Tue 22 Sep 2026 16:52:21 +0000 Manifest next update: Tue 29 Sep 2026 16:52:21 +0000 Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: 0NHFgmGdVlnNrLGo9SZbZ1gWxujESjiiYcb91bTx1as=) 2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: O9w5ukmDcrFDcEjD6HiwQa6Y82NCxJ277Oe6QTyQjzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5074 (0x13d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: Sep 22 16:52:21 2026 GMT Not After : Sep 29 16:52:21 2026 GMT Subject: CN=6ab2b245-c8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bd:ca:34:17:c3:86:81:74:43:bf:7b:64:2f: da:f1:07:8b:cb:58:9c:af:30:10:a5:4b:39:62:be: 77:fa:17:4f:f8:e7:2c:8c:f4:47:27:73:de:91:db: 30:96:16:04:23:91:25:b2:29:da:84:d0:11:e0:3a: 10:a3:d7:81:15:ec:45:49:61:eb:2a:b2:cc:2b:f3: dd:7c:e3:48:a4:be:ed:86:dd:cc:72:c5:88:50:11: 15:72:2a:71:19:1e:ef:55:10:a1:05:0d:0d:31:3f: 3c:31:8f:04:f3:98:7a:87:24:1f:e3:69:1f:16:33: 2b:27:48:be:53:df:f4:f0:34:f9:09:19:53:54:60: 2f:05:0d:ef:70:26:ac:66:d3:49:20:44:ee:82:b8: b3:44:53:11:b2:d1:20:4b:ad:b2:1a:9d:7e:74:ec: c4:e6:7c:ee:d5:a0:56:f9:92:7a:17:29:16:4e:83: 10:1e:b6:b7:62:43:d4:ba:61:aa:ee:75:94:87:8f: a7:ca:29:af:9e:81:17:b0:cc:9f:29:d1:aa:9a:d9: 20:51:ef:2e:f4:16:b9:c9:10:ea:eb:a5:b9:34:33: e2:5d:c8:cc:08:f5:1c:93:b9:8f:e5:0e:0b:b1:cc: 6e:8e:6c:c2:45:67:c7:23:2e:49:89:d4:7f:97:e2: 23:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CF:8B:3D:1D:15:AB:4A:1A:F1:A2:2C:CF:5D:60:87:34:89:E5:52 X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b0:e8:99:f6:7d:dd:33:da:e7:b2:d0:e4:77:15:86:f9:5a: d2:12:0b:a4:ee:68:ce:5a:e3:d9:b0:f3:dc:20:25:1e:5a:fc: b3:e8:50:90:fc:02:80:be:83:38:ce:60:d4:fb:76:1c:62:3e: 07:9b:0f:5f:3f:c2:25:88:a2:34:d9:f8:a3:43:5b:40:68:76: 67:82:d0:f2:d5:77:58:f6:9f:00:a4:af:e8:e1:99:a9:d7:55: 62:50:93:f3:08:5c:74:fd:d0:cf:5c:eb:3b:72:de:65:5a:88: e8:f5:e9:da:44:be:f6:86:c9:69:f2:02:c7:cc:bb:66:2e:41: b4:ba:d3:66:8d:da:02:58:e3:b2:9e:6d:b9:5b:7d:1c:e1:50: 22:eb:93:08:a0:22:9f:34:61:ee:79:41:99:26:e8:3c:42:ec: 46:d5:7c:8f:ed:ef:1d:72:63:21:46:04:b8:d3:15:3a:5b:0e: 50:5d:3e:46:ef:db:73:45:33:04:ed:13:84:10:75:1e:39:2a: f0:44:20:29:4b:e2:e6:a7:0f:bc:d2:d3:be:0c:8a:c3:10:e7: 08:f7:03:da:21:0f:76:93:3b:5f:c7:31:1a:28:4c:2e:ae:82: 28:f3:f4:25:66:4c:ac:97:fd:f8:86:b3:b0:aa:a8:a8:83:ed: aa:3a:f0:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjYwOTIyMTY1MjIxWhcNMjYwOTI5MTY1MjIxWjAYMRYwFAYD VQQDEw02YWIyYjI0NS1jOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA773KNBfDhoF0Q797ZC/a8QeLy1icrzAQpUs5Yr53+hdP+OcsjPRHJ3Pekdsw lhYEI5ElsinahNAR4DoQo9eBFexFSWHrKrLMK/PdfONIpL7tht3McsWIUBEVcipx GR7vVRChBQ0NMT88MY8E85h6hyQf42kfFjMrJ0i+U9/08DT5CRlTVGAvBQ3vcCas ZtNJIETugrizRFMRstEgS62yGp1+dOzE5nzu1aBW+ZJ6FykWToMQHra3YkPUumGq 7nWUh4+nyimvnoEXsMyfKdGqmtkgUe8u9Ba5yRDq66W5NDPiXcjMCPUck7mP5Q4L scxujmzCRWfHIy5JidR/l+IjvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXPiz0d FatKGvGiLM9dYIc0ieVSMB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnRO b1g1NklDaGdPczJPY1daclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc7DomfZ93TPa57LQ5HcVhvla0hILpO5ozlrj2bDz3CAlHlr8s+hQkPwCgL6D OM5g1Pt2HGI+B5sPXz/CJYiiNNn4o0NbQGh2Z4LQ8tV3WPafAKSv6OGZqddVYlCT 8whcdP3Qz1zrO3LeZVqI6PXp2kS+9obJafICx8y7Zi5BtLrTZo3aAljjsp5tuVt9 HOFQIuuTCKAinzRh7nlBmSboPELsRtV8j+3vHXJjIUYEuNMVOlsOUF0+Ru/bc0Uz BO0ThBB1Hjkq8EQgKUvi5qcPvNLTvgyKwxDnCPcD2iEPdpM7X8cxGihMLq6CKPP0 JWZMrJf9+IazsKqoqIPtqjrw5A== -----END CERTIFICATE-----Generated at Tue Sep 22 20:52:29 2026 by rpki-client