$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: b73EHpsKNMLqOzJB2tFgyO7QcxH8D1HPYgWbhRk1NMI= Subject key identifier: 73:B8:BF:79:26:E0:43:E6:55:04:9A:97:08:15:86:A4:98:84:8B:C8 Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 095A Signing time: Tue 22 Sep 2026 17:46:19 +0000 Manifest this update: Tue 22 Sep 2026 17:46:18 +0000 Manifest next update: Tue 29 Sep 2026 17:46:18 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: whD5/rcE/HxFPe/k31Z0SRrDRVcCV2VPuOH8+O5rK44=) 2: D385E420314711EBA579873DC4F9AE02.roa (hash: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=) 3: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=) 4: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: BoTL56JNkoT8zZTebPvc7QbRsS4FGOp32MGJ/vJjCqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Sep 22 17:46:18 2026 GMT Not After : Sep 29 17:46:18 2026 GMT Subject: CN=6ab2beeb-cb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:14:f5:2a:16:7b:4e:f4:7f:0d:fa:c9:10: 9a:b8:9e:27:57:82:b2:ac:56:6f:94:d8:22:31:6a: 97:ab:5f:6b:e9:39:bc:c4:bd:61:dc:44:2d:de:1a: fd:22:c4:54:5c:54:cf:18:62:26:a0:43:22:7b:48: 45:20:23:7b:ab:6a:af:47:c4:7d:f4:52:35:5b:33: fb:a6:79:34:6f:ba:dc:0f:7b:5f:36:0e:68:c9:84: f1:93:c0:8b:6f:7e:d1:28:7f:1f:25:fa:40:ff:9f: 39:df:da:d4:64:95:e8:ad:ff:cb:37:c2:d7:6b:47: 85:11:fe:6b:0f:e0:48:22:55:43:6a:05:72:99:93: 1e:c9:ce:3b:cd:55:71:f6:09:15:45:f9:44:30:c8: bf:9b:68:76:0b:05:72:fd:32:42:cf:f1:09:22:22: 0a:3f:97:e2:e9:76:00:f6:33:85:45:e3:6b:0f:30: 74:18:70:03:33:b6:e6:c2:37:d0:99:11:92:85:48: f9:14:ea:e4:b4:b8:ed:0b:19:78:99:a0:c0:99:de: 49:8d:58:f1:17:f2:91:6f:61:0b:3f:15:35:b9:c6: 3a:c1:2c:db:6c:06:7a:ee:e8:b3:d2:3b:94:03:20: 28:0b:70:11:3a:89:69:89:0b:82:f0:38:31:45:df: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B8:BF:79:26:E0:43:E6:55:04:9A:97:08:15:86:A4:98:84:8B:C8 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:42:df:17:68:29:5f:47:31:6a:41:10:c5:65:10:66:d6:6f: c4:2a:0e:03:47:93:47:8a:4c:90:15:b5:ce:51:fd:bc:68:82: e0:dd:8c:3f:5a:22:6b:1b:aa:1e:8e:0d:cc:9d:2a:0a:97:31: 56:2e:30:90:71:70:c7:6d:33:1b:49:30:65:8c:9f:c6:29:31: 26:0e:99:22:84:61:7a:74:d4:07:1a:91:7a:fa:cc:8f:ff:e4: c2:34:05:44:9f:ef:f1:db:be:df:cf:2c:43:17:8c:73:35:91: 1e:80:7c:00:00:2f:cf:4b:0b:e6:be:55:07:34:ae:1e:ad:ab: c8:18:05:b1:d5:80:57:42:55:05:4d:5e:80:7b:bb:83:bd:56: 7c:e8:da:9e:f9:d1:9e:39:e2:57:7a:67:82:fd:99:33:0b:5f: 96:f3:36:a1:fb:a6:52:6b:ba:66:ff:2d:37:32:62:26:ce:e1: 4b:fe:87:66:f4:f6:c6:77:97:0e:45:1f:4d:9d:eb:40:c8:91: c2:74:57:09:be:e9:1a:9e:ad:3b:a3:f4:54:c5:95:10:20:b1: 04:74:03:a8:fa:0c:01:2e:76:d3:c8:5c:d7:0d:f7:87:a0:e9: 48:df:5c:69:8d:5b:ee:d5:62:2b:b5:73:45:38:b7:12:a4:01: 05:4c:64:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwOTIyMTc0NjE4WhcNMjYwOTI5MTc0NjE4WjAYMRYwFAYD VQQDEw02YWIyYmVlYi1jYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDAU9SoWe070fw36yRCauJ4nV4KyrFZvlNgiMWqXq19r6Tm8xL1h3EQt3hr9 IsRUXFTPGGImoEMie0hFICN7q2qvR8R99FI1WzP7pnk0b7rcD3tfNg5oyYTxk8CL b37RKH8fJfpA/58539rUZJXorf/LN8LXa0eFEf5rD+BIIlVDagVymZMeyc47zVVx 9gkVRflEMMi/m2h2CwVy/TJCz/EJIiIKP5fi6XYA9jOFReNrDzB0GHADM7bmwjfQ mRGShUj5FOrktLjtCxl4maDAmd5JjVjxF/KRb2ELPxU1ucY6wSzbbAZ67uiz0juU AyAoC3AROolpiQuC8DgxRd++VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHO4v3km 4EPmVQSalwgVhqSYhIvIMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXULfF2gpX0cxakEQxWUQZtZvxCoOA0eTR4pMkBW1zlH9vGiC4N2MP1oiaxuq Ho4NzJ0qCpcxVi4wkHFwx20zG0kwZYyfxikxJg6ZIoRhenTUBxqRevrMj//kwjQF RJ/v8du+388sQxeMczWRHoB8AAAvz0sL5r5VBzSuHq2ryBgFsdWAV0JVBU1egHu7 g71WfOjanvnRnjniV3pngv2ZMwtflvM2ofumUmu6Zv8tNzJiJs7hS/6HZvT2xneX DkUfTZ3rQMiRwnRXCb7pGp6tO6P0VMWVECCxBHQDqPoMAS5208hc1w33h6DpSN9c aY1b7tViK7VzRTi3EqQBBUxkvw== -----END CERTIFICATE-----Generated at Thu Sep 24 12:43:32 2026 by rpki-client