$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: Wi1X0P3W42TMp9W0TBM1DighPp3vHqar74bL5HZvxNw= Subject key identifier: 1E:AB:95:CA:64:B4:4C:75:5D:C3:6C:D0:60:96:A3:23:F7:02:97:3E Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 088F Signing time: Tue 22 Sep 2026 20:33:06 +0000 Manifest this update: Tue 22 Sep 2026 20:33:06 +0000 Manifest next update: Tue 29 Sep 2026 20:33:06 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: YQ5Z10j2mPWUmW98PBcMiLuEWLJkVM5yHaAO9fgwnoc=) 2: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: PI9xVbuN9iLwRFvPVikPHj6xkwP6ohiLgSsNDUNun9g=) 3: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: 7Hski1LihuXP4DCejah8rpbbpApVv3sXUWUNBiqFJoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Sep 22 20:33:06 2026 GMT Not After : Sep 29 20:33:06 2026 GMT Subject: CN=6ab2e602-9847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:3d:00:21:9b:f7:14:0b:55:b4:a6:bd:06: 71:98:aa:8d:d5:34:87:99:6c:a4:03:b8:7e:93:29: 1c:c2:de:66:44:cb:8f:b5:33:a4:a7:bf:49:4c:1b: 4f:db:46:68:63:40:87:63:25:b1:0f:cf:b6:ad:9a: 22:cf:a3:15:46:39:d4:26:4e:96:08:89:11:a5:4c: 90:79:b5:8d:38:6f:22:f6:07:45:f0:d9:fc:eb:73: ff:82:7f:98:b4:47:e9:1e:90:52:46:66:80:e8:f1: 4c:42:0b:90:1e:62:ab:5e:73:55:e3:8b:f2:56:cf: a9:36:d8:8f:56:1e:29:9b:20:ec:ec:42:18:fc:45: 99:4d:d5:58:dd:3c:bb:a6:34:0a:98:e2:eb:40:51: 88:24:b5:42:2d:c3:34:8e:ae:c8:cd:72:6d:5f:7b: 77:90:22:2c:99:9e:32:00:45:67:ff:31:bd:cb:3b: 16:36:3b:42:a9:48:30:19:01:d9:63:87:fc:0a:f8: 25:87:de:3e:43:5b:ce:6a:5b:2a:4f:d9:bc:9d:ef: 08:48:c7:02:01:c8:4d:c2:d4:91:f0:93:a2:ed:64: 6e:92:dc:c2:51:39:c7:ab:13:c2:89:b4:a2:1d:8e: e3:d2:63:9c:57:12:4e:98:b0:51:7d:6c:35:8f:47: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AB:95:CA:64:B4:4C:75:5D:C3:6C:D0:60:96:A3:23:F7:02:97:3E X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c5:2b:98:71:14:fb:ee:b6:d3:b7:dd:31:31:df:db:96:c9: df:07:ae:67:e7:07:8f:a9:3c:0e:09:1a:24:60:a8:0b:0c:0b: 45:9e:3b:86:a6:ef:95:55:d3:3c:b1:86:f3:2c:4f:dd:42:fa: d1:16:80:de:1c:db:2e:8f:3a:5e:15:18:a6:78:1b:7f:b5:60: 63:2c:fe:3c:a7:31:44:ef:f4:c4:6d:ef:1b:9b:7e:e3:b7:f9: e8:c5:b5:d1:07:07:b4:88:ee:e8:49:9a:5c:cc:d7:6d:54:26: f0:4c:2a:08:db:f7:25:f7:7d:a4:38:95:da:6d:7d:c4:92:f8: c7:7e:ab:25:12:2d:4d:5b:bb:b9:9e:91:62:8c:42:23:9f:9c: 94:88:87:d0:cd:86:f6:c6:ad:24:89:bf:70:0b:5b:90:e5:3c: 7a:bd:6a:89:0b:c2:51:fb:d5:ae:b5:24:b6:82:a2:0f:f0:7f: 7c:fc:22:64:aa:28:bd:c6:75:18:9c:25:2d:af:66:e7:6b:31: ac:9a:ef:1d:db:90:8b:22:d0:a6:76:82:60:b5:f8:04:51:ca: 0e:85:ed:d9:8f:0d:5e:ac:89:f9:24:19:ea:ad:56:dc:66:dd: 4b:33:30:ed:bc:5b:11:19:f4:b7:a1:b6:82:85:35:3a:f3:96: 51:cb:c7:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYwOTIyMjAzMzA2WhcNMjYwOTI5MjAzMzA2WjAYMRYwFAYD VQQDEw02YWIyZTYwMi05ODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVY9ACGb9xQLVbSmvQZxmKqN1TSHmWykA7h+kykcwt5mRMuPtTOkp79JTBtP 20ZoY0CHYyWxD8+2rZoiz6MVRjnUJk6WCIkRpUyQebWNOG8i9gdF8Nn863P/gn+Y tEfpHpBSRmaA6PFMQguQHmKrXnNV44vyVs+pNtiPVh4pmyDs7EIY/EWZTdVY3Ty7 pjQKmOLrQFGIJLVCLcM0jq7IzXJtX3t3kCIsmZ4yAEVn/zG9yzsWNjtCqUgwGQHZ Y4f8Cvglh94+Q1vOalsqT9m8ne8ISMcCAchNwtSR8JOi7WRuktzCUTnHqxPCibSi HY7j0mOcVxJOmLBRfWw1j0fUXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6rlcpk tEx1XcNs0GCWoyP3Apc+MB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACcUrmHEU++6207fdMTHf25bJ3weuZ+cHj6k8DgkaJGCoCwwLRZ47hqbvlVXT PLGG8yxP3UL60RaA3hzbLo86XhUYpngbf7VgYyz+PKcxRO/0xG3vG5t+47f56MW1 0QcHtIju6EmaXMzXbVQm8EwqCNv3Jfd9pDiV2m19xJL4x36rJRItTVu7uZ6RYoxC I5+clIiH0M2G9satJIm/cAtbkOU8er1qiQvCUfvVrrUktoKiD/B/fPwiZKoovcZ1 GJwlLa9m52sxrJrvHduQiyLQpnaCYLX4BFHKDoXt2Y8NXqyJ+SQZ6q1W3GbdSzMw 7bxbERn0t6G2goU1OvOWUcvHnQ== -----END CERTIFICATE-----Generated at Wed Sep 23 18:04:44 2026 by rpki-client