$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: DOXnPViCz24VV+ShqrV2hM04SgXeLDDwj+xV/uP69M8= Subject key identifier: 27:BD:1D:6E:9A:35:37:CF:23:92:B3:32:E9:B3:7B:41:6A:9A:C6:87 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 98 Signing time: Sun 27 Sep 2026 07:59:08 +0000 Manifest this update: Sun 27 Sep 2026 07:59:08 +0000 Manifest next update: Sun 04 Oct 2026 07:59:08 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: MGlu04RDyFJ5MApWnYQBWprfGnf1JwUhmLn9qTnl84E=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=) 3: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: vhaf/68N75siwelbtPS2Tu3DEgGqynrrUITnReXj5p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 07:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Sep 27 07:59:08 2026 GMT Not After : Oct 4 07:59:08 2026 GMT Subject: CN=6ab8cccc-d2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:a4:a4:03:06:91:e5:43:0a:03:a0:55:e2: 14:88:d8:01:7a:ae:8a:12:40:69:cc:7c:91:cf:6d: 1f:af:4d:cd:c0:65:7f:f3:77:7e:a0:a2:a3:af:69: 34:d3:60:90:29:fa:62:d5:20:9c:b3:11:c4:94:81: 2d:93:dd:b4:c8:80:39:5b:90:7d:29:03:ae:f2:a9: 41:7c:ad:cc:35:64:97:10:67:bd:27:83:bb:93:a9: 8d:f1:47:7d:6d:c2:40:26:6f:da:da:6e:d3:44:ae: 83:11:8f:80:0f:3f:15:5f:6f:d4:0e:dd:a9:d8:0b: 3b:b8:a9:1e:a0:0a:1e:5e:d7:eb:68:40:a9:c1:57: bf:2b:c4:d1:f0:ce:76:d9:2b:99:d5:d0:50:e5:31: 89:f8:ed:f1:85:29:2f:82:51:b7:03:02:0b:d7:59: 78:b2:18:44:e6:69:cf:9d:37:cf:2f:3d:fa:e7:88: df:0b:35:29:f3:4e:7d:69:e6:24:33:f6:92:e6:c9: c5:38:1e:08:f6:90:62:21:36:7a:32:83:b5:cb:bc: 35:42:a4:91:ae:cd:4f:22:37:c2:d0:2c:f5:15:d9: 8f:98:e7:5b:14:e2:ff:80:a9:89:da:78:31:7d:e1: 42:a4:40:ee:eb:9e:fa:12:d2:67:6f:36:cb:2f:2a: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BD:1D:6E:9A:35:37:CF:23:92:B3:32:E9:B3:7B:41:6A:9A:C6:87 X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c2:27:14:b9:de:2c:79:5a:34:b2:41:68:4c:80:54:0a:c1: 77:95:bf:cb:d0:d5:a9:c1:19:af:46:1d:2f:99:dc:52:3e:58: 56:0e:d4:b9:b5:aa:bb:53:f5:1b:f6:b7:13:aa:fa:67:28:2f: f5:65:64:ce:15:e6:85:93:a1:2d:7c:42:c3:61:84:7a:31:8a: 31:10:5a:7d:24:2a:a3:b2:9a:e9:d0:f7:2e:b7:e2:e1:6e:e6: 70:4a:ac:26:a6:d7:99:63:aa:60:58:c7:49:63:6b:82:67:e6: c2:7a:8f:97:1b:f3:52:6b:cc:c7:4b:2c:46:28:61:7b:a0:b3: ae:f0:fb:e5:df:f7:17:79:97:49:db:5d:96:dd:fd:9a:bd:11: 6c:c8:0c:75:fc:e6:1b:17:45:68:25:7d:46:dd:2a:4e:bd:36: f7:d1:9a:de:3b:05:33:2a:dc:38:8d:43:7a:f5:d3:0e:18:23: d1:2c:67:de:7f:2d:37:df:3c:fe:01:a2:f0:48:3b:e4:93:d0: d3:f7:97:b9:0b:6d:9e:6c:4a:71:de:31:92:18:f6:01:82:7b: ef:a8:7f:80:53:78:82:8e:c8:e3:f9:1c:21:16:4b:f4:a2:f5: fc:6f:22:e9:48:92:47:cc:17:3a:77:4f:c4:48:c1:ab:ff:67: 22:8d:1e:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVERTcxMTAvBgNVBAUTKEUxQzU5RkE1QTZCQzg3NkY3Q0U0QTQ2Q0FBQUU2MDYw NEYwNTE4NjYwHhcNMjYwOTI3MDc1OTA4WhcNMjYxMDA0MDc1OTA4WjAYMRYwFAYD VQQDEw02YWI4Y2NjYy1kMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y+kpAMGkeVDCgOgVeIUiNgBeq6KEkBpzHyRz20fr03NwGV/83d+oKKjr2k0 02CQKfpi1SCcsxHElIEtk920yIA5W5B9KQOu8qlBfK3MNWSXEGe9J4O7k6mN8Ud9 bcJAJm/a2m7TRK6DEY+ADz8VX2/UDt2p2As7uKkeoAoeXtfraECpwVe/K8TR8M52 2SuZ1dBQ5TGJ+O3xhSkvglG3AwIL11l4shhE5mnPnTfPLz3654jfCzUp8059aeYk M/aS5snFOB4I9pBiITZ6MoO1y7w1QqSRrs1PIjfC0Cz1FdmPmOdbFOL/gKmJ2ngx feFCpEDu6576EtJnbzbLLyreUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCe9HW6a NTfPI5KzMumze0FqmsaHMB8GA1UdIwQYMBaAFOHFn6WmvIdvfOSkbKquYGBPBRhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRURFNy9FN0ZEMzA1OEQ5 OUQxMUYwQkJFNzgzOTk2NkQzNjQxRC80Y1dmcGFhOGgyOTg1S1JzcXE1Z1lFOEZH R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RURFNy9FN0ZEMzA1OEQ5OUQxMUYwQkJFNzgzOTk2NkQzNjQxRC80Y1dmcGFhOGgy OTg1S1JzcXE1Z1lFOEZHR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU8InFLneLHlaNLJBaEyAVArBd5W/y9DVqcEZr0YdL5ncUj5YVg7UubWqu1P1 G/a3E6r6Zygv9WVkzhXmhZOhLXxCw2GEejGKMRBafSQqo7Ka6dD3Lrfi4W7mcEqs JqbXmWOqYFjHSWNrgmfmwnqPlxvzUmvMx0ssRihhe6CzrvD75d/3F3mXSdtdlt39 mr0RbMgMdfzmGxdFaCV9Rt0qTr0299Ga3jsFMyrcOI1DevXTDhgj0Sxn3n8tN988 /gGi8Eg75JPQ0/eXuQttnmxKcd4xkhj2AYJ776h/gFN4go7I4/kcIRZL9KL1/G8i 6UiSR8wXOndPxEjBq/9nIo0eFw== -----END CERTIFICATE-----Generated at Sun Sep 27 11:58:17 2026 by rpki-client