$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft File: 4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft (raw, json) Hash identifier: ruXXxcjRKZlLwzvf1IcVVsYjD2vmfN7yadzYMozwg2U= Subject key identifier: 6E:47:95:F6:3A:BE:2E:53:7D:8A:EB:97:16:2C:DC:74:78:71:B8:A2 Authority key identifier: E2:45:53:20:A7:EE:5F:D0:8D:B2:EB:B4:5C:60:F8:87:1E:FF:69:6C Certificate issuer: /CN=A91FF8C9/serialNumber=E2455320A7EE5FD08DB2EBB45C60F8871EFF696C Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft Manifest number: 17 Signing time: Wed 23 Sep 2026 08:45:29 +0000 Manifest this update: Wed 23 Sep 2026 08:45:28 +0000 Manifest next update: Wed 30 Sep 2026 08:45:28 +0000 Files and hashes: 1: 4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl (hash: NSNHi1rynoC0kMiT89tP/bl6/BBcFuz/F/CpUlmEPCk=) 2: 406749E4977C11F188CAEE0F4A11F970.roa (hash: mUzwEBEIYs4Q+pXwSXu3nH8Y1qE0+nzYoQdjfbjh0SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF8C9, serialNumber=E2455320A7EE5FD08DB2EBB45C60F8871EFF696C Validity Not Before: Sep 23 08:45:28 2026 GMT Not After : Sep 30 08:45:28 2026 GMT Subject: CN=6ab391a8-75c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:a2:f8:e9:94:39:6a:71:28:4d:c4:43:42: 4a:2a:dc:53:88:05:13:6a:49:16:30:5f:d7:e7:e9: 3b:1d:57:ac:96:23:26:d9:ba:49:e5:27:37:b1:c4: 90:67:09:ee:f5:b7:04:57:21:9d:a5:06:5e:3e:1a: d6:17:63:57:9a:af:3a:25:2b:c8:5b:a4:b9:ba:f4: ab:91:2b:08:b9:4d:5d:a8:7f:d7:fa:6d:7e:a1:ce: 52:c7:b4:f1:c4:df:05:5f:b1:c6:8c:f9:af:0c:2a: a4:83:b9:6e:f4:e4:2a:51:0d:ec:f2:2e:5f:e9:1c: f4:b1:e9:ac:f4:5f:2b:db:df:e3:81:6f:7d:d5:dd: 4f:aa:80:ba:d9:db:14:2e:04:4e:fc:7d:c4:f9:7a: 05:a0:7f:97:ac:e2:07:7e:2b:c8:d9:5a:a9:1f:05: 4e:44:54:bb:60:66:71:ef:13:62:9b:4e:58:15:1f: 24:b0:90:f2:5a:64:56:68:10:27:4f:b0:4f:e9:1b: 8a:bf:17:33:cc:40:79:19:4c:22:00:69:c1:a9:ac: 96:eb:4e:ef:cf:36:17:02:fc:dc:dd:19:4e:5a:f5: 00:db:85:fe:72:88:83:ef:6b:a5:52:29:55:b0:7f: 59:8e:a0:fb:a3:dc:5c:16:ce:5c:a5:91:dd:06:f5: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:47:95:F6:3A:BE:2E:53:7D:8A:EB:97:16:2C:DC:74:78:71:B8:A2 X509v3 Authority Key Identifier: keyid:E2:45:53:20:A7:EE:5F:D0:8D:B2:EB:B4:5C:60:F8:87:1E:FF:69:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f1:80:dc:94:79:4a:d8:7d:3e:c0:ea:2e:72:4e:45:2c:f3: 4b:a8:b7:54:d6:16:2c:fe:1d:a7:66:62:1e:eb:78:25:8c:b9: 68:e3:c5:e5:42:32:1c:b6:cc:1e:13:88:82:02:95:86:58:34: fa:80:2e:57:02:5f:e2:43:3d:79:08:82:3b:73:9f:7c:c5:67: 88:50:2e:33:d9:10:9c:fa:94:a6:57:ae:1b:b8:16:3c:1a:bf: 2c:00:ad:06:80:6b:ba:4e:d1:54:2c:c7:7a:c9:7f:ac:21:14: 46:87:33:c8:8c:cc:be:61:60:b4:40:59:59:52:1b:3d:3e:ac: 30:2c:8f:92:2a:8d:fc:2a:f9:27:a2:c3:76:15:0b:55:cd:30: 86:52:f4:e5:51:b9:d6:e5:79:41:33:f8:22:4e:99:c0:17:2e: 7f:1f:ce:ed:9c:18:ef:cb:38:7e:76:a5:a4:18:e3:da:af:a8: d6:8b:f8:25:25:09:0e:41:c0:13:b2:ab:60:31:08:91:06:48: b9:75:95:f4:1a:f0:71:65:d3:47:8d:68:1c:d3:e3:99:16:0d: 4a:a8:ed:16:0b:db:c7:19:29:cb:85:0c:83:8b:24:17:67:a4: cc:76:57:ac:0d:a4:0a:d3:83:1b:fa:66:e1:f4:8a:4a:f6:1d: 61:59:12:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjhDOTExMC8GA1UEBRMoRTI0NTUzMjBBN0VFNUZEMDhEQjJFQkI0NUM2MEY4ODcx RUZGNjk2QzAeFw0yNjA5MjMwODQ1MjhaFw0yNjA5MzAwODQ1MjhaMBgxFjAUBgNV BAMTDTZhYjM5MWE4LTc1YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHd6L46ZQ5anEoTcRDQkoq3FOIBRNqSRYwX9fn6TsdV6yWIybZuknlJzexxJBn Ce71twRXIZ2lBl4+GtYXY1earzolK8hbpLm69KuRKwi5TV2of9f6bX6hzlLHtPHE 3wVfscaM+a8MKqSDuW705CpRDezyLl/pHPSx6az0Xyvb3+OBb33V3U+qgLrZ2xQu BE78fcT5egWgf5es4gd+K8jZWqkfBU5EVLtgZnHvE2KbTlgVHySwkPJaZFZoECdP sE/pG4q/FzPMQHkZTCIAacGprJbrTu/PNhcC/NzdGU5a9QDbhf5yiIPva6VSKVWw f1mOoPuj3FwWzlylkd0G9XLtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbkeV9jq+ LlN9iuuXFizcdHhxuKIwHwYDVR0jBBgwFoAU4kVTIKfuX9CNsuu0XGD4hx7/aWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOEM5LzY3ODZFNkZDOTc3 QjExRjFCNzUzOUUyRTQ5MTFGOTcwLzRrVlRJS2Z1WDlDTnN1dTBYR0Q0aHg3X2FX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNGtWVElLZnVYOUNOc3V1MFhHRDRoeDdfYVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG OEM5LzY3ODZFNkZDOTc3QjExRjFCNzUzOUUyRTQ5MTFGOTcwLzRrVlRJS2Z1WDlD TnN1dTBYR0Q0aHg3X2FXdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCc8YDclHlK2H0+wOouck5FLPNLqLdU1hYs/h2nZmIe63gljLlo48XlQjIctswe E4iCApWGWDT6gC5XAl/iQz15CII7c598xWeIUC4z2RCc+pSmV64buBY8Gr8sAK0G gGu6TtFULMd6yX+sIRRGhzPIjMy+YWC0QFlZUhs9PqwwLI+SKo38KvknosN2FQtV zTCGUvTlUbnW5XlBM/giTpnAFy5/H87tnBjvyzh+dqWkGOPar6jWi/glJQkOQcAT sqtgMQiRBki5dZX0GvBxZdNHjWgc0+OZFg1KqO0WC9vHGSnLhQyDiyQXZ6TMdles DaQK04Mb+mbh9IpK9h1hWRKR -----END CERTIFICATE-----Generated at Thu Sep 24 22:21:54 2026 by rpki-client