$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json) Hash identifier: 5Ug3rBn02vcnCgAjFZagtIlFOB5yh3QxkWZKgl4utHE= Subject key identifier: 3F:DF:C7:A5:A4:BB:EB:13:AE:2B:D4:33:F5:52:61:BE:DB:90:C1:33 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 22D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft Manifest number: 22A7 Signing time: Tue 22 Sep 2026 15:47:59 +0000 Manifest this update: Tue 22 Sep 2026 15:47:58 +0000 Manifest next update: Tue 29 Sep 2026 15:47:58 +0000 Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: ys6RrnAn2nT3C39HD0JiD2hZ42rLpcXK1Ozlvf9SOEQ=) 2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=) 3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8912 (0x22d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Sep 22 15:47:58 2026 GMT Not After : Sep 29 15:47:58 2026 GMT Subject: CN=6ab2a32f-6ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:6d:ce:3e:88:61:b3:e5:8e:0a:65:6f:cf: 9c:fc:51:5d:9c:9f:06:95:3e:18:c3:56:92:8b:f8: f5:23:34:39:b1:76:d1:8d:f9:d4:25:8a:c7:d0:7d: 79:d5:8a:6b:47:ec:af:8d:d6:47:93:a8:c1:99:89: 58:59:7a:94:5f:5e:44:1b:16:70:0e:71:6e:6e:71: d3:53:85:40:88:c1:32:43:13:c1:54:42:2d:7f:6b: 1c:2a:11:42:82:71:7e:d3:6f:8a:ac:76:6c:5a:1c: ea:c1:de:a0:a3:8d:88:75:b2:9f:e4:af:86:1b:f9: c6:c5:32:70:92:6f:6b:be:e7:07:5c:fd:29:cb:da: 81:3b:86:5c:98:6b:46:14:35:13:64:2b:52:48:10: 73:9c:e4:d8:2f:45:0a:b5:8b:35:b2:d0:2f:c1:02: 74:bf:e8:b3:c9:0b:25:ec:ba:c3:2b:d0:2f:fc:89: 4c:64:ac:08:83:3f:a6:fe:40:7c:eb:f8:91:e6:ea: 70:17:96:8a:47:b2:63:62:06:61:96:7a:2b:42:d2: 29:3d:d3:3f:6c:b7:5c:1d:e9:64:77:99:4a:5c:85: e9:c3:8c:d0:fe:36:64:ba:79:08:04:ff:bc:fa:c1: 5f:45:dc:9e:17:0c:5f:d7:27:86:96:d4:64:21:70: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DF:C7:A5:A4:BB:EB:13:AE:2B:D4:33:F5:52:61:BE:DB:90:C1:33 X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:89:47:1f:5e:66:56:8c:00:21:f4:09:9d:1b:1a:80:ed:a8: 1f:fe:56:a6:1a:53:90:9c:b2:1b:48:4f:ab:71:ec:9a:9e:cc: e8:81:48:66:1a:cf:b1:13:a5:b2:8a:da:2a:21:6c:cb:04:6a: c8:a7:6b:7a:dc:67:01:28:fd:4b:14:c8:c1:9d:b8:36:2e:ca: 62:5d:e7:ca:c5:12:61:7e:f1:b6:a8:f3:39:3f:4d:9a:a9:f9: 35:4d:51:57:10:55:da:a5:86:ad:30:f1:38:fe:9f:1e:44:8c: 65:80:00:50:27:60:3a:12:e1:8d:59:8b:9e:76:53:77:81:ae: fb:0c:7e:fb:83:36:90:9d:b2:13:f1:f4:fa:52:c7:fb:45:0a: 9c:a5:1d:2a:1b:0c:94:6b:e2:b3:d7:03:86:d4:8c:e6:4c:ae: 8b:d4:cb:30:dc:27:3c:f1:ae:49:65:77:55:04:2e:bb:8f:3e: 7a:80:14:54:36:3e:c9:e8:af:5f:78:2a:3f:2f:b3:2d:27:1a: db:fb:30:99:69:33:d2:8d:28:61:e7:88:b6:0a:32:c5:b9:ac: 00:85:7a:82:19:f0:3c:19:c0:4f:6d:d8:c2:2b:77:99:8e:1e: 7b:f6:af:73:4b:6c:90:8e:80:13:76:fe:1d:f9:e2:0b:c0:01: 4a:ad:6e:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICItAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjYwOTIyMTU0NzU4WhcNMjYwOTI5MTU0NzU4WjAYMRYwFAYD VQQDEw02YWIyYTMyZi02ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhBtzj6IYbPljgplb8+c/FFdnJ8GlT4Yw1aSi/j1IzQ5sXbRjfnUJYrH0H15 1YprR+yvjdZHk6jBmYlYWXqUX15EGxZwDnFubnHTU4VAiMEyQxPBVEItf2scKhFC gnF+02+KrHZsWhzqwd6go42IdbKf5K+GG/nGxTJwkm9rvucHXP0py9qBO4ZcmGtG FDUTZCtSSBBznOTYL0UKtYs1stAvwQJ0v+izyQsl7LrDK9Av/IlMZKwIgz+m/kB8 6/iR5upwF5aKR7JjYgZhlnorQtIpPdM/bLdcHelkd5lKXIXpw4zQ/jZkunkIBP+8 +sFfRdyeFwxf1yeGltRkIXBE4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/fx6Wk u+sTrivUM/VSYb7bkMEzMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkYyQi85MEZBREVFQ0Q1Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hD YWRadzJsZFMzc3lHZ2pUeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIYlHH15mVowAIfQJnRsagO2oH/5WphpTkJyyG0hPq3Hsmp7M6IFIZhrPsROl soraKiFsywRqyKdretxnASj9SxTIwZ24Ni7KYl3nysUSYX7xtqjzOT9Nmqn5NU1R VxBV2qWGrTDxOP6fHkSMZYAAUCdgOhLhjVmLnnZTd4Gu+wx++4M2kJ2yE/H0+lLH +0UKnKUdKhsMlGvis9cDhtSM5kyui9TLMNwnPPGuSWV3VQQuu48+eoAUVDY+yeiv X3gqPy+zLSca2/swmWkz0o0oYeeItgoyxbmsAIV6ghnwPBnAT23Ywit3mY4ee/av c0tskI6AE3b+HfniC8ABSq1uUQ== -----END CERTIFICATE-----Generated at Wed Sep 23 04:33:11 2026 by rpki-client