$ rpki-client -vvvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json) Hash identifier: vBfZaD8IcIbapGOszU5+G5OZiglKeT7kjhcHkxSPXss= Subject key identifier: 15:A8:F8:0A:10:FA:90:C2:BF:19:C1:67:7B:E7:27:35:B0:D3:F8:23 Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft Manifest number: 0BAD Signing time: Sun 20 Sep 2026 19:03:07 +0000 Manifest this update: Sun 20 Sep 2026 19:03:07 +0000 Manifest next update: Sun 27 Sep 2026 19:03:07 +0000 Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: lI8XzPYTJvOTL5xujox7U86PkeDRY+ba8BLu3leYLoM=) 2: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: 4Y3b7k2nPTigUaGbPaUVrcioubstHM/tbJbvPVaNua0=) 3: 76D38708D64611EE98C44371C4F9AE02.roa (hash: b/lrVR4/X7lgZk63ZwV38PNtuW7iDkYwDp3wzCiuCI4=) 4: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: xloPVlSDrLjQBNDWntHn7nwEdIAtctEKPygfcXqspac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Validity Not Before: Sep 20 19:03:07 2026 GMT Not After : Sep 27 19:03:07 2026 GMT Subject: CN=6ab02deb-4005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:2e:e2:18:a7:9e:00:2d:23:5c:20:62:5e: ed:3f:6e:b4:a2:c0:c7:f0:0a:88:8e:64:da:10:01: 2d:70:49:c4:e6:16:ab:12:de:74:f6:9b:9c:87:75: 4a:48:55:09:82:d1:69:1c:ac:59:13:9a:61:76:eb: 06:3d:05:b1:8f:cd:ef:3d:db:6a:e3:f8:72:85:3c: c4:2a:ba:5e:6b:13:ba:a7:af:fc:b0:f5:2f:99:05: ee:56:9c:67:79:14:c4:01:7e:80:11:2c:35:96:d4: 40:b3:1a:80:54:40:1b:c8:79:c4:c5:6a:e9:b2:2b: 1e:1b:c9:b2:8b:58:2f:3a:bb:05:1d:e4:85:ec:38: 67:9e:f0:22:13:7d:7b:d6:2b:58:c6:5e:aa:7e:ff: 4f:b9:87:cd:86:d3:e1:a8:9a:78:c7:2a:6b:fd:12: 6c:16:61:b3:55:ab:c3:cd:9e:6f:a9:26:ec:b5:1f: 31:90:5f:30:49:4e:33:5e:8e:e8:ab:5b:17:8d:70: dc:47:de:12:5a:6f:af:c2:4f:3c:62:b4:a5:f5:6f: 88:5c:28:f0:6c:f6:90:16:62:08:a9:29:ee:02:e6: de:62:66:6d:0b:47:b0:56:64:3b:e1:11:4f:45:67: f2:bf:d3:c1:e8:ee:fe:21:05:42:47:73:4b:f7:9d: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A8:F8:0A:10:FA:90:C2:BF:19:C1:67:7B:E7:27:35:B0:D3:F8:23 X509v3 Authority Key Identifier: keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8b:d3:84:35:fd:b2:99:ad:c2:4c:1d:7e:ae:1f:74:6b:6e: 40:5c:e1:3b:ab:34:3a:5f:a1:c7:96:60:e8:11:af:55:02:a5: b3:81:c6:ff:1c:cc:7e:20:21:b3:7a:4b:34:55:d6:90:97:38: d7:2d:74:e6:32:e9:eb:ce:21:96:d6:66:ac:4a:fe:cd:21:3e: 04:93:16:73:7c:4b:12:da:c3:af:bf:4b:81:31:f6:4c:6c:36: a3:7a:fd:8f:ad:49:ed:77:7e:76:bd:00:30:1d:98:9a:77:91: e3:de:73:34:2e:3e:5a:5e:b9:0c:05:4c:53:6b:2d:8d:c4:74: c2:35:89:94:3b:cc:03:34:bb:db:0d:a7:a4:48:97:fa:01:58: bb:c3:7f:f0:12:98:88:a6:8e:3b:04:5b:1e:80:88:d0:2f:8f: e7:fe:81:40:58:2d:ff:84:b7:72:0f:27:f3:ad:7d:d3:2c:d0: f2:92:cb:b1:b2:ec:ca:0a:1a:b7:00:9e:c7:dd:35:9e:3a:58: e9:5c:a1:58:d6:a9:ae:cc:01:e4:2e:ed:50:fd:4b:7f:84:89: dd:44:b1:70:f3:9d:f4:c5:ed:46:54:db:10:d0:d7:dc:22:96: f1:e6:2d:1b:15:03:2f:79:77:ba:ef:53:2e:6f:d2:9a:ed:bd: cf:5b:05:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz OTBGQjEzMzEwHhcNMjYwOTIwMTkwMzA3WhcNMjYwOTI3MTkwMzA3WjAYMRYwFAYD VQQDEw02YWIwMmRlYi00MDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhQu4hinngAtI1wgYl7tP260osDH8AqIjmTaEAEtcEnE5harEt509puch3VK SFUJgtFpHKxZE5phdusGPQWxj83vPdtq4/hyhTzEKrpeaxO6p6/8sPUvmQXuVpxn eRTEAX6AESw1ltRAsxqAVEAbyHnExWrpsiseG8myi1gvOrsFHeSF7DhnnvAiE317 1itYxl6qfv9PuYfNhtPhqJp4xypr/RJsFmGzVavDzZ5vqSbstR8xkF8wSU4zXo7o q1sXjXDcR94SWm+vwk88YrSl9W+IXCjwbPaQFmIIqSnuAubeYmZtC0ewVmQ74RFP RWfyv9PB6O7+IQVCR3NL953BhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWo+AoQ +pDCvxnBZ3vnJzWw0/gjMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2 QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw X1ZDRnZrUm1CU0U1RDdFekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIYvThDX9spmtwkwdfq4fdGtuQFzhO6s0Ol+hx5Zg6BGvVQKls4HG/xzMfiAh s3pLNFXWkJc41y105jLp684hltZmrEr+zSE+BJMWc3xLEtrDr79LgTH2TGw2o3r9 j61J7Xd+dr0AMB2YmneR495zNC4+Wl65DAVMU2stjcR0wjWJlDvMAzS72w2npEiX +gFYu8N/8BKYiKaOOwRbHoCI0C+P5/6BQFgt/4S3cg8n86190yzQ8pLLsbLsygoa twCex901njpY6VyhWNaprswB5C7tUP1Lf4SJ3USxcPOd9MXtRlTbENDX3CKW8eYt GxUDL3l3uu9TLm/Smu29z1sFDw== -----END CERTIFICATE-----Generated at Tue Sep 22 16:42:49 2026 by rpki-client