$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft File: RpDBBq64PHTXvfOk55k8CYErrPw.mft (raw, json) Hash identifier: I9IMQ7CMvK1HAXo03gTJOe0qvPaLp1k9B7utesL0ASA= Subject key identifier: 1B:B1:F3:C5:A1:95:48:EF:3F:1E:0D:FB:6B:FB:AF:F7:50:F0:E0:0E Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft Manifest number: 4A Signing time: Mon 21 Sep 2026 08:23:41 +0000 Manifest this update: Mon 21 Sep 2026 08:23:40 +0000 Manifest next update: Mon 28 Sep 2026 08:23:40 +0000 Files and hashes: 1: RpDBBq64PHTXvfOk55k8CYErrPw.crl (hash: mrunKnMlMrIsgKAaAJ1SIXlWglAWLhUozXeSj6IvjEo=) 2: A66886B4491F11F193C776FB9E833773.roa (hash: xXcNcDHlNzFBW5kniWXaJCDFIU93zgQzDwb/xuMFxAc=) 3: A6F2C5C2491F11F193C776FB9E833773.roa (hash: TIPSpd8GDTa/HiS4PdTYKDX+P5DkBR89f8e9l36/XBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Validity Not Before: Sep 21 08:23:40 2026 GMT Not After : Sep 28 08:23:40 2026 GMT Subject: CN=6ab0e98d-a516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:c4:7e:c9:9e:8c:cc:2a:71:53:80:a8:2e: 4e:34:16:0c:8d:58:10:ca:d8:5e:75:9a:ef:73:61: dc:2d:18:f8:61:b4:b5:22:8a:97:af:ad:ea:3e:a9: 20:1f:c1:cb:38:04:6a:84:f8:6a:cc:45:6f:44:83: f7:be:73:26:43:ec:90:9a:f4:0f:eb:67:50:89:79: 3e:8a:70:d0:55:32:e2:c3:26:9c:13:ef:af:9f:9a: b8:5d:38:71:5c:41:70:7c:32:60:3e:a6:a4:a3:ee: bf:88:2f:9c:30:ed:70:2b:ac:8c:84:b1:3e:f3:2f: 8b:69:43:3b:f2:65:3f:f3:f0:80:15:19:17:3d:14: 12:ea:d8:1d:3e:cb:d1:c5:11:6d:0e:c5:74:48:c4: 3c:43:3a:26:da:fe:6a:97:3a:3b:7f:4b:71:f3:92: aa:bf:25:20:76:5e:96:cd:3b:b8:c7:26:a0:74:bf: 07:e1:a0:16:19:fc:7c:9f:15:94:99:17:19:7c:74: 8d:75:8f:a2:80:df:b1:64:f5:cf:48:f0:be:9f:10: 88:a5:70:20:dc:88:64:4b:e0:af:8f:25:91:46:61: d9:a9:d7:f0:62:9d:9f:7d:3a:30:eb:d2:bf:24:cd: 0c:36:20:26:44:41:41:eb:62:99:f4:6a:84:c4:e0: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B1:F3:C5:A1:95:48:EF:3F:1E:0D:FB:6B:FB:AF:F7:50:F0:E0:0E X509v3 Authority Key Identifier: keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:96:dc:9b:b8:56:81:e4:32:c4:08:48:90:f2:7d:c7:7e:cc: 72:b2:b0:bf:f8:3d:f4:e6:23:f6:a6:83:97:fa:f0:31:f6:8d: 49:44:55:3f:ed:94:1d:34:98:82:52:99:27:84:68:55:8e:86: 24:f3:95:92:ed:16:d8:f7:60:12:3d:a8:0b:9b:60:fc:3a:4e: 2a:aa:d5:a7:b8:9a:81:12:fe:ac:e0:53:28:a0:38:f0:c6:ab: 4d:ce:0c:68:93:55:fc:40:75:f5:bd:a6:b4:ae:97:f8:bc:18: a0:0b:96:a8:cc:46:96:38:b4:61:84:07:ff:ce:76:81:e8:ee: c7:95:be:59:68:57:0f:46:7c:b9:5d:94:5a:b7:a8:8a:b1:14: c4:e4:1e:e9:c3:35:ef:4b:2d:96:7a:5f:2a:65:08:91:25:8f: 04:38:4a:3d:31:2e:e6:aa:e2:af:99:46:f7:e9:a3:c5:48:ef: d5:6e:c2:05:a1:3a:75:8c:e4:84:14:a4:c4:c0:c6:f3:c7:a6: 64:f3:e0:9c:48:d4:de:cb:59:f7:23:04:b5:d7:59:65:d3:65: 94:57:55:f9:5f:f0:cb:b1:5a:d5:1e:e0:8b:91:e8:2c:9b:2d: 6e:94:ec:f2:b9:a4:f3:be:d9:97:d7:05:ac:3a:0f:9f:bc:c2: d9:d2:83:63 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4 MTJCQUNGQzAeFw0yNjA5MjEwODIzNDBaFw0yNjA5MjgwODIzNDBaMBgxFjAUBgNV BAMTDTZhYjBlOThkLWE1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiW8R+yZ6MzCpxU4CoLk40FgyNWBDK2F51mu9zYdwtGPhhtLUiipevreo+qSAf wcs4BGqE+GrMRW9Eg/e+cyZD7JCa9A/rZ1CJeT6KcNBVMuLDJpwT76+fmrhdOHFc QXB8MmA+pqSj7r+IL5ww7XArrIyEsT7zL4tpQzvyZT/z8IAVGRc9FBLq2B0+y9HF EW0OxXRIxDxDOiba/mqXOjt/S3Hzkqq/JSB2XpbNO7jHJqB0vwfhoBYZ/HyfFZSZ Fxl8dI11j6KA37Fk9c9I8L6fEIilcCDciGRL4K+PJZFGYdmp1/BinZ99OjDr0r8k zQw2ICZEQUHrYpn0aoTE4EaNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG7HzxaGV SO8/Hg37a/uv91Dw4A4wHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE RTA2LzY2OURCNTcyNDkxRjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhU WHZmT2s1NWs4Q1lFcnJQdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDJltybuFaB5DLECEiQ8n3HfsxysrC/+D305iP2poOX+vAx9o1JRFU/7ZQdNJiC UpknhGhVjoYk85WS7RbY92ASPagLm2D8Ok4qqtWnuJqBEv6s4FMooDjwxqtNzgxo k1X8QHX1vaa0rpf4vBigC5aozEaWOLRhhAf/znaB6O7Hlb5ZaFcPRny5XZRat6iK sRTE5B7pwzXvSy2Wel8qZQiRJY8EOEo9MS7mquKvmUb36aPFSO/VbsIFoTp1jOSE FKTEwMbzx6Zk8+CcSNTey1n3IwS111ll02WUV1X5X/DLsVrVHuCLkegsmy1ulOzy uaTzvtmX1wWsOg+fvMLZ0oNj -----END CERTIFICATE-----Generated at Wed Sep 23 05:23:32 2026 by rpki-client