$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft File: 4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json) Hash identifier: SdvpSEU1/wy6CSx37tLCqU4D7XBMQTMCzZOPnAfvzRE= Subject key identifier: 12:3C:A0:B7:D8:3A:DB:48:07:BB:80:5C:C0:45:5B:E9:DF:12:8F:8E Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft Manifest number: 02C9 Signing time: Mon 21 Sep 2026 01:15:20 +0000 Manifest this update: Mon 21 Sep 2026 01:15:19 +0000 Manifest next update: Mon 28 Sep 2026 01:15:19 +0000 Files and hashes: 1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: YxnyI+0E6gz/iFeNgtoxagawKsidk5vxlTI/VW/ediQ=) 2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: LdRxke1Bck5JxIBRCGjM9TpaCqk+l96r/JCtzyDPs+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Validity Not Before: Sep 21 01:15:19 2026 GMT Not After : Sep 28 01:15:19 2026 GMT Subject: CN=6ab08528-c3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a0:3a:4c:c6:58:6e:eb:e3:0d:3f:1a:5d:dd: b4:bd:17:4e:96:c3:0e:40:d5:7f:a2:c1:a9:c9:98: 8e:d7:c0:6d:4a:03:ea:00:78:84:59:e6:a6:d8:36: 63:da:33:77:94:48:1d:e6:58:fc:8d:ae:1f:09:02: 8b:b4:20:b8:71:eb:41:2f:0a:31:1c:99:17:99:db: 01:0b:db:57:fe:09:0a:d6:90:18:f5:79:6d:78:2b: b4:a7:ba:58:c2:17:cd:60:2d:ad:64:e7:90:eb:71: 32:86:71:e9:e9:59:68:8f:bb:b6:65:c1:b8:24:63: 85:7e:da:da:7a:49:78:34:61:6d:3c:d3:40:83:f9: 30:00:3d:8a:d6:08:07:3c:80:60:ab:29:aa:f1:e7: 78:a2:19:1c:e1:ab:08:d5:03:98:f5:78:70:32:bf: 6a:af:cb:ff:90:b1:c3:3f:a1:06:e1:9e:05:ca:9d: 81:bd:e6:32:4d:2a:55:50:32:ce:a1:e2:2a:e7:c3: 81:90:a2:9b:7d:6c:f3:94:57:23:a9:51:2a:f9:5a: 66:1b:4d:a0:06:94:f1:0e:f2:f9:78:4a:b9:16:81: b4:16:6e:8b:1e:83:1c:df:e5:88:d6:e8:d9:cc:9f: 58:47:f2:c7:53:4f:9f:3a:99:07:0c:5f:07:06:24: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3C:A0:B7:D8:3A:DB:48:07:BB:80:5C:C0:45:5B:E9:DF:12:8F:8E X509v3 Authority Key Identifier: keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bc:b3:97:88:7f:08:0b:fd:4d:3c:94:7d:3a:d4:61:5b:4e: f9:97:90:6d:45:4a:c3:a5:8b:49:40:11:6c:0f:c5:06:b4:80: 7f:b8:5a:a7:78:1c:78:b8:f4:bb:81:0e:7d:d7:77:f5:6b:de: 2e:e6:4c:bf:c1:35:dc:8c:1f:2b:b1:13:11:7c:27:50:e9:8c: f1:62:5c:ea:c9:9c:0a:fa:e0:0d:33:78:4d:91:eb:57:9a:05: 47:3c:dd:78:da:83:9a:bf:9d:d8:85:35:c2:c0:e6:ee:ea:ff: e5:32:63:3d:76:24:fc:87:54:ef:5b:2a:d0:9a:ce:af:12:34: 09:15:77:22:7c:74:9b:d3:5a:b8:f0:e5:51:1a:f5:02:fd:36: ab:72:f3:ce:98:93:d4:b3:3c:18:21:9b:36:aa:7f:f3:95:bf: dc:f0:b5:af:3c:94:83:1d:d2:6c:1d:d9:39:71:d3:f9:2d:cb: 80:ec:de:bd:68:c4:73:10:b0:3d:b3:c6:ad:1d:a0:b3:80:cc: de:0f:b5:59:3b:2a:bc:07:85:07:1f:ea:da:d1:c7:c0:21:01: 7d:c9:5f:df:df:8b:e3:3d:b8:e7:e6:e7:4e:14:64:1e:95:54: 72:09:30:ec:c2:10:c4:49:17:28:43:2b:ea:3f:98:c9:5f:75: 58:96:d1:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1Q0IxMTAvBgNVBAUTKEUxNzMzQjk3MEZEREY3NjdGRjE5NTQyODQzN0UxMjQy QTM3NjkyNzcwHhcNMjYwOTIxMDExNTE5WhcNMjYwOTI4MDExNTE5WjAYMRYwFAYD VQQDEw02YWIwODUyOC1jM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qA6TMZYbuvjDT8aXd20vRdOlsMOQNV/osGpyZiO18BtSgPqAHiEWeam2DZj 2jN3lEgd5lj8ja4fCQKLtCC4cetBLwoxHJkXmdsBC9tX/gkK1pAY9XlteCu0p7pY whfNYC2tZOeQ63EyhnHp6Vloj7u2ZcG4JGOFftraekl4NGFtPNNAg/kwAD2K1ggH PIBgqymq8ed4ohkc4asI1QOY9XhwMr9qr8v/kLHDP6EG4Z4Fyp2BveYyTSpVUDLO oeIq58OBkKKbfWzzlFcjqVEq+VpmG02gBpTxDvL5eEq5FoG0Fm6LHoMc3+WI1ujZ zJ9YR/LHU0+fOpkHDF8HBiQokwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBI8oLfY OttIB7uAXMBFW+nfEo+OMB8GA1UdIwQYMBaAFOFzO5cP3fdn/xlUKEN+EkKjdpJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVDQi81Mjg4RENFMDcw NDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDkyZl9HVlFvUTM0U1FxTjJr bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYTTdsd19kOTJmX0dWUW9RMzRTUXFOMmtuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTVDQi81Mjg4RENFMDcwNDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDky Zl9HVlFvUTM0U1FxTjJrbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATLyzl4h/CAv9TTyUfTrUYVtO+ZeQbUVKw6WLSUARbA/FBrSAf7hap3gceLj0 u4EOfdd39WveLuZMv8E13IwfK7ETEXwnUOmM8WJc6smcCvrgDTN4TZHrV5oFRzzd eNqDmr+d2IU1wsDm7ur/5TJjPXYk/IdU71sq0JrOrxI0CRV3Inx0m9NauPDlURr1 Av02q3LzzpiT1LM8GCGbNqp/85W/3PC1rzyUgx3SbB3ZOXHT+S3LgOzevWjEcxCw PbPGrR2gs4DM3g+1WTsqvAeFBx/q2tHHwCEBfclf39+L4z245+bnThRkHpVUcgkw 7MIQxEkXKEMr6j+YyV91WJbRVg== -----END CERTIFICATE-----Generated at Mon Sep 21 18:20:31 2026 by rpki-client