$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json) Hash identifier: 1NW7teYvkluZaUJgHZ/VWz6NCtZWApObJaVHPY5TZqE= Subject key identifier: D9:B8:E1:B2:CE:AA:77:72:C8:BE:02:D3:65:9C:5E:CE:3F:E2:BD:1A Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft Manifest number: C6 Signing time: Sun 11 Oct 2026 07:32:44 +0000 Manifest this update: Sun 11 Oct 2026 07:32:44 +0000 Manifest next update: Sun 18 Oct 2026 07:32:44 +0000 Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: mUAHfiyvPO+PBVNEEXiMBIhKfslO+j/uQhXi8e4NgB8=) 2: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: yPnbO5JoFroPGcO/FNlQHH93ap4ee9CNWxH6ZNSq9ts=) 3: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: 1OXipBNzxtYp5UB0W5xX43Nvc/1EDv2/MhW+bGOdQcs=) 4: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: raMlWqDhjQC1kyKcLB1NtSmvdSNAXI5T6+IpnIwsYFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 07:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Oct 11 07:32:44 2026 GMT Not After : Oct 18 07:32:44 2026 GMT Subject: CN=6acb3b9c-3083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:6a:f9:21:7c:56:a5:d5:6e:ec:12:0b:7c: 38:ba:c3:64:c7:d5:58:43:85:35:2b:23:18:47:ba: 3d:39:aa:6b:40:5e:1d:b6:86:17:b3:05:29:cf:36: fa:e6:16:3c:5f:de:03:f5:c0:70:b2:6e:ac:7d:90: b4:09:4e:30:d7:a5:ad:fe:53:8f:97:6c:ef:65:e7: fc:a0:23:0f:a8:99:7c:3c:a4:b9:23:7e:e0:0f:94: 67:d8:d6:2f:87:92:ae:91:a9:ff:1b:4a:54:e0:f2: ac:4e:97:d3:e6:e7:94:ab:be:7e:f8:4e:6a:33:e6: 10:1a:c4:4f:3d:44:79:de:30:c6:f4:75:82:8d:a1: 89:17:70:f4:aa:34:3d:67:8f:61:3d:e9:e4:2b:e6: 14:7b:68:36:0f:7b:f0:b4:a5:0f:4b:f2:44:2f:f8: c4:f6:68:a9:ba:7f:a1:a5:3f:b9:26:c3:26:8d:a3: 34:61:08:26:34:bc:d3:0f:6b:71:ce:aa:b5:df:74: d6:c2:d8:de:09:3c:ff:ab:05:33:9c:6a:cd:2e:4a: 11:5c:3d:30:cc:4b:da:27:a6:86:d5:6d:0f:8e:0c: 18:78:b1:a2:9f:61:6d:e8:89:12:5f:92:f9:99:1d: db:a9:47:74:f3:26:17:24:63:bf:84:11:67:ef:22: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B8:E1:B2:CE:AA:77:72:C8:BE:02:D3:65:9C:5E:CE:3F:E2:BD:1A X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e8:07:e3:25:bf:50:c0:2d:1a:c6:98:32:15:7f:fa:83:49: d5:f4:77:67:8c:e9:8a:fb:3a:a1:b4:96:9d:4a:e6:6d:01:71: f3:45:be:55:fe:75:0c:ff:13:82:12:08:46:b7:a6:bd:00:51: e2:fc:d5:ca:60:5e:a9:94:f3:d7:2a:a4:bb:0d:4d:d4:21:03: 30:5f:1c:65:13:91:af:47:a3:14:7e:39:c2:66:5a:5a:dc:8f: 9b:45:93:06:b7:2c:19:7f:2e:a6:4d:1a:0c:8a:e9:41:d1:e3: 7a:f9:1f:92:30:10:7a:e5:9f:0c:33:b3:ab:8d:27:b1:0b:93: 98:e9:50:b5:e5:69:83:4b:24:16:c6:a5:ea:af:43:9c:aa:49: d1:38:02:33:de:b6:9c:32:05:7c:1e:a8:1e:69:06:14:67:b4: 29:cd:fd:1d:8e:da:be:71:0e:5e:b7:a6:f9:3a:55:7f:7c:5e: 44:9c:9d:48:7e:8c:c6:c2:24:2a:11:7a:a9:f5:52:58:5f:60: 80:1a:38:8a:aa:43:db:0d:8e:10:cd:e3:38:80:c5:3e:dd:49: b2:9f:5e:4a:cc:eb:6e:33:12:af:aa:ea:41:92:1c:ed:6f:01: e6:d6:ea:8f:79:55:2a:75:5c:56:7f:49:f5:fa:bd:20:96:d8: 7d:21:25:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxQ0ExMTAvBgNVBAUTKEFGOENEQ0U2RUQ0Mjc3RUNGQjBGREE4ODJBRDQ3NDky REU4NThGQjYwHhcNMjYxMDExMDczMjQ0WhcNMjYxMDE4MDczMjQ0WjAYMRYwFAYD VQQDEw02YWNiM2I5Yy0zMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAknpq+SF8VqXVbuwSC3w4usNkx9VYQ4U1KyMYR7o9OaprQF4dtoYXswUpzzb6 5hY8X94D9cBwsm6sfZC0CU4w16Wt/lOPl2zvZef8oCMPqJl8PKS5I37gD5Rn2NYv h5Kukan/G0pU4PKsTpfT5ueUq75++E5qM+YQGsRPPUR53jDG9HWCjaGJF3D0qjQ9 Z49hPenkK+YUe2g2D3vwtKUPS/JEL/jE9mipun+hpT+5JsMmjaM0YQgmNLzTD2tx zqq133TWwtjeCTz/qwUznGrNLkoRXD0wzEvaJ6aG1W0PjgwYeLGin2Ft6IkSX5L5 mR3bqUd08yYXJGO/hBFn7yLFNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNm44bLO qndyyL4C02WcXs4/4r0aMB8GA1UdIwQYMBaAFK+M3ObtQnfs+w/aiCrUdJLehY+2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFDQS8yREY1QkI4MEFC MzAxMUYwOEZDMEM5NDhDNEY5QUUwMi9yNHpjNXUxQ2QtejdEOXFJS3RSMGt0NkZq N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFDQS8yREY1QkI4MEFCMzAxMUYwOEZDMEM5NDhDNEY5QUUwMi9yNHpjNXUxQ2Qt ejdEOXFJS3RSMGt0NkZqN1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQegH4yW/UMAtGsaYMhV/+oNJ1fR3Z4zpivs6obSWnUrmbQFx80W+Vf51DP8T ghIIRremvQBR4vzVymBeqZTz1yqkuw1N1CEDMF8cZRORr0ejFH45wmZaWtyPm0WT BrcsGX8upk0aDIrpQdHjevkfkjAQeuWfDDOzq40nsQuTmOlQteVpg0skFsal6q9D nKpJ0TgCM962nDIFfB6oHmkGFGe0Kc39HY7avnEOXrem+TpVf3xeRJydSH6MxsIk KhF6qfVSWF9ggBo4iqpD2w2OEM3jOIDFPt1Jsp9eSszrbjMSr6rqQZIc7W8B5tbq j3lVKnVcVn9J9fq9IJbYfSElHA== -----END CERTIFICATE-----Generated at Sun Oct 11 10:20:14 2026 by rpki-client