$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: JZ+v+Kw/nOF16iL9hAfVmNI8eOXkxFkKvFgt4bQpoYA= Subject key identifier: CD:88:A4:04:A9:D8:2D:7A:B1:1D:3F:DF:50:78:C4:9D:F3:9C:31:E4 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0DBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0D95 Signing time: Sun 20 Sep 2026 17:57:31 +0000 Manifest this update: Sun 20 Sep 2026 17:57:30 +0000 Manifest next update: Sun 27 Sep 2026 17:57:30 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: GS726E8FU5SyhuLidwo8IGsgeRmEu8WqVvi9D5eMAfU=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: 8NBaU/JePJQ6/F/3cS0V0StpNvCdrumDQrFWu6BjRDk=) 3: CA0AB7D0539811F19275B1E8AE833773.roa (hash: RJS1Q5SyoLw5kpGy0JR6IuXz+7wLlZLltCqEB6vPsmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3514 (0xdba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Sep 20 17:57:30 2026 GMT Not After : Sep 27 17:57:30 2026 GMT Subject: CN=6ab01e8b-c1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:c7:3b:da:cb:d9:b2:50:c3:2e:86:9b:f5: 48:42:53:1e:83:c4:71:f8:9a:9d:63:9e:ad:58:4b: f4:05:e1:45:d5:96:8b:8d:0b:b2:69:5f:c5:0a:89: b4:9e:54:94:e8:77:b5:44:f2:a7:bb:32:6b:09:3b: 1b:29:0c:14:3e:ee:33:52:07:cb:37:41:41:b1:70: 10:bd:50:9c:9a:a6:d2:24:00:99:de:06:55:c8:a9: ef:10:8f:aa:59:4f:80:f9:fb:7b:ee:28:5e:2b:b0: 17:ac:3e:1d:03:9c:45:45:0e:52:76:2b:ae:7e:8a: 69:86:23:c8:64:17:55:5a:f6:ab:b9:e5:64:f4:9e: c1:9f:a7:9f:0f:1a:a5:46:b8:0d:71:59:df:18:44: e6:3d:d7:c5:b1:6c:8e:d7:5a:3f:d0:e3:4d:55:de: 38:58:3b:7d:fc:52:9f:97:7c:cb:ac:57:e5:46:55: db:22:2f:a6:51:65:32:5b:bc:58:bc:d8:78:a3:ce: e8:d9:1e:2f:06:ba:df:06:17:d8:ff:37:b1:ba:67: 1b:37:fb:ec:0e:49:18:5f:0e:da:f2:d8:58:2d:14: 18:d0:a1:bf:eb:6d:f4:75:fd:4c:29:f1:88:ce:8b: 4d:62:76:58:73:68:c2:c8:da:21:3f:93:a3:89:f6: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:88:A4:04:A9:D8:2D:7A:B1:1D:3F:DF:50:78:C4:9D:F3:9C:31:E4 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:35:e6:9d:d1:12:86:1b:7c:7a:49:df:44:9d:46:2b:ae:50: 9a:68:90:a4:aa:62:bc:a8:19:8f:9d:dd:da:47:12:4e:7d:48: 1e:77:8e:da:95:aa:88:19:ca:74:dc:19:54:e2:1d:f6:30:63: b6:27:32:7c:2a:1e:c3:6e:0b:ba:02:0c:56:ee:da:ce:ac:5c: 82:15:29:44:19:d8:13:9f:91:49:8a:d7:1f:da:97:7a:62:0a: 0d:9b:21:9b:c6:37:fd:1a:77:0c:a9:2a:c2:8e:86:ee:d6:c0: ce:f2:ec:1e:71:e4:27:b1:bb:b1:1f:0b:40:c5:41:91:5a:b2: 77:2c:ab:42:cc:83:73:90:98:04:91:56:2b:5e:c9:8a:30:59: f7:f8:33:ed:87:00:ba:ca:6c:25:ed:41:62:64:ec:0d:0f:0b: 1b:c7:e8:21:59:b4:89:76:bb:b7:27:da:3d:e3:b4:1b:3d:2a: 77:ff:7b:e6:59:1d:12:c1:c4:f6:09:9b:16:79:af:83:c9:47: bf:94:84:38:f0:f2:e5:a8:92:25:e2:2f:5a:dc:92:b6:bb:50: 9d:78:44:d7:23:ea:95:01:1a:96:f0:64:aa:d1:f3:ea:3b:39: 7a:3a:04:8a:af:de:65:75:bb:d2:9e:a4:2a:e4:72:29:4a:64: b6:7d:89:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjYwOTIwMTc1NzMwWhcNMjYwOTI3MTc1NzMwWjAYMRYwFAYD VQQDEw02YWIwMWU4Yi1jMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZnHO9rL2bJQwy6Gm/VIQlMeg8Rx+JqdY56tWEv0BeFF1ZaLjQuyaV/FCom0 nlSU6He1RPKnuzJrCTsbKQwUPu4zUgfLN0FBsXAQvVCcmqbSJACZ3gZVyKnvEI+q WU+A+ft77iheK7AXrD4dA5xFRQ5SdiuufopphiPIZBdVWvarueVk9J7Bn6efDxql RrgNcVnfGETmPdfFsWyO11o/0ONNVd44WDt9/FKfl3zLrFflRlXbIi+mUWUyW7xY vNh4o87o2R4vBrrfBhfY/zexumcbN/vsDkkYXw7a8thYLRQY0KG/6230df1MKfGI zotNYnZYc2jCyNohP5Ojifa6awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2IpASp 2C16sR0/31B4xJ3znDHkMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAATXmndEShht8eknfRJ1GK65QmmiQpKpivKgZj53d2kcSTn1IHneO2pWqiBnK dNwZVOId9jBjticyfCoew24LugIMVu7azqxcghUpRBnYE5+RSYrXH9qXemIKDZsh m8Y3/Rp3DKkqwo6G7tbAzvLsHnHkJ7G7sR8LQMVBkVqydyyrQsyDc5CYBJFWK17J ijBZ9/gz7YcAuspsJe1BYmTsDQ8LG8foIVm0iXa7tyfaPeO0Gz0qd/975lkdEsHE 9gmbFnmvg8lHv5SEOPDy5aiSJeIvWtyStrtQnXhE1yPqlQEalvBkqtHz6js5ejoE iq/eZXW70p6kKuRyKUpktn2JzQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:00:38 2026 by rpki-client