$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: oT3uu/qH0hC4SABVCspzekVmOYjM7rY/JFD7NNLn5j8= Subject key identifier: 3C:89:49:99:89:12:BC:AD:6E:78:34:B5:83:D3:B3:C0:0F:CA:53:2F Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 0806 Signing time: Fri 18 Sep 2026 21:11:56 +0000 Manifest this update: Fri 18 Sep 2026 21:11:56 +0000 Manifest next update: Fri 25 Sep 2026 21:11:56 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: b55fjlV/daDyijSdlonHvuNo06oYuO1S5N0P5jXwRaE=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: 5mVaiMwplqRf3wo+cmT13v7nFPq+pyaaZ5AbsWK8FKM=) 3: bN94abeDZJ4DKd-OU2HKCrVIEjI.asa (hash: 3W62QE0qx2lwZJO4lb3cGSHIP42CeQTaHxBahwjHfew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: Sep 18 21:11:56 2026 GMT Not After : Sep 25 21:11:56 2026 GMT Subject: CN=6aada91c-a7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:08:8c:c4:36:15:4a:84:ca:e7:f5:17:22:0a: 16:9f:57:64:79:aa:88:7a:4e:9d:3c:a9:79:3b:ea: 5e:91:48:77:a9:b0:ca:65:b7:db:03:46:22:c5:a6: 97:f9:70:17:23:c2:17:f8:57:56:d8:f8:7c:79:5d: d4:ae:20:e4:59:3e:d9:3c:36:af:54:51:28:d0:0a: 5b:26:50:1c:62:bc:a7:30:2f:b4:6d:df:15:b3:5a: a3:e2:c6:1a:17:69:18:33:4f:1c:b6:21:1d:d4:7f: 3f:95:8b:a6:bf:68:d1:ef:18:40:9f:2e:fc:fd:7a: 33:f9:6e:56:b4:5f:c2:72:0a:a2:27:7f:ff:fd:d9: ec:5e:40:e0:e8:51:3b:38:ab:ad:b7:89:8f:49:0f: 48:74:a7:a2:66:95:1e:e2:66:d3:71:d1:53:e9:91: e0:0a:ff:c4:c1:80:5d:54:a8:ce:53:ec:c4:03:41: cf:dc:86:9e:83:f0:d5:4f:09:c3:a5:1b:2a:43:af: b0:4f:59:46:4b:e8:c6:2d:63:90:8d:71:2e:27:f4: 75:21:a0:ed:c7:4b:04:a6:a5:92:66:e9:8a:66:e0: 9e:40:73:07:d2:89:17:2c:a8:d4:a9:3a:f2:21:1a: 60:c6:9b:a6:d3:77:5f:30:3a:c5:a6:01:07:f3:88: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:89:49:99:89:12:BC:AD:6E:78:34:B5:83:D3:B3:C0:0F:CA:53:2F X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:34:1b:a0:d8:d2:56:f6:78:35:d9:81:2b:3e:18:ed:4b:4c: 30:f4:53:7e:0f:4e:a8:7d:b6:29:35:d8:da:63:fa:36:84:4a: 3f:02:70:cb:2a:94:d5:b4:54:a3:56:0a:86:be:66:ac:57:13: 71:3b:e5:2c:a1:59:15:4a:a2:35:ab:05:40:09:9d:0e:fe:1a: d1:3b:0d:0a:79:73:9c:bd:b1:ac:19:7f:66:41:bf:f3:f6:7d: 73:94:1d:1c:a4:78:14:18:c7:c9:d4:d1:16:75:7d:80:a9:22: 2c:04:a1:6c:16:db:82:58:4e:c5:af:bd:62:3e:9d:a5:1c:cf: 7d:4f:57:2a:62:e9:ca:7b:af:da:64:4a:c1:90:9b:8d:f4:e9: 30:ed:09:ef:f2:5b:75:4a:91:18:8f:09:ef:da:41:93:4a:d7: f5:67:bb:fd:f9:8a:ff:8c:5a:2d:33:42:fc:42:aa:59:84:6a: 6a:a3:74:21:24:9a:59:3c:64:0b:b2:32:db:17:b7:0e:58:f5: f6:cb:fe:69:17:76:49:3f:a7:90:ac:6f:bb:83:45:20:c9:06: eb:92:dc:3f:6b:78:93:9d:c6:1c:69:7a:7d:d6:11:85:19:50: 9d:e4:93:ee:69:4b:d3:7d:43:c4:bf:9e:3e:1a:53:bd:02:9f: 6f:bf:47:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjYwOTE4MjExMTU2WhcNMjYwOTI1MjExMTU2WjAYMRYwFAYD VQQDEw02YWFkYTkxYy1hN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QiMxDYVSoTK5/UXIgoWn1dkeaqIek6dPKl5O+pekUh3qbDKZbfbA0YixaaX +XAXI8IX+FdW2Ph8eV3UriDkWT7ZPDavVFEo0ApbJlAcYrynMC+0bd8Vs1qj4sYa F2kYM08ctiEd1H8/lYumv2jR7xhAny78/Xoz+W5WtF/CcgqiJ3///dnsXkDg6FE7 OKutt4mPSQ9IdKeiZpUe4mbTcdFT6ZHgCv/EwYBdVKjOU+zEA0HP3Iaeg/DVTwnD pRsqQ6+wT1lGS+jGLWOQjXEuJ/R1IaDtx0sEpqWSZumKZuCeQHMH0okXLKjUqTry IRpgxpum03dfMDrFpgEH84jsiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyJSZmJ Erytbng0tYPTs8APylMvMB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcTQboNjSVvZ4NdmBKz4Y7UtMMPRTfg9OqH22KTXY2mP6NoRKPwJwyyqU1bRU o1YKhr5mrFcTcTvlLKFZFUqiNasFQAmdDv4a0TsNCnlznL2xrBl/ZkG/8/Z9c5Qd HKR4FBjHydTRFnV9gKkiLAShbBbbglhOxa+9Yj6dpRzPfU9XKmLpynuv2mRKwZCb jfTpMO0J7/JbdUqRGI8J79pBk0rX9We7/fmK/4xaLTNC/EKqWYRqaqN0ISSaWTxk C7Iy2xe3Dlj19sv+aRd2ST+nkKxvu4NFIMkG65LcP2t4k53GHGl6fdYRhRlQneST 7mlL031DxL+ePhpTvQKfb79Hrg== -----END CERTIFICATE-----Generated at Sun Sep 20 14:52:39 2026 by rpki-client