$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: PJFqbZ0DvPcnLh9j5I6lGuO4CWsxFwZ95WLCyFZ77d4= Subject key identifier: 65:72:3D:0A:0B:0B:01:C6:97:6C:C0:ED:7B:66:AF:67:B5:D6:68:D6 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 089F Signing time: Sun 20 Sep 2026 20:33:32 +0000 Manifest this update: Sun 20 Sep 2026 20:33:32 +0000 Manifest next update: Sun 27 Sep 2026 20:33:32 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: Cf6BLeYhokQxmGug0K9kmaGoBOs5ftSl+7XQiA/cvLk=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: mcE/kCUcZ9XtkapXLq0nvxx/GVcFi46zNxigdP3tLvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Sep 20 20:33:32 2026 GMT Not After : Sep 27 20:33:32 2026 GMT Subject: CN=6ab0431c-e7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:24:c5:d0:4d:b5:6a:38:03:71:a2:ae:7f:c5: 50:e7:45:d6:40:74:51:db:6f:41:35:09:e8:f3:19: a6:09:b2:9b:fd:d2:7a:d9:8f:bd:a1:ba:2a:36:85: d3:0a:5b:22:24:98:e6:39:f0:4a:f1:36:e0:ed:2b: e1:65:6e:48:30:94:a2:1b:45:16:d0:05:36:bf:9f: 46:16:94:a7:10:2a:ff:68:c9:27:c5:b7:44:8a:a1: 07:38:0e:48:b1:12:22:79:35:55:29:f8:a7:7d:01: b4:58:55:bd:b0:79:29:38:8d:52:b2:02:9d:ea:22: cf:ab:4f:78:8c:fa:49:0b:7d:e2:48:4d:55:81:cc: ce:f9:93:62:ac:9c:18:f5:c0:4d:ff:aa:f5:c8:d4: 5c:7f:50:3c:7e:cb:f2:ca:ba:76:a4:fd:1a:43:68: 07:2a:b7:e0:94:c8:b2:76:8c:07:67:eb:ab:47:30: 34:e5:8f:5f:0d:a5:ee:97:19:20:40:5c:f9:50:0e: 85:2d:57:3a:82:5a:c5:6c:3d:38:1f:09:8e:f0:64: e9:69:60:92:b2:16:b4:af:b8:61:34:e7:9c:8f:a8: 9e:a8:3f:23:fe:55:ab:18:6c:2f:e7:00:55:70:ae: 10:db:9c:cd:d4:2c:eb:a8:9d:e3:52:1a:29:f3:90: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:72:3D:0A:0B:0B:01:C6:97:6C:C0:ED:7B:66:AF:67:B5:D6:68:D6 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:03:27:95:7f:29:e7:ed:f4:0e:b4:e1:fd:39:ff:15:18:bd: 25:6f:a5:4b:34:de:34:57:e3:30:20:a4:4c:08:48:39:37:25: c5:4f:7b:f5:06:bd:d0:47:9a:8d:9d:56:cb:4f:e5:a1:41:c7: ff:2e:72:ac:4b:14:be:06:c0:0d:a5:23:37:36:a5:80:2c:fe: 67:cf:db:dc:0d:ba:e3:6f:1e:6a:81:55:b2:ba:b5:96:35:34: 1e:91:53:47:39:79:de:b0:79:9c:e6:3f:eb:13:a3:fe:95:ab: e2:06:c3:60:57:d5:b6:d5:f1:16:0a:4a:8a:47:80:6b:33:a0: 60:76:b0:b3:95:ce:49:84:b3:1e:66:aa:50:b3:3c:95:12:55: b1:85:70:50:c9:75:ef:ac:74:0f:73:6b:ba:e1:e1:c1:57:d2: 6c:7a:2f:0c:9a:df:26:43:d6:da:82:4e:3a:69:96:4c:f5:c3: 4b:a4:5d:0a:17:4a:4f:49:36:6a:2f:5e:9c:70:b9:3d:34:e9: 4b:53:68:f3:1c:5b:23:09:11:29:85:74:18:7b:cb:5d:1a:97: 69:0c:f7:fd:3c:fd:96:a3:93:98:37:39:13:6a:a1:04:5a:85: a6:85:5c:38:3c:26:6c:01:e5:31:56:ac:5e:a1:26:dd:1b:5e: 86:39:a4:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjYwOTIwMjAzMzMyWhcNMjYwOTI3MjAzMzMyWjAYMRYwFAYD VQQDEw02YWIwNDMxYy1lN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yTF0E21ajgDcaKuf8VQ50XWQHRR229BNQno8xmmCbKb/dJ62Y+9oboqNoXT ClsiJJjmOfBK8Tbg7SvhZW5IMJSiG0UW0AU2v59GFpSnECr/aMknxbdEiqEHOA5I sRIieTVVKfinfQG0WFW9sHkpOI1SsgKd6iLPq094jPpJC33iSE1VgczO+ZNirJwY 9cBN/6r1yNRcf1A8fsvyyrp2pP0aQ2gHKrfglMiydowHZ+urRzA05Y9fDaXulxkg QFz5UA6FLVc6glrFbD04HwmO8GTpaWCSsha0r7hhNOecj6ieqD8j/lWrGGwv5wBV cK4Q25zN1CzrqJ3jUhop85DVWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVyPQoL CwHGl2zA7Xtmr2e11mjWMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKgMnlX8p5+30DrTh/Tn/FRi9JW+lSzTeNFfjMCCkTAhIOTclxU979Qa90Eea jZ1Wy0/loUHH/y5yrEsUvgbADaUjNzalgCz+Z8/b3A26428eaoFVsrq1ljU0HpFT Rzl53rB5nOY/6xOj/pWr4gbDYFfVttXxFgpKikeAazOgYHaws5XOSYSzHmaqULM8 lRJVsYVwUMl176x0D3NruuHhwVfSbHovDJrfJkPW2oJOOmmWTPXDS6RdChdKT0k2 ai9enHC5PTTpS1No8xxbIwkRKYV0GHvLXRqXaQz3/Tz9lqOTmDc5E2qhBFqFpoVc ODwmbAHlMVasXqEm3RtehjmkfQ== -----END CERTIFICATE-----Generated at Mon Sep 21 13:28:40 2026 by rpki-client