$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: CH5WFQvBcUj/1R2Wjr+bCJMbuZRlAZJzuF9g5cN4lXQ= Subject key identifier: 52:06:DC:56:7F:C3:9F:04:E4:82:89:23:F7:D3:A3:AC:7A:C7:21:5C Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 095E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 0954 Signing time: Mon 28 Sep 2026 20:17:11 +0000 Manifest this update: Mon 28 Sep 2026 20:17:10 +0000 Manifest next update: Mon 05 Oct 2026 20:17:10 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: at8aeZM/AgbbVAtmPrkJPdC4Km+DQhoBZC2jjDsQqis=) 2: A28D191A8F0B11F1A221D4CB6F11F970.roa (hash: dmFE1Lu71TTV6LKy9L9ZuGNgYwfgQHvgYmU9J90y8UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Sep 28 20:17:10 2026 GMT Not After : Oct 5 20:17:10 2026 GMT Subject: CN=6abacb47-f284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:23:26:e0:fd:60:45:26:09:02:e0:8d:10: 32:53:51:41:e3:5f:4b:63:01:02:cb:93:64:a6:58: 53:e4:ac:f7:e1:d7:8e:83:b4:2d:f2:d3:eb:7e:f4: 91:4d:a4:99:e0:a7:05:9b:d3:96:e7:09:52:62:cf: 73:42:e5:24:bb:c2:f3:05:4e:92:25:cc:89:a6:f0: 35:53:5b:c1:d9:90:be:de:cf:c5:7f:22:89:05:23: 14:23:ba:2a:3b:c7:a3:78:c7:ff:f2:22:15:36:00: fd:72:76:e3:84:cd:41:ac:63:9a:63:27:ce:28:40: 9a:42:b0:4c:e7:80:73:c5:8e:1c:6f:74:1a:e7:a9: e0:33:c6:c2:02:ef:30:11:c1:9d:e3:f2:18:8b:f5: da:cb:24:35:83:b8:b0:c7:7d:d9:f7:1f:e7:8d:8e: a4:69:0d:49:1a:ac:4d:69:59:95:6e:72:87:c3:05: 0c:eb:72:07:a6:56:f9:58:32:1e:70:0e:00:d7:aa: 61:40:bb:ed:ad:14:99:32:cd:31:46:18:60:36:61: d4:78:3a:d9:cb:93:5a:79:34:70:85:70:02:9b:18: f7:a7:75:c1:cc:34:20:6e:3c:40:8f:93:df:be:21: 8b:77:b4:1a:2e:5c:f0:b9:27:a6:1e:26:10:a8:09: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:06:DC:56:7F:C3:9F:04:E4:82:89:23:F7:D3:A3:AC:7A:C7:21:5C X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:de:ca:6a:60:c4:15:21:58:50:02:f2:54:2b:6b:c2:9b:b3: 4f:cd:4d:c6:15:49:b4:ed:ed:1d:4d:31:c0:bb:e1:90:df:1a: ac:29:91:18:2e:b3:44:ae:2c:4a:49:4b:6c:c5:d6:aa:62:ec: 0d:76:ee:93:a5:39:ce:32:54:38:6d:43:85:f8:56:99:47:25: 25:e8:76:d9:d8:0a:7c:c9:87:fc:2f:c8:8b:bb:05:51:a6:dd: 86:f8:21:5b:b1:12:e2:b7:90:0f:22:98:e5:af:6d:33:80:40: 87:dd:84:be:8a:b4:9b:0d:5c:4f:fa:ee:35:ab:cd:20:d6:54: ae:dd:6f:e0:33:1d:70:c2:02:48:43:47:74:2e:91:99:9a:94: b0:4e:a0:cb:ce:f1:93:07:8a:57:fd:7c:6d:ec:61:91:e5:87: d2:88:b8:cd:be:65:5b:b3:ac:5e:07:82:ab:20:e3:7c:89:0a: 5d:3b:3d:ea:b5:5a:c3:e1:00:f4:53:ae:a2:86:81:a4:69:3d: fd:a5:21:b1:68:b3:07:62:c1:0b:64:7d:ce:3d:7a:2f:b7:74: 6c:f0:33:d9:94:23:59:60:b6:f5:eb:f4:58:7d:46:fb:3d:79: 10:bb:82:6d:85:c9:97:4a:58:4e:cb:f1:b7:96:7b:4f:22:3e: a9:8e:83:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjYwOTI4MjAxNzEwWhcNMjYxMDA1MjAxNzEwWjAYMRYwFAYD VQQDEw02YWJhY2I0Ny1mMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBMjJuD9YEUmCQLgjRAyU1FB419LYwECy5NkplhT5Kz34deOg7Qt8tPrfvSR TaSZ4KcFm9OW5wlSYs9zQuUku8LzBU6SJcyJpvA1U1vB2ZC+3s/FfyKJBSMUI7oq O8ejeMf/8iIVNgD9cnbjhM1BrGOaYyfOKECaQrBM54BzxY4cb3Qa56ngM8bCAu8w EcGd4/IYi/XayyQ1g7iwx33Z9x/njY6kaQ1JGqxNaVmVbnKHwwUM63IHplb5WDIe cA4A16phQLvtrRSZMs0xRhhgNmHUeDrZy5NaeTRwhXACmxj3p3XBzDQgbjxAj5Pf viGLd7QaLlzwuSemHiYQqAmAcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIG3FZ/ w58E5IKJI/fTo6x6xyFcMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq97KamDEFSFYUALyVCtrwpuzT81NxhVJtO3tHU0xwLvhkN8arCmRGC6zRK4s SklLbMXWqmLsDXbuk6U5zjJUOG1DhfhWmUclJeh22dgKfMmH/C/Ii7sFUabdhvgh W7ES4reQDyKY5a9tM4BAh92Evoq0mw1cT/ruNavNINZUrt1v4DMdcMICSENHdC6R mZqUsE6gy87xkweKV/18bexhkeWH0oi4zb5lW7OsXgeCqyDjfIkKXTs96rVaw+EA 9FOuooaBpGk9/aUhsWizB2LBC2R9zj16L7d0bPAz2ZQjWWC29ev0WH1G+z15ELuC bYXJl0pYTsvxt5Z7TyI+qY6DDQ== -----END CERTIFICATE-----Generated at Wed Sep 30 21:29:03 2026 by rpki-client