$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft File: 4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json) Hash identifier: afz9qQ3ET3aplt8/LT24LPQuaYZo4PRrOCBgbNC8WS4= Subject key identifier: E1:F0:4E:D9:1D:B2:CE:2F:3C:25:C0:DF:9F:D9:CC:71:81:51:2C:34 Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2 Certificate issuer: /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft Manifest number: A3 Signing time: Mon 21 Sep 2026 07:13:02 +0000 Manifest this update: Mon 21 Sep 2026 07:13:01 +0000 Manifest next update: Mon 28 Sep 2026 07:13:01 +0000 Files and hashes: 1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: zXUoEcW6kVfew8Mg1Z1e8t4WkrlZAtAzqeP+gDhk2v0=) 2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2 Validity Not Before: Sep 21 07:13:01 2026 GMT Not After : Sep 28 07:13:01 2026 GMT Subject: CN=6ab0d8fe-860c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:96:9f:63:2c:b0:f5:9e:a6:e1:a5:dc:a9: c6:24:fc:99:f7:01:18:3f:bc:33:70:e2:6a:59:a2: 50:ab:45:54:0d:08:07:cf:70:9a:e3:c7:5d:59:ea: 23:15:f6:6d:fc:6a:16:42:19:e1:4a:03:67:f2:dc: a6:76:fb:f0:aa:1d:2e:b5:60:50:3c:cb:e7:5d:5e: 25:7b:e6:65:55:c4:b2:1b:af:4d:50:40:93:08:46: 5f:53:5f:31:cf:3c:ac:a4:e8:6b:d8:76:4c:f1:66: 23:e7:43:43:0a:0a:18:97:e4:9a:0e:ca:3b:a4:23: 43:46:ae:8c:ef:8b:3e:1c:d4:fa:e7:95:ff:95:10: b6:dd:b1:91:9c:2c:d6:20:52:77:d1:cd:0c:e6:77: 28:3e:8f:05:67:a6:4d:64:08:3e:79:80:be:7a:a4: 05:1c:7f:1d:87:0b:0f:5b:79:0c:25:90:9c:23:e0: 47:6d:c0:d3:b7:a1:b0:fb:56:8f:49:ff:3f:4e:d9: 4b:ec:53:91:e8:62:9c:ac:28:1c:09:ad:8f:bb:18: b3:8a:8a:22:d3:0f:95:61:2d:50:17:1d:3e:c8:de: a6:31:17:2c:a2:21:f7:2b:01:ab:1a:55:50:d6:26: 76:29:0c:50:44:4a:ac:51:e3:ed:cf:43:8a:57:c5: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:4E:D9:1D:B2:CE:2F:3C:25:C0:DF:9F:D9:CC:71:81:51:2C:34 X509v3 Authority Key Identifier: keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:04:29:5c:f7:32:67:9c:12:9f:1f:5c:fe:44:fc:26:35:0b: cc:fc:79:60:ef:f5:90:48:cc:37:d9:a7:3d:c5:7d:cb:7f:e4: 71:17:a6:ca:8f:f8:f6:bf:65:44:ad:dd:c2:d7:a5:06:c8:60: eb:c7:40:b1:53:cb:fb:80:f0:0a:0a:8b:a3:ee:ec:dd:83:1a: 28:05:30:78:59:47:b0:4f:82:ac:1a:a7:8c:bf:02:6b:2b:44: bf:86:46:ce:c1:de:10:22:71:a2:70:3f:07:15:7c:01:6d:a5: 0e:a5:6b:fd:e8:a8:b3:0a:eb:aa:b2:10:49:07:bc:28:0d:a2: f7:3c:65:03:76:cf:19:a9:3d:f9:68:72:f0:97:0b:15:26:36: 29:c3:ff:88:b0:eb:ce:83:62:14:86:80:b7:b0:36:38:ec:0f: 21:5b:34:41:7b:c2:86:84:ef:4b:30:cc:38:8c:d9:fc:9b:1e: d0:e6:0a:a1:c3:6c:0a:8d:68:08:e4:e9:9d:69:fc:9e:41:8c: 41:00:76:b7:58:3a:fb:47:0f:5f:79:bc:b3:80:5c:22:fc:e0: 0b:de:c3:3b:a9:fd:f5:38:41:9a:4b:b8:79:25:ca:d7:ae:de: 6e:ee:60:d6:25:b7:9b:e8:44:64:8d:46:d5:c5:98:4f:c6:3f: 1a:bd:00:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCODcxMTAvBgNVBAUTKEUwMUU5RDM2RUEyNDhEQzFGNjc3QzMxNEJGNkM5MTgy OTBFNjNGRjIwHhcNMjYwOTIxMDcxMzAxWhcNMjYwOTI4MDcxMzAxWjAYMRYwFAYD VQQDEw02YWIwZDhmZS04NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFWWn2MssPWepuGl3KnGJPyZ9wEYP7wzcOJqWaJQq0VUDQgHz3Ca48ddWeoj FfZt/GoWQhnhSgNn8tymdvvwqh0utWBQPMvnXV4le+ZlVcSyG69NUECTCEZfU18x zzyspOhr2HZM8WYj50NDCgoYl+SaDso7pCNDRq6M74s+HNT655X/lRC23bGRnCzW IFJ30c0M5ncoPo8FZ6ZNZAg+eYC+eqQFHH8dhwsPW3kMJZCcI+BHbcDTt6Gw+1aP Sf8/TtlL7FOR6GKcrCgcCa2Puxiziooi0w+VYS1QFx0+yN6mMRcsoiH3KwGrGlVQ 1iZ2KQxQREqsUePtz0OKV8VFhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHwTtkd ss4vPCXA35/ZzHGBUSw0MB8GA1UdIwQYMBaAFOAenTbqJI3B9nfDFL9skYKQ5j/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0I4Ny8yRTI2QjQ4MkJD RTMxMUYwOTg3MTcwNDhDNEY5QUUwMi80QjZkTnVva2pjSDJkOE1VdjJ5UmdwRG1Q X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCNmROdW9ramNIMmQ4TVV2MnlSZ3BEbVBfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0I4Ny8yRTI2QjQ4MkJDRTMxMUYwOTg3MTcwNDhDNEY5QUUwMi80QjZkTnVva2pj SDJkOE1VdjJ5UmdwRG1QX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACwQpXPcyZ5wSnx9c/kT8JjULzPx5YO/1kEjMN9mnPcV9y3/kcRemyo/49r9l RK3dwtelBshg68dAsVPL+4DwCgqLo+7s3YMaKAUweFlHsE+CrBqnjL8CaytEv4ZG zsHeECJxonA/BxV8AW2lDqVr/eioswrrqrIQSQe8KA2i9zxlA3bPGak9+Why8JcL FSY2KcP/iLDrzoNiFIaAt7A2OOwPIVs0QXvChoTvSzDMOIzZ/Jse0OYKocNsCo1o COTpnWn8nkGMQQB2t1g6+0cPX3m8s4BcIvzgC97DO6n99ThBmku4eSXK167ebu5g 1iW3m+hEZI1G1cWYT8Y/Gr0ASQ== -----END CERTIFICATE-----Generated at Tue Sep 22 19:18:22 2026 by rpki-client