$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft File: 4A98xO20ZNoqTvnfvu5imVNRVeo.mft (raw, json) Hash identifier: h8fbqlcFrOcfG/JMzlVwdnMyXtxlPDWu3T5SV3EKC28= Subject key identifier: 88:00:94:DF:C7:D9:B3:0F:72:0D:2C:89:5C:28:BC:6F:12:35:D2:75 Authority key identifier: E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA Certificate issuer: /CN=A9165746/serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft Manifest number: 4B Signing time: Tue 27 Oct 2026 08:38:21 +0000 Manifest this update: Tue 27 Oct 2026 08:38:20 +0000 Manifest next update: Tue 03 Nov 2026 08:38:20 +0000 Files and hashes: 1: 4A98xO20ZNoqTvnfvu5imVNRVeo.crl (hash: lZBmielgrzFFRyUHKMb8Uh5Eddvyg5QYB4nhk6KcLoo=) 2: 031954DE5F3611F180101EC97F47A888.roa (hash: 8MG6eGpVkP9CJ/8UlblTP9Xx22hFfv4p4ykAcJ2UqhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165746, serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA Validity Not Before: Oct 27 08:38:20 2026 GMT Not After : Nov 3 08:38:20 2026 GMT Subject: CN=6ae062fd-e08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:80:25:9f:20:f5:fc:64:b0:77:0d:fa:37: ce:01:6a:e6:40:4c:3c:25:c9:da:c2:39:7e:be:4b: 75:90:49:7e:a2:0a:a6:76:6c:3c:b6:56:69:8a:bc: 19:22:3f:0d:7d:c2:b3:f2:5b:af:45:84:c7:f4:83: eb:4a:70:61:ba:69:b4:5b:1f:d0:b6:19:18:66:1a: 05:0f:59:99:09:fc:c3:3f:6a:0f:af:bc:13:ef:ff: 42:49:e7:4d:7c:c2:25:b8:db:58:5d:0f:63:ef:c6: 21:0b:c0:7d:6c:37:36:c4:1f:5e:53:a9:5f:d5:e5: 80:0b:95:3d:ca:44:94:92:a3:1c:ff:93:1e:72:a8: 3b:04:48:38:f2:5f:dd:5d:d4:40:f3:a3:f4:65:fb: 1b:de:1d:f4:c0:5f:23:27:af:fc:66:fc:65:c9:76: 75:3c:30:d2:19:be:23:6e:6b:ee:7d:79:64:0b:4e: 20:3a:30:65:9c:35:02:b5:28:d4:c0:c3:fa:ae:49: 28:7f:81:c6:34:e4:f6:8b:52:3d:0d:42:22:66:60: 17:2f:50:57:04:84:08:96:04:e1:f6:8d:3c:4f:24: aa:79:b6:5a:1b:42:b1:f9:49:53:a7:50:ea:55:e3: 98:d6:f8:cf:1c:91:ca:72:45:a4:ec:2d:16:f9:70: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:00:94:DF:C7:D9:B3:0F:72:0D:2C:89:5C:28:BC:6F:12:35:D2:75 X509v3 Authority Key Identifier: keyid:E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ca:49:2d:e3:ce:38:aa:cf:25:96:88:d2:6d:8d:34:a4:10: 42:fa:ef:11:9e:ef:f8:1f:e1:c6:76:39:9d:3c:e3:fe:a3:45: fc:a9:30:c5:17:09:f4:24:04:69:56:6d:8d:10:e1:f8:8e:c2: d4:e5:3e:b2:92:3c:ad:4a:5c:4a:7c:f2:69:b9:77:96:49:a7: ac:a2:e8:64:c5:f5:04:71:c0:4b:47:d5:cb:7b:45:ec:a7:1a: 24:87:74:91:97:a3:c8:4a:ab:39:0e:a4:cf:cd:ef:9e:72:0b: b5:b9:64:93:19:7a:c0:f4:41:8a:ef:12:1b:b8:02:23:f6:ff: 93:77:e4:9f:4b:41:fb:57:08:cd:4c:70:cc:f7:12:f3:0e:e1: 38:a1:6e:05:df:41:42:7f:37:df:31:8c:86:c5:0a:e4:d5:8a: b8:7f:74:f8:6a:b1:76:bc:99:67:36:a8:1f:74:d5:d6:c8:da: 11:50:f9:f2:81:b2:04:f8:5d:d5:73:63:d0:d3:c6:c2:4c:74: ae:64:c9:dd:b6:64:c8:a7:28:df:63:0b:08:cc:72:ec:2d:05: ca:4c:2c:93:77:20:57:61:00:5e:be:a7:24:03:30:05:3f:44: 71:7b:da:b3:fc:d7:9d:06:cb:67:67:0c:bf:35:03:b8:6e:f5: f6:e5:6f:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTc0NjExMC8GA1UEBRMoRTAwRjdDQzRFREI0NjREQTJBNEVGOURGQkVFRTYyOTk1 MzUxNTVFQTAeFw0yNjEwMjcwODM4MjBaFw0yNjExMDMwODM4MjBaMBgxFjAUBgNV BAMTDTZhZTA2MmZkLWUwOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV24AlnyD1/GSwdw36N84BauZATDwlydrCOX6+S3WQSX6iCqZ2bDy2VmmKvBki Pw19wrPyW69FhMf0g+tKcGG6abRbH9C2GRhmGgUPWZkJ/MM/ag+vvBPv/0JJ5018 wiW421hdD2PvxiELwH1sNzbEH15TqV/V5YALlT3KRJSSoxz/kx5yqDsESDjyX91d 1EDzo/Rl+xveHfTAXyMnr/xm/GXJdnU8MNIZviNua+59eWQLTiA6MGWcNQK1KNTA w/quSSh/gcY05PaLUj0NQiJmYBcvUFcEhAiWBOH2jTxPJKp5tlobQrH5SVOnUOpV 45jW+M8ckcpyRaTsLRb5cA9VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiACU38fZ sw9yDSyJXCi8bxI10nUwHwYDVR0jBBgwFoAU4A98xO20ZNoqTvnfvu5imVNRVeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NzQ2LzcyQUMyMDUyNUYz NTExRjFBM0FFMkY3NTdFNDdBODg4LzRBOTh4TzIwWk5vcVR2bmZ2dTVpbVZOUlZl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNEE5OHhPMjBaTm9xVHZuZnZ1NWltVk5SVmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NzQ2LzcyQUMyMDUyNUYzNTExRjFBM0FFMkY3NTdFNDdBODg4LzRBOTh4TzIwWk5v cVR2bmZ2dTVpbVZOUlZlby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxykkt4844qs8llojSbY00pBBC+u8Rnu/4H+HGdjmdPOP+o0X8qTDFFwn0JARp Vm2NEOH4jsLU5T6ykjytSlxKfPJpuXeWSaesouhkxfUEccBLR9XLe0Xspxokh3SR l6PISqs5DqTPze+ecgu1uWSTGXrA9EGK7xIbuAIj9v+Td+SfS0H7VwjNTHDM9xLz DuE4oW4F30FCfzffMYyGxQrk1Yq4f3T4arF2vJlnNqgfdNXWyNoRUPnygbIE+F3V c2PQ08bCTHSuZMndtmTIpyjfYwsIzHLsLQXKTCyTdyBXYQBevqckAzAFP0Rxe9qz /NedBstnZwy/NQO4bvX25W+o -----END CERTIFICATE-----Generated at Wed Oct 28 21:30:53 2026 by rpki-client