$ rpki-client -vvvf rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft File: A0kndy5R4IVbEP1QK4FvJDRhm_I.mft (raw, json) Hash identifier: Nte8F9eSUxAjzF0Hwq8nyRzbA917+5k870z03PwOnfY= Subject key identifier: 8C:AA:1C:0D:4A:2F:E4:F0:F1:70:6B:D6:7D:19:80:A4:CB:89:BF:8C Authority key identifier: 03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2 Certificate issuer: /CN=A91676C8/serialNumber=034927772E51E0855B10FD502B816F2434619BF2 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft Manifest number: 4B Signing time: Sat 19 Sep 2026 08:24:34 +0000 Manifest this update: Sat 19 Sep 2026 08:24:33 +0000 Manifest next update: Sat 26 Sep 2026 08:24:33 +0000 Files and hashes: 1: A0kndy5R4IVbEP1QK4FvJDRhm_I.crl (hash: wG3ttP53mEV0IEHa/jUIVmH1jl2iRb+Og1pwIL5y2nw=) 2: D9F300348D9B11F1B8EC10E14011F970.roa (hash: jn7pUkPOtKls3Rk24joGYbeuhfP9/ROHUbwLSv4g/SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676C8, serialNumber=034927772E51E0855B10FD502B816F2434619BF2 Validity Not Before: Sep 19 08:24:33 2026 GMT Not After : Sep 26 08:24:33 2026 GMT Subject: CN=6aae46c2-d738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:7a:18:4b:29:b0:22:fd:85:8d:45:3c:98: 20:d0:e6:9e:6a:ca:a5:d3:e0:cf:99:74:ed:b3:61: b9:37:06:f8:dd:ac:bf:99:54:f3:16:7c:d9:fb:38: ea:e5:86:8c:88:2d:7b:54:c8:79:33:50:cf:8c:94: 9e:cc:c8:d6:37:ea:49:d3:62:31:a9:3f:be:9a:0d: 3c:82:6c:3c:2c:fd:cf:7d:a6:16:20:0d:23:81:1f: b4:32:98:fc:01:c0:88:29:82:3d:fb:b0:7d:ad:f3: 8c:d2:55:bb:46:59:37:37:98:ce:10:05:8b:bd:96: 77:34:c5:77:db:f3:fd:f4:8a:ec:40:bc:fc:69:59: 02:70:ad:47:12:f5:1d:c8:27:67:05:bb:2d:e5:81: d2:aa:de:6d:4c:9b:c7:12:f3:2b:b2:28:18:36:d4: b3:49:a5:1b:43:58:3d:d8:7a:f2:ec:3a:20:2b:b1: d1:da:93:6e:71:ce:34:3b:ec:ec:b2:e8:b1:87:bf: 31:62:f7:52:03:7f:fd:f6:ee:d9:70:1b:3f:08:72: 5c:e1:38:3d:0f:27:74:65:d3:22:f2:2d:ed:70:41: 7d:94:40:dd:bd:cb:54:12:27:02:6a:14:d4:31:77: 03:2a:5a:98:6f:8f:65:ce:3b:4d:c6:be:55:68:7e: 19:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AA:1C:0D:4A:2F:E4:F0:F1:70:6B:D6:7D:19:80:A4:CB:89:BF:8C X509v3 Authority Key Identifier: keyid:03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c0:20:d0:12:49:bb:40:83:1e:9a:bc:aa:98:4f:4b:07:fd: 20:ee:06:88:e4:7f:f5:ea:a6:d2:d1:df:f9:11:ef:1e:db:d9: 69:44:83:af:46:fc:95:fe:b3:d2:9a:48:54:01:bf:16:cb:5b: 66:d0:4b:16:51:06:1f:23:d1:35:d4:af:82:44:b9:a2:58:5d: 22:5f:f6:b2:51:0c:68:53:01:1e:0a:2c:7d:c0:e9:e4:07:73: 69:4f:fb:df:18:27:ec:68:16:45:9e:d1:94:58:03:39:5f:17: 7e:04:16:a8:79:f5:c6:37:72:42:b8:f0:c2:97:bb:c1:26:f5: 36:d3:b4:66:fc:bf:02:bd:0d:35:f5:53:5c:8e:d1:ca:3e:8a: fc:8a:0c:17:d6:8c:fb:e8:47:7d:14:f0:f8:bc:e2:cb:18:3b: 56:0b:37:3e:7e:d6:91:f8:3f:61:f0:03:85:a4:4a:26:e6:8c: 6b:40:84:1b:c0:34:30:e5:7b:1b:a4:81:e8:9a:59:ee:21:ae: 75:f1:13:9f:4d:0b:c2:9b:b2:50:c3:40:6b:18:fa:af:23:d3: 57:e8:49:02:33:2f:f2:f1:a5:79:61:53:25:e7:5f:93:5b:74: e6:c3:09:e2:38:e6:80:aa:85:8c:af:09:ae:db:e5:3b:3c:d1: 84:1b:01:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzZDODExMC8GA1UEBRMoMDM0OTI3NzcyRTUxRTA4NTVCMTBGRDUwMkI4MTZGMjQz NDYxOUJGMjAeFw0yNjA5MTkwODI0MzNaFw0yNjA5MjYwODI0MzNaMBgxFjAUBgNV BAMTDTZhYWU0NmMyLWQ3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNgHoYSymwIv2FjUU8mCDQ5p5qyqXT4M+ZdO2zYbk3BvjdrL+ZVPMWfNn7OOrl hoyILXtUyHkzUM+MlJ7MyNY36knTYjGpP76aDTyCbDws/c99phYgDSOBH7QymPwB wIgpgj37sH2t84zSVbtGWTc3mM4QBYu9lnc0xXfb8/30iuxAvPxpWQJwrUcS9R3I J2cFuy3lgdKq3m1Mm8cS8yuyKBg21LNJpRtDWD3YevLsOiArsdHak25xzjQ77Oyy 6LGHvzFi91IDf/327tlwGz8IclzhOD0PJ3Rl0yLyLe1wQX2UQN29y1QSJwJqFNQx dwMqWphvj2XOO03GvlVofhkZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjKocDUov 5PDxcGvWfRmApMuJv4wwHwYDVR0jBBgwFoAUA0kndy5R4IVbEP1QK4FvJDRhm/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NkM4LzNBNjY1MDIwNDRB MzExRjFCREU5MEEzRkIxODMzNzczL0Ewa25keTVSNElWYkVQMVFLNEZ2SkRSaG1f SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTBrbmR5NVI0SVZiRVAxUUs0RnZKRFJobV9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NkM4LzNBNjY1MDIwNDRBMzExRjFCREU5MEEzRkIxODMzNzczL0Ewa25keTVSNElW YkVQMVFLNEZ2SkRSaG1fSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBJwCDQEkm7QIMemryqmE9LB/0g7gaI5H/16qbS0d/5Ee8e29lpRIOvRvyV/rPS mkhUAb8Wy1tm0EsWUQYfI9E11K+CRLmiWF0iX/ayUQxoUwEeCix9wOnkB3NpT/vf GCfsaBZFntGUWAM5Xxd+BBaoefXGN3JCuPDCl7vBJvU207Rm/L8CvQ019VNcjtHK Por8igwX1oz76Ed9FPD4vOLLGDtWCzc+ftaR+D9h8AOFpEom5oxrQIQbwDQw5Xsb pIHomlnuIa518ROfTQvCm7JQw0BrGPqvI9NX6EkCMy/y8aV5YVMl51+TW3Tmwwni OOaAqoWMrwmu2+U7PNGEGwFF -----END CERTIFICATE-----Generated at Sun Sep 20 20:39:29 2026 by rpki-client