$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft File: 4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json) Hash identifier: zd17wYX0znYzWyQMTZ8GH+5B5IIZuWs4VdiynuAnw/4= Subject key identifier: 8A:88:F3:59:C3:23:B2:71:3D:63:64:6F:96:D1:83:12:BC:F8:B8:D4 Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft Manifest number: 0214 Signing time: Mon 21 Sep 2026 02:57:18 +0000 Manifest this update: Mon 21 Sep 2026 02:57:18 +0000 Manifest next update: Mon 28 Sep 2026 02:57:18 +0000 Files and hashes: 1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: 26wH29w2Mm4EvnJD9Ao0Jh20kdN4a/lPQo7mLb1qRa0=) 2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: k5DYksJixKDhcJPFopcX+J9k9P/tVTzxnGH1/taUbzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Validity Not Before: Sep 21 02:57:18 2026 GMT Not After : Sep 28 02:57:18 2026 GMT Subject: CN=6ab09d0e-675c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:ab:18:b5:eb:83:2d:85:76:a6:6c:17:52: 5c:e0:69:70:ee:08:c3:d5:96:d1:50:63:95:8f:80: 36:24:f9:1f:d6:21:c4:1c:31:1c:02:d8:0b:48:d8: 02:49:e4:dc:44:d7:11:33:ce:97:22:de:92:3d:4c: c3:6d:b4:be:ea:84:e5:59:fb:4a:a4:e3:67:4e:cd: f4:26:4b:ec:94:f8:bb:53:f2:5f:30:07:51:35:f9: f2:84:c0:6c:37:0f:7c:a1:f3:8e:ae:51:87:b0:3b: 58:54:f6:62:05:de:44:0b:0f:55:d1:23:8f:fb:05: 52:62:85:04:14:00:e8:d4:87:f7:00:3e:63:5a:c0: 3e:b5:a2:90:c9:c9:be:35:14:80:7b:4b:5d:a3:e4: d9:82:9c:1c:95:67:85:ca:f0:4b:db:e2:6e:ff:99: a7:aa:91:32:e0:75:fc:43:b6:2e:c8:77:fb:3c:82: 23:85:56:de:26:15:20:be:cb:51:b8:14:51:75:ad: 65:ec:c2:c9:fd:bf:6b:63:2e:48:e2:7c:a0:d2:9d: ad:89:c8:02:00:fe:a5:79:c5:fa:4f:c8:66:77:9a: 8e:76:97:3a:94:1c:97:e0:e5:32:5b:1c:74:84:6c: 82:b7:95:a2:de:65:02:a5:6c:dc:50:e1:8f:7b:cd: 97:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:F3:59:C3:23:B2:71:3D:63:64:6F:96:D1:83:12:BC:F8:B8:D4 X509v3 Authority Key Identifier: keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:0e:f9:5b:3a:b5:ad:21:63:22:dd:6b:b2:cb:aa:50:12:3d: 39:3c:77:df:c1:f5:a2:60:b5:b7:48:90:a2:74:b5:8a:f5:e0: cf:9f:4a:8a:43:cd:1e:57:05:08:dc:7b:62:f4:5b:9a:ab:b5: 79:ac:f0:56:9e:6a:cc:18:63:6f:36:9d:67:30:4f:6a:83:d8: ac:4c:5d:6e:e9:7d:4c:73:dc:ea:55:73:1e:b1:5e:23:0a:f4: f7:a2:e6:9c:9f:6b:31:df:17:48:7f:db:e0:e2:64:c9:25:ed: 42:6d:36:3a:30:45:d9:6d:ad:88:70:f0:fa:45:fb:2a:3a:7d: 4a:c1:e4:56:0d:ae:fb:11:68:0b:a9:4c:e9:85:00:ed:f1:f4: 00:58:59:3b:47:36:21:ff:89:8e:56:32:b9:9d:3d:bb:a3:6b: 0a:b5:43:04:bc:3f:6c:1a:30:87:f7:d9:26:1e:df:88:b6:64: 10:82:2f:26:aa:8d:68:e7:cc:4c:88:59:28:d1:42:7b:df:a4: 1e:aa:13:1b:93:c4:c8:bf:5e:0d:cf:f0:8e:df:74:b5:ce:2b: 85:ff:ee:e6:b8:96:e7:3d:df:fd:12:8b:b3:27:b9:fb:e7:bc: 44:e3:72:bb:e9:62:77:34:96:70:29:63:de:76:e9:df:06:a2: 30:27:7f:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRFRDkxMTAvBgNVBAUTKEUxNkU0RjY1RTJFMzk3RTlGQ0UwNTc4NUEyNjVDNjE5 N0M4MjIwQzkwHhcNMjYwOTIxMDI1NzE4WhcNMjYwOTI4MDI1NzE4WjAYMRYwFAYD VQQDEw02YWIwOWQwZS02NzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpCrGLXrgy2FdqZsF1Jc4Glw7gjD1ZbRUGOVj4A2JPkf1iHEHDEcAtgLSNgC SeTcRNcRM86XIt6SPUzDbbS+6oTlWftKpONnTs30JkvslPi7U/JfMAdRNfnyhMBs Nw98ofOOrlGHsDtYVPZiBd5ECw9V0SOP+wVSYoUEFADo1If3AD5jWsA+taKQycm+ NRSAe0tdo+TZgpwclWeFyvBL2+Ju/5mnqpEy4HX8Q7YuyHf7PIIjhVbeJhUgvstR uBRRda1l7MLJ/b9rYy5I4nyg0p2ticgCAP6lecX6T8hmd5qOdpc6lByX4OUyWxx0 hGyCt5Wi3mUCpWzcUOGPe82X8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqI81nD I7JxPWNkb5bRgxK8+LjUMB8GA1UdIwQYMBaAFOFuT2Xi45fp/OBXhaJlxhl8giDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REVEOS9ERjE1QjNCODg1 MjkxMUVFQUZEMDRDODRDNEY5QUUwMi80VzVQWmVMamwtbjg0RmVGb21YR0dYeUNJ TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRXNVBaZUxqbC1uODRGZUZvbVhHR1h5Q0lNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REVEOS9ERjE1QjNCODg1MjkxMUVFQUZEMDRDODRDNEY5QUUwMi80VzVQWmVMamwt bjg0RmVGb21YR0dYeUNJTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVw75Wzq1rSFjIt1rssuqUBI9OTx338H1omC1t0iQonS1ivXgz59KikPNHlcF CNx7YvRbmqu1eazwVp5qzBhjbzadZzBPaoPYrExdbul9THPc6lVzHrFeIwr096Lm nJ9rMd8XSH/b4OJkySXtQm02OjBF2W2tiHDw+kX7Kjp9SsHkVg2u+xFoC6lM6YUA 7fH0AFhZO0c2If+JjlYyuZ09u6NrCrVDBLw/bBowh/fZJh7fiLZkEIIvJqqNaOfM TIhZKNFCe9+kHqoTG5PEyL9eDc/wjt90tc4rhf/u5riW5z3f/RKLsye5++e8RONy u+lidzSWcClj3nbp3waiMCd/Hg== -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:12 2026 by rpki-client