$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft File: 4dFD2djqAiJMHLDJFey4TuKLWqo.mft (raw, json) Hash identifier: ed9tXzDMjakATF78FEG2Iqm5Ex4dSoue2nHgT4Dd/GY= Subject key identifier: FA:BC:59:A8:D0:D5:DF:CF:E0:BC:C8:C3:13:16:F2:7C:B9:2A:84:14 Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft Manifest number: 028A Signing time: Mon 21 Sep 2026 01:52:48 +0000 Manifest this update: Mon 21 Sep 2026 01:52:48 +0000 Manifest next update: Mon 28 Sep 2026 01:52:48 +0000 Files and hashes: 1: 4dFD2djqAiJMHLDJFey4TuKLWqo.crl (hash: NwpeI/azTSPJoBkMLuH/uBWz9/O5xykZIqlhW6HHo5M=) 2: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (hash: sE0FXcv6AB6dmDFKiWcu8KQiOOpk2VVY0iuOGiUmgoI=) 3: 916EFEE0DA6011ED9BC6175FC4F9AE02.roa (hash: RremoPLYHwOMsWIoI3OXSWs8zLNwfSA8SoWwpFXqkZA=) 4: 9283C1F8DA6011ED9BC6175FC4F9AE02.roa (hash: LUHYZ/6kqurL/jOA9WsqOIbXqqpGM7KM4Mk7l+DENE0=) 5: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (hash: GKQTSqIzwIY4GOth+FkYLT5SOAlB26R/4wVLOg8mq+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Validity Not Before: Sep 21 01:52:48 2026 GMT Not After : Sep 28 01:52:48 2026 GMT Subject: CN=6ab08df0-5722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:22:24:f0:c2:5e:f9:5a:03:43:95:2c:35: 28:ac:4f:6b:9c:1c:bd:89:ad:92:f7:00:aa:36:bc: b2:c4:cf:3c:15:9d:53:45:24:ed:40:45:96:95:62: f6:e2:16:38:7e:8b:cf:69:22:ba:0c:10:78:23:99: b7:2b:ca:5b:fa:da:36:4a:8c:db:36:40:06:99:f4: 5f:79:b7:34:5d:8f:50:5e:c5:67:27:a6:af:14:93: f9:6f:30:57:7d:4b:fd:b1:db:5a:51:78:ad:e9:b7: 63:5a:88:b5:37:b6:28:77:bc:28:90:17:81:43:d3: 00:56:be:6d:d4:55:35:54:f2:43:a2:44:b1:60:ea: 0e:75:b2:82:40:74:89:3b:42:9b:13:a6:76:43:88: be:20:cd:aa:b3:39:c3:bf:60:1a:3e:c2:3e:39:ef: 8d:1f:7f:84:3d:cd:7a:a1:8a:13:a0:eb:e5:b5:99: 99:ef:af:09:52:3f:4d:11:5f:3c:74:8e:f4:e1:44: fa:e4:e6:37:65:07:82:a7:11:54:f4:f6:46:7f:77: c2:d4:78:36:bf:b1:3b:df:7c:a3:f7:80:9f:d1:5c: 8f:84:9c:0e:bd:85:93:81:72:e9:25:0c:eb:28:94: ea:fc:4e:37:08:12:e3:c5:23:13:16:55:44:e4:f1: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:59:A8:D0:D5:DF:CF:E0:BC:C8:C3:13:16:F2:7C:B9:2A:84:14 X509v3 Authority Key Identifier: keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:56:87:d4:eb:43:3c:e1:6a:52:35:d2:3c:93:d0:fd:e9:05: fa:2e:84:38:56:14:28:bc:3a:83:6c:18:6a:59:69:74:ac:08: 0d:cc:dc:3b:a9:89:bf:2d:6b:60:f5:33:02:ce:26:6f:6f:16: 25:c3:9c:07:7b:55:3d:80:29:fe:1d:1e:d6:74:39:65:cb:e9: c0:53:25:1c:67:7b:b1:8c:2c:82:bf:5f:f6:dd:65:35:51:ee: 7d:8e:cc:db:31:8a:19:a4:d0:02:77:b4:0e:bd:41:77:0e:f6: 96:7e:aa:a7:d9:51:a4:91:7a:02:eb:fd:c4:24:42:49:98:60: e1:24:68:60:1c:15:7c:cb:44:90:d0:54:74:29:fa:73:56:33: 79:50:3a:c9:cf:0b:c6:72:39:05:5d:ca:45:d5:58:8f:d7:b9: d3:93:f8:83:20:69:91:6b:9b:a3:ee:2d:81:0f:b0:b3:23:31: 08:54:64:b7:d8:c8:5e:fe:27:8b:8c:1a:62:d9:cb:97:59:3c: b4:46:18:19:83:23:ee:e2:c7:93:b4:b9:5e:01:43:82:9b:eb: 31:82:18:09:af:31:20:0c:45:e3:9f:74:d5:ba:9d:79:88:15: 1e:f6:3c:c0:33:35:d6:12:4b:cd:c4:0b:c0:0c:3b:b1:21:a1: 25:85:90:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBDOTE1RUNCODRF RTI4QjVBQUEwHhcNMjYwOTIxMDE1MjQ4WhcNMjYwOTI4MDE1MjQ4WjAYMRYwFAYD VQQDEw02YWIwOGRmMC01NzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvgiJPDCXvlaA0OVLDUorE9rnBy9ia2S9wCqNryyxM88FZ1TRSTtQEWWlWL2 4hY4fovPaSK6DBB4I5m3K8pb+to2SozbNkAGmfRfebc0XY9QXsVnJ6avFJP5bzBX fUv9sdtaUXit6bdjWoi1N7Yod7wokBeBQ9MAVr5t1FU1VPJDokSxYOoOdbKCQHSJ O0KbE6Z2Q4i+IM2qsznDv2AaPsI+Oe+NH3+EPc16oYoToOvltZmZ768JUj9NEV88 dI704UT65OY3ZQeCpxFU9PZGf3fC1Hg2v7E733yj94Cf0VyPhJwOvYWTgXLpJQzr KJTq/E43CBLjxSMTFlVE5PGIVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPq8WajQ 1d/P4LzIwxMW8ny5KoQUMB8GA1UdIwQYMBaAFOHRQ9nY6gIiTBywyRXsuE7ii1qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9DRTQ0NUJEMERB NUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFpSk1ITERKRmV5NFR1S0xX cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkRkQyZGpxQWlKTUhMREpGZXk0VHVLTFdxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEM1My9DRTQ0NUJEMERBNUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFp Sk1ITERKRmV5NFR1S0xXcW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFaH1OtDPOFqUjXSPJPQ/ekF+i6EOFYUKLw6g2wYallpdKwIDczcO6mJvy1r YPUzAs4mb28WJcOcB3tVPYAp/h0e1nQ5ZcvpwFMlHGd7sYwsgr9f9t1lNVHufY7M 2zGKGaTQAne0Dr1Bdw72ln6qp9lRpJF6Auv9xCRCSZhg4SRoYBwVfMtEkNBUdCn6 c1YzeVA6yc8LxnI5BV3KRdVYj9e505P4gyBpkWubo+4tgQ+wsyMxCFRkt9jIXv4n i4waYtnLl1k8tEYYGYMj7uLHk7S5XgFDgpvrMYIYCa8xIAxF45901bqdeYgVHvY8 wDM11hJLzcQLwAw7sSGhJYWQqQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:19:02 2026 by rpki-client