$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft File: zURUsk4_99x1y76Rm92nnEe5Xqc.mft (raw, json) Hash identifier: 3W+HHgH6cFcq0D4QttgQ/+46+TpTly1Sj93RQrlGO0Q= Subject key identifier: AC:2D:C5:86:97:A7:C1:D4:68:FC:1B:AA:02:1B:A8:49:AC:2F:48:52 Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7 Certificate issuer: /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft Manifest number: 4A Signing time: Wed 23 Sep 2026 00:20:13 +0000 Manifest this update: Wed 23 Sep 2026 00:20:12 +0000 Manifest next update: Wed 30 Sep 2026 00:20:12 +0000 Files and hashes: 1: zURUsk4_99x1y76Rm92nnEe5Xqc.crl (hash: 5WE4wTmIDCTE78U4ITwdkBJvXanTe06EP+HBr2L8yGA=) 2: 4BA0B918AA8611F1B5EFA27B6B11F970.roa (hash: cFZoTrSbsgmWIouraR3onH4yiL+HtgAYY6VVqfkArtw=) 3: A53F1E96647311F1BC2A35D47947A888.roa (hash: aWkLi47uIb9GIJOKXHkRTH7Cyo2StRxOnkwZBq2MqlE=) 4: BC0F1A48A67911F1932095496A11F970.roa (hash: glD139X26ew8NYKcqT1AVGm1INFPUxYbUokwUTsw9YM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7 Validity Not Before: Sep 23 00:20:12 2026 GMT Not After : Sep 30 00:20:12 2026 GMT Subject: CN=6ab31b3c-e396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:20:91:46:df:82:c2:2a:4a:dd:d8:65:31: 1e:43:6b:38:d4:23:1f:21:e3:22:82:0e:e0:03:c4: 48:15:d2:4b:40:90:9c:45:6e:52:47:3b:54:13:ce: ca:c8:a8:ac:bb:e2:5a:46:75:92:dd:17:66:d7:5d: f4:f5:41:ca:42:3d:83:89:2f:4d:82:51:b3:70:79: 1b:a3:fc:9b:22:67:34:23:ad:88:7b:2b:5b:46:c8: 41:ef:f9:18:7e:7c:b2:59:44:87:d4:9f:6c:30:56: 4d:85:2e:08:03:d5:52:02:42:df:9b:22:7d:59:fb: 4c:f6:6e:01:78:68:f5:67:02:3a:35:f0:21:ed:2d: 42:d0:5e:49:ed:ce:68:a3:bc:fe:3f:9f:0e:04:30: 5f:07:e9:b4:86:54:98:bf:a6:49:48:9a:34:96:d4: 08:5c:bd:c1:af:fd:3e:ed:ce:ee:be:1f:86:89:2a: 68:fb:d4:28:f8:59:64:14:36:9f:eb:3d:96:8c:92: 8a:86:d0:07:85:b9:16:73:5b:58:f1:a2:32:2f:0e: 54:e7:e3:38:72:96:80:7d:de:d6:76:72:e3:2b:0b: b1:cc:4f:0f:b3:39:4f:6c:ba:98:f6:40:31:35:e6: 8d:7b:aa:98:5c:76:87:0a:e8:5a:37:fa:e8:01:b9: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2D:C5:86:97:A7:C1:D4:68:FC:1B:AA:02:1B:A8:49:AC:2F:48:52 X509v3 Authority Key Identifier: keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:97:0b:96:65:87:04:95:e4:a8:dc:3b:c6:b0:0e:ac:26:dc: 89:c0:85:07:6d:27:bd:fa:ae:89:07:6a:7a:ba:ae:c5:53:63: 0d:59:41:36:60:c9:47:19:47:26:c8:fd:4a:b9:ab:04:40:b0: 1e:ac:8a:e3:17:ad:24:fb:fa:8d:cb:b6:52:27:81:77:45:91: e7:98:ea:41:00:34:c2:64:bf:83:bd:22:21:88:0c:c2:2c:5e: 22:c5:0f:40:26:51:4e:eb:b4:14:3c:6b:16:88:28:bf:5a:86: 56:07:bd:aa:57:0f:0f:9b:c2:d7:39:23:de:d0:07:a4:29:1e: 96:f9:b6:28:81:bf:2a:29:e5:70:a8:b5:a8:d2:a0:22:bd:c6: 1f:07:a0:8a:e0:cb:ce:8c:74:b6:dc:b3:6c:72:1f:0f:58:ad: 21:ef:61:7f:33:6e:03:8b:43:aa:e6:e9:6b:3c:a2:b1:90:9a: bb:75:63:49:ab:72:85:d1:6a:46:3c:a1:f7:c9:fa:e6:77:14: e0:15:51:21:2c:65:ef:5d:f5:72:5e:07:f2:c6:6f:55:f3:c6: d2:12:02:3f:47:f6:b7:a7:1e:da:fc:3e:a2:8d:0c:6d:22:47: 6f:61:59:4a:01:fc:da:55:1c:62:08:5e:8a:bf:79:6d:ca:e8: fe:c0:78:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjk5OTExMC8GA1UEBRMoQ0Q0NDU0QjI0RTNGRjdEQzc1Q0JCRTkxOUJEREE3OUM0 N0I5NUVBNzAeFw0yNjA5MjMwMDIwMTJaFw0yNjA5MzAwMDIwMTJaMBgxFjAUBgNV BAMTDTZhYjMxYjNjLWUzOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaUiCRRt+CwipK3dhlMR5DazjUIx8h4yKCDuADxEgV0ktAkJxFblJHO1QTzsrI qKy74lpGdZLdF2bXXfT1QcpCPYOJL02CUbNweRuj/JsiZzQjrYh7K1tGyEHv+Rh+ fLJZRIfUn2wwVk2FLggD1VICQt+bIn1Z+0z2bgF4aPVnAjo18CHtLULQXkntzmij vP4/nw4EMF8H6bSGVJi/pklImjSW1AhcvcGv/T7tzu6+H4aJKmj71Cj4WWQUNp/r PZaMkoqG0AeFuRZzW1jxojIvDlTn4zhyloB93tZ2cuMrC7HMTw+zOU9supj2QDE1 5o17qphcdocK6Fo3+ugBuUczAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrC3Fhpen wdRo/BuqAhuoSawvSFIwHwYDVR0jBBgwFoAUzURUsk4/99x1y76Rm92nnEe5Xqcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTk5L0FFRkM1NUIwNEZG MjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4MXk3NlJtOTJubkVlNVhx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvelVSVXNrNF85OXgxeTc2Um05Mm5uRWU1WHFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy OTk5L0FFRkM1NUIwNEZGMjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4 MXk3NlJtOTJubkVlNVhxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSlwuWZYcEleSo3DvGsA6sJtyJwIUHbSe9+q6JB2p6uq7FU2MNWUE2YMlHGUcm yP1KuasEQLAerIrjF60k+/qNy7ZSJ4F3RZHnmOpBADTCZL+DvSIhiAzCLF4ixQ9A JlFO67QUPGsWiCi/WoZWB72qVw8Pm8LXOSPe0AekKR6W+bYogb8qKeVwqLWo0qAi vcYfB6CK4MvOjHS23LNsch8PWK0h72F/M24Di0Oq5ulrPKKxkJq7dWNJq3KF0WpG PKH3yfrmdxTgFVEhLGXvXfVyXgfyxm9V88bSEgI/R/a3px7a/D6ijQxtIkdvYVlK AfzaVRxiCF6Kv3ltyuj+wHiS -----END CERTIFICATE-----Generated at Wed Sep 23 15:29:39 2026 by rpki-client