$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: BRQ2x5FNkLbVOQKeTzyWE5v/CrckeQhUddhhGDQboKs= Subject key identifier: 0C:85:73:A1:28:F5:94:90:25:B0:DA:09:49:E1:BC:CD:DF:34:1F:A5 Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0A21 Signing time: Sun 20 Sep 2026 19:39:29 +0000 Manifest this update: Sun 20 Sep 2026 19:39:29 +0000 Manifest next update: Sun 27 Sep 2026 19:39:29 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: NEfAhhMygkTblx8SrRD9nSelx5LYTY/wn3K3NtAp8Ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Sep 20 19:39:29 2026 GMT Not After : Sep 27 19:39:29 2026 GMT Subject: CN=6ab03671-46cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:40:81:85:eb:ff:6e:a0:09:99:9a:e0:4c: 1e:a2:7b:7b:d0:7b:f0:cd:20:22:e5:e3:f4:da:32: 75:97:65:56:c2:75:69:c0:20:2b:6b:a4:fa:d8:fc: 83:99:c4:30:4f:e9:5b:5f:2a:13:35:8f:fd:ee:ec: 9b:e9:e9:1c:52:11:23:68:7a:32:c0:2a:89:4c:de: ab:8c:da:a7:1c:86:e2:42:84:9d:d2:ba:15:d2:0e: 8e:8c:32:af:97:ec:a3:cf:02:c2:52:df:d7:68:9e: b2:b2:20:b2:0e:69:ac:a6:d8:48:49:31:74:2f:94: cc:4f:19:7c:08:74:f3:65:ab:25:24:76:ef:08:14: 89:d6:7c:22:0f:b4:be:b4:35:76:06:27:bb:56:30: af:fc:54:40:f0:34:76:07:31:c8:ac:8e:1c:4f:a4: 13:b2:61:97:a8:54:d8:73:82:de:9d:4d:8f:a1:4f: bf:ef:b8:03:b0:3b:06:d3:30:76:47:8e:1a:e0:77: 83:ea:b1:49:5e:0f:d3:35:5b:83:fb:99:09:a3:72: ac:ef:45:ec:f2:04:3c:b7:19:03:7a:bd:d8:32:25: 63:49:54:0f:95:b0:55:1b:c0:20:51:ff:47:ca:d3: 50:e7:c3:c2:15:45:10:3d:b0:7a:63:87:0c:7d:04: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:85:73:A1:28:F5:94:90:25:B0:DA:09:49:E1:BC:CD:DF:34:1F:A5 X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:70:7e:3b:0e:91:72:51:29:7a:4a:49:ca:c4:2d:fb:f9:6c: 97:d4:45:6f:b8:f4:c5:0f:79:ec:93:60:e9:e6:e0:10:c3:46: cf:96:40:8c:f9:61:17:af:e6:72:2a:e4:ad:6f:dd:61:ac:4d: 0d:c4:17:79:cd:5d:00:bb:31:9d:7f:6e:30:1c:bb:67:02:b7: a5:eb:94:d2:03:d7:a5:7c:e3:16:dc:54:60:de:43:b3:d7:64: 17:8d:5e:b3:94:a5:69:04:7c:8e:99:2f:0e:7b:92:0d:a5:a4: 4d:7b:e6:2a:09:44:3a:95:77:18:83:4e:56:fb:3b:e0:c2:d2: 5b:47:67:03:cc:06:02:f4:41:a1:5b:e9:c2:b7:84:9e:81:bf: 70:64:0b:d8:1a:c0:74:91:fa:27:ae:26:f4:7c:59:1b:0d:a1: f9:5d:96:74:f6:42:9e:cb:33:04:71:47:9c:2b:91:99:43:3f: e9:9d:08:62:59:a6:84:66:64:da:b1:b7:86:ba:e5:14:3d:0f: 7a:d0:dc:32:75:2d:27:13:75:80:ca:18:80:fc:50:18:c0:64: 0c:cb:57:4e:0f:08:bc:88:f8:55:1a:e5:cf:d5:5c:1a:dc:d1: 2c:74:c9:c9:39:54:5b:57:1e:db:bd:e3:e0:be:e4:16:ff:93: 98:37:7f:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjYwOTIwMTkzOTI5WhcNMjYwOTI3MTkzOTI5WjAYMRYwFAYD VQQDEw02YWIwMzY3MS00NmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxNAgYXr/26gCZma4Eweont70HvwzSAi5eP02jJ1l2VWwnVpwCAra6T62PyD mcQwT+lbXyoTNY/97uyb6ekcUhEjaHoywCqJTN6rjNqnHIbiQoSd0roV0g6OjDKv l+yjzwLCUt/XaJ6ysiCyDmmspthISTF0L5TMTxl8CHTzZaslJHbvCBSJ1nwiD7S+ tDV2Bie7VjCv/FRA8DR2BzHIrI4cT6QTsmGXqFTYc4LenU2PoU+/77gDsDsG0zB2 R44a4HeD6rFJXg/TNVuD+5kJo3Ks70Xs8gQ8txkDer3YMiVjSVQPlbBVG8AgUf9H ytNQ58PCFUUQPbB6Y4cMfQSOsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyFc6Eo 9ZSQJbDaCUnhvM3fNB+lMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjnB+Ow6RclEpekpJysQt+/lsl9RFb7j0xQ957JNg6ebgEMNGz5ZAjPlhF6/m cirkrW/dYaxNDcQXec1dALsxnX9uMBy7ZwK3peuU0gPXpXzjFtxUYN5Ds9dkF41e s5SlaQR8jpkvDnuSDaWkTXvmKglEOpV3GINOVvs74MLSW0dnA8wGAvRBoVvpwreE noG/cGQL2BrAdJH6J64m9HxZGw2h+V2WdPZCnsszBHFHnCuRmUM/6Z0IYlmmhGZk 2rG3hrrlFD0PetDcMnUtJxN1gMoYgPxQGMBkDMtXTg8IvIj4VRrlz9VcGtzRLHTJ yTlUW1ce273j4L7kFv+TmDd/DQ== -----END CERTIFICATE-----Generated at Sun Sep 20 23:36:17 2026 by rpki-client