$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json) Hash identifier: MGMt8KJiNTxK1onyyccl8CjdPag8uopqZA0nuNapaoI= Subject key identifier: 45:BA:20:AA:7E:39:07:6E:A7:EA:F2:11:29:46:A0:9C:8D:91:7A:2C Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Certificate serial: 3581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft Manifest number: 3580 Signing time: Tue 22 Sep 2026 14:27:38 +0000 Manifest this update: Tue 22 Sep 2026 14:27:38 +0000 Manifest next update: Tue 29 Sep 2026 14:27:38 +0000 Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: Xgz2US9A+q7zBqM9q88gejVOcTtppKhXnVpHlsqBrb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13697 (0x3581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Validity Not Before: Sep 22 14:27:38 2026 GMT Not After : Sep 29 14:27:38 2026 GMT Subject: CN=6ab2905a-0519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:74:21:d4:9a:91:23:73:83:03:bc:bd:26: ae:a8:1e:c3:96:d5:ca:ef:83:b0:1d:f9:2c:55:b7: 0b:87:97:2b:98:d1:f0:75:da:45:f7:04:77:d7:b4: e0:60:b8:c9:b6:02:e5:d7:79:5e:87:32:e1:aa:9b: 6e:52:52:94:b2:e9:7c:6a:3e:0a:79:d0:49:30:13: ad:a0:4f:ca:93:9d:8a:35:d9:05:18:cb:ff:23:c9: 63:8e:8a:6e:e4:73:17:cc:82:43:d5:af:99:97:5b: fb:2b:52:f8:a2:ba:be:a8:db:84:f4:9d:8c:cd:e8: 9a:d3:98:cb:a7:1d:45:3c:29:e9:d6:6b:e7:02:6e: 5a:d8:47:a7:d5:b7:fb:dd:35:44:ca:5d:8b:13:6d: dc:b7:90:fb:60:19:17:82:82:64:b8:7b:b3:b9:d9: ee:4a:f1:29:63:4e:ae:ac:0a:2d:64:88:33:40:10: 90:40:61:80:2d:f5:f9:39:55:2d:2a:26:38:e9:e3: f9:6e:c7:0c:b1:30:8c:ad:5d:62:b3:bb:51:26:b1: 47:26:b7:6d:79:a6:70:9b:94:12:db:c5:78:39:65: f1:55:1b:06:c8:1a:c5:52:c2:14:b0:b6:b4:79:6a: 4e:8d:ef:37:0c:12:de:26:bd:80:47:3e:c2:e3:f2: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BA:20:AA:7E:39:07:6E:A7:EA:F2:11:29:46:A0:9C:8D:91:7A:2C X509v3 Authority Key Identifier: keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:20:43:6c:4d:89:e3:d8:5c:5d:df:d0:b0:2e:fd:dd:cf:05: 28:49:0d:58:39:e8:2b:a4:a3:1d:f1:94:28:df:a5:3e:b8:0a: f5:97:e5:7b:d6:1b:fd:9e:f6:c1:01:c5:c9:fe:45:af:cc:15: c6:c1:27:36:30:16:49:6f:2b:70:82:01:4d:e3:81:40:b3:27: 3d:1c:a1:1c:60:47:f7:97:69:3a:d9:8e:a8:8f:99:68:58:96: 06:07:1a:37:37:71:fb:d9:06:f5:55:78:9d:65:7a:d4:35:0e: e8:19:d9:43:db:ad:31:e7:1c:b5:33:42:b5:73:28:9d:c1:d8: 0f:5c:1d:0a:64:ba:dd:57:c3:dc:2f:0f:ef:dc:55:a4:2d:87: d7:b4:b7:bf:3f:1d:b5:99:e6:a4:2f:d5:46:74:d8:5e:1d:ed: 72:bc:0d:91:5e:ac:c7:0f:7c:a9:e6:47:0f:b9:0a:1e:85:55: 19:4c:9a:83:b8:cc:27:e3:9a:01:a9:d7:85:c3:ff:92:ab:c8: 41:e1:70:1d:8a:a2:3b:d3:2b:bd:41:6c:73:9a:74:64:69:49: ed:7c:8a:20:99:4b:32:b5:ec:e9:24:a0:80:79:ad:a5:00:3c: 15:1b:ba:0e:1d:84:6d:eb:73:7f:d6:fb:3c:c1:2f:7a:6f:37: 64:37:9a:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw RDZGQjc5NEQwHhcNMjYwOTIyMTQyNzM4WhcNMjYwOTI5MTQyNzM4WjAYMRYwFAYD VQQDEw02YWIyOTA1YS0wNTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MZ0IdSakSNzgwO8vSauqB7DltXK74OwHfksVbcLh5crmNHwddpF9wR317Tg YLjJtgLl13lehzLhqptuUlKUsul8aj4KedBJMBOtoE/Kk52KNdkFGMv/I8ljjopu 5HMXzIJD1a+Zl1v7K1L4orq+qNuE9J2Mzeia05jLpx1FPCnp1mvnAm5a2Een1bf7 3TVEyl2LE23ct5D7YBkXgoJkuHuzudnuSvEpY06urAotZIgzQBCQQGGALfX5OVUt KiY46eP5bscMsTCMrV1is7tRJrFHJrdteaZwm5QS28V4OWXxVRsGyBrFUsIUsLa0 eWpOje83DBLeJr2ARz7C4/JAtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEW6IKp+ OQdup+ryESlGoJyNkXosMB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp TG9yQTZmOXMxWUVOYjdlVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJyBDbE2J49hcXd/QsC793c8FKEkNWDnoK6SjHfGUKN+lPrgK9Zfle9Yb/Z72 wQHFyf5Fr8wVxsEnNjAWSW8rcIIBTeOBQLMnPRyhHGBH95dpOtmOqI+ZaFiWBgca Nzdx+9kG9VV4nWV61DUO6BnZQ9utMecctTNCtXMoncHYD1wdCmS63VfD3C8P79xV pC2H17S3vz8dtZnmpC/VRnTYXh3tcrwNkV6sxw98qeZHD7kKHoVVGUyag7jMJ+Oa AanXhcP/kqvIQeFwHYqiO9MrvUFsc5p0ZGlJ7XyKIJlLMrXs6SSggHmtpQA8FRu6 Dh2Ebetzf9b7PMEvem83ZDeakw== -----END CERTIFICATE-----Generated at Tue Sep 22 22:16:10 2026 by rpki-client