$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: qRvKByhzkxIljNJ7GeOvS2k98zxWHgdlBq8gmfs7++s= Subject key identifier: 77:9F:1E:DB:DC:1B:1B:D6:07:2E:92:9F:F6:4D:4A:0C:8F:19:73:6C Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 0558 Signing time: Sun 20 Sep 2026 20:11:23 +0000 Manifest this update: Sun 20 Sep 2026 20:11:23 +0000 Manifest next update: Sun 27 Sep 2026 20:11:23 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: hfynAFeTmM6nAAN6PxqZFm/8+xn92zVkE2wqTVWFbsE=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=) 4: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: YA17LyHTfthDzdk1fJZ4Q1wQt3Gaa9uu+WHv2HF57n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Sep 20 20:11:23 2026 GMT Not After : Sep 27 20:11:23 2026 GMT Subject: CN=6ab03deb-a402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e0:d5:a4:d5:c6:ec:78:f8:f0:7b:4e:9e:cb: 0a:05:dd:01:3d:9d:dc:fc:39:8f:be:c0:1b:e0:f2: e5:24:69:22:0a:b8:97:5a:8f:28:32:5c:4b:22:4a: 8d:27:9f:68:73:8d:1a:d2:46:a5:3c:12:77:69:52: b5:b1:d7:d2:85:b7:b4:0e:b1:2f:b0:85:2d:c6:ba: 10:72:29:02:c2:85:b3:0f:f4:f3:98:d0:02:2f:db: 5d:31:fe:e0:4a:ef:05:4a:18:6c:46:5c:34:d7:83: 54:83:bc:95:5d:f3:fd:85:2e:a3:50:85:cd:47:c9: 77:d4:ae:d6:2d:82:ae:f8:0a:93:4e:2c:36:5b:c3: f3:76:1f:f5:f3:84:53:c7:7f:fb:cc:2b:df:16:91: 2d:b9:85:88:77:d8:cc:e9:23:94:56:3a:2e:8f:b0: ba:7f:e1:6d:6d:d5:8e:d6:77:1a:98:32:e8:f5:eb: 8a:87:71:e7:35:fa:71:0a:aa:3d:1c:11:9d:e3:1c: 71:35:b9:7e:24:e3:30:ca:ab:56:df:d2:4f:00:21: 76:8e:87:3a:07:cf:fe:d8:b7:69:22:b6:32:2e:39: cb:85:cd:85:c6:1a:32:54:63:9c:bd:96:07:46:66: 3c:f7:bf:c4:da:65:67:f4:c6:ca:17:1b:ee:5e:f5: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9F:1E:DB:DC:1B:1B:D6:07:2E:92:9F:F6:4D:4A:0C:8F:19:73:6C X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c1:e7:c0:ee:01:f1:65:17:23:55:c6:26:ab:43:db:6a:87: 3f:64:19:e6:5e:2c:2d:05:b5:95:33:3a:58:5f:cc:58:32:ad: ca:e6:f4:4c:7d:2f:56:8b:3b:11:31:16:23:7b:d6:b9:84:9a: 4d:85:4a:06:25:ce:ee:ab:94:43:ee:8e:70:3a:2b:bd:1d:3b: 74:d8:65:a4:b7:42:76:d6:f5:f7:d8:6e:a4:4f:74:bd:70:fd: 64:ba:5c:5b:f4:6f:87:f5:14:c3:f8:63:cf:a2:1d:c8:a4:39: 19:ed:2e:bb:8f:56:5d:4c:b6:89:f3:17:bb:71:c9:da:75:ea: 90:ff:7e:37:26:d9:3a:e8:61:1b:f7:17:15:fa:3c:01:bd:2b: 51:f0:4e:a5:3a:17:ac:b5:27:26:67:61:3a:ba:ad:16:49:a6: f7:ce:68:04:07:ac:41:21:03:ab:c1:e2:5f:1d:20:0c:39:ce: 07:15:40:2b:03:66:64:f4:ec:cf:46:b7:3e:a5:01:54:f5:c9: 39:26:31:c1:89:60:0c:cd:7a:62:72:b8:7a:88:97:dc:36:66: 76:b8:25:5f:63:ac:70:ae:33:e4:8a:b9:af:88:fc:cd:1e:a2: ed:60:d2:d3:05:ba:4e:ba:a9:f9:bc:17:11:18:e2:4e:d5:98: aa:35:79:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjYwOTIwMjAxMTIzWhcNMjYwOTI3MjAxMTIzWjAYMRYwFAYD VQQDEw02YWIwM2RlYi1hNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7eDVpNXG7Hj48HtOnssKBd0BPZ3c/DmPvsAb4PLlJGkiCriXWo8oMlxLIkqN J59oc40a0kalPBJ3aVK1sdfShbe0DrEvsIUtxroQcikCwoWzD/TzmNACL9tdMf7g Su8FShhsRlw014NUg7yVXfP9hS6jUIXNR8l31K7WLYKu+AqTTiw2W8Pzdh/184RT x3/7zCvfFpEtuYWId9jM6SOUVjouj7C6f+FtbdWO1ncamDLo9euKh3HnNfpxCqo9 HBGd4xxxNbl+JOMwyqtW39JPACF2joc6B8/+2LdpIrYyLjnLhc2FxhoyVGOcvZYH RmY897/E2mVn9MbKFxvuXvWg6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHefHtvc GxvWBy6Sn/ZNSgyPGXNsMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALsHnwO4B8WUXI1XGJqtD22qHP2QZ5l4sLQW1lTM6WF/MWDKtyub0TH0vVos7 ETEWI3vWuYSaTYVKBiXO7quUQ+6OcDorvR07dNhlpLdCdtb199hupE90vXD9ZLpc W/Rvh/UUw/hjz6IdyKQ5Ge0uu49WXUy2ifMXu3HJ2nXqkP9+NybZOuhhG/cXFfo8 Ab0rUfBOpToXrLUnJmdhOrqtFkmm985oBAesQSEDq8HiXx0gDDnOBxVAKwNmZPTs z0a3PqUBVPXJOSYxwYlgDM16YnK4eoiX3DZmdrglX2OscK4z5Iq5r4j8zR6i7WDS 0wW6Trqp+bwXERjiTtWYqjV5MQ== -----END CERTIFICATE-----Generated at Mon Sep 21 13:22:47 2026 by rpki-client