$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft File: 4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft (raw, json) Hash identifier: /eJlVTPHqWtTxy6T5V37SokuUHtDtiAmYTvdCrVaTyY= Subject key identifier: 19:5C:C2:5A:79:D0:F5:BD:B2:45:24:BF:5F:E4:B0:54:56:DD:FD:C0 Authority key identifier: E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F Certificate issuer: /CN=A917BAC9/serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft Manifest number: 19 Signing time: Sat 19 Sep 2026 08:59:58 +0000 Manifest this update: Sat 19 Sep 2026 08:59:57 +0000 Manifest next update: Sat 26 Sep 2026 08:59:57 +0000 Files and hashes: 1: 4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl (hash: WMc0GIadRftnTFy1y4s1iu0wIrMhMQ/2pBoyJkT4NuE=) 2: A3F5B386915C11F1B31E34186B11F970.roa (hash: ZUF0HTnqvtt1SvtzMivVLP03khbxNjJ+Nf1N85kohao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC9, serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Validity Not Before: Sep 19 08:59:57 2026 GMT Not After : Sep 26 08:59:57 2026 GMT Subject: CN=6aae4f0d-bc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:17:61:92:28:42:56:0b:97:c9:28:dc:d1: 74:19:1a:5f:0a:a0:7c:f1:31:80:04:1d:c2:40:cf: ce:7a:a0:67:41:f5:71:02:96:68:35:40:e5:9a:86: 32:5e:1a:79:0b:89:2d:8d:2d:c4:30:38:1c:58:20: 5e:58:58:ff:bc:db:ff:2d:22:ef:79:97:82:de:94: ee:97:25:30:a3:1e:86:28:1f:dd:60:27:1d:6c:7c: 77:9a:46:ce:bb:7b:04:27:c4:29:36:b6:37:5b:3b: bb:62:20:ef:50:13:77:9a:dd:d7:ef:26:4d:53:61: 9e:bd:93:af:94:11:44:d8:6a:e9:75:2d:39:12:a9: cb:23:e1:e4:f8:07:f6:5a:34:d0:c8:48:ca:de:89: 45:7b:fd:71:2c:2f:9f:9d:b1:bd:70:57:96:95:0f: b3:39:31:aa:2c:31:ab:2e:3c:a0:da:a7:90:c4:c7: 84:bd:ab:ef:f0:6b:e1:75:76:5a:70:39:4d:3c:11: 81:85:b9:91:0d:84:22:19:61:37:b4:0e:7d:af:2b: 5a:0b:7f:15:15:33:68:ff:15:7e:5e:73:1d:ec:e8: 97:24:ff:02:62:9c:1a:df:3b:36:41:62:ca:5b:03: 15:ca:f8:78:d8:ed:78:5e:3c:64:dd:c9:56:d7:54: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5C:C2:5A:79:D0:F5:BD:B2:45:24:BF:5F:E4:B0:54:56:DD:FD:C0 X509v3 Authority Key Identifier: keyid:E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ab:84:61:c0:b6:7b:51:c9:18:85:f5:8c:91:4d:2f:91:93: 82:6e:e7:a5:ef:2b:13:6e:9f:33:57:f8:1e:25:a1:f5:a6:87: 43:49:dd:7e:43:fb:bf:d7:e6:c0:47:d2:c0:c7:d2:0e:f2:02: df:d0:09:a9:00:36:7d:d3:1a:e0:5b:bf:c9:ba:4a:cf:2e:a5: e0:fe:57:05:a7:f6:3f:cf:35:68:54:43:87:ad:f3:37:ea:a8: 16:9e:45:23:2d:e0:00:dc:e9:2d:23:59:1e:fc:66:5d:dc:37: 83:b9:6a:d0:b3:57:77:a8:6b:6f:1b:6f:a6:cb:dc:b1:da:e6: 0e:1a:01:f5:45:4b:87:bb:91:33:06:d5:f0:66:87:be:0d:4a: e0:08:43:2b:7c:05:f4:00:0c:36:83:80:ee:ee:0f:3a:17:a2: f5:34:f5:66:c6:df:28:d2:37:3d:0b:99:3c:6c:98:05:b3:ec: dc:10:fa:60:ee:25:36:61:2c:aa:90:89:5f:36:1a:80:e6:3e: 06:62:9a:21:47:af:95:d3:46:b3:6d:67:5f:19:49:36:c6:c5: 8b:d5:02:2d:a8:28:3d:75:29:64:a3:c3:f3:ab:bd:76:1a:c5: 31:c2:01:cb:be:98:d6:32:0d:09:f1:71:b6:51:9b:df:4c:bc: 30:d1:65:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkFDOTExMC8GA1UEBRMoRTE3MkVEMjA5ODZDQTI4RUQ0OTI0N0IyNTRDNENGOTU2 RTZEMDA1RjAeFw0yNjA5MTkwODU5NTdaFw0yNjA5MjYwODU5NTdaMBgxFjAUBgNV BAMTDTZhYWU0ZjBkLWJjMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHZhdhkihCVguXySjc0XQZGl8KoHzxMYAEHcJAz856oGdB9XEClmg1QOWahjJe GnkLiS2NLcQwOBxYIF5YWP+82/8tIu95l4LelO6XJTCjHoYoH91gJx1sfHeaRs67 ewQnxCk2tjdbO7tiIO9QE3ea3dfvJk1TYZ69k6+UEUTYaul1LTkSqcsj4eT4B/Za NNDISMreiUV7/XEsL5+dsb1wV5aVD7M5MaosMasuPKDap5DEx4S9q+/wa+F1dlpw OU08EYGFuZENhCIZYTe0Dn2vK1oLfxUVM2j/FX5ecx3s6Jck/wJinBrfOzZBYspb AxXK+HjY7XhePGTdyVbXVAQHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGVzCWnnQ 9b2yRSS/X+SwVFbd/cAwHwYDVR0jBBgwFoAU4XLtIJhsoo7UkkeyVMTPlW5tAF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQUM5Lzg0Q0Y2OTU2OTE1 ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283VWtrZXlWTVRQbFc1dEFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNFhMdElKaHNvbzdVa2tleVZNVFBsVzV0QUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QUM5Lzg0Q0Y2OTU2OTE1ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283 VWtrZXlWTVRQbFc1dEFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+q4RhwLZ7UckYhfWMkU0vkZOCbuel7ysTbp8zV/geJaH1podDSd1+Q/u/1+bA R9LAx9IO8gLf0AmpADZ90xrgW7/JukrPLqXg/lcFp/Y/zzVoVEOHrfM36qgWnkUj LeAA3OktI1ke/GZd3DeDuWrQs1d3qGtvG2+my9yx2uYOGgH1RUuHu5EzBtXwZoe+ DUrgCEMrfAX0AAw2g4Du7g86F6L1NPVmxt8o0jc9C5k8bJgFs+zcEPpg7iU2YSyq kIlfNhqA5j4GYpohR6+V00azbWdfGUk2xsWL1QItqCg9dSlko8Pzq712GsUxwgHL vpjWMg0J8XG2UZvfTLww0WXw -----END CERTIFICATE-----Generated at Mon Sep 21 10:38:36 2026 by rpki-client