$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft File: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json) Hash identifier: Td3qdas0y+NSuCXg/ZVan33nMefEflw67UTGzz6Y+0g= Subject key identifier: EC:A2:5D:E4:32:D4:46:8D:29:1F:70:21:79:24:06:29:E3:4F:E3:1C Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30 Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft Manifest number: 014A Signing time: Mon 05 Oct 2026 05:43:25 +0000 Manifest this update: Mon 05 Oct 2026 05:43:25 +0000 Manifest next update: Mon 12 Oct 2026 05:43:25 +0000 Files and hashes: 1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: 78KitW2v+9DJvskaKxXdxTzkDIXCj+1qjk/O0TsvyOU=) 2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: A1wPnRMGx6RYQ7IXRqQ2UEVamfvjRwCyLh6fwcM/Gl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330 Validity Not Before: Oct 5 05:43:25 2026 GMT Not After : Oct 12 05:43:25 2026 GMT Subject: CN=6ac338fd-23df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:e8:3c:c9:80:04:4a:c4:93:e5:2d:6c:f6: 1b:7c:02:db:98:8e:ce:92:59:70:42:21:ac:9e:c5: 23:84:c4:dd:34:09:30:9d:1b:2b:71:ec:dc:06:6e: e4:5b:42:95:47:6a:af:22:f7:1d:b5:20:f5:5d:2f: 40:52:b8:f8:4b:e4:4b:8d:a8:8c:3a:51:ef:25:18: 33:6b:7b:aa:be:94:49:7b:8f:1a:88:b6:5e:55:4e: 2d:9e:19:f3:be:1a:96:95:d5:45:fa:7e:a4:ad:24: c5:12:d9:9a:3f:4a:d6:cb:32:4f:be:b0:81:54:56: 4d:a1:10:6f:2a:c1:58:ac:39:2f:33:fd:61:48:ae: 02:32:4e:d1:f9:d3:e0:31:bf:d1:8b:15:db:f2:e9: 35:3c:af:be:2c:66:a2:84:48:17:28:e7:c5:95:c8: 20:f3:8b:fc:e1:a4:97:1d:90:2c:26:4d:ca:b2:66: 43:9f:cc:f6:8b:e0:47:c7:a8:5b:fa:b4:fa:69:31: f8:80:86:88:71:bc:e3:fd:ae:b2:16:9d:2f:e9:ba: 8b:c7:9f:ee:c3:c4:98:72:25:75:6a:3d:8a:c2:ae: a8:ba:d6:7f:05:6e:ae:f2:9d:c7:1e:24:0b:de:bb: c1:2c:c5:02:04:74:4f:5b:dc:01:d4:06:f9:b1:0d: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A2:5D:E4:32:D4:46:8D:29:1F:70:21:79:24:06:29:E3:4F:E3:1C X509v3 Authority Key Identifier: keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f1:b4:25:d5:aa:db:e3:6b:7f:40:71:2e:d6:25:00:3a:e2: b5:59:47:9f:45:c2:45:80:f9:a2:d3:f3:d2:68:9b:29:6f:9a: 71:16:e4:b8:55:2d:52:9d:9e:d8:4d:c3:1b:bf:79:10:fd:d5: 70:8d:69:d4:98:c9:50:03:06:a6:c8:3a:1a:3d:80:37:c7:3f: cf:2f:3e:3b:7e:2d:eb:4a:60:f1:45:4c:bd:5a:d6:55:62:25: 70:a2:b6:9e:53:88:01:32:73:a7:b7:b3:82:14:f7:4d:5b:f1: 3a:56:19:bf:e7:5a:f5:68:e1:c1:20:26:dc:30:d6:33:c9:1a: 66:0d:d3:61:79:d6:2d:86:dc:fc:48:96:f6:e7:7e:5c:fa:f6: 71:20:e4:a9:51:c5:66:de:65:97:d3:93:a5:d6:1e:9b:b5:34: 7b:58:48:bf:90:f1:16:5b:2f:f3:72:f9:ac:63:8f:40:7b:20: 72:63:1d:2f:60:a9:61:29:bf:46:db:50:67:4c:1c:41:02:82: cc:09:29:15:c8:50:70:16:8f:2a:ac:08:40:6b:81:6c:67:1a: 77:4a:07:5b:bf:d3:f5:74:7f:56:d1:e8:72:1d:e5:cf:42:56: 72:83:c9:26:d9:9f:87:71:b1:69:2e:aa:57:ec:d1:ad:ca:87: 9c:fb:5d:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwQUYxMTAvBgNVBAUTKEUxMTQzNzhEQTkzNDg2MTQ2OUY0OTVEOTc1OThFMEYw MDI4OUMzMzAwHhcNMjYxMDA1MDU0MzI1WhcNMjYxMDEyMDU0MzI1WjAYMRYwFAYD VQQDEw02YWMzMzhmZC0yM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrvoPMmABErEk+UtbPYbfALbmI7OkllwQiGsnsUjhMTdNAkwnRsrcezcBm7k W0KVR2qvIvcdtSD1XS9AUrj4S+RLjaiMOlHvJRgza3uqvpRJe48aiLZeVU4tnhnz vhqWldVF+n6krSTFEtmaP0rWyzJPvrCBVFZNoRBvKsFYrDkvM/1hSK4CMk7R+dPg Mb/RixXb8uk1PK++LGaihEgXKOfFlcgg84v84aSXHZAsJk3KsmZDn8z2i+BHx6hb +rT6aTH4gIaIcbzj/a6yFp0v6bqLx5/uw8SYciV1aj2Kwq6outZ/BW6u8p3HHiQL 3rvBLMUCBHRPW9wB1Ab5sQ2BewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOyiXeQy 1EaNKR9wIXkkBinjT+McMB8GA1UdIwQYMBaAFOEUN42pNIYUafSV2XWY4PACicMw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBBRi8yRDdBN0UwRUND NEYxMUVGQTg5QThGMTRDNEY5QUUwMi80UlEzamFrMGhoUnA5SlhaZFpqZzhBS0p3 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSUTNqYWswaGhScDlKWFpkWmpnOEFLSnd6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBBRi8yRDdBN0UwRUNDNEYxMUVGQTg5QThGMTRDNEY5QUUwMi80UlEzamFrMGho UnA5SlhaZFpqZzhBS0p3ekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI/G0JdWq2+Nrf0BxLtYlADritVlHn0XCRYD5otPz0mibKW+acRbkuFUtUp2e 2E3DG795EP3VcI1p1JjJUAMGpsg6Gj2AN8c/zy8+O34t60pg8UVMvVrWVWIlcKK2 nlOIATJzp7ezghT3TVvxOlYZv+da9WjhwSAm3DDWM8kaZg3TYXnWLYbc/EiW9ud+ XPr2cSDkqVHFZt5ll9OTpdYem7U0e1hIv5DxFlsv83L5rGOPQHsgcmMdL2CpYSm/ RttQZ0wcQQKCzAkpFchQcBaPKqwIQGuBbGcad0oHW7/T9XR/VtHoch3lz0JWcoPJ Jtmfh3GxaS6qV+zRrcqHnPtdmQ== -----END CERTIFICATE-----Generated at Tue Oct 6 01:21:11 2026 by rpki-client