$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json) Hash identifier: RibGbCkLPYWznxyS88JYzDKFFAFTDdqgdNKnxT34M14= Subject key identifier: 03:4A:5E:42:5E:B2:94:4B:F4:45:AB:C1:54:DD:6D:0D:36:C4:9C:A6 Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft Manifest number: 1CDB Signing time: Tue 29 Sep 2026 09:34:35 +0000 Manifest this update: Tue 29 Sep 2026 09:34:34 +0000 Manifest next update: Tue 06 Oct 2026 09:34:34 +0000 Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: pBe6To9IyYvjIEVXbqCedhN4fbq1iwhSYQUVcZkjDWQ=) 2: F6C63D7CBBE811F1AA7228996C11F970.roa (hash: DZwzh7eWFLNsgYHiDxSaMcdrz2d9EH+7X9fs9oLYQAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 09:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7405 (0x1ced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Sep 29 09:34:34 2026 GMT Not After : Oct 6 09:34:34 2026 GMT Subject: CN=6abb862b-04a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:9c:a4:52:a3:73:e2:19:52:42:eb:55:d2: ba:4b:e6:4d:5a:08:76:9e:fc:f5:02:e0:4a:e9:5f: c8:d0:27:f1:4f:0e:a5:00:02:1e:8a:8d:79:72:13: 3b:52:10:0b:3f:98:a9:18:d0:bc:1d:6c:1a:da:dd: 53:09:82:04:6a:a5:dc:49:fd:9a:ea:02:78:0a:e9: b9:f1:2d:2c:11:2f:74:a0:4a:4f:13:d3:d8:77:df: 20:72:fc:50:92:6a:9a:bf:92:20:d4:bf:9b:0a:50: c5:dd:5d:ac:7a:08:24:86:7a:37:2e:d5:22:06:62: ca:75:6c:50:73:e3:f9:32:26:e1:35:bb:cd:aa:01: 8b:11:1e:49:d5:30:37:dd:30:a0:5a:ea:94:e5:ca: 9d:df:a0:14:db:ed:9c:b4:21:c4:f4:db:f9:94:b8: eb:01:e2:92:92:a0:a0:89:e6:6d:e0:a7:8f:a2:2c: 91:93:ad:46:19:f3:38:87:8c:f6:55:f1:88:45:c2: 77:de:0f:f6:1a:d0:72:ab:32:d4:bf:31:9e:db:db: 00:79:f3:ce:3e:f0:5e:f5:39:ca:67:7c:fd:89:de: f3:2c:f7:7c:68:48:60:ca:68:e2:ee:81:6d:38:11: 63:86:ff:30:72:e9:a2:28:53:22:c8:fb:34:31:82: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4A:5E:42:5E:B2:94:4B:F4:45:AB:C1:54:DD:6D:0D:36:C4:9C:A6 X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:74:47:e3:fc:bf:90:a5:3a:98:44:36:5c:61:50:7b:5f:1a: 4d:a7:70:0b:f1:fd:50:a1:fa:ae:60:cb:08:8c:64:95:91:5e: ca:1e:e9:98:48:fe:59:22:76:d2:af:28:19:f7:38:c6:37:31: 5b:12:87:f0:af:92:a4:56:cd:35:a7:5c:d1:31:d2:20:08:5a: 18:4c:9c:ca:8d:76:04:56:f2:a5:68:cb:1e:bf:68:e8:94:3f: 9e:07:15:36:a3:97:45:d3:79:cd:98:2d:b8:cb:a9:cd:a6:fa: 96:c7:e9:50:3b:12:16:b3:a6:63:32:4b:a9:a5:3f:aa:34:9a: 5a:ac:19:66:2e:df:d3:05:58:ac:35:d9:c6:13:13:3a:d1:bb: 3c:c8:a9:6c:1f:f6:e5:1d:1c:cb:fe:7d:b8:c9:74:24:3f:5a: 3d:cc:a4:16:6e:d7:ae:e2:6f:19:26:83:ec:b6:ea:ae:e1:c1: 3e:ef:81:98:a3:80:2a:e0:0f:fb:57:38:cf:da:d5:9d:bd:e2: 32:b5:c7:39:de:8a:99:db:a8:2d:ca:8d:8c:f5:6d:0e:05:0f: 3c:da:c7:2d:e5:fc:c0:05:5b:65:fa:26:76:aa:aa:23:93:2a: 32:81:ee:a2:d9:53:de:db:35:d2:d8:26:9c:c5:cd:a1:e5:12: fd:09:4d:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjYwOTI5MDkzNDM0WhcNMjYxMDA2MDkzNDM0WjAYMRYwFAYD VQQDEw02YWJiODYyYi0wNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKqcpFKjc+IZUkLrVdK6S+ZNWgh2nvz1AuBK6V/I0CfxTw6lAAIeio15chM7 UhALP5ipGNC8HWwa2t1TCYIEaqXcSf2a6gJ4Cum58S0sES90oEpPE9PYd98gcvxQ kmqav5Ig1L+bClDF3V2seggkhno3LtUiBmLKdWxQc+P5MibhNbvNqgGLER5J1TA3 3TCgWuqU5cqd36AU2+2ctCHE9Nv5lLjrAeKSkqCgieZt4KePoiyRk61GGfM4h4z2 VfGIRcJ33g/2GtByqzLUvzGe29sAefPOPvBe9TnKZ3z9id7zLPd8aEhgymji7oFt OBFjhv8wcumiKFMiyPs0MYKPGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANKXkJe spRL9EWrwVTdbQ02xJymMB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNGRS84MjVDRTlBQUY5RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25i c29kUmhPNE4xZWxOMTFlRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAnRH4/y/kKU6mEQ2XGFQe18aTadwC/H9UKH6rmDLCIxklZFeyh7pmEj+WSJ2 0q8oGfc4xjcxWxKH8K+SpFbNNadc0THSIAhaGEycyo12BFbypWjLHr9o6JQ/ngcV NqOXRdN5zZgtuMupzab6lsfpUDsSFrOmYzJLqaU/qjSaWqwZZi7f0wVYrDXZxhMT OtG7PMipbB/25R0cy/59uMl0JD9aPcykFm7XruJvGSaD7LbqruHBPu+BmKOAKuAP +1c4z9rVnb3iMrXHOd6KmduoLcqNjPVtDgUPPNrHLeX8wAVbZfomdqqqI5MqMoHu otlT3ts10tgmnMXNoeUS/QlN/A== -----END CERTIFICATE-----Generated at Tue Sep 29 13:34:01 2026 by rpki-client