$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft File: 4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft (raw, json) Hash identifier: hGKHWspaE42LhdCDBe9vH5Qig0Tx89s0QrB1O+MNbac= Subject key identifier: D3:A4:71:76:16:05:DE:30:16:1A:BD:9E:C4:AC:A2:36:2A:AC:C7:60 Authority key identifier: E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14 Certificate issuer: /CN=A91C4060/serialNumber=E21F24E0C54DBB93F667814402D66AD408071114 Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft Manifest number: 0815 Signing time: Thu 24 Sep 2026 21:06:36 +0000 Manifest this update: Thu 24 Sep 2026 21:06:36 +0000 Manifest next update: Thu 01 Oct 2026 21:06:36 +0000 Files and hashes: 1: 4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl (hash: 0vsig5Vh1gcWsg3pRgQg3lm94q/AJrRnsIDeyu7e3Sk=) 2: 71C26BD039D211EB84B9FD6BC4F9AE02.roa (hash: m1LwxR5yBiEhYayYDDx+VeEVNC28wm7cqjOPRTGQW8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4060, serialNumber=E21F24E0C54DBB93F667814402D66AD408071114 Validity Not Before: Sep 24 21:06:36 2026 GMT Not After : Oct 1 21:06:36 2026 GMT Subject: CN=6ab590dc-3a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:43:f8:f4:64:a2:f0:d1:e3:1b:88:ab:e8: 95:3f:cb:1d:10:b7:b9:65:99:88:ad:50:75:ee:c2: ff:ce:82:93:b3:31:99:e5:7b:4e:3e:97:05:c0:88: f9:80:b7:08:82:66:54:ae:24:a3:69:93:7b:48:7a: 7a:19:3c:5e:6b:1f:65:df:33:4c:f6:24:3b:14:c6: 4c:6f:49:0c:b5:24:b2:bc:54:61:f3:98:71:dd:56: d8:94:61:20:1e:25:f9:f3:e2:2e:f2:5d:04:a6:c0: 5d:81:e3:ad:ac:d3:65:2a:ff:20:c0:8e:65:b6:c6: ae:21:e7:24:bb:0f:42:0f:dc:75:41:b3:11:01:3b: 4d:a1:4d:e4:0a:e9:e1:28:a8:65:ed:c5:13:5f:25: c1:db:9c:f0:a7:69:2f:4d:38:6c:6b:1e:0c:b6:a5: 25:30:2a:86:94:ef:d5:54:e7:c2:d8:62:3b:ef:b7: a7:d3:84:41:7b:29:4d:2b:74:71:90:d7:6e:3e:86: 0d:1b:12:73:a9:95:63:a2:9b:7d:c9:de:39:fa:16: 46:44:9c:49:78:8e:f6:6a:bf:63:a5:35:56:50:16: f7:8d:e7:45:87:b2:73:16:29:79:94:be:23:e3:93: d0:2f:55:f8:a9:99:c7:9d:e7:ce:3d:53:68:8f:0e: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A4:71:76:16:05:DE:30:16:1A:BD:9E:C4:AC:A2:36:2A:AC:C7:60 X509v3 Authority Key Identifier: keyid:E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bf:22:14:1e:20:38:12:5c:eb:54:0c:04:5e:16:11:5a:fa: 9a:fd:0e:e6:82:a3:70:1f:d2:05:9d:d8:48:57:9b:5d:98:07: b6:d0:63:64:e2:07:60:3a:6a:07:7c:34:e6:ac:ec:eb:64:b2: 37:9c:42:b8:b7:c2:78:1f:7b:9c:6b:dc:77:e6:8c:ab:a5:54: ec:1d:75:8d:d0:3d:ea:ce:a4:96:ca:ed:43:77:f4:d6:92:34: ee:7a:fe:49:a5:ba:f1:30:b0:5f:4f:19:f8:1b:c0:45:bc:e3: 1b:44:8c:63:db:55:a4:02:b6:e6:a4:56:85:d1:30:48:a8:39: d2:1c:5e:2c:2a:b9:f5:f9:17:4f:7e:98:2d:ce:32:25:9d:c0: 6b:5b:7d:82:37:b7:ea:de:e6:5a:c7:45:89:23:b7:19:89:89: 08:c5:ca:dc:a3:46:47:88:dd:48:26:8a:f1:82:c4:ba:25:de: 05:1b:92:a5:b8:44:3e:33:d5:3e:8d:74:26:cb:5e:14:25:b9: 74:86:df:73:10:0e:28:ee:f7:76:82:90:a4:5d:ed:20:54:de: 37:60:b9:78:47:f1:bf:df:ab:a7:c6:87:17:a5:ca:b8:d3:50: eb:da:1e:c6:67:51:8b:c7:a5:5c:48:77:d1:9f:b8:66:7d:25: a6:e7:3a:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwNjAxMTAvBgNVBAUTKEUyMUYyNEUwQzU0REJCOTNGNjY3ODE0NDAyRDY2QUQ0 MDgwNzExMTQwHhcNMjYwOTI0MjEwNjM2WhcNMjYxMDAxMjEwNjM2WjAYMRYwFAYD VQQDEw02YWI1OTBkYy0zYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrxD+PRkovDR4xuIq+iVP8sdELe5ZZmIrVB17sL/zoKTszGZ5XtOPpcFwIj5 gLcIgmZUriSjaZN7SHp6GTxeax9l3zNM9iQ7FMZMb0kMtSSyvFRh85hx3VbYlGEg HiX58+Iu8l0EpsBdgeOtrNNlKv8gwI5ltsauIeckuw9CD9x1QbMRATtNoU3kCunh KKhl7cUTXyXB25zwp2kvTThsax4MtqUlMCqGlO/VVOfC2GI777en04RBeylNK3Rx kNduPoYNGxJzqZVjopt9yd45+hZGRJxJeI72ar9jpTVWUBb3jedFh7JzFil5lL4j 45PQL1X4qZnHnefOPVNojw7YvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOkcXYW Bd4wFhq9nsSsojYqrMdgMB8GA1UdIwQYMBaAFOIfJODFTbuT9meBRALWatQIBxEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDA2MC81NjkzODlGRTM5 RDAxMUVCOEY0NzE1NjlDNEY5QUUwMi80aDhrNE1WTnU1UDJaNEZFQXRacTFBZ0hF UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRoOGs0TVZOdTVQMlo0RkVBdFpxMUFnSEVSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDA2MC81NjkzODlGRTM5RDAxMUVCOEY0NzE1NjlDNEY5QUUwMi80aDhrNE1WTnU1 UDJaNEZFQXRacTFBZ0hFUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnb8iFB4gOBJc61QMBF4WEVr6mv0O5oKjcB/SBZ3YSFebXZgHttBjZOIHYDpq B3w05qzs62SyN5xCuLfCeB97nGvcd+aMq6VU7B11jdA96s6klsrtQ3f01pI07nr+ SaW68TCwX08Z+BvARbzjG0SMY9tVpAK25qRWhdEwSKg50hxeLCq59fkXT36YLc4y JZ3Aa1t9gje36t7mWsdFiSO3GYmJCMXK3KNGR4jdSCaK8YLEuiXeBRuSpbhEPjPV Po10JsteFCW5dIbfcxAOKO73doKQpF3tIFTeN2C5eEfxv9+rp8aHF6XKuNNQ69oe xmdRi8elXEh30Z+4Zn0lpuc6+Q== -----END CERTIFICATE-----Generated at Sat Sep 26 15:08:07 2026 by rpki-client