$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: gWbGhs1+DuiJMfY79AxWEbhuo80itCLGC/s9CzQ3SMo= Subject key identifier: 02:B6:41:02:69:4E:DB:A1:4B:8E:3C:DA:FC:69:B2:F6:0B:AC:3E:27 Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 08D7 Signing time: Sun 20 Sep 2026 19:54:13 +0000 Manifest this update: Sun 20 Sep 2026 19:54:12 +0000 Manifest next update: Sun 27 Sep 2026 19:54:12 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: zADjy6nHYiVkVXC/IGhc95QleDPGYyrPMTbyTifkmog=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: i37T+miB19JllsQUkIFRFN9qItWKSwoaTSynWV3QKsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Sep 20 19:54:12 2026 GMT Not After : Sep 27 19:54:12 2026 GMT Subject: CN=6ab039e5-eafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:a4:0a:60:c6:c0:58:c8:e0:7b:94:c4:c8: 35:60:dc:a9:6c:52:1a:d7:f8:c0:42:fa:a0:a9:31: 1e:d1:53:29:9f:c2:47:3a:e3:5c:10:d9:22:60:1c: 46:b3:d3:f5:b0:2a:c7:2b:9d:9e:e9:d6:0d:89:b7: f0:b3:d0:0c:4e:d8:a1:2a:ed:51:35:55:18:e2:3e: 7b:84:c6:e8:0e:e5:49:45:84:cf:8a:74:6d:09:19: a7:ce:d7:34:80:6a:e7:70:07:66:b6:b0:91:e9:81: 32:a5:94:bb:58:ee:4a:fe:2f:7d:fa:b6:31:6f:fd: 93:10:32:d4:42:01:09:68:29:36:30:48:0f:69:8d: ab:56:f7:c1:07:6f:04:3a:0d:07:04:34:c6:bf:08: 9e:96:29:0c:2b:44:26:2a:5e:9b:bc:bf:3a:24:85: 9c:4d:d0:fc:09:0d:59:d2:bb:88:dc:99:50:2a:a7: 35:42:b3:ff:df:14:0b:c0:3e:d4:eb:af:3b:46:29: ed:4f:eb:c0:0c:9a:8e:2e:68:ec:d7:51:0e:cd:88: 72:c4:49:0e:5d:79:29:7b:d6:2a:0f:e7:80:d3:0d: c4:2d:d8:ab:00:c8:32:0f:43:74:ed:7f:c1:08:e6: 04:2e:bf:fd:52:07:95:ad:66:7b:58:87:c7:0a:29: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:41:02:69:4E:DB:A1:4B:8E:3C:DA:FC:69:B2:F6:0B:AC:3E:27 X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:38:ec:7b:88:75:0e:1d:59:70:e6:7c:82:59:84:77:57:eb: b7:58:ba:4d:87:63:d6:43:92:1c:5c:6e:5f:5a:50:34:32:2a: 1b:70:3b:84:3f:99:3c:65:bd:30:cd:29:69:7a:c9:23:b5:c3: cb:82:5d:3c:93:36:55:00:56:78:1b:09:e4:6e:f5:d9:c1:eb: e9:d8:53:28:34:08:29:3e:fc:79:fe:86:f8:0e:5c:92:f4:7e: f8:96:64:44:af:68:1a:3d:02:54:d0:f2:36:db:fc:35:47:a8: 4b:32:80:a1:85:e3:c3:34:9a:e0:ec:d1:80:87:e7:cf:df:c6: 68:80:6f:a6:3d:12:0a:79:3c:20:ec:24:7b:9e:99:dd:68:5b: 43:61:f3:80:0a:3f:16:2f:65:86:fc:6a:f9:04:dd:3a:6d:07: 32:af:f5:72:ff:b2:6c:3e:53:95:51:45:cc:19:7b:d0:5d:e1: 3e:9b:ab:e6:bb:08:b9:0c:20:b5:77:0d:d5:31:d5:00:c4:94: 79:45:65:b4:85:b7:14:c6:34:1d:7c:f5:80:9e:c1:b4:3a:62: 31:20:7a:ee:87:ce:ce:44:db:ae:6f:20:73:6c:55:da:d1:d5: 2d:6a:ea:e8:61:ea:65:74:8e:0e:04:e6:33:94:b7:de:e6:b7: a5:65:d3:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjYwOTIwMTk1NDEyWhcNMjYwOTI3MTk1NDEyWjAYMRYwFAYD VQQDEw02YWIwMzllNS1lYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9OkCmDGwFjI4HuUxMg1YNypbFIa1/jAQvqgqTEe0VMpn8JHOuNcENkiYBxG s9P1sCrHK52e6dYNibfws9AMTtihKu1RNVUY4j57hMboDuVJRYTPinRtCRmnztc0 gGrncAdmtrCR6YEypZS7WO5K/i99+rYxb/2TEDLUQgEJaCk2MEgPaY2rVvfBB28E Og0HBDTGvwielikMK0QmKl6bvL86JIWcTdD8CQ1Z0ruI3JlQKqc1QrP/3xQLwD7U 6687RintT+vADJqOLmjs11EOzYhyxEkOXXkpe9YqD+eA0w3ELdirAMgyD0N07X/B COYELr/9UgeVrWZ7WIfHCilKrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAK2QQJp TtuhS4482vxpsvYLrD4nMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmjjse4h1Dh1ZcOZ8glmEd1frt1i6TYdj1kOSHFxuX1pQNDIqG3A7hD+ZPGW9 MM0paXrJI7XDy4JdPJM2VQBWeBsJ5G712cHr6dhTKDQIKT78ef6G+A5ckvR++JZk RK9oGj0CVNDyNtv8NUeoSzKAoYXjwzSa4OzRgIfnz9/GaIBvpj0SCnk8IOwke56Z 3WhbQ2HzgAo/Fi9lhvxq+QTdOm0HMq/1cv+ybD5TlVFFzBl70F3hPpur5rsIuQwg tXcN1THVAMSUeUVltIW3FMY0HXz1gJ7BtDpiMSB67ofOzkTbrm8gc2xV2tHVLWrq 6GHqZXSODgTmM5S33ua3pWXTeg== -----END CERTIFICATE-----Generated at Mon Sep 21 19:18:44 2026 by rpki-client