$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: 5B3Lbc96NvmKGzN/uoPB0g1bV3M9Q7mjNIPAARogrcM= Subject key identifier: 24:2E:A0:3B:2A:9C:DD:16:C7:E9:B6:F5:27:C3:EA:C4:4D:67:AF:BB Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1F44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1F18 Signing time: Tue 22 Sep 2026 15:58:52 +0000 Manifest this update: Tue 22 Sep 2026 15:58:51 +0000 Manifest next update: Tue 29 Sep 2026 15:58:51 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: ILXZbZZiCkoq9+NaR3Hviu9MYcIIX3fVk7kFNZUTJ6Y=) 2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 8jkk8vIcqgs4b+fbqR26qb3DamcqYaKzuzKBi1BGmm4=) 3: BB25F03886EF11F19E006003A7EE528E.roa (hash: AuOLrOM2B3+tLOxNuqxXeTUfnx7HpyFf+D81+r9Wehw=) 4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 9IYDjOPFMoIFG4POxkpntK/OCNK7JR2k5z1TwTVGM1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8004 (0x1f44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: Sep 22 15:58:51 2026 GMT Not After : Sep 29 15:58:51 2026 GMT Subject: CN=6ab2a5bb-7a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:78:67:0d:f1:ec:0d:05:e8:56:c6:e5:b5: 8a:e3:09:0f:6d:46:10:9f:ce:91:43:b8:d6:27:20: bb:86:22:c3:9b:65:a2:8c:66:57:bb:b0:1a:cc:b2: 32:e3:55:3c:cb:e5:8b:70:96:97:0a:5e:74:a5:f7: 44:9f:c2:3d:be:32:9e:1a:7e:97:88:1c:69:73:ee: f3:89:ec:d5:9e:1b:70:88:25:00:a2:a3:61:70:d7: 3f:b9:13:84:d9:3e:5d:fb:85:34:8e:ec:fc:16:a9: ef:43:c7:a8:c4:ea:4e:7d:cf:34:c8:fd:d2:c9:37: ce:91:58:58:8d:b4:67:1d:b0:d3:10:fa:6c:2d:6a: 51:de:cd:9a:81:4e:02:be:0b:54:74:29:21:f8:ad: 36:29:3e:13:4b:b5:4e:54:b3:f3:20:73:64:ea:72: 92:59:f2:5b:1b:c6:8c:98:f4:ab:6f:cf:99:c2:72: 74:f0:c7:04:60:75:35:32:f8:a8:4b:d2:a3:db:f6: 98:29:b9:a6:1d:51:a0:9c:91:8f:82:7d:61:0e:53: 84:e8:fc:8d:70:d8:d4:a9:8f:f4:11:9a:12:9b:a8: 06:90:54:68:b7:e4:d8:0a:41:fd:45:de:46:22:99: 12:2b:14:04:c2:f9:df:4c:27:1f:5b:92:18:1b:68: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:A0:3B:2A:9C:DD:16:C7:E9:B6:F5:27:C3:EA:C4:4D:67:AF:BB X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:78:df:50:25:fe:f0:20:ef:33:46:aa:0c:ed:4d:05:e7:0d: b8:3c:fb:92:f5:5a:0f:5d:ee:3b:aa:8d:31:dd:3a:6a:a1:06: 03:76:b7:e1:19:c6:b3:85:86:fe:b7:df:c7:a4:b8:a5:7a:50: b4:1c:26:9d:04:7f:41:0f:92:6d:2b:1e:04:5c:b0:61:26:c0: e3:dd:2a:c3:dc:f3:9b:57:50:86:e2:a8:ec:73:dd:89:1a:67: 56:31:2b:25:1e:73:cd:2a:04:0c:e4:15:a2:00:ea:67:45:b4: cd:d2:13:0d:33:14:66:be:bc:0f:15:f0:72:97:aa:9a:2d:85: 0c:41:3a:bc:7b:5c:b5:7a:6b:c6:52:ce:df:ef:ff:91:e0:e5: 34:03:a6:50:5d:7f:9b:2d:91:fe:04:fc:85:d9:0a:8e:7e:61: 50:ba:34:2f:e2:de:37:10:d2:f2:cb:d3:f2:1a:31:be:67:9f: 52:27:9f:3e:f6:1c:d7:e8:cc:81:87:94:0f:20:d4:b4:06:16: 37:4a:f8:44:d5:b9:50:ad:1b:fd:9d:8d:bb:c8:00:d4:d0:e3: a8:10:7f:b1:2e:81:3b:33:1a:93:20:82:38:a6:b0:5a:87:82: 38:6a:f3:d2:38:9d:cb:af:70:f2:2e:d4:1c:d8:dd:1c:2f:75: 94:32:66:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjYwOTIyMTU1ODUxWhcNMjYwOTI5MTU1ODUxWjAYMRYwFAYD VQQDEw02YWIyYTViYi03YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgt4Zw3x7A0F6FbG5bWK4wkPbUYQn86RQ7jWJyC7hiLDm2WijGZXu7AazLIy 41U8y+WLcJaXCl50pfdEn8I9vjKeGn6XiBxpc+7ziezVnhtwiCUAoqNhcNc/uROE 2T5d+4U0juz8FqnvQ8eoxOpOfc80yP3SyTfOkVhYjbRnHbDTEPpsLWpR3s2agU4C vgtUdCkh+K02KT4TS7VOVLPzIHNk6nKSWfJbG8aMmPSrb8+ZwnJ08McEYHU1Mvio S9Kj2/aYKbmmHVGgnJGPgn1hDlOE6PyNcNjUqY/0EZoSm6gGkFRot+TYCkH9Rd5G IpkSKxQEwvnfTCcfW5IYG2jB1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQuoDsq nN0Wx+m29SfD6sRNZ6+7MB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMXjfUCX+8CDvM0aqDO1NBecNuDz7kvVaD13uO6qNMd06aqEGA3a34RnGs4WG /rffx6S4pXpQtBwmnQR/QQ+SbSseBFywYSbA490qw9zzm1dQhuKo7HPdiRpnVjEr JR5zzSoEDOQVogDqZ0W0zdITDTMUZr68DxXwcpeqmi2FDEE6vHtctXprxlLO3+// keDlNAOmUF1/my2R/gT8hdkKjn5hULo0L+LeNxDS8svT8hoxvmefUiefPvYc1+jM gYeUDyDUtAYWN0r4RNW5UK0b/Z2Nu8gA1NDjqBB/sS6BOzMakyCCOKawWoeCOGrz 0jidy69w8i7UHNjdHC91lDJmTQ== -----END CERTIFICATE-----Generated at Wed Sep 23 10:16:57 2026 by rpki-client