$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft File: EF4GES4JwRrGtuM_Do2j9uYn8zI.mft (raw, json) Hash identifier: 4nok5BE5X9saqSqR7AltIFGA0dMwK5jTqQslFhcN/cA= Subject key identifier: EE:86:30:08:FE:06:E3:C3:A1:9C:85:F3:4E:39:74:BF:A8:40:57:FC Authority key identifier: 10:5E:06:11:2E:09:C1:1A:C6:B6:E3:3F:0E:8D:A3:F6:E6:27:F3:32 Certificate issuer: /CN=A91D0468/serialNumber=105E06112E09C11AC6B6E33F0E8DA3F6E627F332 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft Manifest number: 21 Signing time: Mon 21 Sep 2026 08:50:16 +0000 Manifest this update: Mon 21 Sep 2026 08:50:15 +0000 Manifest next update: Mon 28 Sep 2026 08:50:15 +0000 Files and hashes: 1: EF4GES4JwRrGtuM_Do2j9uYn8zI.crl (hash: SrzAHGQDlZxl8zcuMXlw4MSKIfklyUVUtQQeS3akcHg=) 2: F7D72646866311F18181548196A30FBC.roa (hash: YWqTKDIpSAxFUM6HW5snbyR2J7jAqm3hUt37+u8FRTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.crl rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0468, serialNumber=105E06112E09C11AC6B6E33F0E8DA3F6E627F332 Validity Not Before: Sep 21 08:50:15 2026 GMT Not After : Sep 28 08:50:15 2026 GMT Subject: CN=6ab0efc7-c605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:2f:46:6a:b6:21:82:34:eb:b2:80:85:6f: 08:34:d8:f3:a2:f8:58:71:fc:06:91:ef:33:20:9c: 68:b3:53:ae:cb:89:96:bf:72:cb:88:cb:09:a4:9b: 89:c3:28:14:13:c7:ac:05:8c:28:44:62:eb:e7:74: a7:5d:cb:ed:bd:a5:5f:fe:f6:b9:14:d6:79:16:04: df:fe:a6:ef:dd:e3:70:f1:83:fc:fe:6d:7c:e3:c8: 1a:38:95:a4:f4:03:c5:14:d4:62:df:59:e3:ea:96: ad:a2:69:91:fa:fb:42:7b:e7:a9:52:f0:fd:5d:c8: ed:38:23:33:aa:f9:80:08:df:ea:e8:00:8c:38:87: 4b:e1:de:81:49:e8:54:b8:4b:37:a3:e3:a8:94:0e: ec:dd:8e:61:1f:28:4d:3e:61:53:31:9c:96:08:30: c2:21:26:a3:7b:4d:c5:bc:89:7b:9d:88:c3:55:82: 3e:27:88:0f:cd:c8:15:dd:75:ba:7d:5c:79:e7:f3: ee:3c:ad:36:66:93:8b:f0:e7:67:e6:1b:dc:91:63: f2:2d:75:e3:26:2f:f1:02:61:20:05:c5:70:4b:76: 02:59:72:99:dc:96:a2:cf:e9:3a:85:eb:ae:d2:14: ce:e5:f5:15:ea:73:bf:4d:f3:fa:c2:ef:35:6b:02: 03:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:86:30:08:FE:06:E3:C3:A1:9C:85:F3:4E:39:74:BF:A8:40:57:FC X509v3 Authority Key Identifier: keyid:10:5E:06:11:2E:09:C1:1A:C6:B6:E3:3F:0E:8D:A3:F6:E6:27:F3:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:06:61:57:9e:02:0e:5a:c8:ea:0e:f8:0c:6c:6d:a9:33:2a: 22:1c:7f:53:bd:55:b7:86:88:79:09:69:f8:7a:52:fd:a8:bc: de:00:e6:82:63:92:7b:68:b0:ee:bd:04:56:af:6a:28:6a:5e: 07:a2:b9:eb:9a:0e:0e:3f:14:c5:93:88:93:cd:30:7a:af:2b: 55:27:9a:44:2a:d0:87:a5:f6:dc:c8:af:6f:3e:63:83:c0:a8: 02:f8:f4:42:e1:d1:67:05:26:94:f4:18:fe:bd:10:a5:16:47: 64:a3:56:82:97:49:93:1f:13:33:85:84:31:21:d3:0a:04:b6: ca:45:84:18:25:3d:50:eb:22:13:f3:50:1f:76:b7:05:55:d5: 9c:dd:e1:87:c7:35:99:08:38:05:1f:a2:b7:fb:8e:17:cc:3e: c6:c6:f8:e2:10:ac:22:40:52:d3:c6:fa:ba:f7:3a:b0:1e:cf: 4d:8f:1a:ac:13:70:63:e4:46:3c:d3:92:66:a2:4e:dd:93:5e: 8a:03:77:68:93:67:6c:8e:f3:96:28:e0:cc:1e:42:41:3f:fc: dd:8d:9b:77:7a:8b:80:90:d4:ec:d4:40:29:3d:7a:6e:a8:94: 57:e4:07:89:77:97:03:21:d9:76:bd:84:55:63:ff:07:27:ec: b9:aa:48:13 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDQ2ODExMC8GA1UEBRMoMTA1RTA2MTEyRTA5QzExQUM2QjZFMzNGMEU4REEzRjZF NjI3RjMzMjAeFw0yNjA5MjEwODUwMTVaFw0yNjA5MjgwODUwMTVaMBgxFjAUBgNV BAMTDTZhYjBlZmM3LWM2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWDC9GarYhgjTrsoCFbwg02POi+Fhx/AaR7zMgnGizU67LiZa/csuIywmkm4nD KBQTx6wFjChEYuvndKddy+29pV/+9rkU1nkWBN/+pu/d43Dxg/z+bXzjyBo4laT0 A8UU1GLfWePqlq2iaZH6+0J756lS8P1dyO04IzOq+YAI3+roAIw4h0vh3oFJ6FS4 Szej46iUDuzdjmEfKE0+YVMxnJYIMMIhJqN7TcW8iXudiMNVgj4niA/NyBXddbp9 XHnn8+48rTZmk4vw52fmG9yRY/ItdeMmL/ECYSAFxXBLdgJZcpnclqLP6TqF667S FM7l9RXqc79N8/rC7zVrAgMbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7oYwCP4G 48OhnIXzTjl0v6hAV/wwHwYDVR0jBBgwFoAUEF4GES4JwRrGtuM/Do2j9uYn8zIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwNDY4LzhFRTVGQTY4ODY2 MzExRjE4ODk2RDM3RTk2QTMwRkJDL0VGNEdFUzRKd1JyR3R1TV9EbzJqOXVZbjh6 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUY0R0VTNEp3UnJHdHVNX0RvMmo5dVluOHpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw NDY4LzhFRTVGQTY4ODY2MzExRjE4ODk2RDM3RTk2QTMwRkJDL0VGNEdFUzRKd1Jy R3R1TV9EbzJqOXVZbjh6SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAnBmFXngIOWsjqDvgMbG2pMyoiHH9TvVW3hoh5CWn4elL9qLzeAOaCY5J7aLDu vQRWr2ooal4Hornrmg4OPxTFk4iTzTB6rytVJ5pEKtCHpfbcyK9vPmODwKgC+PRC 4dFnBSaU9Bj+vRClFkdko1aCl0mTHxMzhYQxIdMKBLbKRYQYJT1Q6yIT81AfdrcF VdWc3eGHxzWZCDgFH6K3+44XzD7GxvjiEKwiQFLTxvq69zqwHs9NjxqsE3Bj5EY8 05Jmok7dk16KA3dok2dsjvOWKODMHkJBP/zdjZt3eouAkNTs1EApPXpuqJRX5AeJ d5cDIdl2vYRVY/8HJ+y5qkgT -----END CERTIFICATE-----Generated at Tue Sep 22 21:31:00 2026 by rpki-client