$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.mft File: 4kbOehYGKsBgdRNj5VPvVcTGaPI.mft (raw, json) Hash identifier: arS/WS6cTCcpnTEoEqxB/nDHhzrG0cT7lC/DARw+ndE= Subject key identifier: A4:A5:A7:09:41:89:F4:82:32:C0:9E:F6:9C:6A:3C:D9:F4:2E:B6:A7 Authority key identifier: E2:46:CE:7A:16:06:2A:C0:60:75:13:63:E5:53:EF:55:C4:C6:68:F2 Certificate issuer: /CN=A91D82D4/serialNumber=E246CE7A16062AC060751363E553EF55C4C668F2 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kbOehYGKsBgdRNj5VPvVcTGaPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.mft Manifest number: 30 Signing time: Mon 21 Sep 2026 08:39:48 +0000 Manifest this update: Mon 21 Sep 2026 08:39:48 +0000 Manifest next update: Mon 28 Sep 2026 08:39:48 +0000 Files and hashes: 1: 4kbOehYGKsBgdRNj5VPvVcTGaPI.crl (hash: o+l2TtHZZ6iDT1qcHwuM65HDrwlJ9+vNl5gNdfmlwB4=) 2: Ub0QpNFhKqCUcCTrOnfCXYpG0PM.asa (hash: 0r7u+/j4RPtpiuh7nmmIBmpBKJ3/oTxKDjODOxTJclU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.crl rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kbOehYGKsBgdRNj5VPvVcTGaPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82D4, serialNumber=E246CE7A16062AC060751363E553EF55C4C668F2 Validity Not Before: Sep 21 08:39:48 2026 GMT Not After : Sep 28 08:39:48 2026 GMT Subject: CN=6ab0ed54-6c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:c3:b8:ac:00:f8:7b:87:27:e7:42:c8:eb: f3:ed:17:3c:5f:28:f3:2f:a2:e4:0d:c4:e3:2f:92: 1c:8f:c9:9a:d2:b9:27:9b:c0:e4:70:aa:82:7d:da: 5a:34:df:c4:19:d6:d3:d2:fb:19:71:46:ae:f0:ca: fe:b0:6c:bd:74:df:c0:48:a2:50:22:d7:e7:62:3b: ea:28:b5:9b:4f:5d:f8:b0:16:c8:3f:8a:c0:eb:06: fb:66:16:12:7a:ff:7b:0d:ed:b3:5d:2f:ff:29:b6: 84:b9:00:20:92:84:85:f8:84:d8:e7:29:32:af:be: 69:58:0f:2d:77:3b:59:93:d7:cb:99:9a:13:cc:01: 8c:06:f1:ad:5e:c5:b7:3e:bc:25:95:1b:0d:b4:dd: 09:c1:d8:de:8f:15:98:f0:bd:36:37:a2:82:25:06: f2:1a:02:3b:31:a0:ce:70:aa:2f:17:43:6a:01:c1: f2:2b:c7:43:78:34:f3:9b:93:58:48:53:98:12:4b: 6a:58:ac:c3:10:ae:5f:1b:cb:a3:17:fb:c1:7a:56: 05:f5:13:bc:80:50:9c:09:c9:0a:a5:15:57:d5:d5: a9:ef:45:02:25:f7:85:e4:29:1f:24:62:4e:e8:ab: 15:a4:8c:4a:a9:be:d5:0a:51:41:e6:5a:01:b7:fb: 77:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A5:A7:09:41:89:F4:82:32:C0:9E:F6:9C:6A:3C:D9:F4:2E:B6:A7 X509v3 Authority Key Identifier: keyid:E2:46:CE:7A:16:06:2A:C0:60:75:13:63:E5:53:EF:55:C4:C6:68:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kbOehYGKsBgdRNj5VPvVcTGaPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:da:b4:a6:46:8a:b0:b9:56:0e:b6:07:54:1c:30:ce:5a:17: 43:2e:58:4d:92:fb:0b:02:ac:6c:3a:9d:fe:71:25:24:bb:57: 1a:a6:63:8b:4a:67:98:c0:cc:15:ee:b2:25:6b:fa:ac:5a:0f: e5:f0:57:db:b3:6a:d8:a9:2f:50:f8:d0:9b:ff:a8:0b:58:d6: 3e:2f:f4:49:66:82:6c:86:9f:1b:99:34:9c:67:67:26:ad:1c: a0:73:3d:a5:5e:96:f2:c3:c8:bb:c6:01:bb:9b:31:6d:f8:32: 20:54:c6:08:c3:85:fd:91:bc:e5:c1:2c:10:32:d5:0c:08:b9: c5:b9:99:a4:11:96:9b:98:1e:bd:23:ff:0a:49:54:a8:d8:ba: 4c:d7:d7:78:be:af:e5:67:b6:0e:2c:8d:80:92:24:a1:64:a6: a1:b0:9e:b6:69:2c:dd:42:33:d1:f3:83:02:25:67:d2:57:84: 17:3f:30:94:ac:6e:1f:d5:78:db:3b:37:17:dc:8d:57:d6:4a: a2:df:2f:9c:15:ff:4c:7c:58:01:d9:6f:bf:34:c2:ae:58:a4: ee:04:af:89:08:22:09:67:92:a2:c4:b7:08:40:03:3e:6b:85: 89:f3:16:df:b5:28:e3:26:4c:f3:7d:1a:7e:a5:76:b3:20:24: 88:68:5a:f7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODJENDExMC8GA1UEBRMoRTI0NkNFN0ExNjA2MkFDMDYwNzUxMzYzRTU1M0VGNTVD NEM2NjhGMjAeFw0yNjA5MjEwODM5NDhaFw0yNjA5MjgwODM5NDhaMBgxFjAUBgNV BAMTDTZhYjBlZDU0LTZjNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBR8O4rAD4e4cn50LI6/PtFzxfKPMvouQNxOMvkhyPyZrSuSebwORwqoJ92lo0 38QZ1tPS+xlxRq7wyv6wbL1038BIolAi1+diO+ootZtPXfiwFsg/isDrBvtmFhJ6 /3sN7bNdL/8ptoS5ACCShIX4hNjnKTKvvmlYDy13O1mT18uZmhPMAYwG8a1exbc+ vCWVGw203QnB2N6PFZjwvTY3ooIlBvIaAjsxoM5wqi8XQ2oBwfIrx0N4NPObk1hI U5gSS2pYrMMQrl8by6MX+8F6VgX1E7yAUJwJyQqlFVfV1anvRQIl94XkKR8kYk7o qxWkjEqpvtUKUUHmWgG3+3dtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpKWnCUGJ 9IIywJ72nGo82fQutqcwHwYDVR0jBBgwFoAU4kbOehYGKsBgdRNj5VPvVcTGaPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MkQ0L0Y0QzJCRjQwNkU2 OTExRjFCOEY2MEM0RjhCQTMwRkJDLzRrYk9laFlHS3NCZ2RSTmo1VlB2VmNUR2FQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGtiT2VoWUdLc0JnZFJOajVWUHZWY1RHYVBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MkQ0L0Y0QzJCRjQwNkU2OTExRjFCOEY2MEM0RjhCQTMwRkJDLzRrYk9laFlHS3NC Z2RSTmo1VlB2VmNUR2FQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBN2rSmRoqwuVYOtgdUHDDOWhdDLlhNkvsLAqxsOp3+cSUku1capmOLSmeYwMwV 7rIla/qsWg/l8Ffbs2rYqS9Q+NCb/6gLWNY+L/RJZoJshp8bmTScZ2cmrRygcz2l Xpbyw8i7xgG7mzFt+DIgVMYIw4X9kbzlwSwQMtUMCLnFuZmkEZabmB69I/8KSVSo 2LpM19d4vq/lZ7YOLI2AkiShZKahsJ62aSzdQjPR84MCJWfSV4QXPzCUrG4f1Xjb OzcX3I1X1kqi3y+cFf9MfFgB2W+/NMKuWKTuBK+JCCIJZ5KixLcIQAM+a4WJ8xbf tSjjJkzzfRp+pXazICSIaFr3 -----END CERTIFICATE-----Generated at Tue Sep 22 16:38:24 2026 by rpki-client