$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: S+ky9Lk5k/4mQ4duRRTLB4bhx+fNHo3csDCEnnVNKOo= Subject key identifier: 7F:D4:4F:DD:B7:AE:75:9C:B4:22:C0:B8:B4:55:F0:BC:54:04:CF:CF Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0985 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 0959 Signing time: Sun 20 Sep 2026 17:50:38 +0000 Manifest this update: Sun 20 Sep 2026 17:50:38 +0000 Manifest next update: Sun 27 Sep 2026 17:50:38 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: 7+95oH9esRGt4iAUpJXmHfEFB/Mf7nKVoA2XMlKJDEg=) 2: D385E420314711EBA579873DC4F9AE02.roa (hash: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=) 3: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: BoTL56JNkoT8zZTebPvc7QbRsS4FGOp32MGJ/vJjCqw=) 4: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2437 (0x985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Sep 20 17:50:38 2026 GMT Not After : Sep 27 17:50:38 2026 GMT Subject: CN=6ab01cee-3117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:9e:72:bc:44:57:b3:50:62:9e:6f:49:ff: 3b:0f:62:e4:81:8e:27:42:0b:a6:83:8f:0f:aa:60: 29:d0:89:8a:f4:fb:37:88:84:93:a7:48:0e:44:22: d5:af:9b:66:c9:70:97:6b:e3:02:67:2e:2e:b5:c9: 29:f0:f5:96:2a:f0:27:2f:07:e8:4f:dd:7d:31:33: c9:55:f7:e3:5f:7f:37:29:cf:e7:c9:29:c8:4a:bc: 8d:f5:c4:3a:ba:68:fd:cc:62:15:b1:ea:73:49:b6: ff:24:12:63:9d:1d:e0:48:47:de:4a:bf:48:f2:f9: 36:85:f6:ec:0c:d4:ea:ae:31:a1:5a:8d:07:bf:b0: 27:8e:8a:f1:9c:a8:ff:7b:06:9b:5d:60:85:8c:00: 9e:c4:85:12:c1:c3:42:a1:62:85:4c:d0:47:38:61: 80:9a:b4:6f:4c:03:f3:c8:95:91:37:41:66:90:9d: b0:cb:30:9d:a2:0a:88:f8:f8:73:ec:19:2d:da:de: d0:bc:d1:54:6c:e5:04:e4:fd:35:db:64:43:a7:c5: 2f:53:9b:25:da:ff:19:1e:75:cb:47:31:b7:a7:d5: b1:c4:7a:9a:fd:15:51:dd:a4:45:c8:d1:3e:dc:b9: c8:44:2c:34:13:a7:7e:16:6e:be:05:3b:60:99:89: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:4F:DD:B7:AE:75:9C:B4:22:C0:B8:B4:55:F0:BC:54:04:CF:CF X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:e3:cf:42:59:04:05:db:4b:93:6a:97:7b:f3:6c:d2:9a: 6a:7a:08:24:bd:6e:37:5f:01:dc:91:e9:a8:97:b1:44:78:52: 64:42:ca:66:f5:43:ae:b2:c3:ca:c3:37:b6:55:08:48:d9:97: 23:7d:69:43:7a:bd:67:a4:2c:69:ce:b7:d2:81:e6:0c:91:8c: ed:fb:e0:8f:ff:93:bd:51:de:05:8d:67:30:85:57:30:ec:ff: 8d:b8:47:de:d2:0d:78:08:b4:f6:65:9d:38:db:0e:61:ed:ec: 7c:eb:64:4f:1a:c2:2b:60:af:9d:21:81:e3:06:ed:36:52:51: 44:93:40:b7:32:97:2d:e8:31:a0:ee:b7:08:f7:ee:d2:ca:4b: c7:c3:24:c5:cf:58:5f:e8:93:3a:d7:75:de:66:45:46:ac:e5: 47:e1:9f:8a:fe:d5:f0:6c:a3:f6:02:90:1f:98:67:fb:ce:f0: 8f:30:02:bb:1d:b7:3b:83:cd:6b:88:dd:63:3c:cb:e0:80:3d: b6:22:dc:2f:82:03:50:44:22:32:8c:23:2b:13:88:a4:ae:98: 3c:dd:14:98:ea:0c:c7:dd:c9:fe:eb:22:67:1e:c8:e6:71:88: d3:10:0a:f6:95:5e:d3:58:41:95:12:92:15:60:be:c0:50:6c: 25:80:b3:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwOTIwMTc1MDM4WhcNMjYwOTI3MTc1MDM4WjAYMRYwFAYD VQQDEw02YWIwMWNlZS0zMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuqecrxEV7NQYp5vSf87D2LkgY4nQgumg48PqmAp0ImK9Ps3iISTp0gORCLV r5tmyXCXa+MCZy4utckp8PWWKvAnLwfoT919MTPJVffjX383Kc/nySnISryN9cQ6 umj9zGIVsepzSbb/JBJjnR3gSEfeSr9I8vk2hfbsDNTqrjGhWo0Hv7AnjorxnKj/ ewabXWCFjACexIUSwcNCoWKFTNBHOGGAmrRvTAPzyJWRN0FmkJ2wyzCdogqI+Phz 7Bkt2t7QvNFUbOUE5P0122RDp8UvU5sl2v8ZHnXLRzG3p9WxxHqa/RVR3aRFyNE+ 3LnIRCw0E6d+Fm6+BTtgmYlW0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/UT923 rnWctCLAuLRV8LxUBM/PMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMJnjz0JZBAXbS5Nql3vzbNKaanoIJL1uN18B3JHpqJexRHhSZELKZvVDrrLD ysM3tlUISNmXI31pQ3q9Z6Qsac630oHmDJGM7fvgj/+TvVHeBY1nMIVXMOz/jbhH 3tINeAi09mWdONsOYe3sfOtkTxrCK2CvnSGB4wbtNlJRRJNAtzKXLegxoO63CPfu 0spLx8Mkxc9YX+iTOtd13mZFRqzlR+Gfiv7V8Gyj9gKQH5hn+87wjzACux23O4PN a4jdYzzL4IA9tiLcL4IDUEQiMowjKxOIpK6YPN0UmOoMx93J/usiZx7I5nGI0xAK 9pVe01hBlRKSFWC+wFBsJYCzvw== -----END CERTIFICATE-----Generated at Mon Sep 21 10:11:16 2026 by rpki-client