$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: K0p4cx5NsxdHlhnzWebFmRlc7yoy4mbE05nh9xAVDxk= Subject key identifier: 76:90:6D:B5:8B:30:25:76:FF:4E:E7:A5:4C:41:AE:B1:DC:8B:18:A0 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: FB Signing time: Wed 23 Sep 2026 06:03:42 +0000 Manifest this update: Wed 23 Sep 2026 06:03:41 +0000 Manifest next update: Wed 30 Sep 2026 06:03:41 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: tEAftv/95dBBmILp6PkDvzlvSNlh1yFV+FNc1X/IkQ4=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Sep 23 06:03:41 2026 GMT Not After : Sep 30 06:03:41 2026 GMT Subject: CN=6ab36bbe-b685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:8d:73:b9:52:6d:f7:fa:25:1a:28:59:57: 9f:14:7f:46:95:5b:cf:b7:52:6e:cd:ff:d9:09:de: bc:d1:fb:53:a7:46:f5:89:1d:0f:a7:f4:2b:dc:78: 3c:9f:16:91:05:f1:d3:e0:e1:80:76:80:40:ff:11: 12:fa:ee:54:97:64:42:17:bf:c0:7c:c2:6e:e2:73: 87:85:c9:33:49:6f:7c:96:e5:bb:a6:95:c9:31:b0: 8d:cf:d7:40:e2:c3:b4:23:54:7c:59:3d:5b:ce:83: 13:69:e9:43:41:0f:b6:30:b7:8a:7e:da:fd:e2:2c: 52:5e:96:f6:58:46:c2:c5:c6:fe:dc:29:f3:64:0f: 8b:91:d3:1c:b4:b2:d1:b3:5a:6a:e3:d8:e9:a7:47: 91:1f:48:c4:e6:07:4d:ae:9d:33:52:d2:a6:33:2b: 30:90:c7:c2:39:ef:4d:ee:87:06:d5:e1:89:f3:2b: 9e:e8:ff:7e:9e:22:29:d9:b2:3f:e9:cb:66:de:dc: 04:40:1e:68:94:29:ee:07:c8:04:9d:60:86:79:4a: 41:57:b9:7f:07:85:69:57:ee:49:13:33:0a:56:dc: ca:fb:3a:54:21:06:8c:88:dd:c7:a7:17:26:72:f0: 28:2f:bc:56:8d:1a:0f:61:3f:23:bf:83:c2:23:48: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:90:6D:B5:8B:30:25:76:FF:4E:E7:A5:4C:41:AE:B1:DC:8B:18:A0 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d2:1d:2a:3a:c0:94:ba:89:bf:f3:bf:c2:2e:c9:16:bd:ad: d0:7f:24:4f:9c:a8:72:4c:0f:87:ad:c7:0a:af:ae:ac:ad:48: 10:b8:e2:2f:6e:99:32:ed:a5:75:40:42:9b:7e:41:5d:1e:fb: 79:f4:e8:ce:f4:ec:65:92:b6:2b:a3:2d:70:ca:ce:f1:e5:64: 52:d9:fb:0e:a2:6a:a5:06:e9:1a:f6:09:23:6c:2d:f1:93:45: 8e:8c:18:ea:65:8a:03:2a:9e:64:e4:91:97:e2:8b:4d:d7:5f: c4:b3:45:09:34:49:2b:03:ca:d5:30:e9:8c:81:d9:38:ea:95: 6c:e0:f4:60:89:1e:07:43:06:fb:ea:47:87:66:bd:8b:31:dd: 0a:cb:e4:eb:5d:f8:d8:81:f0:1c:07:33:42:4a:6f:93:cf:19: ed:cd:3f:92:d9:31:88:14:31:40:0a:9a:0b:97:bb:51:98:20: 50:e0:12:c6:bc:0e:bb:bd:25:3f:01:54:fe:2e:b9:e8:c4:eb: 18:77:d8:66:c2:44:7e:05:5f:cd:08:d8:5c:47:af:98:04:2a: a9:0f:0e:ed:b1:3c:83:71:2e:0f:d0:ea:68:22:33:cc:da:4e: b7:b5:31:0c:db:49:c4:a3:50:72:b6:05:85:3d:be:37:e1:d0: d3:1b:89:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMTAxMTAvBgNVBAUTKEUyQjBERkE2OTBEMkM3RUFDNDM2MzY3NTZFNDM3QjdD MjYyNkY0QkIwHhcNMjYwOTIzMDYwMzQxWhcNMjYwOTMwMDYwMzQxWjAYMRYwFAYD VQQDEw02YWIzNmJiZS1iNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh5GNc7lSbff6JRooWVefFH9GlVvPt1Juzf/ZCd680ftTp0b1iR0Pp/Qr3Hg8 nxaRBfHT4OGAdoBA/xES+u5Ul2RCF7/AfMJu4nOHhckzSW98luW7ppXJMbCNz9dA 4sO0I1R8WT1bzoMTaelDQQ+2MLeKftr94ixSXpb2WEbCxcb+3CnzZA+LkdMctLLR s1pq49jpp0eRH0jE5gdNrp0zUtKmMyswkMfCOe9N7ocG1eGJ8yue6P9+niIp2bI/ 6ctm3twEQB5olCnuB8gEnWCGeUpBV7l/B4VpV+5JEzMKVtzK+zpUIQaMiN3Hpxcm cvAoL7xWjRoPYT8jv4PCI0g9JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaQbbWL MCV2/07npUxBrrHcixigMB8GA1UdIwQYMBaAFOKw36aQ0sfqxDY2dW5De3wmJvS7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMxMC8wRTk0MDVCQTNC OUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gtckVOaloxYmtON2ZDWW05 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMxMC8wRTk0MDVCQTNCOUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gt ckVOaloxYmtON2ZDWW05THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf9IdKjrAlLqJv/O/wi7JFr2t0H8kT5yockwPh63HCq+urK1IELjiL26ZMu2l dUBCm35BXR77efTozvTsZZK2K6MtcMrO8eVkUtn7DqJqpQbpGvYJI2wt8ZNFjowY 6mWKAyqeZOSRl+KLTddfxLNFCTRJKwPK1TDpjIHZOOqVbOD0YIkeB0MG++pHh2a9 izHdCsvk61342IHwHAczQkpvk88Z7c0/ktkxiBQxQAqaC5e7UZggUOASxrwOu70l PwFU/i656MTrGHfYZsJEfgVfzQjYXEevmAQqqQ8O7bE8g3EuD9DqaCIzzNpOt7Ux DNtJxKNQcrYFhT2+N+HQ0xuJnw== -----END CERTIFICATE-----Generated at Thu Sep 24 11:47:39 2026 by rpki-client