$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: RLfJuyWfZYdXaUgGkRlfT4FOcmU4qXiP5qLSwzuQAzI= Subject key identifier: 5B:8A:6E:54:F6:12:D9:36:EF:E8:BB:31:EE:26:C8:57:12:6B:A5:E1 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: 01DE Signing time: Mon 21 Sep 2026 03:37:36 +0000 Manifest this update: Mon 21 Sep 2026 03:37:35 +0000 Manifest next update: Mon 28 Sep 2026 03:37:35 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: aAFUZr9+3PQiEuyyq0jR6jZZP3+0Fy7jaFXx6Cn/hos=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: /p0IRebK1ecfFLpUcCA3qAEpMKVqatFf1hx/y6EBTmI=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: XjHUkWL+sFmZoNR2qFeU0dNbQ2ZM/7PQGFCwI1qnX4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Sep 21 03:37:35 2026 GMT Not After : Sep 28 03:37:35 2026 GMT Subject: CN=6ab0a680-e628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:f0:3c:04:06:d7:cc:ef:5f:fb:fe:c1:3e: 65:ce:79:69:20:51:59:36:6f:4d:2f:62:f7:40:c5: 05:91:79:d4:a2:5e:52:04:4a:34:c7:21:09:10:7f: c0:2e:9d:0d:04:0d:3a:a8:25:53:2e:b4:21:34:67: 36:da:7a:91:dc:05:42:ad:22:f1:03:a7:f6:1a:e1: 26:1c:d6:df:2a:7f:71:6e:b7:5e:cd:1e:c8:d0:5b: 3a:14:48:a5:ab:d9:db:dc:16:dd:00:8b:b6:b8:96: 62:10:83:b4:6a:4c:8a:3d:45:57:ca:9d:28:a9:ba: 36:53:5c:04:3d:ab:5c:c8:fb:00:1c:41:ef:6a:f5: d1:9d:6b:8a:bd:50:59:2a:cf:a1:33:27:b6:8d:c1: 76:64:13:c4:c3:f0:6e:16:e4:3f:75:26:69:6a:28: 36:26:ab:e9:51:c9:09:67:e2:44:6b:a5:42:0f:a6: 53:8e:84:48:72:3f:2c:9a:0a:a5:ac:96:5d:02:eb: 0e:7d:7d:48:59:f7:5b:6b:d0:5d:eb:21:40:51:f4: 5c:12:09:98:c0:df:35:f9:17:bc:07:6e:27:aa:1f: 11:0a:5a:87:e0:74:ec:1f:d1:95:47:29:e3:c6:2d: 49:74:9d:ad:24:90:4e:43:3f:2e:2f:1d:67:38:19: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8A:6E:54:F6:12:D9:36:EF:E8:BB:31:EE:26:C8:57:12:6B:A5:E1 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:d7:25:c7:8f:a0:13:ca:1b:bc:2b:c6:61:55:f5:74:76:9e: c3:81:92:ac:90:ed:3b:fb:68:80:d5:33:1d:b2:63:f2:f0:01: 4f:8d:fd:84:3a:57:23:88:09:7a:e6:40:57:07:d3:98:87:26: 35:cd:8d:7d:64:99:be:74:f2:2b:d8:3c:97:f6:93:81:b9:38: 4a:f8:f8:3e:a1:8c:04:6d:e9:9c:59:7f:3b:28:99:eb:5a:a9: dc:02:d6:01:09:c9:cd:4d:69:1b:f2:84:42:d6:c3:2e:ed:00: 54:dc:62:0f:9f:6f:d4:5a:81:ef:7b:d8:0b:45:7b:d2:e7:8b: 6c:f8:b3:d5:b1:22:9b:ef:f1:bb:31:45:74:92:dd:16:8e:a6: e1:b2:9a:46:ed:6d:4a:43:eb:0c:10:20:4c:eb:52:63:96:52: 7c:89:9c:e9:9f:16:31:e3:f0:d4:59:87:3b:3e:36:9d:77:e8: eb:39:e3:65:ee:ac:28:2b:fe:af:1d:89:3f:b1:60:f6:8d:a9: 1a:84:10:cb:09:0d:c6:ed:51:74:21:7e:a5:04:66:cd:85:5b: 46:05:6a:0c:7a:e4:cd:5e:96:60:9a:5c:48:8c:95:62:e7:a0: 98:9a:10:b6:87:5f:91:9f:c5:6d:6e:1b:c4:bc:24:bf:d7:53: 4e:f8:2e:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjYwOTIxMDMzNzM1WhcNMjYwOTI4MDMzNzM1WjAYMRYwFAYD VQQDEw02YWIwYTY4MC1lNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpbwPAQG18zvX/v+wT5lznlpIFFZNm9NL2L3QMUFkXnUol5SBEo0xyEJEH/A Lp0NBA06qCVTLrQhNGc22nqR3AVCrSLxA6f2GuEmHNbfKn9xbrdezR7I0Fs6FEil q9nb3BbdAIu2uJZiEIO0akyKPUVXyp0oqbo2U1wEPatcyPsAHEHvavXRnWuKvVBZ Ks+hMye2jcF2ZBPEw/BuFuQ/dSZpaig2JqvpUckJZ+JEa6VCD6ZTjoRIcj8smgql rJZdAusOfX1IWfdba9Bd6yFAUfRcEgmYwN81+Re8B24nqh8RClqH4HTsH9GVRynj xi1JdJ2tJJBOQz8uLx1nOBlLKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuKblT2 Etk27+i7Me4myFcSa6XhMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQNclx4+gE8obvCvGYVX1dHaew4GSrJDtO/togNUzHbJj8vABT439hDpXI4gJ euZAVwfTmIcmNc2NfWSZvnTyK9g8l/aTgbk4Svj4PqGMBG3pnFl/OyiZ61qp3ALW AQnJzU1pG/KEQtbDLu0AVNxiD59v1FqB73vYC0V70ueLbPiz1bEim+/xuzFFdJLd Fo6m4bKaRu1tSkPrDBAgTOtSY5ZSfImc6Z8WMePw1FmHOz42nXfo6znjZe6sKCv+ rx2JP7Fg9o2pGoQQywkNxu1RdCF+pQRmzYVbRgVqDHrkzV6WYJpcSIyVYuegmJoQ todfkZ/FbW4bxLwkv9dTTvgu/g== -----END CERTIFICATE-----Generated at Mon Sep 21 23:24:52 2026 by rpki-client