$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: AN9i+hpom044XfW/MXyziGPR24+b1keue+xY5PS4stM= Subject key identifier: CD:D6:21:D5:23:93:30:43:D7:B1:9D:0A:C6:F3:67:8A:2B:77:3A:20 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0F4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0F42 Signing time: Fri 04 Sep 2026 17:31:08 +0000 Manifest this update: Fri 04 Sep 2026 17:31:08 +0000 Manifest next update: Fri 11 Sep 2026 17:31:08 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: HEY3+76jpJtRaA3N9n1PQbzsVdm/Mc4+DcbpH0HHzKk=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: g5Jn/4mYG+O+uANS2Gq3ehc2407nXRKNECbsAhZFdHM=) 3: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: dCbH4NL/l/xMZfu4F928E1bAEdQVgxFt32pJoJ1YYyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3918 (0xf4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Sep 4 17:31:08 2026 GMT Not After : Sep 11 17:31:08 2026 GMT Subject: CN=6a9b005c-702a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:be:26:80:53:6b:68:10:0c:a0:d1:15:ca: 3c:ef:e4:4a:db:0e:e8:9f:69:56:80:cb:68:73:33: c4:27:67:20:8f:df:ee:3b:1b:da:83:38:7b:4f:bf: ea:40:d9:22:6c:62:fe:e5:0e:8a:21:1d:74:5a:3c: 62:7b:78:67:39:e1:dc:dd:90:20:e6:9e:a8:3d:de: 47:86:51:9b:23:ca:25:b6:8d:95:c1:f2:95:29:48: d7:4b:6e:d9:87:f5:7e:8f:a0:36:3c:10:4a:87:99: 4f:ea:0b:66:fe:6e:dd:3f:54:56:0f:e0:5e:9e:c9: 58:c9:aa:c4:59:ea:27:eb:83:15:d3:c5:93:f6:49: bb:bd:6a:cd:e6:14:28:e5:68:7c:b8:42:37:fe:91: ed:60:93:26:ac:c5:8d:7f:b7:60:00:e3:be:94:ef: 9d:6b:50:9b:8d:6c:b8:1c:2e:e4:57:87:65:1f:73: 8a:27:1c:82:a8:ef:bb:e9:be:c3:ef:bd:47:f3:dc: 41:6e:9b:d0:07:36:ed:d0:5e:fa:66:2c:ca:ff:fa: d2:bb:0f:4b:30:9c:23:6a:d4:dc:e2:4c:88:6e:80: 34:08:a8:56:f7:a1:af:51:25:92:e3:d0:9e:76:d7: 57:90:75:b3:9a:af:f0:fc:e2:c8:6c:3b:7b:ee:bd: 06:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D6:21:D5:23:93:30:43:D7:B1:9D:0A:C6:F3:67:8A:2B:77:3A:20 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:26:61:cb:04:67:75:20:59:e5:50:e7:d6:b6:17:72:52:e8: 47:ec:b8:25:66:85:8d:a7:58:e6:6b:89:1e:e8:71:f2:e5:3a: 25:cc:73:62:b8:bc:3c:9e:16:02:c1:6a:17:c4:95:da:53:bd: 30:58:86:2d:c1:ba:ff:99:a2:ee:1a:cf:5c:1e:7a:9b:13:4e: e8:8c:49:cc:af:fb:c4:7e:87:bf:c0:d9:6d:6a:be:fe:68:18: 0c:48:45:1c:32:92:f3:c5:8b:9b:cd:e9:9a:31:e2:24:10:02: c0:48:45:03:42:a3:83:8e:d3:c1:3b:8a:68:71:da:45:bb:91: b0:66:73:05:ca:64:ee:61:a9:8a:fb:2b:54:dd:6c:e6:f4:de: 3b:a2:97:73:26:8a:d1:ad:f9:60:b6:e6:42:ea:c5:50:1f:e6: 8b:0e:42:5b:d1:6b:c0:68:f4:ad:34:f4:05:7c:ec:35:70:23: 1a:68:82:a9:e3:39:12:cc:ad:e5:1a:9b:64:73:43:c2:53:bf: ae:c1:cc:a1:e6:c4:00:7f:95:91:22:0b:b1:c1:8d:12:76:80: 5f:6d:8a:bd:59:66:1d:86:42:84:29:a2:24:77:4d:6e:46:64: bd:ba:e0:dd:2a:17:39:10:88:91:ec:8c:93:9c:ed:16:ec:b0: d4:95:11:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjYwOTA0MTczMTA4WhcNMjYwOTExMTczMTA4WjAYMRYwFAYD VQQDEw02YTliMDA1Yy03MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6m+JoBTa2gQDKDRFco87+RK2w7on2lWgMtoczPEJ2cgj9/uOxvagzh7T7/q QNkibGL+5Q6KIR10Wjxie3hnOeHc3ZAg5p6oPd5HhlGbI8olto2VwfKVKUjXS27Z h/V+j6A2PBBKh5lP6gtm/m7dP1RWD+BenslYyarEWeon64MV08WT9km7vWrN5hQo 5Wh8uEI3/pHtYJMmrMWNf7dgAOO+lO+da1CbjWy4HC7kV4dlH3OKJxyCqO+76b7D 771H89xBbpvQBzbt0F76ZizK//rSuw9LMJwjatTc4kyIboA0CKhW96GvUSWS49Ce dtdXkHWzmq/w/OLIbDt77r0GqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3WIdUj kzBD17GdCsbzZ4ordzogMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyyZhywRndSBZ5VDn1rYXclLoR+y4JWaFjadY5muJHuhx8uU6JcxzYri8PJ4W AsFqF8SV2lO9MFiGLcG6/5mi7hrPXB56mxNO6IxJzK/7xH6Hv8DZbWq+/mgYDEhF HDKS88WLm83pmjHiJBACwEhFA0Kjg47TwTuKaHHaRbuRsGZzBcpk7mGpivsrVN1s 5vTeO6KXcyaK0a35YLbmQurFUB/miw5CW9FrwGj0rTT0BXzsNXAjGmiCqeM5Esyt 5RqbZHNDwlO/rsHMoebEAH+VkSILscGNEnaAX22KvVlmHYZChCmiJHdNbkZkvbrg 3SoXORCIkeyMk5ztFuyw1JURUQ== -----END CERTIFICATE-----Generated at Sat Sep 5 07:21:13 2026 by rpki-client