$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: uOY31AT/lYcLR0eCAOqjPaXQHUtoonvxRdBsVaEISMc= Subject key identifier: 60:FD:B0:E6:05:5A:6E:6E:17:62:73:0B:ED:C8:39:3A:55:CE:E0:A6 Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 02DB Signing time: Mon 05 Oct 2026 01:29:28 +0000 Manifest this update: Mon 05 Oct 2026 01:29:27 +0000 Manifest next update: Mon 12 Oct 2026 01:29:27 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: ORcQVtLrPobnKfQXp0lTqQlI4/kCUyLZeq2g40NMQkE=) 2: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=) 3: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Oct 5 01:29:27 2026 GMT Not After : Oct 12 01:29:27 2026 GMT Subject: CN=6ac2fd78-0358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8f:59:9f:8e:e3:60:9c:61:d1:7e:81:ea:79: 5e:89:1c:7e:11:85:ed:be:11:60:cc:d1:59:4a:66: 63:df:1c:6e:b6:8b:bf:56:b2:8a:80:66:be:ee:f5: 1d:ca:80:d9:16:6e:37:b2:66:2e:d4:86:7e:32:73: 71:80:6f:81:a8:08:38:21:d8:cc:e7:ab:38:4e:0e: 4c:30:c2:b1:0f:9e:cc:7c:3f:bc:2a:6c:41:f5:fe: 33:86:bd:1a:0b:fb:5d:f3:76:3d:c7:12:db:30:0f: 25:40:bf:25:9c:27:93:d6:94:c5:3b:6a:56:08:5c: 4c:44:2c:af:6f:41:63:d2:0d:10:b4:43:a4:74:75: f4:4f:d6:84:b1:8f:fb:e6:23:29:43:c0:23:23:87: 80:93:36:21:6f:83:98:d7:89:9c:df:87:ca:10:75: 9c:e3:f1:2e:b4:f1:57:a0:cd:de:22:bd:e2:2a:c5: c0:eb:0c:ee:ea:ec:5d:4e:8b:72:ca:05:33:0f:56: c4:e4:63:67:a2:1b:19:39:3c:6a:71:f6:db:b1:f2: 19:6d:4f:8a:dc:4f:1a:f2:8c:8b:ab:0e:43:ce:fd: b2:a9:cf:d0:c2:fe:ce:5a:70:25:72:91:bc:09:df: dc:86:42:29:46:25:57:9f:77:e2:75:5f:5e:7b:ae: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FD:B0:E6:05:5A:6E:6E:17:62:73:0B:ED:C8:39:3A:55:CE:E0:A6 X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:46:5d:d6:46:d5:dc:38:dc:74:fb:1c:ab:fd:eb:69:bc:19: ea:57:05:3f:d8:a0:0a:f7:77:fb:bb:4d:e4:72:f5:2c:56:1b: 1d:7d:6a:95:24:6f:58:d5:36:d1:99:c5:3f:d6:75:87:fa:31: 33:cd:b4:9f:01:2c:d9:7c:85:9a:dc:3f:e1:86:79:c8:4e:b8: 5d:be:f5:d8:ea:2f:e7:be:07:a4:f8:2a:86:16:6b:93:65:ff: 26:ba:4c:ef:b2:77:c2:be:88:50:5f:0b:74:d6:72:71:a9:f3: c3:63:d9:22:41:bb:10:b9:0d:22:64:06:86:8c:36:91:dc:f2: 6e:0c:ba:17:ba:2c:e7:a6:1a:a4:9e:5b:e9:dc:84:4f:f5:01: 09:4e:2a:f7:11:fa:6c:90:58:4d:a9:dc:dd:00:63:a7:a4:34: c0:07:e5:6f:57:85:c6:cd:3f:96:38:bb:54:cc:b2:fd:2e:8e: 61:2b:b0:61:98:00:7f:c9:eb:09:79:f0:41:2a:d6:66:6b:6a: 34:72:4f:c3:83:41:0e:a4:8e:fd:2e:78:68:74:fd:d0:c3:9c: 51:65:6e:ba:da:ac:88:66:3c:f5:0d:a1:ea:f7:37:3f:80:ba: b4:a8:68:4b:6b:f8:77:b2:78:d9:5b:55:43:00:09:8a:9f:fd: 6c:e7:dc:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjYxMDA1MDEyOTI3WhcNMjYxMDEyMDEyOTI3WjAYMRYwFAYD VQQDEw02YWMyZmQ3OC0wMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoY9Zn47jYJxh0X6B6nleiRx+EYXtvhFgzNFZSmZj3xxutou/VrKKgGa+7vUd yoDZFm43smYu1IZ+MnNxgG+BqAg4IdjM56s4Tg5MMMKxD57MfD+8KmxB9f4zhr0a C/td83Y9xxLbMA8lQL8lnCeT1pTFO2pWCFxMRCyvb0Fj0g0QtEOkdHX0T9aEsY/7 5iMpQ8AjI4eAkzYhb4OY14mc34fKEHWc4/EutPFXoM3eIr3iKsXA6wzu6uxdToty ygUzD1bE5GNnohsZOTxqcfbbsfIZbU+K3E8a8oyLqw5Dzv2yqc/Qwv7OWnAlcpG8 Cd/chkIpRiVXn3fidV9ee6786QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGD9sOYF Wm5uF2JzC+3IOTpVzuCmMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJEZd1kbV3DjcdPscq/3rabwZ6lcFP9igCvd3+7tN5HL1LFYbHX1qlSRvWNU2 0ZnFP9Z1h/oxM820nwEs2XyFmtw/4YZ5yE64Xb712Oov574HpPgqhhZrk2X/JrpM 77J3wr6IUF8LdNZycanzw2PZIkG7ELkNImQGhow2kdzybgy6F7os56YapJ5b6dyE T/UBCU4q9xH6bJBYTanc3QBjp6Q0wAflb1eFxs0/lji7VMyy/S6OYSuwYZgAf8nr CXnwQSrWZmtqNHJPw4NBDqSO/S54aHT90MOcUWVuutqsiGY89Q2h6vc3P4C6tKho S2v4d7J42VtVQwAJip/9bOfcvw== -----END CERTIFICATE-----Generated at Tue Oct 6 00:59:39 2026 by rpki-client