$ rpki-client -vvvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: zbVWxBOggu0+HOtML+Dy+sYEneA0/hAfOCtRcqyvOpA= Subject key identifier: 2D:ED:3E:56:26:7A:FB:1B:A5:35:5F:67:B9:64:AF:72:E2:12:09:29 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: F4 Signing time: Sat 17 Oct 2026 07:01:48 +0000 Manifest this update: Sat 17 Oct 2026 07:01:48 +0000 Manifest next update: Sat 24 Oct 2026 07:01:48 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: EZ2NY5602UFiN4A+O7qVLrmst3/PB4ch5gZrmWyac/k=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 06:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Oct 17 07:01:48 2026 GMT Not After : Oct 24 07:01:48 2026 GMT Subject: CN=6ad31d5c-f045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:76:e8:b1:df:d9:0b:76:d0:03:bf:b1:77: d6:1d:2b:f5:6d:2b:2e:bc:91:6f:e1:29:8a:62:57: 29:d7:ad:44:0f:50:aa:a0:04:37:46:59:8d:6f:0e: 95:5e:c7:62:d7:ec:ac:98:b2:00:7f:2e:07:8c:91: 91:93:be:8a:47:f1:b3:77:d3:03:bc:72:53:08:d2: 79:9e:0a:d1:b5:4c:17:fa:b5:57:14:50:65:f9:e4: 40:78:73:5e:3b:a4:73:9d:6e:6b:c5:90:7c:8c:59: 79:9c:b7:2c:49:0b:77:87:42:4f:d7:3a:07:d4:3e: 6a:8c:e7:07:57:6e:f4:0c:cb:a8:de:04:12:e0:30: 49:6b:96:06:cf:19:b3:19:b7:98:c8:20:a8:0b:5d: 1a:97:8f:f8:5d:83:7f:12:a1:ce:91:ef:85:a4:a3: 33:08:e1:58:09:f8:0d:46:0f:56:39:92:0b:7e:1c: d9:ee:cd:1b:8d:06:11:d1:97:9c:2d:ed:1b:b1:de: dc:f1:66:a3:fd:d9:93:d6:70:38:23:f0:8b:af:32: b3:86:f0:8b:d2:76:f3:4e:06:60:a6:46:b9:88:fa: cb:96:a7:2c:5a:21:6d:f8:60:0b:35:a1:54:be:5a: 0d:19:0a:62:aa:48:24:b3:1f:91:85:a1:51:71:91: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:ED:3E:56:26:7A:FB:1B:A5:35:5F:67:B9:64:AF:72:E2:12:09:29 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2c:dd:fe:1c:69:76:c8:06:82:f0:be:ec:36:e2:d2:a9:46: 20:e6:0d:da:9c:d0:bb:9f:ba:38:c6:43:72:ba:00:35:95:9b: 54:82:bd:34:20:ba:eb:1f:12:23:23:88:c1:ad:8d:bc:62:e0: 2e:71:a7:e9:bb:b3:a8:03:82:18:1b:e1:31:c5:f0:93:1d:d5: aa:a4:3d:5e:d8:33:fd:a4:62:95:6c:f2:4c:21:f1:25:fe:c5: f7:5d:14:ec:93:44:c0:f3:40:73:d6:85:20:38:6c:2f:2a:66: 2f:c5:f5:5f:ab:9a:04:0d:bd:c5:ab:8d:b9:e3:6d:17:4e:3e: 09:cb:8d:0e:26:ed:de:67:53:9c:1b:d3:68:fe:c6:66:de:87: 2e:7f:69:e2:9e:34:75:a4:c2:44:49:5c:c5:11:da:a0:43:32: 48:cb:90:28:67:ec:8b:f4:b1:64:bf:d3:db:ae:88:40:72:d3: c5:95:b4:9d:5a:a8:56:d4:7e:81:de:9a:99:ab:7a:a3:df:fe: 1b:74:b2:0d:01:40:9e:da:b4:b5:af:44:2f:9a:0b:0f:c7:dc: 29:5d:40:2c:f3:fa:fe:78:05:bd:7c:3a:df:62:39:df:2a:57: 79:f4:25:8a:41:91:f1:67:a2:aa:0c:65:15:55:00:ab:f3:08: fa:0b:c0:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzNEQxMTAvBgNVBAUTKDMwRDcxOUY5QzZEMzdFMkFDOUY0RDZENEIxRjdEOTc4 RUMyQTMyODkwHhcNMjYxMDE3MDcwMTQ4WhcNMjYxMDI0MDcwMTQ4WjAYMRYwFAYD VQQDEw02YWQzMWQ1Yy1mMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUt26LHf2Qt20AO/sXfWHSv1bSsuvJFv4SmKYlcp161ED1CqoAQ3RlmNbw6V Xsdi1+ysmLIAfy4HjJGRk76KR/Gzd9MDvHJTCNJ5ngrRtUwX+rVXFFBl+eRAeHNe O6RznW5rxZB8jFl5nLcsSQt3h0JP1zoH1D5qjOcHV270DMuo3gQS4DBJa5YGzxmz GbeYyCCoC10al4/4XYN/EqHOke+FpKMzCOFYCfgNRg9WOZILfhzZ7s0bjQYR0Zec Le0bsd7c8Waj/dmT1nA4I/CLrzKzhvCL0nbzTgZgpka5iPrLlqcsWiFt+GALNaFU vloNGQpiqkgksx+RhaFRcZHLKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3tPlYm evsbpTVfZ7lkr3LiEgkpMB8GA1UdIwQYMBaAFDDXGfnG034qyfTW1LH32XjsKjKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM0RC9GQzIwOTEzODU4 REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZpcko5TmJVc2ZmWmVPd3FN b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM0RC9GQzIwOTEzODU4REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZp cko5TmJVc2ZmWmVPd3FNb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACizd/hxpdsgGgvC+7Dbi0qlGIOYN2pzQu5+6OMZDcroANZWbVIK9NCC66x8S IyOIwa2NvGLgLnGn6buzqAOCGBvhMcXwkx3VqqQ9Xtgz/aRilWzyTCHxJf7F910U 7JNEwPNAc9aFIDhsLypmL8X1X6uaBA29xauNueNtF04+CcuNDibt3mdTnBvTaP7G Zt6HLn9p4p40daTCRElcxRHaoEMySMuQKGfsi/SxZL/T266IQHLTxZW0nVqoVtR+ gd6amat6o9/+G3SyDQFAntq0ta9EL5oLD8fcKV1ALPP6/ngFvXw632I53ypXefQl ikGR8WeiqgxlFVUAq/MI+gvA3w== -----END CERTIFICATE-----Generated at Sat Oct 17 14:39:12 2026 by rpki-client