$ rpki-client -vvvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: jgbPfZUULe6en0mNduMjZhV7nEI4oiru9E1vQaoaKWo= Subject key identifier: 71:DD:49:1F:7A:D2:C4:E2:33:55:8D:88:DB:51:75:46:9C:04:1F:C9 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 09FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 09D6 Signing time: Tue 06 Oct 2026 20:01:41 +0000 Manifest this update: Tue 06 Oct 2026 20:01:41 +0000 Manifest next update: Tue 13 Oct 2026 20:01:41 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: ai1xIg7qqD8CE9FBHLqU4MGr1opc59p6cqmPSSP3mj0=) 2: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: NITUGIY3VUrXvrMgL7aqXfgZesSmrM25OMjQ5mv/ZQM=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: Q8Dw0nOFQkliPbcwFzRrinH8y/mmTbLGc4WI/8vPvqg=) 4: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: 6RXwgbnN2rBKh/2tqm5RTVGi0Iq1Kc0Yd6NErbg5XT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Oct 6 20:01:41 2026 GMT Not After : Oct 13 20:01:41 2026 GMT Subject: CN=6ac553a5-5196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:5b:e0:3b:54:8b:08:13:f7:27:c4:12:df: a9:61:3d:93:54:69:ce:3a:d0:00:58:40:f4:88:54: 9c:ab:8e:34:a9:7a:0d:ec:83:8e:a5:b5:22:5f:8c: b3:32:aa:61:aa:5c:83:c1:06:9b:e9:25:76:1b:33: 00:c3:2e:f0:db:ab:96:da:b9:4a:7a:93:0c:9f:28: 45:6a:87:59:52:ed:d9:73:2a:f9:2e:9e:5d:58:c1: 46:27:84:a4:9d:04:de:54:31:e4:2b:5b:98:b2:2a: 55:d8:02:d1:3a:b1:31:1c:5e:39:0f:01:6a:97:71: 3a:c2:5f:76:f5:69:ae:9d:cc:f9:e5:2f:1c:0a:e5: a2:eb:c6:bf:a1:f2:c4:4a:8a:c1:6f:8f:ec:a5:91: 05:79:73:97:c4:69:c4:ef:60:d8:38:37:1e:d7:ac: 79:f8:87:26:c1:c9:65:91:4f:ed:46:c4:de:bc:28: 08:56:18:2c:21:c5:fa:e5:69:83:ce:87:91:4e:da: b9:d4:d3:8f:66:48:5a:e1:1d:c1:89:46:9b:2e:51: f9:27:0f:ff:ee:c7:f5:de:36:ca:e8:ad:ec:bc:c5: b4:65:d6:ec:90:20:46:c4:90:43:4b:e4:29:b0:5c: 39:c1:6f:15:7a:ee:dc:9a:ae:91:37:1f:06:fe:c0: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DD:49:1F:7A:D2:C4:E2:33:55:8D:88:DB:51:75:46:9C:04:1F:C9 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b2:45:87:7f:24:84:88:8d:ad:2c:31:33:fe:48:f8:07:bf: e3:f2:ee:2c:01:f2:e5:da:c7:4b:a7:0c:4d:42:72:bf:47:43: 8b:ee:ab:9c:9d:64:2f:0f:c4:04:73:b8:47:54:dc:36:46:0e: 25:f0:f5:bb:57:b9:84:8d:5a:de:50:b9:fe:25:9f:2b:51:95: 85:fc:ab:ef:f8:30:a3:ab:ad:ca:b1:fd:ab:70:44:91:00:97: df:54:92:c2:c2:70:23:c8:15:e1:a0:e1:40:2d:67:dd:49:c3: ec:00:18:c9:41:b5:87:cb:38:56:68:aa:4b:c4:af:0a:8c:c0: 45:4a:b3:e2:be:f9:b4:60:28:5c:1d:27:44:d6:35:fb:01:a9: d3:bd:cf:72:45:db:19:03:bb:87:61:3c:e8:57:5e:d4:b0:55: d0:e3:b7:ed:fc:df:57:13:53:83:7d:9c:82:f0:cb:c3:ad:62: 15:23:de:ab:cf:1b:3f:45:83:94:c5:be:85:9d:89:57:92:56: 5f:11:a3:b3:05:dd:da:ac:c0:37:7c:c5:9c:07:f4:62:40:1b: 43:10:71:d7:c9:71:c4:a0:54:f5:ef:f3:42:89:16:1c:70:bd: be:f4:88:e0:35:29:96:e2:69:e2:cc:fd:af:b4:5a:66:b1:70: 8f:60:69:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjYxMDA2MjAwMTQxWhcNMjYxMDEzMjAwMTQxWjAYMRYwFAYD VQQDEw02YWM1NTNhNS01MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyupb4DtUiwgT9yfEEt+pYT2TVGnOOtAAWED0iFScq440qXoN7IOOpbUiX4yz MqphqlyDwQab6SV2GzMAwy7w26uW2rlKepMMnyhFaodZUu3Zcyr5Lp5dWMFGJ4Sk nQTeVDHkK1uYsipV2ALROrExHF45DwFql3E6wl929Wmuncz55S8cCuWi68a/ofLE SorBb4/spZEFeXOXxGnE72DYODce16x5+IcmwcllkU/tRsTevCgIVhgsIcX65WmD zoeRTtq51NOPZkha4R3BiUabLlH5Jw//7sf13jbK6K3svMW0ZdbskCBGxJBDS+Qp sFw5wW8Veu7cmq6RNx8G/sD0ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHdSR96 0sTiM1WNiNtRdUacBB/JMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEbJFh38khIiNrSwxM/5I+Ae/4/LuLAHy5drHS6cMTUJyv0dDi+6rnJ1kLw/E BHO4R1TcNkYOJfD1u1e5hI1a3lC5/iWfK1GVhfyr7/gwo6utyrH9q3BEkQCX31SS wsJwI8gV4aDhQC1n3UnD7AAYyUG1h8s4VmiqS8SvCozARUqz4r75tGAoXB0nRNY1 +wGp073PckXbGQO7h2E86Fde1LBV0OO37fzfVxNTg32cgvDLw61iFSPeq88bP0WD lMW+hZ2JV5JWXxGjswXd2qzAN3zFnAf0YkAbQxBx18lxxKBU9e/zQokWHHC9vvSI 4DUpluJp4sz9r7RaZrFwj2Bp+Q== -----END CERTIFICATE-----Generated at Thu Oct 8 20:35:39 2026 by rpki-client