$ rpki-client -vvvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json) Hash identifier: DZT4l6bLoa1/c6sRTl9x7cas4AcQXAkYxJoPIsvD2Mc= Subject key identifier: F7:60:98:2F:1C:98:FC:B5:95:BD:C4:B1:73:7D:8D:E2:F7:C3:E8:B6 Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Certificate serial: 0BDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft Manifest number: 0BB5 Signing time: Tue 06 Oct 2026 19:12:38 +0000 Manifest this update: Tue 06 Oct 2026 19:12:37 +0000 Manifest next update: Tue 13 Oct 2026 19:12:37 +0000 Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: G5cACA2dUS2OMRw3eaneuQvcli6pjxkZmxk/E6p3jOQ=) 2: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: 4Y3b7k2nPTigUaGbPaUVrcioubstHM/tbJbvPVaNua0=) 3: 76D38708D64611EE98C44371C4F9AE02.roa (hash: b/lrVR4/X7lgZk63ZwV38PNtuW7iDkYwDp3wzCiuCI4=) 4: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: xloPVlSDrLjQBNDWntHn7nwEdIAtctEKPygfcXqspac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Validity Not Before: Oct 6 19:12:37 2026 GMT Not After : Oct 13 19:12:37 2026 GMT Subject: CN=6ac54826-a1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:bf:a1:4a:3c:af:6a:05:ae:64:9a:44:18: e8:67:8c:e8:53:95:7d:d6:1d:24:61:17:52:14:24: d0:e4:49:0a:bb:33:62:a5:32:ec:a1:1b:23:03:b3: 79:cc:fc:c6:e6:c3:61:35:17:3d:e7:36:4c:43:08: f8:e1:2b:cf:8b:08:40:9c:21:46:8b:da:e2:fa:c5: ad:84:41:86:e0:c5:ae:a0:22:57:ea:d8:57:d7:44: 1f:7a:69:2d:2f:c8:45:dd:ea:1d:11:3e:bc:aa:3f: c8:83:4c:eb:5c:ea:01:e7:85:bf:53:d2:6c:60:d7: be:92:70:ea:ba:b0:54:b2:08:8a:f0:8d:67:ab:87: 01:2a:9b:c5:68:a3:1f:b5:b0:e4:67:dc:eb:fd:d7: 79:93:ca:ee:31:9b:31:35:fe:00:4a:71:b4:c3:a8: 04:4f:3f:04:51:29:6f:50:99:86:c7:22:c4:ac:81: 38:0c:41:73:a3:36:e5:6a:a3:47:51:83:32:2b:01: 06:99:b6:e8:1d:29:b3:fe:2f:70:3f:2d:e6:55:a4: ce:ff:b4:c9:63:81:8a:35:bb:73:81:96:7a:8f:87: 3b:82:88:22:93:ce:28:05:52:b4:0a:cc:99:b4:7b: cb:bf:5a:ec:33:73:15:67:66:aa:8d:05:47:f3:9d: 6b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:60:98:2F:1C:98:FC:B5:95:BD:C4:B1:73:7D:8D:E2:F7:C3:E8:B6 X509v3 Authority Key Identifier: keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d7:1c:6b:8a:4a:bf:7e:0d:30:da:f0:91:98:3f:67:92:3b: 94:f8:a5:37:7c:57:8a:a5:99:f5:c1:36:84:47:f5:d6:48:68: a0:a6:56:d0:65:0d:bc:fa:d0:cb:7d:4c:65:d8:85:cb:d5:db: e5:10:b7:e9:73:31:40:83:16:40:5b:0d:63:4a:2b:9a:52:73: f3:0e:ec:65:6a:78:40:23:d7:c2:5e:d8:14:63:39:37:db:f7: 18:eb:46:4b:ec:5f:66:3d:d0:ad:0a:3d:b5:ee:de:2f:ea:f3: 82:8e:9d:34:33:00:f2:bd:d6:f0:e9:1b:51:9e:13:e8:fa:f6: 8b:ad:8b:a5:0a:6a:0f:82:4e:cb:a6:79:e5:37:c4:46:6b:a2: 70:22:cb:43:26:80:b3:e4:21:bb:85:70:b3:c0:cd:34:d3:6b: ac:0c:79:7d:3b:61:2c:73:a6:33:43:8c:44:4e:ed:f7:6f:c0: 28:91:1c:2d:f4:15:7d:f0:8f:1e:7c:94:50:4b:41:9b:b3:76: 0a:2c:7d:c2:30:d3:4a:ab:ef:d7:8a:ac:66:33:38:a4:88:dc: ec:3f:a6:f5:9e:f3:d0:3b:4d:d7:ae:49:65:c0:44:54:ad:2d: 56:5c:ee:c0:fb:b4:cf:68:9f:75:37:06:23:28:88:79:83:26: a5:a9:df:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz OTBGQjEzMzEwHhcNMjYxMDA2MTkxMjM3WhcNMjYxMDEzMTkxMjM3WjAYMRYwFAYD VQQDEw02YWM1NDgyNi1hMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8S/oUo8r2oFrmSaRBjoZ4zoU5V91h0kYRdSFCTQ5EkKuzNipTLsoRsjA7N5 zPzG5sNhNRc95zZMQwj44SvPiwhAnCFGi9ri+sWthEGG4MWuoCJX6thX10Qfemkt L8hF3eodET68qj/Ig0zrXOoB54W/U9JsYNe+knDqurBUsgiK8I1nq4cBKpvFaKMf tbDkZ9zr/dd5k8ruMZsxNf4ASnG0w6gETz8EUSlvUJmGxyLErIE4DEFzozblaqNH UYMyKwEGmbboHSmz/i9wPy3mVaTO/7TJY4GKNbtzgZZ6j4c7gogik84oBVK0CsyZ tHvLv1rsM3MVZ2aqjQVH851rqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdgmC8c mPy1lb3EsXN9jeL3w+i2MB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2 QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw X1ZDRnZrUm1CU0U1RDdFekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhdcca4pKv34NMNrwkZg/Z5I7lPilN3xXiqWZ9cE2hEf11khooKZW0GUNvPrQ y31MZdiFy9Xb5RC36XMxQIMWQFsNY0ormlJz8w7sZWp4QCPXwl7YFGM5N9v3GOtG S+xfZj3QrQo9te7eL+rzgo6dNDMA8r3W8OkbUZ4T6Pr2i62LpQpqD4JOy6Z55TfE RmuicCLLQyaAs+Qhu4Vws8DNNNNrrAx5fTthLHOmM0OMRE7t92/AKJEcLfQVffCP HnyUUEtBm7N2Cix9wjDTSqvv14qsZjM4pIjc7D+m9Z7z0DtN165JZcBEVK0tVlzu wPu0z2ifdTcGIyiIeYMmpanfOQ== -----END CERTIFICATE-----Generated at Thu Oct 8 14:10:39 2026 by rpki-client