$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft File: 4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json) Hash identifier: lWkjHHORNjiluJRlRtm0aT4briA7r+3g4FKN1SXuimU= Subject key identifier: 8C:FD:85:55:E1:59:A2:7F:50:3F:56:09:40:5B:14:36:AE:A2:36:1A Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Certificate serial: 02E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft Manifest number: 02DD Signing time: Sat 31 Oct 2026 01:24:54 +0000 Manifest this update: Sat 31 Oct 2026 01:24:53 +0000 Manifest next update: Sat 07 Nov 2026 01:24:53 +0000 Files and hashes: 1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: RFRZYFLi7bRqwpA13zkwsqBmqTrxqyRtEQ3/LfFeruI=) 2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: LdRxke1Bck5JxIBRCGjM9TpaCqk+l96r/JCtzyDPs+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 01:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 739 (0x2e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Validity Not Before: Oct 31 01:24:53 2026 GMT Not After : Nov 7 01:24:53 2026 GMT Subject: CN=6ae54365-86d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:bc:65:a4:ef:91:d3:db:88:cf:f9:61:af: 1b:b2:22:41:69:0d:a6:13:94:7c:62:82:de:1c:a1: 8f:88:aa:fb:1f:9f:01:14:d0:1f:fe:a1:2b:a6:81: ca:85:1d:02:46:97:03:df:5b:0d:97:24:9f:e2:6f: cf:05:a8:fe:8f:76:b0:ba:af:63:e4:2d:aa:d6:ea: 98:89:54:da:70:cf:b0:e4:aa:b3:e0:66:8a:40:cb: ae:95:20:59:75:1d:2e:84:14:00:48:69:ff:ad:b0: 58:d5:00:f4:6d:33:44:e9:be:d3:2c:5f:c5:a3:a5: 14:87:ea:0b:03:00:be:6c:f1:93:f2:2a:d2:ac:80: 05:87:41:21:a9:b4:f4:b7:75:aa:59:9a:6a:bb:09: a9:16:8b:9e:ea:ed:6a:f6:ce:cd:58:dd:71:b3:46: 55:2f:e1:3e:cb:2c:1f:15:09:fb:32:da:71:17:46: 66:e5:d3:d4:3e:0d:24:dd:33:70:1c:b1:fa:58:d5: 85:0a:6b:60:3b:39:eb:d2:17:38:1d:16:88:a9:18: 79:d9:41:bd:45:91:05:d2:e3:bc:c3:8e:0a:71:27: 6c:15:a6:b7:66:03:47:3d:44:a0:dd:c2:7d:a3:4a: 67:a4:a0:08:ed:4e:ea:c3:24:16:2b:a5:fd:79:9a: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FD:85:55:E1:59:A2:7F:50:3F:56:09:40:5B:14:36:AE:A2:36:1A X509v3 Authority Key Identifier: keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a3:e7:62:b1:a6:55:18:41:8f:20:77:ff:cd:51:35:ab:1c: 2b:af:48:ce:21:c1:1f:1c:35:e4:ce:5c:41:81:c5:3b:d0:cd: 70:a2:4c:bd:22:12:0e:ff:ba:36:4d:0a:9b:1c:17:b2:92:88: cc:6a:cc:d7:a3:c3:bc:dd:0d:65:32:35:a3:f2:e6:bd:5d:da: 92:3b:12:f3:32:36:e7:f4:06:83:23:97:e7:d9:b4:bf:16:0d: 44:57:33:74:b4:d8:5c:6d:9e:b0:70:0e:96:5e:7d:32:d5:c6: 62:f6:7a:44:76:34:e8:1b:aa:4a:e7:77:f9:f8:65:63:53:f4: 1b:bf:a3:05:de:b0:4c:05:17:97:f0:ff:aa:a5:fb:1d:f1:3a: f9:fd:b6:28:26:3d:96:62:e5:d0:5d:49:8a:d7:ff:ca:b6:15: 81:63:3c:99:1e:25:c6:f1:5f:c6:b2:f4:9e:45:0a:d2:f4:3b: 7d:9e:b3:df:b8:cc:1c:5b:c1:7b:35:ae:da:6e:c5:22:0a:5c: 56:f3:94:7d:84:9c:ac:06:56:26:84:86:06:98:00:c2:07:ac: 15:10:89:a0:2f:13:36:de:cd:24:f8:f0:34:78:71:bb:28:1a: 6a:05:a0:2c:1b:50:56:ff:1d:df:cb:4a:31:a2:c4:d9:e0:2b: e8:a8:e2:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1Q0IxMTAvBgNVBAUTKEUxNzMzQjk3MEZEREY3NjdGRjE5NTQyODQzN0UxMjQy QTM3NjkyNzcwHhcNMjYxMDMxMDEyNDUzWhcNMjYxMTA3MDEyNDUzWjAYMRYwFAYD VQQDEw02YWU1NDM2NS04NmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEK8ZaTvkdPbiM/5Ya8bsiJBaQ2mE5R8YoLeHKGPiKr7H58BFNAf/qErpoHK hR0CRpcD31sNlySf4m/PBaj+j3awuq9j5C2q1uqYiVTacM+w5Kqz4GaKQMuulSBZ dR0uhBQASGn/rbBY1QD0bTNE6b7TLF/Fo6UUh+oLAwC+bPGT8irSrIAFh0EhqbT0 t3WqWZpquwmpFoue6u1q9s7NWN1xs0ZVL+E+yywfFQn7MtpxF0Zm5dPUPg0k3TNw HLH6WNWFCmtgOznr0hc4HRaIqRh52UG9RZEF0uO8w44KcSdsFaa3ZgNHPUSg3cJ9 o0pnpKAI7U7qwyQWK6X9eZrjtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIz9hVXh WaJ/UD9WCUBbFDauojYaMB8GA1UdIwQYMBaAFOFzO5cP3fdn/xlUKEN+EkKjdpJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVDQi81Mjg4RENFMDcw NDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDkyZl9HVlFvUTM0U1FxTjJr bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYTTdsd19kOTJmX0dWUW9RMzRTUXFOMmtuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTVDQi81Mjg4RENFMDcwNDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDky Zl9HVlFvUTM0U1FxTjJrbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaaPnYrGmVRhBjyB3/81RNascK69IziHBHxw15M5cQYHFO9DNcKJMvSISDv+6 Nk0KmxwXspKIzGrM16PDvN0NZTI1o/LmvV3akjsS8zI25/QGgyOX59m0vxYNRFcz dLTYXG2esHAOll59MtXGYvZ6RHY06BuqSud3+fhlY1P0G7+jBd6wTAUXl/D/qqX7 HfE6+f22KCY9lmLl0F1Jitf/yrYVgWM8mR4lxvFfxrL0nkUK0vQ7fZ6z37jMHFvB ezWu2m7FIgpcVvOUfYScrAZWJoSGBpgAwgesFRCJoC8TNt7NJPjwNHhxuygaagWg LBtQVv8d38tKMaLE2eAr6Kji6g== -----END CERTIFICATE-----Generated at Sat Oct 31 12:40:52 2026 by rpki-client