$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: MsO7NGNFeoSB5VJ1XzjLJK+6q37yMouHlNW0JraCoM0= Subject key identifier: D9:85:55:89:91:88:01:18:88:BF:D5:7B:D2:2F:B6:24:A6:50:43:9F Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0DB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0D90 Signing time: Thu 10 Sep 2026 17:58:31 +0000 Manifest this update: Thu 10 Sep 2026 17:58:31 +0000 Manifest next update: Thu 17 Sep 2026 17:58:31 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: DpyPO5nyIy197qI8pVzd2b1+/wftA1CEkMw4buBxwwc=) 2: CA0AB7D0539811F19275B1E8AE833773.roa (hash: RJS1Q5SyoLw5kpGy0JR6IuXz+7wLlZLltCqEB6vPsmA=) 3: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: 8NBaU/JePJQ6/F/3cS0V0StpNvCdrumDQrFWu6BjRDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Sep 10 17:58:31 2026 GMT Not After : Sep 17 17:58:31 2026 GMT Subject: CN=6aa2efc7-ac73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:f2:21:cc:a2:da:9f:71:1f:5e:25:43:f1: 5f:c9:4a:db:1a:c2:fd:44:ec:9c:f1:a7:a1:13:9d: 91:95:a1:10:18:b1:17:bf:8e:2d:97:f8:c6:c3:b9: fa:97:cc:ab:50:4a:e5:20:4a:86:83:8e:85:31:50: 6e:72:41:c4:c7:c2:b3:5c:a9:10:6e:9d:58:fe:be: 03:49:70:a4:68:bb:4e:b1:84:0e:5c:c3:d2:1c:c8: 73:e8:1d:dd:de:12:c8:f0:c4:5a:e3:50:ef:c5:a2: 50:ce:c2:bf:c2:0c:18:6f:35:90:04:a0:bf:a1:5b: 61:69:f0:38:c7:f0:34:52:34:0d:7d:f3:74:03:cd: df:31:68:36:32:7f:1a:78:e3:5d:86:15:d0:f0:55: 3e:67:26:b0:00:47:61:d8:ed:ac:97:c0:9e:24:a4: 8a:c5:fb:58:5d:03:81:2f:1f:57:a0:67:e8:be:ed: 19:ab:24:b2:27:09:3e:62:72:b4:cc:6d:0d:44:ff: cb:8f:eb:b6:8b:77:74:00:31:43:ca:f7:fa:d1:75: 66:6f:33:25:72:88:ac:34:60:fe:e2:ed:cf:44:dc: 09:32:69:0e:cd:59:ae:e8:9c:fa:08:a5:17:e2:f5: 5a:75:c4:b7:b8:71:cc:8f:80:3a:86:92:68:35:23: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:85:55:89:91:88:01:18:88:BF:D5:7B:D2:2F:B6:24:A6:50:43:9F X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:08:53:56:92:66:8c:f1:66:b3:29:8b:a9:6c:b5:99:4c:63: 13:be:72:3f:74:a6:2f:ce:fa:a6:fd:bb:2c:c4:70:e4:b0:9f: b1:cb:f1:89:88:8e:5c:0e:03:a2:9f:e9:ce:6c:25:5b:b5:7e: 7c:e6:f1:a2:03:a2:35:f6:c6:b2:ef:c7:ec:64:90:7a:8a:fc: 28:20:f3:49:70:81:8a:fd:55:3e:e2:3a:a0:82:3a:6b:e0:d5: 23:8b:f3:df:72:43:ea:7b:fd:33:76:86:7a:d2:eb:3e:96:b1: a7:eb:57:6e:a6:b0:3b:1b:c7:c4:b8:21:ab:53:5e:37:3e:df: 51:a3:e6:b3:3a:4b:03:65:a7:6b:9e:96:a2:17:12:06:a4:4f: 51:8a:cc:9d:51:27:1a:02:66:2b:55:8e:93:dc:ad:87:0f:2a: 8d:23:5c:fe:c0:e3:6c:ae:98:f5:41:06:d7:87:2f:ea:01:d7: fa:37:c3:9b:33:af:33:5d:8a:6e:7a:46:de:c6:91:b4:43:22: 5f:cc:ce:c2:5a:26:e8:27:21:34:d6:3c:11:55:1a:3e:94:de: c2:c1:cd:ff:32:92:26:70:5d:a8:11:7c:46:51:d0:d9:75:af: 22:08:63:cc:84:77:af:96:7e:ce:75:d8:8e:be:9c:ce:6e:ea: 9c:4a:50:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjYwOTEwMTc1ODMxWhcNMjYwOTE3MTc1ODMxWjAYMRYwFAYD VQQDEw02YWEyZWZjNy1hYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKPyIcyi2p9xH14lQ/FfyUrbGsL9ROyc8aehE52RlaEQGLEXv44tl/jGw7n6 l8yrUErlIEqGg46FMVBuckHEx8KzXKkQbp1Y/r4DSXCkaLtOsYQOXMPSHMhz6B3d 3hLI8MRa41DvxaJQzsK/wgwYbzWQBKC/oVthafA4x/A0UjQNffN0A83fMWg2Mn8a eONdhhXQ8FU+ZyawAEdh2O2sl8CeJKSKxftYXQOBLx9XoGfovu0ZqySyJwk+YnK0 zG0NRP/Lj+u2i3d0ADFDyvf60XVmbzMlcoisNGD+4u3PRNwJMmkOzVmu6Jz6CKUX 4vVadcS3uHHMj4A6hpJoNSP1uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmFVYmR iAEYiL/Ve9IvtiSmUEOfMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATwhTVpJmjPFmsymLqWy1mUxjE75yP3SmL876pv27LMRw5LCfscvxiYiOXA4D op/pzmwlW7V+fObxogOiNfbGsu/H7GSQeor8KCDzSXCBiv1VPuI6oII6a+DVI4vz 33JD6nv9M3aGetLrPpaxp+tXbqawOxvHxLghq1NeNz7fUaPmszpLA2Wna56WohcS BqRPUYrMnVEnGgJmK1WOk9ythw8qjSNc/sDjbK6Y9UEG14cv6gHX+jfDmzOvM12K bnpG3saRtEMiX8zOwlom6CchNNY8EVUaPpTewsHN/zKSJnBdqBF8RlHQ2XWvIghj zIR3r5Z+znXYjr6czm7qnEpQLw== -----END CERTIFICATE-----Generated at Fri Sep 11 09:25:50 2026 by rpki-client