$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: irHJWibHSqKcCY2o5B6cwlNq5gFOjvXfzLF8a/NiRZI= Subject key identifier: 8E:F9:3A:7D:27:86:CA:0F:A3:80:5E:62:29:4E:42:5D:64:79:7D:4E Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0D48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0D09 Signing time: Thu 10 Sep 2026 18:22:49 +0000 Manifest this update: Thu 10 Sep 2026 18:22:49 +0000 Manifest next update: Thu 17 Sep 2026 18:22:49 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: FLcHSfi1LVGO2PdvGm+h88ANLeigBgF/KY2loq7KlOA=) 2: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: 2VeVxpw4IPzgEibTNEjoXK/Qy1fd2SwF+0DbU+sMNRg=) 3: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: HqADfJ6PQAnaMYUSVaYaC1tzBINlqpUjolFi7987BYY=) 4: 183DE570057A11EC822F230EC4F9AE02.roa (hash: KDCY6i/WJ6l1BoCfZqKbKmaeWQcqDHXYwIFR4N1iXXE=) 5: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: ApbUgdUH10Pdfa6lJVrc4XPCGZcLshELo3PIV/SWLXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Sep 10 18:22:49 2026 GMT Not After : Sep 17 18:22:49 2026 GMT Subject: CN=6aa2f579-dd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:57:bb:09:0c:29:4c:e1:6f:9a:05:04:fc: 21:89:ea:65:93:87:95:15:ee:e7:97:23:bd:89:96: 16:ec:69:c5:aa:e0:3d:b9:9a:2e:88:61:5e:3d:d2: d3:80:0c:d8:8d:30:b5:8f:a0:b2:69:8b:28:35:b9: 05:6e:12:9f:63:55:1b:66:aa:a6:87:d5:2b:27:56: 46:d1:3e:a5:45:32:e0:3f:6b:19:87:b0:56:e4:98: 78:71:b2:2c:ac:dc:1a:aa:63:43:4b:d8:6a:c7:09: 67:f9:48:78:93:0b:91:04:53:1a:39:ed:7f:a8:68: cb:40:fc:77:84:56:ad:00:c4:3e:77:e1:e8:97:d9: 89:28:4a:b7:12:21:07:c0:dd:33:bc:66:d8:ab:f1: 9b:72:84:80:4b:f7:8b:35:05:10:4f:bf:ca:2f:1a: 71:72:bd:b0:f1:91:6a:18:f8:9e:37:f5:a2:27:2c: 65:f4:d7:e7:1b:69:36:e1:57:50:ae:cc:1d:49:81: 7b:96:18:af:66:99:4a:f1:40:04:42:0e:5c:8b:2c: f3:72:86:8b:77:9e:34:9d:17:bf:34:56:80:e1:4d: 31:51:55:f3:33:38:81:79:d6:07:0d:fb:15:f1:2a: a8:c4:3f:d5:e0:7c:4d:13:ec:a5:25:08:f7:ac:9a: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F9:3A:7D:27:86:CA:0F:A3:80:5E:62:29:4E:42:5D:64:79:7D:4E X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:b6:7b:ef:12:d5:ea:af:57:93:ec:56:5e:9e:e5:22:e6:ad: 25:98:af:f6:9e:91:24:6e:65:53:c1:04:71:f2:8e:12:2c:89: 70:5a:23:64:95:f2:b9:0b:cd:e9:93:b6:58:cb:be:78:c7:5f: f9:e0:26:59:73:48:92:d7:94:0e:02:16:4b:42:c0:f7:1b:52: 60:0a:1c:3f:19:b0:3a:13:f8:64:f8:37:c5:a1:ff:dd:fc:8d: 83:5d:c1:25:4a:f2:2e:9f:89:c8:4a:b9:9b:b4:0c:db:e4:b3: ba:4e:e3:02:78:9a:fc:b7:cc:f6:b5:2e:ad:26:f1:ff:82:ba: 5c:01:78:c1:bd:4f:d4:45:87:c7:51:8d:05:0f:33:16:2d:23: 20:2c:66:2a:0c:3a:11:52:63:a1:8c:d1:20:9e:26:f7:7e:32: 66:3f:b5:7a:95:a1:3d:7e:32:9e:98:5a:cc:a2:36:3e:ea:b6: 4c:a7:ae:b2:2b:01:2d:b5:8f:7d:b5:4a:85:a6:83:4a:37:15: 2d:b5:85:1a:29:4e:2d:d8:c4:25:8e:f3:9c:e6:37:79:dd:03: a2:05:90:50:9b:52:b1:2d:e3:43:0a:19:1d:85:41:00:84:57: 1a:04:ff:53:54:8e:97:f6:06:d2:70:01:d4:91:a9:5a:b6:32: 9f:6f:63:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjYwOTEwMTgyMjQ5WhcNMjYwOTE3MTgyMjQ5WjAYMRYwFAYD VQQDEw02YWEyZjU3OS1kZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG9XuwkMKUzhb5oFBPwhieplk4eVFe7nlyO9iZYW7GnFquA9uZouiGFePdLT gAzYjTC1j6CyaYsoNbkFbhKfY1UbZqqmh9UrJ1ZG0T6lRTLgP2sZh7BW5Jh4cbIs rNwaqmNDS9hqxwln+Uh4kwuRBFMaOe1/qGjLQPx3hFatAMQ+d+Hol9mJKEq3EiEH wN0zvGbYq/GbcoSAS/eLNQUQT7/KLxpxcr2w8ZFqGPieN/WiJyxl9NfnG2k24VdQ rswdSYF7lhivZplK8UAEQg5ciyzzcoaLd540nRe/NFaA4U0xUVXzMziBedYHDfsV 8SqoxD/V4HxNE+ylJQj3rJrAewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI75On0n hsoPo4BeYilOQl1keX1OMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACLZ77xLV6q9Xk+xWXp7lIuatJZiv9p6RJG5lU8EEcfKOEiyJcFojZJXyuQvN 6ZO2WMu+eMdf+eAmWXNIkteUDgIWS0LA9xtSYAocPxmwOhP4ZPg3xaH/3fyNg13B JUryLp+JyEq5m7QM2+Szuk7jAnia/LfM9rUurSbx/4K6XAF4wb1P1EWHx1GNBQ8z Fi0jICxmKgw6EVJjoYzRIJ4m934yZj+1epWhPX4ynphazKI2Puq2TKeusisBLbWP fbVKhaaDSjcVLbWFGilOLdjEJY7znOY3ed0DogWQUJtSsS3jQwoZHYVBAIRXGgT/ U1SOl/YG0nAB1JGpWrYyn29jcA== -----END CERTIFICATE-----Generated at Fri Sep 11 12:28:39 2026 by rpki-client