$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: ba7dJqYiDHPQDbVVbUTXy957TUJ7xUntntRNubWocCI= Subject key identifier: CD:92:82:ED:3A:78:7C:93:EB:3B:85:A6:5A:B0:B5:E5:A0:C0:1A:D2 Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0A2A Signing time: Thu 08 Oct 2026 19:49:59 +0000 Manifest this update: Thu 08 Oct 2026 19:49:59 +0000 Manifest next update: Thu 15 Oct 2026 19:49:59 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: BwCXtrR24o5j88tqh8h9q7+4Xpzk9lMfXkwwbzMfndE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Oct 8 19:49:59 2026 GMT Not After : Oct 15 19:49:59 2026 GMT Subject: CN=6ac7f3e7-5881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:24:6b:d5:57:6a:1e:ec:19:d2:99:47:66: 04:9a:65:3a:3b:23:47:e9:86:5d:ca:8d:bc:70:56: 97:c9:df:39:69:c0:55:cb:3c:de:09:04:3d:1e:e9: b9:dc:9c:44:8b:13:5b:24:24:e5:fa:7d:49:dd:0b: 07:69:c4:cf:e5:f2:4a:ba:71:61:e6:83:b7:56:e5: b9:f4:df:74:09:75:41:b3:2e:f4:37:14:1a:d3:eb: 12:54:aa:50:d5:68:33:43:13:0e:8a:77:93:4b:7f: 2f:44:7f:73:b6:91:b4:7a:1d:35:6b:b4:02:8f:a5: 07:92:54:3b:27:d8:fa:aa:1e:4c:3e:36:99:d7:ae: 34:81:d3:9a:cc:67:16:c8:9c:ff:51:29:d8:ed:b3: 7c:57:be:56:37:cd:ca:dd:d9:98:7d:45:2a:79:a5: f2:5c:5b:5c:be:24:db:cc:5b:43:6e:b6:93:5a:85: f2:be:4d:40:c4:3d:b3:40:cb:ea:2a:a8:09:4b:19: 3d:21:74:39:b5:c4:e8:da:78:f5:b2:7e:47:13:0d: 73:4c:00:39:b8:51:6a:ac:6b:cf:da:f5:b3:b6:3d: 48:fd:ca:d7:c2:99:cc:46:fa:69:60:6c:1d:3d:9f: e0:e1:d8:83:50:e2:b6:4b:09:77:30:b1:e9:09:4a: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:92:82:ED:3A:78:7C:93:EB:3B:85:A6:5A:B0:B5:E5:A0:C0:1A:D2 X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:28:eb:8c:07:e9:f1:0b:ad:26:b9:14:65:97:d3:42:20:77: 7d:5b:17:ed:b7:04:9b:81:13:05:1c:88:35:a6:36:78:cd:83: 00:e8:87:a6:02:ea:f4:2b:21:8b:87:bc:e2:26:fd:a2:53:33: de:07:ef:6b:9c:bb:be:97:10:86:1a:45:49:be:f4:24:48:a1: 2b:4c:a0:79:a4:80:3c:ca:8e:be:30:57:83:82:bd:ac:bb:4a: f0:93:fe:aa:fb:0e:be:ce:bc:fb:7b:d9:63:0c:28:97:3b:a3: 0a:d5:22:ca:bf:7f:c7:bf:2d:fe:5a:97:7e:fc:af:7a:5b:57: 34:fd:df:61:ca:b9:17:5d:57:13:bc:5e:65:6d:e7:c3:71:62: 5a:2e:a3:f0:af:d0:84:dd:3f:dd:fc:87:22:6b:9c:34:b1:a4: ed:cc:19:db:b2:67:b4:25:37:0c:d4:95:d0:56:0d:47:99:af: 56:e0:65:e1:4b:ac:e2:df:8d:cf:de:d5:3b:a9:a8:e5:d3:76: f6:e7:43:9c:3e:43:87:57:95:d7:a1:14:32:96:c9:9e:1c:ad: 9a:f8:a0:fc:6b:7d:00:51:6d:92:1f:36:71:d2:88:8d:16:6e: 31:18:42:87:1e:09:3b:af:57:5f:3b:54:0a:95:d9:4a:df:60: 3f:ab:eb:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjYxMDA4MTk0OTU5WhcNMjYxMDE1MTk0OTU5WjAYMRYwFAYD VQQDEw02YWM3ZjNlNy01ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmMka9VXah7sGdKZR2YEmmU6OyNH6YZdyo28cFaXyd85acBVyzzeCQQ9Hum5 3JxEixNbJCTl+n1J3QsHacTP5fJKunFh5oO3VuW59N90CXVBsy70NxQa0+sSVKpQ 1WgzQxMOineTS38vRH9ztpG0eh01a7QCj6UHklQ7J9j6qh5MPjaZ1640gdOazGcW yJz/USnY7bN8V75WN83K3dmYfUUqeaXyXFtcviTbzFtDbraTWoXyvk1AxD2zQMvq KqgJSxk9IXQ5tcTo2nj1sn5HEw1zTAA5uFFqrGvP2vWztj1I/crXwpnMRvppYGwd PZ/g4diDUOK2Swl3MLHpCUqDwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2Sgu06 eHyT6zuFplqwteWgwBrSMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApCjrjAfp8QutJrkUZZfTQiB3fVsX7bcEm4ETBRyINaY2eM2DAOiHpgLq9Csh i4e84ib9olMz3gfva5y7vpcQhhpFSb70JEihK0ygeaSAPMqOvjBXg4K9rLtK8JP+ qvsOvs68+3vZYwwolzujCtUiyr9/x78t/lqXfvyveltXNP3fYcq5F11XE7xeZW3n w3FiWi6j8K/QhN0/3fyHImucNLGk7cwZ27JntCU3DNSV0FYNR5mvVuBl4Uus4t+N z97VO6mo5dN29udDnD5Dh1eV16EUMpbJnhytmvig/Gt9AFFtkh82cdKIjRZuMRhC hx4JO69XXztUCpXZSt9gP6vrWQ== -----END CERTIFICATE-----Generated at Sat Oct 10 13:17:26 2026 by rpki-client