$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: Soj9Fa7ZT/upQPvkv7T2iS4jBHtMFqau6vHxTe5wMmY= Subject key identifier: 04:8A:EB:94:DD:9F:FE:0A:5B:59:31:67:8A:BF:B9:B3:CE:F1:D6:06 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 0879 Signing time: Thu 22 Oct 2026 21:04:38 +0000 Manifest this update: Thu 22 Oct 2026 21:04:37 +0000 Manifest next update: Thu 29 Oct 2026 21:04:37 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: EXnPRry3JmxWDnLwY9mrMtVUsbQuNozJQDH2oMkXt4E=) 2: xGs6rug6WDHyh1ZySeTGRrJxMY4.asa (hash: 9yEt3DikIep4O7B9SercxIT/lUI+BT7pT0etSvn7IqM=) 3: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 21:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Oct 22 21:04:37 2026 GMT Not After : Oct 29 21:04:37 2026 GMT Subject: CN=6ada7a66-2ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:45:a6:2a:5d:20:a8:2e:cf:d5:79:19:f5: 8d:74:bd:8a:e2:bf:62:59:15:d6:a6:b6:0d:9a:63: db:73:8c:9b:78:16:78:d5:75:a2:25:e0:ce:ee:ff: ba:33:a7:7c:43:2e:dd:c3:87:08:8f:37:a0:ac:4d: 9f:89:3d:47:a6:2f:aa:d8:c1:f5:bf:b2:fa:25:c2: 4d:23:20:bd:1e:69:5b:e9:10:80:21:97:b6:46:a0: 8c:16:d7:4b:19:42:6e:0e:74:7c:6f:1b:e9:91:41: a0:02:84:0c:0c:f9:bf:7e:57:30:e3:91:93:22:48: 68:31:13:dc:7a:65:83:32:a0:28:01:9a:a0:61:69: 59:5b:81:c0:0c:54:4e:f8:9f:9c:aa:b8:2a:23:75: e0:17:ce:4d:9d:a8:4c:88:0a:c4:b2:b2:58:5f:5c: ca:93:64:12:b2:ad:ba:43:94:a3:48:09:f9:5c:75: 0b:41:71:f6:91:1b:4d:9b:02:b0:97:56:36:1e:be: 78:e2:fd:0f:a5:90:f0:a2:5f:01:dc:4f:69:02:8e: 19:1b:50:48:cc:46:56:cd:4a:b8:09:c6:e1:3d:f0: 4c:d1:14:5c:6f:a9:c6:47:5c:22:06:27:62:01:5b: 0e:bb:7b:fd:f8:50:de:bc:3c:57:35:da:96:5a:16: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:EB:94:DD:9F:FE:0A:5B:59:31:67:8A:BF:B9:B3:CE:F1:D6:06 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7a:27:ba:db:d0:6d:aa:6c:2e:28:55:7f:f7:0d:ec:8d:8c: e5:ac:46:42:5b:62:cf:96:69:6f:e7:45:4d:c7:4c:86:9a:05: 9a:d2:f8:46:a2:17:d8:01:5e:72:34:70:c8:be:b4:e6:f2:1c: ae:3f:c4:55:8c:64:9d:2c:d7:ca:fa:9e:34:64:8b:52:5d:62: 3e:62:77:99:b9:a0:d8:a9:2a:f7:00:d4:14:50:be:92:8b:d3: 36:12:99:4d:31:4c:cb:a3:ab:d4:9d:d1:46:b3:e2:2b:6e:d0: 66:3e:e8:6c:f6:47:47:26:fe:6a:0c:22:bb:e2:69:61:c1:c8: 02:d9:74:b8:96:fc:e0:85:9b:29:a9:a5:e9:89:9b:18:67:cf: fe:af:9d:4e:db:d9:ae:0c:0a:87:16:b5:cc:79:6a:c3:a0:2d: 3a:95:2e:ef:da:a5:de:cd:d0:25:2c:14:39:e3:c4:bd:b9:6c: 19:0c:f8:a7:b1:33:57:99:7c:d8:61:97:14:94:8e:f6:c9:56: 3a:7d:ab:37:d3:7f:04:32:ab:0d:2f:7d:79:a6:09:bf:fe:8b: 31:79:40:ad:77:1a:a3:de:4c:ab:5a:54:88:f5:45:78:70:d1: 7b:40:dc:d3:fe:bf:3c:48:2b:cd:8b:b1:1f:c4:62:6b:16:8a: 45:0e:7c:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjYxMDIyMjEwNDM3WhcNMjYxMDI5MjEwNDM3WjAYMRYwFAYD VQQDEw02YWRhN2E2Ni0yZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv61FpipdIKguz9V5GfWNdL2K4r9iWRXWprYNmmPbc4ybeBZ41XWiJeDO7v+6 M6d8Qy7dw4cIjzegrE2fiT1Hpi+q2MH1v7L6JcJNIyC9Hmlb6RCAIZe2RqCMFtdL GUJuDnR8bxvpkUGgAoQMDPm/flcw45GTIkhoMRPcemWDMqAoAZqgYWlZW4HADFRO +J+cqrgqI3XgF85NnahMiArEsrJYX1zKk2QSsq26Q5SjSAn5XHULQXH2kRtNmwKw l1Y2Hr544v0PpZDwol8B3E9pAo4ZG1BIzEZWzUq4CcbhPfBM0RRcb6nGR1wiBidi AVsOu3v9+FDevDxXNdqWWhYtjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASK65Td n/4KW1kxZ4q/ubPO8dYGMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiHonutvQbapsLihVf/cN7I2M5axGQltiz5Zpb+dFTcdMhpoFmtL4RqIX2AFe cjRwyL605vIcrj/EVYxknSzXyvqeNGSLUl1iPmJ3mbmg2Kkq9wDUFFC+kovTNhKZ TTFMy6Or1J3RRrPiK27QZj7obPZHRyb+agwiu+JpYcHIAtl0uJb84IWbKaml6Ymb GGfP/q+dTtvZrgwKhxa1zHlqw6AtOpUu79ql3s3QJSwUOePEvblsGQz4p7EzV5l8 2GGXFJSO9slWOn2rN9N/BDKrDS99eaYJv/6LMXlArXcao95Mq1pUiPVFeHDRe0Dc 0/6/PEgrzYuxH8RiaxaKRQ58DQ== -----END CERTIFICATE-----Generated at Sat Oct 24 19:31:25 2026 by rpki-client