$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: nrGdNBDprPDjjdj5JtJC6HhY31TXywZxwwR5xMz7nKI= Subject key identifier: 41:C6:A1:68:85:4E:C4:4F:66:A1:77:BA:84:37:82:3C:8F:E9:FE:8A Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 0861 Signing time: Fri 04 Sep 2026 20:54:05 +0000 Manifest this update: Fri 04 Sep 2026 20:54:04 +0000 Manifest next update: Fri 11 Sep 2026 20:54:04 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: sWb9CKS17CuDbc7wVIFJb6o0W4LeYyqnvRc29iICgTY=) 2: xGs6rug6WDHyh1ZySeTGRrJxMY4.asa (hash: 9yEt3DikIep4O7B9SercxIT/lUI+BT7pT0etSvn7IqM=) 3: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Sep 4 20:54:04 2026 GMT Not After : Sep 11 20:54:04 2026 GMT Subject: CN=6a9b2fed-1645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:c1:11:db:41:2d:23:21:60:20:5e:d4:89: f2:a3:7e:f5:98:2b:10:d1:51:92:2a:fa:0b:bf:50: 7f:bc:e0:d8:79:f3:b5:d8:23:4f:e9:ab:21:a6:ad: e0:c2:7f:a0:65:be:46:a6:cb:d1:b8:2d:8c:06:72: 95:b7:01:42:ed:52:52:b4:de:0c:8e:ab:03:dc:9f: 41:9b:2b:22:28:37:fa:30:c4:9f:47:42:6c:19:11: 3f:db:49:66:0a:96:27:a7:98:04:7f:de:83:42:40: 56:d5:51:22:75:5c:ae:a7:4b:e3:c0:ef:e7:c4:56: e5:97:7a:9e:0e:32:05:31:36:cd:40:5a:07:33:76: 1e:88:4e:a1:68:93:4b:d0:54:71:a6:61:a3:7a:7b: 34:f3:64:d1:3f:1d:c8:fa:13:81:49:b6:5d:e1:6e: ee:b8:69:b8:32:05:11:9c:f3:fc:71:5d:48:5e:da: 4f:1e:01:71:03:d2:96:85:7c:b6:45:5e:89:b4:11: 25:43:3b:12:1f:03:44:4b:c3:87:f8:87:68:25:b1: b0:f9:f9:59:73:ba:59:cc:77:a9:7b:47:6c:8b:e0: 38:54:36:e0:85:7f:de:71:7e:13:79:33:ab:a8:0b: a3:fb:e9:0b:41:80:b7:37:2b:2e:4e:e9:0f:ca:13: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C6:A1:68:85:4E:C4:4F:66:A1:77:BA:84:37:82:3C:8F:E9:FE:8A X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a4:76:94:68:b7:98:1b:13:b4:e3:b5:ee:68:93:7c:5a:a0: e3:2b:00:60:09:37:2d:70:fa:dd:95:79:02:73:e3:51:d0:4b: 6b:7a:b3:ed:25:4e:e8:03:4c:f4:b7:03:41:8c:7f:ce:f3:20: 8e:14:79:37:07:e8:b5:e5:d4:50:4c:b3:fa:20:a8:9e:9d:ed: 00:37:76:8b:b9:2e:9b:73:d8:02:b9:ae:a1:2a:af:a9:f7:86: bd:84:94:c7:df:29:9e:9f:e1:11:1d:43:8a:71:31:53:d1:f3: ab:62:5c:ff:33:5d:fb:b3:c1:87:d0:e7:6c:4b:ba:b6:3f:6f: 11:f1:bd:59:f2:93:ea:c3:9f:98:b6:08:50:53:ec:dd:88:1f: 3c:96:d3:ce:22:68:95:46:db:f2:97:a7:54:7c:9a:30:e8:b7: 8b:03:5e:60:2d:ea:f2:32:b3:f6:ac:62:22:67:bc:fa:90:9f: 9a:5f:7e:58:0b:a8:5b:07:74:48:58:20:48:2d:bb:b3:7d:22: 1d:bb:f2:50:59:c9:35:30:db:fa:7d:e2:32:7c:4b:69:7f:ca: aa:c9:bb:69:9e:80:27:a0:eb:ba:f4:0e:b1:99:5b:0a:f2:75: df:0a:64:5b:c8:53:d6:a4:bd:69:87:27:22:1a:c1:43:0b:a3: 6d:17:0d:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjYwOTA0MjA1NDA0WhcNMjYwOTExMjA1NDA0WjAYMRYwFAYD VQQDEw02YTliMmZlZC0xNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuTBEdtBLSMhYCBe1Inyo371mCsQ0VGSKvoLv1B/vODYefO12CNP6ashpq3g wn+gZb5GpsvRuC2MBnKVtwFC7VJStN4MjqsD3J9BmysiKDf6MMSfR0JsGRE/20lm CpYnp5gEf96DQkBW1VEidVyup0vjwO/nxFbll3qeDjIFMTbNQFoHM3YeiE6haJNL 0FRxpmGjens082TRPx3I+hOBSbZd4W7uuGm4MgURnPP8cV1IXtpPHgFxA9KWhXy2 RV6JtBElQzsSHwNES8OH+IdoJbGw+flZc7pZzHepe0dsi+A4VDbghX/ecX4TeTOr qAuj++kLQYC3NysuTukPyhO1EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHGoWiF TsRPZqF3uoQ3gjyP6f6KMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARKR2lGi3mBsTtOO17miTfFqg4ysAYAk3LXD63ZV5AnPjUdBLa3qz7SVO6ANM 9LcDQYx/zvMgjhR5NwfoteXUUEyz+iConp3tADd2i7kum3PYArmuoSqvqfeGvYSU x98pnp/hER1DinExU9Hzq2Jc/zNd+7PBh9DnbEu6tj9vEfG9WfKT6sOfmLYIUFPs 3YgfPJbTziJolUbb8penVHyaMOi3iwNeYC3q8jKz9qxiIme8+pCfml9+WAuoWwd0 SFggSC27s30iHbvyUFnJNTDb+n3iMnxLaX/Kqsm7aZ6AJ6DruvQOsZlbCvJ13wpk W8hT1qS9aYcnIhrBQwujbRcNZQ== -----END CERTIFICATE-----Generated at Sat Sep 5 08:15:03 2026 by rpki-client