$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: Kqj2fhPp4ZcwE305pDuW2d5CbnGIqU+ahPiI4BY8Qt0= Subject key identifier: C2:3D:1E:1B:B1:6C:8E:65:0B:95:30:B7:2B:B5:92:A7:B3:87:81:DD Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0395 Signing time: Sat 03 Oct 2026 01:12:41 +0000 Manifest this update: Sat 03 Oct 2026 01:12:41 +0000 Manifest next update: Sat 10 Oct 2026 01:12:41 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: UJk+eS4hJKLiRnai5c3FGuV4Aiff4yczGX6XnllguTw=) 2: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: Zp1X1saUF8xeAN8dIa6PSZuihvrxW9yn1Q7v4yzeDZk=) 3: 62B780C46EF811F1A12CAB807BA30FBC.roa (hash: WqvK9G7du0ZUPhPlzOYqfUxNooGlr51htpi5s+9yDqc=) 4: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 7JbMjB8d3ZxwfoscdTBgnl9vn7C/XbttuTcaCLuo0DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Oct 3 01:12:41 2026 GMT Not After : Oct 10 01:12:41 2026 GMT Subject: CN=6ac05689-f6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:f8:d4:de:eb:01:d2:ca:53:4b:45:14:c1: ce:b9:14:5b:10:76:97:c1:10:77:52:8d:ca:e2:f2: 40:4d:f9:81:c0:93:4e:8c:55:59:7e:bc:1c:cd:c7: 29:32:af:31:4d:4d:26:a0:88:23:a5:70:b9:d6:e3: c8:df:c4:e2:ba:4e:4d:77:48:2e:4b:38:df:c9:c6: 16:f1:0e:ce:35:65:26:31:62:e7:67:03:80:c3:76: bf:6a:85:22:c2:a5:cb:32:c1:47:49:d7:a5:e0:40: 9a:44:8e:60:90:44:bd:44:2d:91:b8:9b:54:56:93: 50:76:93:84:14:a1:65:13:26:3c:ab:13:43:07:6e: f8:fa:7d:a8:1d:dd:a7:f4:81:f7:28:44:cb:5e:ff: 24:65:4c:87:b4:b4:74:8d:ff:02:03:83:7e:bc:a5: 71:19:01:85:8c:78:69:4d:61:8c:4d:25:24:20:66: d2:fb:43:10:4c:1b:eb:4e:c5:d9:42:cc:0a:5a:09: f7:ec:dc:3a:2f:49:61:a6:1a:24:ba:69:ec:f6:2d: a0:88:ba:28:9e:88:2d:11:6f:8a:a7:c9:ef:81:3a: c3:3e:d1:77:6d:06:01:fa:9b:5f:0e:df:64:10:94: 06:1c:9f:7e:e9:b6:36:0f:fe:f1:6d:ec:21:a4:3b: 1a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3D:1E:1B:B1:6C:8E:65:0B:95:30:B7:2B:B5:92:A7:B3:87:81:DD X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:33:72:83:0b:b5:49:cd:66:27:b0:e9:70:d3:4a:ac:6a:e8: 0c:78:22:f5:bf:fd:da:cd:9f:7a:94:db:ea:85:87:f1:36:f4: e3:52:e9:d8:df:60:9c:d7:04:8c:5b:33:bf:74:3f:2e:05:ef: e0:22:16:f1:59:32:d5:1f:87:ef:9e:b8:e3:5a:41:1e:c3:ab: d0:ad:34:7a:d7:89:2d:36:d9:5a:87:67:2c:7c:95:a3:68:a1: 12:ec:cb:55:92:2e:5b:fb:33:04:b4:e3:05:f4:a7:c2:e3:1f: 06:16:80:a8:28:b2:09:f0:9c:ca:4b:6b:2d:c9:58:02:53:5d: f6:1b:f7:9e:f1:58:0c:20:e3:0e:d5:5a:86:e6:5a:c3:45:79: 8d:8e:8a:3d:74:69:c5:9d:44:18:0e:b4:60:5e:b4:ef:63:9c: 9c:e6:ee:c7:a3:b1:41:02:11:62:1d:aa:40:91:9a:9a:df:bc: 1d:c4:04:70:89:02:21:98:ce:33:96:2a:a6:95:65:b4:4e:d4: 4e:20:12:62:cf:56:ae:50:13:e2:d7:fa:db:1f:4a:83:2c:15: 88:a5:0a:89:ca:76:c7:7f:7a:82:43:d2:96:d7:0d:c1:06:fb: e8:78:d9:5f:84:91:ed:38:59:a3:ca:61:b9:59:4f:fa:27:e0: 0c:3f:8b:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjYxMDAzMDExMjQxWhcNMjYxMDEwMDExMjQxWjAYMRYwFAYD VQQDEw02YWMwNTY4OS1mNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS741N7rAdLKU0tFFMHOuRRbEHaXwRB3Uo3K4vJATfmBwJNOjFVZfrwczccp Mq8xTU0moIgjpXC51uPI38Tiuk5Nd0guSzjfycYW8Q7ONWUmMWLnZwOAw3a/aoUi wqXLMsFHSdel4ECaRI5gkES9RC2RuJtUVpNQdpOEFKFlEyY8qxNDB274+n2oHd2n 9IH3KETLXv8kZUyHtLR0jf8CA4N+vKVxGQGFjHhpTWGMTSUkIGbS+0MQTBvrTsXZ QswKWgn37Nw6L0lhphokumns9i2giLoonogtEW+Kp8nvgTrDPtF3bQYB+ptfDt9k EJQGHJ9+6bY2D/7xbewhpDsaJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMI9Hhux bI5lC5Uwtyu1kqezh4HdMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjDNygwu1Sc1mJ7DpcNNKrGroDHgi9b/92s2fepTb6oWH8Tb041Lp2N9gnNcE jFszv3Q/LgXv4CIW8Vky1R+H756441pBHsOr0K00eteJLTbZWodnLHyVo2ihEuzL VZIuW/szBLTjBfSnwuMfBhaAqCiyCfCcyktrLclYAlNd9hv3nvFYDCDjDtVahuZa w0V5jY6KPXRpxZ1EGA60YF6072OcnObux6OxQQIRYh2qQJGamt+8HcQEcIkCIZjO M5YqppVltE7UTiASYs9WrlAT4tf62x9KgywViKUKicp2x396gkPSltcNwQb76HjZ X4SR7ThZo8phuVlP+ifgDD+L4w== -----END CERTIFICATE-----Generated at Sun Oct 4 14:20:40 2026 by rpki-client