$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft File: 4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft (raw, json) Hash identifier: cWrbcL1Y9RzHWjVKWpEljLMTYubcc2B/a8IABkE2hII= Subject key identifier: 11:DB:82:68:CE:B9:E8:A6:A2:61:C0:FE:13:BA:8C:8F:28:52:E8:B5 Authority key identifier: E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F Certificate issuer: /CN=A917BAC9/serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft Manifest number: 29 Signing time: Wed 21 Oct 2026 09:22:06 +0000 Manifest this update: Wed 21 Oct 2026 09:22:05 +0000 Manifest next update: Wed 28 Oct 2026 09:22:05 +0000 Files and hashes: 1: 4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl (hash: HXhV0ZeAEqmp/lSepNYT92XTTD7Guy2DAlPA51QyY0Q=) 2: A3F5B386915C11F1B31E34186B11F970.roa (hash: ZUF0HTnqvtt1SvtzMivVLP03khbxNjJ+Nf1N85kohao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC9, serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Validity Not Before: Oct 21 09:22:05 2026 GMT Not After : Oct 28 09:22:05 2026 GMT Subject: CN=6ad8843e-9b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:0f:fd:47:ee:97:34:93:7b:d2:7f:23:41: d1:4e:38:65:8c:42:4a:5a:41:33:37:70:ef:55:37: 99:0e:9b:c6:dd:96:f8:2c:34:31:16:ef:8d:4c:bb: f2:e5:c2:07:f2:dc:bf:ef:90:fe:26:44:91:7b:16: 17:fd:b7:9b:a9:26:31:3a:92:4c:d7:19:7b:e2:23: c9:5a:25:81:81:ff:cb:13:9c:36:88:76:f3:79:99: 70:12:87:45:26:f1:55:87:9e:e9:7c:2e:19:32:bf: 5e:d2:cc:43:03:fa:7f:c4:d8:b4:ec:d6:e5:3d:2c: ef:12:72:33:49:b3:66:9f:d4:80:52:43:7e:77:15: e4:1a:27:90:59:7c:64:97:47:58:15:e8:87:88:b1: 05:aa:02:7f:db:1a:60:f5:c8:2f:f3:a7:7a:69:75: ea:2e:ee:8f:6e:94:54:6e:fc:63:92:36:e9:29:c4: a6:11:ad:4c:6b:90:90:82:9f:0e:46:e0:6c:6b:99: 13:65:84:54:aa:fa:46:31:57:fc:8c:b2:08:e6:9c: c0:33:77:93:ec:af:74:bd:1c:8c:51:f6:2c:35:14: 58:0f:94:1c:ea:3b:bf:17:54:92:6f:cd:89:07:ba: 78:95:db:a2:7d:90:46:79:d2:b8:9c:2b:ce:cc:38: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:82:68:CE:B9:E8:A6:A2:61:C0:FE:13:BA:8C:8F:28:52:E8:B5 X509v3 Authority Key Identifier: keyid:E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:eb:a2:72:4a:19:dc:46:99:45:65:8a:1a:ba:c7:7c:c8:2b: 03:32:b2:a8:6e:25:09:71:c2:cb:71:95:71:01:a6:6f:a5:94: 79:35:5f:5c:1e:49:b6:cb:b3:fd:07:1a:7d:a8:a0:70:f9:0b: aa:a0:d0:61:3e:67:c5:ce:05:3b:93:9f:04:b3:cb:3d:f9:67: f9:e2:a7:54:18:d9:12:3b:69:d9:d8:86:55:8a:64:35:d2:da: 3b:11:f0:5d:c4:16:1c:a3:52:b6:10:ed:d7:41:ab:94:00:80: 73:a4:de:49:67:15:d3:ef:02:6d:40:d8:fe:cc:e0:b6:be:d7: 74:e4:97:52:89:a3:9a:7c:c1:96:02:82:ae:bc:26:35:dd:54: 97:11:7a:23:96:08:f7:9a:a1:30:24:c5:12:1e:98:90:5d:1a: e1:a6:27:d5:03:2c:8e:4e:0a:11:ad:95:01:7b:9b:08:68:c0: 52:72:0a:e8:77:c8:5f:cc:96:46:9e:09:84:ef:8a:f7:f3:e8: af:c0:b9:c7:e8:84:b2:74:d4:09:f7:8b:cb:43:a7:d7:a3:27: 0e:ec:d5:ab:97:b0:2e:a2:72:6d:fb:99:b8:f5:ce:b6:fa:67: 41:88:7b:77:cc:00:19:14:45:66:d6:14:13:c7:15:e5:5b:ce: 8d:8d:24:85 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkFDOTExMC8GA1UEBRMoRTE3MkVEMjA5ODZDQTI4RUQ0OTI0N0IyNTRDNENGOTU2 RTZEMDA1RjAeFw0yNjEwMjEwOTIyMDVaFw0yNjEwMjgwOTIyMDVaMBgxFjAUBgNV BAMTDTZhZDg4NDNlLTliMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Hw/9R+6XNJN70n8jQdFOOGWMQkpaQTM3cO9VN5kOm8bdlvgsNDEW741Mu/Ll wgfy3L/vkP4mRJF7Fhf9t5upJjE6kkzXGXviI8laJYGB/8sTnDaIdvN5mXASh0Um 8VWHnul8Lhkyv17SzEMD+n/E2LTs1uU9LO8ScjNJs2af1IBSQ353FeQaJ5BZfGSX R1gV6IeIsQWqAn/bGmD1yC/zp3ppdeou7o9ulFRu/GOSNukpxKYRrUxrkJCCnw5G 4GxrmRNlhFSq+kYxV/yMsgjmnMAzd5Psr3S9HIxR9iw1FFgPlBzqO78XVJJvzYkH uniV26J9kEZ50ricK87MOEMzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEduCaM65 6KaiYcD+E7qMjyhS6LUwHwYDVR0jBBgwFoAU4XLtIJhsoo7UkkeyVMTPlW5tAF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQUM5Lzg0Q0Y2OTU2OTE1 ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283VWtrZXlWTVRQbFc1dEFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNFhMdElKaHNvbzdVa2tleVZNVFBsVzV0QUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QUM5Lzg0Q0Y2OTU2OTE1ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283 VWtrZXlWTVRQbFc1dEFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBX66JyShncRplFZYoausd8yCsDMrKobiUJccLLcZVxAaZvpZR5NV9cHkm2y7P9 Bxp9qKBw+QuqoNBhPmfFzgU7k58Es8s9+Wf54qdUGNkSO2nZ2IZVimQ10to7EfBd xBYco1K2EO3XQauUAIBzpN5JZxXT7wJtQNj+zOC2vtd05JdSiaOafMGWAoKuvCY1 3VSXEXojlgj3mqEwJMUSHpiQXRrhpifVAyyOTgoRrZUBe5sIaMBScgrod8hfzJZG ngmE74r38+ivwLnH6ISydNQJ94vLQ6fXoycO7NWrl7AuonJt+5m49c62+mdBiHt3 zAAZFEVm1hQTxxXlW86NjSSF -----END CERTIFICATE-----Generated at Wed Oct 21 22:49:53 2026 by rpki-client