$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: thpPy/1/09s6jF+SgOjf/a1Z35Vz0esip+q6iu8Cnlw= Subject key identifier: 71:64:75:26:F4:A9:63:F0:FC:FC:22:5A:8F:AE:D3:BC:1A:DD:2A:CF Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 1952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 1929 Signing time: Sat 24 Oct 2026 16:25:09 +0000 Manifest this update: Sat 24 Oct 2026 16:25:09 +0000 Manifest next update: Sat 31 Oct 2026 16:25:09 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: 4EWC58SU6mLeF7RkQXk2aqWLIdD7fK8P1H5KkXhCjY8=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: u9b8xi9VJzwkucgePmf7GxJbrJFJHrJEf5pCf7m+hrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 16:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6482 (0x1952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Oct 24 16:25:09 2026 GMT Not After : Oct 31 16:25:09 2026 GMT Subject: CN=6adcdbe5-31c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:82:bf:6b:7e:c9:75:a4:6b:93:96:ea:9c: f8:4a:36:62:d3:0b:3e:82:da:ff:32:6e:27:f7:46: c4:9c:ab:6a:d6:eb:c2:fd:1c:9c:0c:24:87:2e:e7: b9:cc:d9:c1:61:ba:c0:62:3a:a2:9e:8b:1e:4e:c8: e1:df:94:8b:46:c1:49:cc:e0:21:1c:cb:d4:56:02: 2c:e1:59:da:60:f5:71:24:31:34:55:d9:6e:cf:49: 99:8a:51:10:59:38:cf:38:4e:12:0e:d4:03:dc:7e: 13:8c:92:f0:d4:14:96:f9:bd:0b:d5:11:64:55:6d: 64:0a:be:13:15:07:e0:d5:a5:64:e5:ee:d0:fa:84: 7a:6a:73:a2:6a:50:5f:c0:c8:1c:ce:aa:aa:d2:fc: 3b:4f:92:22:d3:34:3b:9d:85:ce:87:bc:01:39:a8: 8e:eb:e3:cf:89:53:af:98:1c:17:1d:3d:83:ee:8f: 1c:85:62:11:46:7f:74:af:3b:f6:57:c3:3a:44:61: cb:b3:97:bb:e9:77:ea:4f:e0:67:ae:2a:b2:12:06: f3:c3:77:4c:4c:70:7a:dc:d7:e2:1e:33:3d:6e:d0: d8:ed:9c:7f:ed:33:89:66:08:b7:f6:a8:b2:d0:a3: dd:6a:c8:7b:6f:a2:7b:71:9c:43:fc:ee:14:bf:cc: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:64:75:26:F4:A9:63:F0:FC:FC:22:5A:8F:AE:D3:BC:1A:DD:2A:CF X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:75:52:5c:6b:f1:ac:e8:79:f2:72:bd:26:6a:55:9d:56:10: 09:02:c9:f7:52:f1:93:4c:84:6c:51:c1:e5:fc:37:fb:b4:f7: 88:86:66:68:38:8a:69:8e:e5:74:3c:67:d1:66:9a:cc:9d:c7: 73:82:1a:5a:b1:15:e3:7a:ca:51:dc:1e:b4:09:12:91:55:91: 79:bb:18:41:36:35:d6:71:43:ad:70:e6:d1:9e:2a:82:a9:da: 96:52:6d:2e:3b:34:73:3b:c9:72:8a:25:f1:5f:36:34:2d:51: 25:01:be:26:9b:39:4e:59:58:6b:a0:e1:11:94:be:f4:ca:8a: 3b:00:62:1b:7e:c5:6d:41:0c:ed:2b:42:ec:05:a4:c4:eb:8d: 01:21:99:16:14:67:86:0d:1d:f2:80:b5:f7:ba:2b:46:78:84: bb:3e:d3:7b:9b:89:45:36:e8:fd:b5:22:79:12:7e:c9:b4:eb: 0f:41:df:66:d3:ed:c0:9f:50:bb:ba:92:d5:e1:ac:75:89:99: 39:cd:ea:c0:90:4b:fc:fc:e6:6f:46:22:85:39:ce:cc:35:cf: 83:ab:2d:6c:c4:f8:5b:40:f5:64:41:50:13:b3:93:4a:ee:75: b8:14:22:8e:e8:39:cc:53:ca:5c:97:2c:dc:de:14:e8:85:7a: a2:d0:d4:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjYxMDI0MTYyNTA5WhcNMjYxMDMxMTYyNTA5WjAYMRYwFAYD VQQDEw02YWRjZGJlNS0zMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAaCv2t+yXWka5OW6pz4SjZi0ws+gtr/Mm4n90bEnKtq1uvC/RycDCSHLue5 zNnBYbrAYjqinoseTsjh35SLRsFJzOAhHMvUVgIs4VnaYPVxJDE0Vdluz0mZilEQ WTjPOE4SDtQD3H4TjJLw1BSW+b0L1RFkVW1kCr4TFQfg1aVk5e7Q+oR6anOialBf wMgczqqq0vw7T5Ii0zQ7nYXOh7wBOaiO6+PPiVOvmBwXHT2D7o8chWIRRn90rzv2 V8M6RGHLs5e76XfqT+BnriqyEgbzw3dMTHB63NfiHjM9btDY7Zx/7TOJZgi39qiy 0KPdash7b6J7cZxD/O4Uv8wjpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFkdSb0 qWPw/PwiWo+u07wa3SrPMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh3VSXGvxrOh58nK9JmpVnVYQCQLJ91Lxk0yEbFHB5fw3+7T3iIZmaDiKaY7l dDxn0WaazJ3Hc4IaWrEV43rKUdwetAkSkVWRebsYQTY11nFDrXDm0Z4qgqnallJt Ljs0czvJcool8V82NC1RJQG+Jps5TllYa6DhEZS+9MqKOwBiG37FbUEM7StC7AWk xOuNASGZFhRnhg0d8oC197orRniEuz7Te5uJRTbo/bUieRJ+ybTrD0HfZtPtwJ9Q u7qS1eGsdYmZOc3qwJBL/Pzmb0YihTnOzDXPg6stbMT4W0D1ZEFQE7OTSu51uBQi jug5zFPKXJcs3N4U6IV6otDU6Q== -----END CERTIFICATE-----Generated at Sun Oct 25 14:19:32 2026 by rpki-client