$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json) Hash identifier: E3exzQooUQy06x/N9HCUZuu4UuLeQgPzf9a85y9CB1A= Subject key identifier: D7:57:76:B3:A3:77:8E:9D:F1:1D:80:27:13:1A:19:00:2D:6F:75:1A Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft Manifest number: 022E Signing time: Tue 08 Sep 2026 23:05:06 +0000 Manifest this update: Tue 08 Sep 2026 23:05:05 +0000 Manifest next update: Tue 15 Sep 2026 23:05:05 +0000 Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: nKr83IwKeGuahDFslaFXPks5KFV5RF0Wj8/aFbh0Rb0=) 2: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (hash: GdqPLkJ4E7pdQxvn0EjBp2IupaVKXAY1YiP7PnbBtIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 23:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Sep 8 23:05:05 2026 GMT Not After : Sep 15 23:05:05 2026 GMT Subject: CN=6aa094a2-7e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9e:77:67:a1:17:22:7f:e6:b4:ba:50:af:bd: ad:c4:e1:88:6d:6c:d2:3c:5e:2e:0b:17:90:7d:6a: a0:d3:0b:39:bf:48:92:40:fa:88:95:0e:cf:5e:e5: 2d:61:41:c2:f6:2a:0a:90:43:7c:2d:63:73:13:f4: 8c:76:d0:a4:69:56:55:0e:28:71:90:f6:6b:cb:7e: 9f:0f:51:d6:25:fb:d7:ed:25:74:a8:17:e6:c1:d9: 97:3c:d0:d1:ea:85:de:0d:6b:31:90:9d:8c:27:37: 63:19:21:9d:95:97:50:e0:cf:17:48:0f:9b:9f:d1: f5:b6:21:94:04:10:1d:60:13:55:db:3a:aa:63:47: fa:39:19:a6:32:7a:11:4e:a4:c2:23:fd:c7:37:76: 49:25:ca:9b:c6:c9:ab:19:a6:d5:e3:dc:1b:66:b7: 57:9f:25:c8:fc:5a:62:2f:3e:49:67:eb:ef:fa:11: 26:9d:f6:76:48:b5:50:2c:bc:03:a6:1b:de:43:88: 68:76:46:1f:91:24:c7:71:1a:27:e3:0d:df:22:fe: c8:da:47:32:f4:8b:a6:cc:f1:3f:0a:c2:6b:44:08: 42:ca:83:dd:5c:41:e3:ec:62:36:62:2a:bd:16:ac: de:a5:1c:82:f9:35:52:df:cc:77:0a:3b:49:c0:28: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:57:76:B3:A3:77:8E:9D:F1:1D:80:27:13:1A:19:00:2D:6F:75:1A X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:42:ea:05:07:51:f5:f1:ee:d6:3d:16:47:30:a9:34:dd:a5: 1c:4c:14:a4:e1:ff:e8:b7:06:20:4d:cc:6b:66:44:b9:8b:c0: 3b:64:1c:43:db:e0:86:f9:4f:27:6e:5f:8a:81:61:2d:28:c8: 09:fc:40:34:56:cd:50:40:fa:11:7a:7b:d3:9a:37:15:ce:cb: 52:b9:79:fd:3e:e7:47:2d:9b:3f:f3:30:f2:68:4a:8f:3c:7a: c0:f9:8c:d3:83:0f:d7:38:13:57:db:8b:ff:18:70:ea:44:7e: c2:75:6b:25:50:8c:5b:8d:bf:f2:dc:2d:e7:19:ac:9e:ea:39: 6b:37:73:1c:87:12:71:5a:f0:dd:c5:d7:bd:c4:f1:15:0d:88: 8d:5e:36:ea:91:04:80:51:6d:31:2c:a7:06:c1:42:c7:4d:dd: 65:70:bf:34:85:4e:4f:72:82:53:63:b3:3c:42:38:5c:a7:25: a5:98:c7:bd:53:34:02:d8:25:dc:e1:63:5c:f2:8d:80:eb:f9: 3b:4e:d2:4b:b3:c3:46:b1:55:94:c7:84:c6:02:9d:64:fd:2a: 96:96:dd:be:85:ac:b7:f5:5f:5b:04:e5:61:d2:43:38:11:45: 1a:e1:da:ed:bb:85:1d:ff:9f:68:74:86:69:71:d4:d8:2d:65: c9:b0:a6:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjYwOTA4MjMwNTA1WhcNMjYwOTE1MjMwNTA1WjAYMRYwFAYD VQQDEw02YWEwOTRhMi03ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8J53Z6EXIn/mtLpQr72txOGIbWzSPF4uCxeQfWqg0ws5v0iSQPqIlQ7PXuUt YUHC9ioKkEN8LWNzE/SMdtCkaVZVDihxkPZry36fD1HWJfvX7SV0qBfmwdmXPNDR 6oXeDWsxkJ2MJzdjGSGdlZdQ4M8XSA+bn9H1tiGUBBAdYBNV2zqqY0f6ORmmMnoR TqTCI/3HN3ZJJcqbxsmrGabV49wbZrdXnyXI/FpiLz5JZ+vv+hEmnfZ2SLVQLLwD phveQ4hodkYfkSTHcRon4w3fIv7I2kcy9IumzPE/CsJrRAhCyoPdXEHj7GI2Yiq9 FqzepRyC+TVS38x3CjtJwCjsRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdXdrOj d46d8R2AJxMaGQAtb3UaMB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy85NkU2Njc1QTc4NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3 QzhyRXhTeGFzajYxdC0zN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW0LqBQdR9fHu1j0WRzCpNN2lHEwUpOH/6LcGIE3Ma2ZEuYvAO2QcQ9vghvlP J25fioFhLSjICfxANFbNUED6EXp705o3Fc7LUrl5/T7nRy2bP/Mw8mhKjzx6wPmM 04MP1zgTV9uL/xhw6kR+wnVrJVCMW42/8twt5xmsnuo5azdzHIcScVrw3cXXvcTx FQ2IjV426pEEgFFtMSynBsFCx03dZXC/NIVOT3KCU2OzPEI4XKclpZjHvVM0Atgl 3OFjXPKNgOv5O07SS7PDRrFVlMeExgKdZP0qlpbdvoWst/VfWwTlYdJDOBFFGuHa 7buFHf+faHSGaXHU2C1lybCm2g== -----END CERTIFICATE-----Generated at Thu Sep 10 19:56:54 2026 by rpki-client