$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft File: 4AJb-TLnFuGh-K-QECEcQRCE_J0.mft (raw, json) Hash identifier: Gl/At5FFVo4rVpjYaDZLwfzXF9uGnMGIZ6UDaUV7bMw= Subject key identifier: FF:B5:BB:2F:53:28:1B:E5:5A:06:D4:75:8A:77:AF:A8:33:31:F8:5B Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D Certificate issuer: /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft Manifest number: 067B Signing time: Thu 10 Sep 2026 22:27:42 +0000 Manifest this update: Thu 10 Sep 2026 22:27:42 +0000 Manifest next update: Thu 17 Sep 2026 22:27:42 +0000 Files and hashes: 1: 4AJb-TLnFuGh-K-QECEcQRCE_J0.crl (hash: fd66SMBBymHYDX2lvGV+UBwtik9FVBw2jkguC4h9EgU=) 2: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (hash: cLEGJuuOutpOBPsuC1eSdRC04oAPN6e0TRfgYBt8aGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FDB, serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D Validity Not Before: Sep 10 22:27:42 2026 GMT Not After : Sep 17 22:27:42 2026 GMT Subject: CN=6aa32ede-b0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:20:3f:d7:a9:7d:04:8f:d7:8b:ac:e2:db: 60:9a:19:4c:52:31:67:c6:1a:c3:f9:03:10:07:9d: 66:89:4b:31:30:9a:d3:a3:60:44:8b:dc:32:fd:c9: fa:52:2e:d8:23:fa:41:60:3a:b3:12:d3:44:e7:2d: df:f9:b2:74:4f:52:99:ed:8e:29:b3:70:3c:31:10: fb:8e:f7:4f:e1:8a:3d:30:0c:d2:c9:db:b5:bb:8e: 34:1a:38:3e:f1:70:b9:23:c6:fc:c6:1f:b3:3d:4d: f1:be:cd:6f:30:81:c7:85:ed:56:c4:1d:2a:5e:ec: 60:54:71:29:38:9c:81:3a:98:fe:7d:39:56:83:cd: 07:ca:5e:38:7a:8f:8c:4d:fc:ec:95:24:84:bd:77: 59:71:b2:ae:01:10:6b:d0:b7:d3:49:18:be:29:2f: 73:cf:48:14:28:9b:9e:fc:d9:19:7f:0f:03:49:1a: ca:d6:ee:9c:c4:9e:8d:14:a2:d7:58:9c:fa:78:94: 14:c4:53:b0:da:a4:ae:49:57:59:26:90:a5:a7:8e: 23:6b:97:bb:50:55:c2:71:c8:d8:b7:68:d4:73:30: 8c:d4:38:11:f3:21:85:28:8e:54:ba:53:74:82:7c: f8:08:5e:f5:6e:df:f7:99:88:49:1c:b4:b7:15:c4: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B5:BB:2F:53:28:1B:E5:5A:06:D4:75:8A:77:AF:A8:33:31:F8:5B X509v3 Authority Key Identifier: keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:ed:af:b5:46:28:89:61:7b:e2:41:42:6e:18:80:d2:f6:15: 4c:5c:4c:68:20:03:37:3d:e1:27:2a:b7:81:fd:f3:01:ae:5c: 6a:89:e6:bc:03:aa:34:3b:38:f2:0b:2e:46:b2:34:7e:a0:e0: 8f:50:0a:00:e7:fb:c9:10:1a:2f:8d:7b:ec:10:b0:35:98:da: c2:90:0d:77:a8:0c:da:c0:49:68:7d:b0:cd:8a:f7:1f:e1:f2: 73:d2:9f:f5:71:2a:ab:8c:8f:45:37:c9:d9:da:5d:ad:32:94: cd:50:ee:30:2a:70:5b:ab:23:97:d2:36:be:9a:f1:af:de:0c: 79:03:d9:33:2e:08:52:dd:99:ea:19:8c:03:26:d5:13:16:9f: 19:84:9f:71:70:98:89:96:12:77:bc:f7:7b:9d:4a:d2:40:0d: f1:35:e8:3a:7b:6a:c7:14:01:31:0e:d5:dc:3e:68:22:5a:9b: fc:b4:c1:f3:b2:03:9d:6a:fa:df:6d:82:0c:96:6b:d5:93:5d: bd:ad:ae:75:ca:87:9b:c9:76:8e:01:7e:27:7f:d5:63:c6:0f: 19:56:65:92:bc:d5:da:ef:e0:36:38:89:06:8c:61:f3:0c:53: f3:b0:aa:e3:4c:36:52:59:d0:48:16:9a:9a:9e:13:a5:b7:c1: da:7f:75:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGREIxMTAvBgNVBAUTKEUwMDI1QkY5MzJFNzE2RTFBMUY4QUY5MDEwMjExQzQx MTA4NEZDOUQwHhcNMjYwOTEwMjIyNzQyWhcNMjYwOTE3MjIyNzQyWjAYMRYwFAYD VQQDEw02YWEzMmVkZS1iMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN0gP9epfQSP14us4ttgmhlMUjFnxhrD+QMQB51miUsxMJrTo2BEi9wy/cn6 Ui7YI/pBYDqzEtNE5y3f+bJ0T1KZ7Y4ps3A8MRD7jvdP4Yo9MAzSydu1u440Gjg+ 8XC5I8b8xh+zPU3xvs1vMIHHhe1WxB0qXuxgVHEpOJyBOpj+fTlWg80Hyl44eo+M TfzslSSEvXdZcbKuARBr0LfTSRi+KS9zz0gUKJue/NkZfw8DSRrK1u6cxJ6NFKLX WJz6eJQUxFOw2qSuSVdZJpClp44ja5e7UFXCccjYt2jUczCM1DgR8yGFKI5UulN0 gnz4CF71bt/3mYhJHLS3FcRf8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP+1uy9T KBvlWgbUdYp3r6gzMfhbMB8GA1UdIwQYMBaAFOACW/ky5xbhofivkBAhHEEQhPyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZEQi82NTdFNDA3NERB MzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1R2gtSy1RRUNFY1FSQ0Vf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRBSmItVExuRnVHaC1LLVFFQ0VjUVJDRV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZEQi82NTdFNDA3NERBMzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1 R2gtSy1RRUNFY1FSQ0VfSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt+2vtUYoiWF74kFCbhiA0vYVTFxMaCADNz3hJyq3gf3zAa5caonmvAOqNDs4 8gsuRrI0fqDgj1AKAOf7yRAaL4177BCwNZjawpANd6gM2sBJaH2wzYr3H+Hyc9Kf 9XEqq4yPRTfJ2dpdrTKUzVDuMCpwW6sjl9I2vprxr94MeQPZMy4IUt2Z6hmMAybV ExafGYSfcXCYiZYSd7z3e51K0kAN8TXoOntqxxQBMQ7V3D5oIlqb/LTB87IDnWr6 322CDJZr1ZNdva2udcqHm8l2jgF+J3/VY8YPGVZlkrzV2u/gNjiJBoxh8wxT87Cq 40w2UlnQSBaamp4TpbfB2n915Q== -----END CERTIFICATE-----Generated at Fri Sep 11 07:37:22 2026 by rpki-client