$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft File: 4AJb-TLnFuGh-K-QECEcQRCE_J0.mft (raw, json) Hash identifier: QLY/6AEnLODPQJCwRy1dtLsyG8l+c6MnopqbMLAmnXI= Subject key identifier: C5:FB:51:4B:1F:A6:FB:E7:CD:67:FC:84:E5:B7:3A:55:94:B3:BC:52 Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D Certificate issuer: /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft Manifest number: 0692 Signing time: Mon 26 Oct 2026 22:23:16 +0000 Manifest this update: Mon 26 Oct 2026 22:23:15 +0000 Manifest next update: Mon 02 Nov 2026 22:23:15 +0000 Files and hashes: 1: 4AJb-TLnFuGh-K-QECEcQRCE_J0.crl (hash: P/+3K4X5vTEO9X3WGQiZzdR4/JioBZR87Q9n560x+5Q=) 2: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (hash: cLEGJuuOutpOBPsuC1eSdRC04oAPN6e0TRfgYBt8aGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FDB, serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D Validity Not Before: Oct 26 22:23:15 2026 GMT Not After : Nov 2 22:23:15 2026 GMT Subject: CN=6adfd2d4-8c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:7d:c7:e8:c4:37:76:b3:80:0a:c3:5e:2f: 63:f5:57:13:e4:67:5d:b1:a6:f6:c2:f7:87:15:c6: 8e:66:45:25:47:7f:71:d1:78:50:61:25:78:38:6a: b4:93:70:67:95:dd:23:88:4b:f5:be:bd:dc:4b:9f: f1:b6:bc:51:fc:61:43:c5:ec:f9:9c:50:29:9b:8a: af:ed:82:9e:de:53:3a:22:d8:37:bd:22:cf:11:cb: 02:71:b1:bd:61:55:80:aa:a8:3c:db:49:16:78:84: d9:d9:de:f1:78:9e:76:4a:de:85:95:7e:50:39:ce: 67:d3:5e:50:f2:f6:f5:04:53:47:71:e0:b5:01:d3: ae:59:db:38:b1:05:bc:55:4f:3b:33:ed:dc:19:a7: c6:1a:2e:03:4b:e1:64:76:8e:c1:83:8c:31:6f:69: 62:4f:c8:dd:62:ef:dd:fc:f8:99:b0:e5:9a:75:75: 9a:9c:98:ed:c3:d7:c7:76:25:8a:3e:c8:54:f0:65: ca:13:92:55:8a:73:93:c5:94:63:ee:4e:f6:35:ae: 22:a4:c2:e9:b0:a7:46:c8:10:00:22:43:45:8d:cd: 29:ec:de:0a:8f:d5:c6:ce:5d:41:63:a1:db:31:b4: 86:dc:63:ef:3c:93:11:ee:81:54:f0:d3:11:79:7d: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FB:51:4B:1F:A6:FB:E7:CD:67:FC:84:E5:B7:3A:55:94:B3:BC:52 X509v3 Authority Key Identifier: keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f1:65:72:ed:9a:39:13:84:e8:d8:0e:3a:0c:66:c8:27:3a: be:5a:ef:37:1c:e9:31:8c:e5:9e:db:5c:fd:41:48:ae:72:84: 1c:16:0d:ed:5a:96:9e:f7:0a:d2:16:6e:3e:6d:05:d6:13:97: e5:c9:2c:77:c6:89:37:13:9e:56:b2:09:e7:97:1a:aa:a6:e9: c2:22:8a:e1:2b:54:f0:8c:84:75:e4:41:28:f0:8e:35:46:41: ce:d4:e0:14:1f:9b:77:b1:5d:89:e9:78:d0:f7:7e:4c:c7:7b: 92:c5:e0:2e:42:88:79:2e:75:01:0c:45:73:2f:f7:06:c7:06: f2:33:05:cb:29:67:1c:75:54:2c:51:93:d7:bb:e2:13:6c:de: 17:dc:84:f1:7e:a1:c2:14:c8:b2:fe:51:02:3f:f8:d1:d4:dc: 88:b8:1a:8c:81:9d:7c:f2:15:cb:c1:8a:54:d7:12:6a:1c:52: 03:a0:82:7a:b6:0e:04:92:26:da:58:18:58:7a:c5:3a:fc:8e: f9:30:3c:fd:49:2f:3e:de:8e:26:46:35:ca:36:b2:8a:e9:f8: d3:8e:68:53:48:83:e1:d0:31:f7:4a:65:74:c3:74:81:41:72: 60:39:da:ed:02:4f:25:89:04:58:92:09:55:8f:24:68:bb:6b: 4d:18:04:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGREIxMTAvBgNVBAUTKEUwMDI1QkY5MzJFNzE2RTFBMUY4QUY5MDEwMjExQzQx MTA4NEZDOUQwHhcNMjYxMDI2MjIyMzE1WhcNMjYxMTAyMjIyMzE1WjAYMRYwFAYD VQQDEw02YWRmZDJkNC04YzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1519x+jEN3azgArDXi9j9VcT5Gddsab2wveHFcaOZkUlR39x0XhQYSV4OGq0 k3Bnld0jiEv1vr3cS5/xtrxR/GFDxez5nFApm4qv7YKe3lM6Itg3vSLPEcsCcbG9 YVWAqqg820kWeITZ2d7xeJ52St6FlX5QOc5n015Q8vb1BFNHceC1AdOuWds4sQW8 VU87M+3cGafGGi4DS+Fkdo7Bg4wxb2liT8jdYu/d/PiZsOWadXWanJjtw9fHdiWK PshU8GXKE5JVinOTxZRj7k72Na4ipMLpsKdGyBAAIkNFjc0p7N4Kj9XGzl1BY6Hb MbSG3GPvPJMR7oFU8NMReX25TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMX7UUsf pvvnzWf8hOW3OlWUs7xSMB8GA1UdIwQYMBaAFOACW/ky5xbhofivkBAhHEEQhPyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZEQi82NTdFNDA3NERB MzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1R2gtSy1RRUNFY1FSQ0Vf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRBSmItVExuRnVHaC1LLVFFQ0VjUVJDRV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZEQi82NTdFNDA3NERBMzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1 R2gtSy1RRUNFY1FSQ0VfSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl/Flcu2aOROE6NgOOgxmyCc6vlrvNxzpMYzlnttc/UFIrnKEHBYN7VqWnvcK 0hZuPm0F1hOX5cksd8aJNxOeVrIJ55caqqbpwiKK4StU8IyEdeRBKPCONUZBztTg FB+bd7Fdiel40Pd+TMd7ksXgLkKIeS51AQxFcy/3BscG8jMFyylnHHVULFGT17vi E2zeF9yE8X6hwhTIsv5RAj/40dTciLgajIGdfPIVy8GKVNcSahxSA6CCerYOBJIm 2lgYWHrFOvyO+TA8/UkvPt6OJkY1yjayiun4045oU0iD4dAx90pldMN0gUFyYDna 7QJPJYkEWJIJVY8kaLtrTRgE3w== -----END CERTIFICATE-----Generated at Tue Oct 27 23:28:46 2026 by rpki-client