$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: 5mDUOM07hhH2Lo6QBuBHKrJkQrxNrY5RW9FOcKbYe5I= Subject key identifier: C4:C9:9D:72:6D:04:27:0C:6F:20:E8:FD:D0:B8:30:E6:F5:74:1B:A1 Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0DE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0DD8 Signing time: Thu 10 Sep 2026 17:51:57 +0000 Manifest this update: Thu 10 Sep 2026 17:51:56 +0000 Manifest next update: Thu 17 Sep 2026 17:51:56 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: OX+7qOM+RHRFPMUN8I9qlJPN0mkvE17evDDtVD5oxds=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 4+Ac/qmp1PMvnSJouQnIg3+M0ch95gCYSQtb1scOlcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3559 (0xde7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: Sep 10 17:51:56 2026 GMT Not After : Sep 17 17:51:56 2026 GMT Subject: CN=6aa2ee3d-58f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:ec:59:b3:07:69:f8:ad:1b:65:f6:20:6f: a0:10:3b:12:ff:f8:5e:5b:cc:96:52:df:0f:fd:a4: 3a:81:9a:4f:37:3d:c5:5b:1c:82:84:7f:4f:67:f9: 52:62:e3:5a:82:8d:77:6c:5e:60:97:4c:e9:31:10: 38:ae:57:ac:6f:01:9b:27:ac:65:cf:26:0e:4f:9f: d2:b9:34:46:74:6c:b8:44:65:b8:9f:7f:e9:90:3f: b5:dc:28:0f:1f:1b:dd:a5:16:d8:b3:ae:96:87:3a: 5c:f8:49:63:79:44:08:cb:57:8a:b7:f0:ca:ec:b4: 00:95:1a:fb:64:8b:ae:82:44:c8:d5:01:fd:17:95: 1a:ee:e1:74:07:40:68:ed:a8:ee:16:bb:b0:05:39: 41:ea:da:42:40:e6:97:20:17:e8:ad:ad:28:2a:1d: e8:db:cd:f4:86:89:ab:e6:6b:d3:03:ec:d6:06:dc: 66:36:7a:cd:bd:55:22:78:1e:4f:82:77:c8:f5:91: 6a:5c:c2:15:32:c2:2b:cc:7f:05:15:3c:1d:e8:d0: ab:31:e0:04:88:c7:b5:ab:0f:13:eb:51:eb:20:b6: 35:e7:f3:b6:a6:b3:60:7b:b8:ff:9a:23:a6:6a:72: d2:3b:96:05:f1:ad:8a:b0:d7:76:e0:fd:68:92:28: ef:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C9:9D:72:6D:04:27:0C:6F:20:E8:FD:D0:B8:30:E6:F5:74:1B:A1 X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:13:38:15:59:d3:82:b9:12:8b:ad:8c:9e:2d:8e:d3:ae:70: 57:c5:89:27:27:26:da:95:5d:5c:1e:5d:7e:a9:47:d8:6b:23: 0c:5c:18:72:27:bd:82:43:52:e2:4a:7f:cb:46:9b:83:3b:30: 5e:dc:da:2a:0e:cd:5c:1d:67:84:46:e9:87:a6:a1:eb:54:31: 05:eb:30:83:56:bd:67:72:8f:b7:26:be:7b:a3:14:60:7e:39: 7b:c3:0e:56:52:3c:2b:68:55:13:1e:1c:70:dd:e7:ac:4f:6f: 04:f1:27:88:5e:24:79:eb:00:e0:15:b0:14:72:f1:d1:0a:75: c2:dc:41:be:67:e6:72:bb:4b:7a:2f:50:1c:86:66:3b:59:4b: ec:d4:4d:b8:5e:e8:af:b2:19:16:55:30:dc:ee:69:39:da:c4: f6:92:13:e6:3c:95:72:21:a5:39:2b:cb:06:3e:73:5c:12:0f: 62:9c:fb:96:98:96:74:ce:d0:ab:5d:d8:ef:b6:50:1b:7b:26: 64:06:72:a7:cc:c9:e3:20:4b:4b:47:a9:71:5f:19:a8:14:49: d7:be:78:52:f3:06:21:a7:64:eb:f5:fc:2a:08:8e:0c:39:96: 3d:24:f5:53:6f:25:15:b3:2a:77:ca:dd:d6:8b:9a:31:72:c9: fe:5d:f1:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjYwOTEwMTc1MTU2WhcNMjYwOTE3MTc1MTU2WjAYMRYwFAYD VQQDEw02YWEyZWUzZC01OGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgrsWbMHafitG2X2IG+gEDsS//heW8yWUt8P/aQ6gZpPNz3FWxyChH9PZ/lS YuNago13bF5gl0zpMRA4rlesbwGbJ6xlzyYOT5/SuTRGdGy4RGW4n3/pkD+13CgP HxvdpRbYs66Whzpc+EljeUQIy1eKt/DK7LQAlRr7ZIuugkTI1QH9F5Ua7uF0B0Bo 7ajuFruwBTlB6tpCQOaXIBfora0oKh3o2830homr5mvTA+zWBtxmNnrNvVUieB5P gnfI9ZFqXMIVMsIrzH8FFTwd6NCrMeAEiMe1qw8T61HrILY15/O2prNge7j/miOm anLSO5YF8a2KsNd24P1okijv1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTJnXJt BCcMbyDo/dC4MOb1dBuhMB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcBM4FVnTgrkSi62Mni2O065wV8WJJycm2pVdXB5dfqlH2GsjDFwYcie9gkNS 4kp/y0abgzswXtzaKg7NXB1nhEbph6ah61QxBeswg1a9Z3KPtya+e6MUYH45e8MO VlI8K2hVEx4ccN3nrE9vBPEniF4keesA4BWwFHLx0Qp1wtxBvmfmcrtLei9QHIZm O1lL7NRNuF7or7IZFlUw3O5pOdrE9pIT5jyVciGlOSvLBj5zXBIPYpz7lpiWdM7Q q13Y77ZQG3smZAZyp8zJ4yBLS0epcV8ZqBRJ1754UvMGIadk6/X8KgiODDmWPST1 U28lFbMqd8rd1ouaMXLJ/l3xyQ== -----END CERTIFICATE-----Generated at Fri Sep 11 15:42:46 2026 by rpki-client