$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft File: 4unXDvDCGSHEDJDGOhWJAzQGHgo.mft (raw, json) Hash identifier: EWz2GXMdhqiRLSEaXAe1toII3e/7VdkuHvaRpxdpscY= Subject key identifier: DF:D9:0C:A9:F5:D0:CD:49:DF:3E:32:01:4C:23:FA:03:BB:AE:EA:73 Authority key identifier: E2:E9:D7:0E:F0:C2:19:21:C4:0C:90:C6:3A:15:89:03:34:06:1E:0A Certificate issuer: /CN=A91D84F7/serialNumber=E2E9D70EF0C21921C40C90C63A15890334061E0A Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft Manifest number: 07 Signing time: Mon 05 Oct 2026 04:43:39 +0000 Manifest this update: Mon 05 Oct 2026 04:43:38 +0000 Manifest next update: Mon 12 Oct 2026 04:43:38 +0000 Files and hashes: 1: 4unXDvDCGSHEDJDGOhWJAzQGHgo.crl (hash: 0R2N2qpVyYp4vXxsD57a+tlfx+iZwZ193VWHR6P+dZg=) 2: A565D4CEBD6411F1A6562A506111F970.roa (hash: T/xEOQEiJQhdgw15tZDJt1DA4Dw7ba/+Rtzg+a2osjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.crl rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D84F7, serialNumber=E2E9D70EF0C21921C40C90C63A15890334061E0A Validity Not Before: Oct 5 04:43:38 2026 GMT Not After : Oct 12 04:43:38 2026 GMT Subject: CN=6ac32afa-b0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:76:ed:78:f1:0a:2d:01:d3:ca:c1:79:9d:01: 56:4f:31:81:e8:53:dc:c9:96:46:e7:f8:6b:f2:e5: a4:b4:26:a1:60:c0:d2:9f:f3:25:b3:76:55:96:a8: 1c:c3:0e:a4:ac:29:37:1d:05:23:1c:1f:ef:80:6f: f5:0d:af:89:f0:24:96:15:dc:6e:6f:f9:5d:5c:1f: 37:5f:1c:79:58:19:6c:ed:74:3a:d7:6a:f2:75:7f: 1b:b5:39:1a:52:cd:ee:18:ca:98:f7:d9:65:4b:2f: da:93:23:f9:ae:ea:33:f9:32:7c:ce:1a:d0:66:59: 3a:5a:b9:9a:dc:a3:3f:dd:b1:af:71:65:17:d3:7f: a7:f7:4d:20:b3:bb:f5:c9:75:9f:19:08:52:46:68: ad:a4:1e:f1:88:07:3a:28:9a:d8:74:7c:47:c6:f1: 0c:9e:15:bf:a2:45:a2:6b:e7:7e:47:7e:a2:30:a4: 93:19:70:f7:3f:91:b8:22:9e:a9:4b:0e:89:8f:35: 3e:d1:6c:7e:3a:1d:f3:21:4a:b1:63:38:4b:c6:d8: 11:85:76:be:62:8e:d2:6b:d7:dc:82:ce:60:dc:da: b5:28:5d:18:64:e6:dd:97:a9:6b:0a:68:8c:55:ad: 07:d7:23:80:cc:6c:bc:c6:29:6d:07:b7:39:ec:bc: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:0C:A9:F5:D0:CD:49:DF:3E:32:01:4C:23:FA:03:BB:AE:EA:73 X509v3 Authority Key Identifier: keyid:E2:E9:D7:0E:F0:C2:19:21:C4:0C:90:C6:3A:15:89:03:34:06:1E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:06:4e:48:fb:dc:4d:e2:e8:9b:08:a5:35:9f:b3:92:37:59: 37:cc:3e:0e:bd:3a:61:af:b6:4c:e0:c6:83:60:79:39:63:ac: 8c:1c:a7:8a:67:ac:bc:47:7d:f6:33:e6:df:d8:95:58:c9:77: 16:49:1e:0f:7b:ec:cc:a1:54:e9:d8:42:b7:13:54:c1:a1:e6: 47:7e:00:7b:10:f9:02:95:46:3c:3e:8e:39:03:f4:7e:69:0b: a3:a9:b6:c8:ed:c0:96:b1:2d:b7:6f:16:81:08:41:98:d3:52: c1:d8:e6:7e:60:37:2f:25:5a:9c:52:6f:ea:7f:9a:ac:f6:32: 1d:44:2a:6e:4e:42:a0:dd:f0:58:24:0c:09:e0:17:46:8b:e3: f1:aa:03:af:02:52:d6:1f:1e:10:d0:9b:ec:49:ac:7e:b2:62: 8d:d6:6e:00:d4:9a:7e:21:6b:3b:42:00:55:53:c2:9b:a6:b4: df:62:02:af:ae:56:af:f0:e7:f7:ea:a0:ad:e3:7a:0a:7f:66: 7c:a5:60:34:f8:9b:51:37:86:62:88:09:15:6c:da:8e:ae:d1: 1e:77:4c:df:77:df:62:6c:d8:38:ce:61:12:4f:39:8b:6a:11: 06:1f:c4:79:1c:e1:9d:56:ba:26:dc:ce:29:0b:7e:20:a6:8b: 19:3d:f3:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODRGNzExMC8GA1UEBRMoRTJFOUQ3MEVGMEMyMTkyMUM0MEM5MEM2M0ExNTg5MDMz NDA2MUUwQTAeFw0yNjEwMDUwNDQzMzhaFw0yNjEwMTIwNDQzMzhaMBgxFjAUBgNV BAMTDTZhYzMyYWZhLWIwYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNdu148QotAdPKwXmdAVZPMYHoU9zJlkbn+Gvy5aS0JqFgwNKf8yWzdlWWqBzD DqSsKTcdBSMcH++Ab/UNr4nwJJYV3G5v+V1cHzdfHHlYGWztdDrXavJ1fxu1ORpS ze4Yypj32WVLL9qTI/mu6jP5MnzOGtBmWTpauZrcoz/dsa9xZRfTf6f3TSCzu/XJ dZ8ZCFJGaK2kHvGIBzoomth0fEfG8QyeFb+iRaJr535HfqIwpJMZcPc/kbginqlL DomPNT7RbH46HfMhSrFjOEvG2BGFdr5ijtJr19yCzmDc2rUoXRhk5t2XqWsKaIxV rQfXI4DMbLzGKW0HtznsvH7tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU39kMqfXQ zUnfPjIBTCP6A7uu6nMwHwYDVR0jBBgwFoAU4unXDvDCGSHEDJDGOhWJAzQGHgow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NEY3L0EwNTgxQzY2QkM3 QTExRjE4MTIxMTNFRDU5MTFGOTcwLzR1blhEdkRDR1NIRURKREdPaFdKQXpRR0hn by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVuWER2RENHU0hFREpER09oV0pBelFHSGdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 NEY3L0EwNTgxQzY2QkM3QTExRjE4MTIxMTNFRDU5MTFGOTcwLzR1blhEdkRDR1NI RURKREdPaFdKQXpRR0hnby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGBk5I+9xN4uibCKU1n7OSN1k3zD4OvTphr7ZM4MaDYHk5Y6yMHKeKZ6y8R332 M+bf2JVYyXcWSR4Pe+zMoVTp2EK3E1TBoeZHfgB7EPkClUY8Po45A/R+aQujqbbI 7cCWsS23bxaBCEGY01LB2OZ+YDcvJVqcUm/qf5qs9jIdRCpuTkKg3fBYJAwJ4BdG i+PxqgOvAlLWHx4Q0JvsSax+smKN1m4A1Jp+IWs7QgBVU8KbprTfYgKvrlav8Of3 6qCt43oKf2Z8pWA0+JtRN4ZiiAkVbNqOrtEed0zfd99ibNg4zmESTzmLahEGH8R5 HOGdVrom3M4pC34gposZPfOh -----END CERTIFICATE-----Generated at Mon Oct 5 16:40:12 2026 by rpki-client