$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json) Hash identifier: uf+nLpkuTmA7Ly1dCtR/STBAZzaelyBCGm/EoELCWaw= Subject key identifier: EC:34:30:3F:5C:CB:7B:DC:84:5B:A8:CE:F4:77:B2:88:BB:96:2B:4C Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 13D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft Manifest number: 13C4 Signing time: Sun 04 Oct 2026 16:58:11 +0000 Manifest this update: Sun 04 Oct 2026 16:58:10 +0000 Manifest next update: Sun 11 Oct 2026 16:58:10 +0000 Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: MVZh4Pe8Mzh1el6VW0fcljCFBiRyrmbMHlAnnDIKkpQ=) 2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: O9w5ukmDcrFDcEjD6HiwQa6Y82NCxJ277Oe6QTyQjzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5080 (0x13d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: Oct 4 16:58:10 2026 GMT Not After : Oct 11 16:58:10 2026 GMT Subject: CN=6ac285a3-2dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:46:31:e1:87:61:21:0c:5e:e2:ac:ec:12: 9e:73:c7:e5:ef:ce:ef:28:fa:ad:46:ff:8c:af:cb: 65:21:a6:4c:8c:e9:3e:f5:6f:2f:f1:a0:b4:95:0a: b2:36:e9:a0:bb:eb:8a:e3:30:9e:2f:3c:e7:a0:f7: 6b:95:20:d3:f6:af:eb:f2:a7:a6:f8:94:7c:8d:2d: e3:4f:da:41:bb:41:43:ae:59:23:4a:77:6a:13:5a: 03:3e:d0:76:6b:d1:f3:5e:3b:dd:eb:3b:60:ce:9d: 89:db:25:2b:bd:cb:66:9e:73:99:f0:68:67:55:42: a8:ac:3d:39:82:ec:e9:7d:80:71:d7:af:30:6c:ee: a1:09:87:73:53:ae:2c:15:ec:64:f1:8f:62:b9:f0: d8:ec:ce:32:5a:2f:7f:8c:0e:4f:08:2a:fa:80:5c: e3:87:93:61:a3:8b:31:40:e8:ca:09:6d:d0:a7:60: c8:e7:ab:fe:d2:2e:41:b8:92:54:e4:93:db:70:3b: 94:63:3a:f6:fa:c8:fe:8b:cb:42:73:7a:b8:61:5c: 5c:bf:71:21:5b:b4:1a:d2:05:5f:6c:55:c5:41:83: d3:09:4c:e3:de:3a:9c:ad:c5:c2:ca:8a:76:d1:14: 9d:73:47:5a:d8:3c:d5:6f:0d:72:87:ab:cd:ce:03: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:34:30:3F:5C:CB:7B:DC:84:5B:A8:CE:F4:77:B2:88:BB:96:2B:4C X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:5a:1a:01:9c:7c:81:74:dd:b0:7d:77:e5:4e:f8:9d:b6:ea: a3:f1:3d:25:c9:bf:79:01:a0:a1:b0:ea:59:59:27:16:b3:b0: 4c:cb:db:95:48:3e:51:e0:6b:74:92:56:d1:25:f9:07:69:d3: 66:92:cf:d6:6b:af:85:72:88:e4:2e:bd:b8:1f:3e:9a:61:26: bb:7b:ba:7d:4f:e8:54:8c:ad:3c:2e:0f:e0:0b:3f:dd:15:4a: e0:ad:86:29:ab:eb:a3:72:0e:f6:e0:78:81:6b:42:9c:f5:c2: f1:67:f7:ce:cf:b4:5a:4b:60:53:40:fa:57:df:a3:be:19:eb: 42:53:79:3c:26:64:bc:00:08:66:73:6f:3e:20:3e:e6:65:8c: 37:04:00:15:6a:dc:21:a8:1e:f5:0d:24:2b:c1:91:48:5b:2a: 61:d2:10:5b:e2:f6:32:69:20:d5:e8:e4:cf:2f:5a:e4:a9:e8: 82:e8:19:94:fb:8f:a1:06:ac:3e:fb:5a:58:1a:c6:8d:f1:fb: 3e:d8:e2:25:73:4e:f7:30:6f:74:70:62:1f:b0:db:85:a0:c6: c4:48:14:d8:7a:35:45:b3:bb:e4:87:46:ad:aa:27:a0:c5:56: 10:9a:99:79:0d:ef:cb:7f:80:ab:d0:73:b3:9d:cd:e1:b6:db: 99:42:69:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjYxMDA0MTY1ODEwWhcNMjYxMDExMTY1ODEwWjAYMRYwFAYD VQQDEw02YWMyODVhMy0yZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJRGMeGHYSEMXuKs7BKec8fl787vKPqtRv+Mr8tlIaZMjOk+9W8v8aC0lQqy Numgu+uK4zCeLzznoPdrlSDT9q/r8qem+JR8jS3jT9pBu0FDrlkjSndqE1oDPtB2 a9HzXjvd6ztgzp2J2yUrvctmnnOZ8GhnVUKorD05guzpfYBx168wbO6hCYdzU64s Fexk8Y9iufDY7M4yWi9/jA5PCCr6gFzjh5Nho4sxQOjKCW3Qp2DI56v+0i5BuJJU 5JPbcDuUYzr2+sj+i8tCc3q4YVxcv3EhW7Qa0gVfbFXFQYPTCUzj3jqcrcXCyop2 0RSdc0da2DzVbw1yh6vNzgP+IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOw0MD9c y3vchFuozvR3soi7litMMB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnRO b1g1NklDaGdPczJPY1daclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk1oaAZx8gXTdsH135U74nbbqo/E9Jcm/eQGgobDqWVknFrOwTMvblUg+UeBr dJJW0SX5B2nTZpLP1muvhXKI5C69uB8+mmEmu3u6fU/oVIytPC4P4As/3RVK4K2G Kavro3IO9uB4gWtCnPXC8Wf3zs+0WktgU0D6V9+jvhnrQlN5PCZkvAAIZnNvPiA+ 5mWMNwQAFWrcIage9Q0kK8GRSFsqYdIQW+L2Mmkg1ejkzy9a5KnogugZlPuPoQas PvtaWBrGjfH7PtjiJXNO9zBvdHBiH7DbhaDGxEgU2Ho1RbO75IdGraonoMVWEJqZ eQ3vy3+Aq9Bzs53N4bbbmUJpww== -----END CERTIFICATE-----Generated at Mon Oct 5 10:42:41 2026 by rpki-client