$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: K34UZUFPAGj18u79XHRjTNUQGnVDoN1vQ0THMvzUKCA= Subject key identifier: AB:58:26:10:08:91:1D:AB:9D:04:BB:07:9E:B9:0A:35:93:D7:FC:1C Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 02CB Signing time: Fri 11 Sep 2026 01:14:33 +0000 Manifest this update: Fri 11 Sep 2026 01:14:33 +0000 Manifest next update: Fri 18 Sep 2026 01:14:33 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: TUJv4EbfKZsA7xP44fa74WuY+mydjCtr7oVK+vp2geY=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Sep 11 01:14:33 2026 GMT Not After : Sep 18 01:14:33 2026 GMT Subject: CN=6aa355f9-ef7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:6d:b6:5c:ef:ed:de:25:ee:8e:1c:fe:09: 2c:3f:6c:a7:e2:fe:8b:2d:16:95:0c:13:19:e6:b5: 84:a5:a4:e9:b6:e0:94:02:23:fe:4f:a2:8e:9b:0b: 25:72:03:bf:7a:3f:1f:f7:1e:75:c0:91:89:c6:32: ab:a6:7f:0d:ac:c4:e5:ce:92:b7:1b:a4:f4:d9:6a: ce:d4:5d:4e:40:ad:06:8f:df:35:8f:f0:c2:ef:42: b7:33:ff:66:78:76:df:c1:c8:19:42:e0:ea:1e:3d: 59:a4:6e:8d:74:38:5d:84:a7:65:ac:1d:03:18:eb: 93:a8:d8:a5:97:f0:79:b0:86:50:cd:b2:74:67:e3: 7d:bf:9e:f4:4f:da:45:6e:12:39:f6:46:98:0f:42: 02:65:c4:a8:7e:23:d5:a3:86:70:83:70:11:b1:60: 46:ea:d8:57:b8:a2:e2:e8:72:7b:83:c5:fb:ca:26: 4b:ee:26:d3:28:cb:01:d3:22:b9:f6:a4:1f:bf:0c: 65:23:15:44:f4:5b:5c:6b:62:a5:5d:c7:6d:fb:5f: 03:61:70:29:58:d3:5e:b1:b6:07:e7:48:52:29:e0: ec:3e:86:ed:31:a6:ac:6e:bd:f1:a1:7f:00:15:85: dc:f9:e2:df:e9:96:6f:83:17:cc:f9:aa:d9:9e:3f: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:58:26:10:08:91:1D:AB:9D:04:BB:07:9E:B9:0A:35:93:D7:FC:1C X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:c3:71:8b:2c:53:58:fb:3a:e7:e3:cf:af:a8:9f:04:bb:51: 8f:00:22:a1:21:44:f8:c5:bb:93:18:4a:bf:29:f7:81:70:ce: 7a:97:fe:b4:cf:0f:0c:77:1c:12:eb:00:92:0e:0c:31:72:b2: 41:16:a3:10:db:bf:ff:1e:09:4e:fc:8e:59:89:20:72:17:f2: 42:71:b5:f8:08:35:00:6c:c9:fa:09:c4:18:24:4e:08:b0:f9: 42:5a:2c:41:42:a5:bb:b8:8d:eb:be:91:43:a1:2f:bf:3d:2b: 9d:50:39:35:ea:28:5e:a8:ca:05:e6:7f:f2:6f:6e:eb:6a:bf: f7:0c:8b:67:2a:f5:0a:88:0a:f5:43:6b:79:d2:f3:f1:8d:be: 3f:8c:03:bc:d1:e4:94:be:0a:5e:ff:bc:1f:0a:93:f2:26:bd: d3:49:3e:0a:cc:c7:b0:e5:06:e6:d4:cd:b6:c1:51:3e:39:fa: cd:cb:0a:64:b3:33:ab:39:76:11:cf:95:dd:bb:73:4f:03:97: fb:75:f4:60:5b:da:6e:43:5a:92:96:93:42:8b:67:50:47:5e: 40:14:96:d5:e3:0d:ed:9f:48:da:46:96:4f:e0:bc:3b:56:af: 5f:24:78:c5:06:33:16:92:68:8b:02:07:cf:19:f0:74:ff:a7: 7e:a0:b2:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjYwOTExMDExNDMzWhcNMjYwOTE4MDExNDMzWjAYMRYwFAYD VQQDEw02YWEzNTVmOS1lZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1Bttlzv7d4l7o4c/gksP2yn4v6LLRaVDBMZ5rWEpaTptuCUAiP+T6KOmwsl cgO/ej8f9x51wJGJxjKrpn8NrMTlzpK3G6T02WrO1F1OQK0Gj981j/DC70K3M/9m eHbfwcgZQuDqHj1ZpG6NdDhdhKdlrB0DGOuTqNill/B5sIZQzbJ0Z+N9v570T9pF bhI59kaYD0ICZcSofiPVo4Zwg3ARsWBG6thXuKLi6HJ7g8X7yiZL7ibTKMsB0yK5 9qQfvwxlIxVE9Ftca2KlXcdt+18DYXApWNNesbYH50hSKeDsPobtMaasbr3xoX8A FYXc+eLf6ZZvgxfM+arZnj9yxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtYJhAI kR2rnQS7B565CjWT1/wcMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ8NxiyxTWPs65+PPr6ifBLtRjwAioSFE+MW7kxhKvyn3gXDOepf+tM8PDHcc EusAkg4MMXKyQRajENu//x4JTvyOWYkgchfyQnG1+Ag1AGzJ+gnEGCROCLD5Qlos QUKlu7iN676RQ6Evvz0rnVA5NeooXqjKBeZ/8m9u62q/9wyLZyr1CogK9UNredLz 8Y2+P4wDvNHklL4KXv+8HwqT8ia900k+CszHsOUG5tTNtsFRPjn6zcsKZLMzqzl2 Ec+V3btzTwOX+3X0YFvabkNakpaTQotnUEdeQBSW1eMN7Z9I2kaWT+C8O1avXyR4 xQYzFpJoiwIHzxnwdP+nfqCyxA== -----END CERTIFICATE-----Generated at Fri Sep 11 15:35:39 2026 by rpki-client