$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: 6PD6ZlHBmWGOH+wHcjuuALxgkeBqDqh3YIJzq/POM/U= Subject key identifier: F0:6D:3D:C9:30:5F:9D:46:E1:23:59:45:9D:80:E9:8D:44:01:61:D0 Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0978 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 094C Signing time: Wed 26 Aug 2026 17:50:55 +0000 Manifest this update: Wed 26 Aug 2026 17:50:55 +0000 Manifest next update: Wed 02 Sep 2026 17:50:55 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: 6POF/aOr7/jubpeOzFHGkXs6EjeJh10o+2BEP1s2RsI=) 2: D385E420314711EBA579873DC4F9AE02.roa (hash: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=) 3: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: BoTL56JNkoT8zZTebPvc7QbRsS4FGOp32MGJ/vJjCqw=) 4: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 17:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2424 (0x978) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Aug 26 17:50:55 2026 GMT Not After : Sep 2 17:50:55 2026 GMT Subject: CN=6a8f277f-227b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:08:af:ff:41:22:0f:0a:d6:c5:19:97:94: 63:8c:c2:5f:0c:bb:55:64:0a:f8:2b:6c:42:8d:fc: 55:c6:56:3f:a6:de:ae:db:f0:3c:e5:ce:bf:07:f3: 65:30:e3:9a:82:56:46:a8:9e:e3:ed:29:c9:21:3b: 67:4b:85:93:0c:df:e2:76:c3:df:c5:79:c2:a9:44: b6:66:d0:fb:92:63:55:5d:a6:c2:ec:a5:8c:f8:bf: 76:e6:23:ab:8a:a9:b5:30:6c:6a:70:f2:53:ba:46: e0:2c:d7:53:d1:5e:8a:6a:12:36:b4:5d:69:4d:6e: dc:01:4b:4c:66:70:84:04:a2:9a:04:64:3c:09:5e: 84:7a:7e:4f:e8:c7:1f:d1:fa:b0:bc:dd:4c:7b:23: 4b:b3:f7:1f:31:b8:93:c0:58:90:bc:f1:3b:fd:57: 20:7c:bb:12:11:58:19:c7:d2:1b:8d:c0:5c:73:69: 8f:b8:21:74:b4:2e:32:e1:e3:24:9e:ef:f3:67:d1: 13:d9:a0:ea:0c:ad:af:5a:54:a7:01:d1:b9:b1:7b: 6d:20:5b:1c:51:1d:a0:65:1e:47:11:5b:56:7f:ac: 4b:63:9f:b3:05:92:81:cc:d1:f4:53:f0:51:98:76: bc:5c:ca:13:a3:c4:39:f3:75:de:ed:dc:5c:43:29: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6D:3D:C9:30:5F:9D:46:E1:23:59:45:9D:80:E9:8D:44:01:61:D0 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:49:8e:22:12:49:5d:be:01:bb:ba:92:5d:f1:45:85:9f:67: 0b:ad:3e:80:f0:49:ea:62:da:04:7f:8c:3f:88:70:7e:f7:3c: b3:d6:53:18:84:f1:17:97:82:b2:00:38:16:b5:7d:29:d3:b8: e0:fa:aa:0a:ec:14:4c:33:30:96:be:c6:71:1e:c1:53:9a:2b: cc:76:ce:48:3d:e5:f9:e8:b7:d1:0a:0e:3d:ea:a3:96:36:73: 60:06:57:b2:9e:ce:01:49:2a:9b:43:21:70:95:63:11:e2:68: 0a:bd:fe:28:d5:d4:be:dc:dd:c3:1b:55:f5:d0:94:91:74:3f: 9a:cc:fa:cb:c0:33:ca:fc:4d:e7:94:e7:11:df:1b:b2:87:fc: b0:d9:a8:60:c8:db:dd:63:15:e1:05:49:80:9d:84:1c:12:6b: 08:6c:22:7a:d4:dd:76:e8:6d:03:4e:ef:76:8e:4f:37:8e:b4: 60:80:83:d0:a1:81:11:6a:0e:58:45:f3:3a:5b:25:7d:ea:76: fa:d5:5e:1c:8b:23:e0:77:18:13:ca:ee:41:ca:c8:a8:4d:f9: 91:2c:3e:36:96:58:ba:c6:eb:a8:1a:bc:79:8c:ed:ac:58:67: 20:b1:e5:02:52:8b:0a:fc:b3:55:4d:80:06:20:2d:04:9d:c8: a4:bd:8f:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwODI2MTc1MDU1WhcNMjYwOTAyMTc1MDU1WjAYMRYwFAYD VQQDEw02YThmMjc3Zi0yMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWAIr/9BIg8K1sUZl5RjjMJfDLtVZAr4K2xCjfxVxlY/pt6u2/A85c6/B/Nl MOOaglZGqJ7j7SnJITtnS4WTDN/idsPfxXnCqUS2ZtD7kmNVXabC7KWM+L925iOr iqm1MGxqcPJTukbgLNdT0V6KahI2tF1pTW7cAUtMZnCEBKKaBGQ8CV6Een5P6Mcf 0fqwvN1MeyNLs/cfMbiTwFiQvPE7/VcgfLsSEVgZx9IbjcBcc2mPuCF0tC4y4eMk nu/zZ9ET2aDqDK2vWlSnAdG5sXttIFscUR2gZR5HEVtWf6xLY5+zBZKBzNH0U/BR mHa8XMoTo8Q583Xe7dxcQyk5OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBtPckw X51G4SNZRZ2A6Y1EAWHQMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAekmOIhJJXb4Bu7qSXfFFhZ9nC60+gPBJ6mLaBH+MP4hwfvc8s9ZTGITxF5eC sgA4FrV9KdO44PqqCuwUTDMwlr7GcR7BU5orzHbOSD3l+ei30QoOPeqjljZzYAZX sp7OAUkqm0MhcJVjEeJoCr3+KNXUvtzdwxtV9dCUkXQ/msz6y8AzyvxN55TnEd8b sof8sNmoYMjb3WMV4QVJgJ2EHBJrCGwietTdduhtA07vdo5PN460YICD0KGBEWoO WEXzOlslfep2+tVeHIsj4HcYE8ruQcrIqE35kSw+NpZYusbrqBq8eYztrFhnILHl AlKLCvyzVU2ABiAtBJ3IpL2PTg== -----END CERTIFICATE-----Generated at Thu Aug 27 12:25:29 2026 by rpki-client