$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: Gska32p9JkTno1JprYFDnXDpyFvn7DWsxVz8Jb1eycA= Subject key identifier: C0:6C:81:B7:BD:72:C7:7C:48:73:12:D5:0B:49:7A:CD:E9:AF:A1:2B Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 0895 Signing time: Sat 03 Oct 2026 04:57:39 +0000 Manifest this update: Sat 03 Oct 2026 04:57:39 +0000 Manifest next update: Sat 10 Oct 2026 04:57:39 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: ODNftCMtFKzbdvfaIaw5LP5n2HmXS9adolELTtNuWT4=) 2: F20C8EFCBEE611F1A4E8C3E15511F970.roa (hash: 7her/Y1gX5SIB6mQBE9UUUwi8htSoe6sVWZx5vBn2jA=) 3: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: 7Hski1LihuXP4DCejah8rpbbpApVv3sXUWUNBiqFJoY=) 4: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: PI9xVbuN9iLwRFvPVikPHj6xkwP6ohiLgSsNDUNun9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Oct 3 04:57:39 2026 GMT Not After : Oct 10 04:57:39 2026 GMT Subject: CN=6ac08b43-b799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:79:3d:eb:47:e6:b1:a1:5d:cc:30:47:ce: cc:04:7b:f4:10:d3:1f:e3:80:34:13:52:33:4c:06: d5:a3:9e:f8:f1:c5:5c:c2:e0:30:ca:1f:f3:2f:b7: e5:5e:13:b1:47:2b:32:3e:08:77:41:0a:98:9a:cd: e1:4c:bb:14:ed:9c:8b:a1:6d:22:39:06:5c:0f:81: ac:d6:ed:7d:74:4d:4f:42:1f:ad:9b:4f:f0:f2:a2: fb:9e:76:31:fa:a0:de:d5:e6:17:e0:42:f8:29:26: f4:df:68:5f:cb:74:a6:b6:69:4a:f3:80:16:d4:a3: 1b:7e:4f:47:b6:3d:a2:00:e2:81:f5:c8:1c:1f:e7: f0:d9:21:86:87:24:52:90:07:0e:ee:64:5b:e5:be: 30:60:40:9f:2f:d1:a0:61:92:52:ed:a8:63:6a:53: b5:d6:4a:a8:0b:8f:0b:16:55:dc:0a:0d:98:f2:ff: 85:5c:44:da:92:4e:b3:97:e9:de:f1:6e:7d:4e:8b: 7c:b0:08:81:03:89:fd:8f:d4:fa:ce:93:7c:e7:b0: a2:df:1f:94:6c:e5:c8:83:33:bb:34:0b:e5:17:52: 4a:25:ac:aa:73:d0:6a:ce:26:b8:fe:c7:12:17:e2: fb:2b:22:1d:c4:14:bb:33:77:8a:41:37:2e:a1:ad: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6C:81:B7:BD:72:C7:7C:48:73:12:D5:0B:49:7A:CD:E9:AF:A1:2B X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:6c:10:27:79:c2:2e:55:71:e8:dc:5d:b7:40:46:27:42:f4: 59:9e:70:7b:2b:7d:d2:bf:f7:2c:80:b3:aa:ac:9c:93:7b:ac: 31:fd:14:c0:d1:e4:f2:b2:5a:05:0e:29:40:c1:6b:3f:fd:b8: 0e:eb:9d:1b:f7:d5:e5:53:0e:1d:a0:7c:19:20:58:6d:0b:08: 97:f4:bd:37:9e:ed:0c:87:c6:f9:d5:c1:c7:8a:e4:de:d2:39: 56:b1:29:6d:49:3e:05:ba:fd:f6:2f:7d:7a:e7:9b:99:2f:a0: f8:de:2e:00:4b:9f:64:7f:b7:60:68:28:ff:38:55:98:2b:84: 94:89:55:cc:63:93:b4:af:d6:cb:46:44:a2:45:fa:78:97:75: 6c:4d:5f:bf:d6:63:5e:a8:3e:1b:c5:62:45:38:6d:e6:06:53: d8:8b:c7:3b:9b:5c:54:e9:7c:f0:f2:e5:99:67:b3:c9:76:bd: 07:94:1d:32:97:f4:a1:f9:a4:a1:8c:00:5b:a5:49:01:49:a6: d0:0b:d3:50:d8:20:68:02:2a:cd:b7:28:90:f5:b9:ec:a7:05: 63:9d:dd:84:6a:b9:6d:47:a3:9d:a8:88:bb:7a:e7:07:29:fd: 8a:57:04:74:cd:4d:13:82:0e:a9:47:15:e3:a4:e3:1f:26:43: 12:93:ea:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYxMDAzMDQ1NzM5WhcNMjYxMDEwMDQ1NzM5WjAYMRYwFAYD VQQDEw02YWMwOGI0My1iNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXZ5PetH5rGhXcwwR87MBHv0ENMf44A0E1IzTAbVo5748cVcwuAwyh/zL7fl XhOxRysyPgh3QQqYms3hTLsU7ZyLoW0iOQZcD4Gs1u19dE1PQh+tm0/w8qL7nnYx +qDe1eYX4EL4KSb032hfy3SmtmlK84AW1KMbfk9Htj2iAOKB9cgcH+fw2SGGhyRS kAcO7mRb5b4wYECfL9GgYZJS7ahjalO11kqoC48LFlXcCg2Y8v+FXETakk6zl+ne 8W59Tot8sAiBA4n9j9T6zpN857Ci3x+UbOXIgzO7NAvlF1JKJayqc9Bqzia4/scS F+L7KyIdxBS7M3eKQTcuoa34FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBsgbe9 csd8SHMS1QtJes3pr6ErMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp2wQJ3nCLlVx6Nxdt0BGJ0L0WZ5weyt90r/3LICzqqyck3usMf0UwNHk8rJa BQ4pQMFrP/24DuudG/fV5VMOHaB8GSBYbQsIl/S9N57tDIfG+dXBx4rk3tI5VrEp bUk+Bbr99i99euebmS+g+N4uAEufZH+3YGgo/zhVmCuElIlVzGOTtK/Wy0ZEokX6 eJd1bE1fv9ZjXqg+G8ViRTht5gZT2IvHO5tcVOl88PLlmWezyXa9B5QdMpf0ofmk oYwAW6VJAUmm0AvTUNggaAIqzbcokPW57KcFY53dhGq5bUejnaiIu3rnByn9ilcE dM1NE4IOqUcV46TjHyZDEpPqmA== -----END CERTIFICATE-----Generated at Sun Oct 4 07:17:43 2026 by rpki-client