$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft File: 4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft (raw, json) Hash identifier: 4wqsL4gRvvQsV/VpZdT4Y75DBFMTOBCRNnf51gGqjeA= Subject key identifier: 0B:3E:D7:4D:27:5D:A2:39:12:8F:B9:34:E1:EC:7A:92:EB:70:CF:D7 Authority key identifier: E2:45:53:20:A7:EE:5F:D0:8D:B2:EB:B4:5C:60:F8:87:1E:FF:69:6C Certificate issuer: /CN=A91FF8C9/serialNumber=E2455320A7EE5FD08DB2EBB45C60F8871EFF696C Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft Manifest number: 20 Signing time: Sun 11 Oct 2026 09:34:04 +0000 Manifest this update: Sun 11 Oct 2026 09:34:03 +0000 Manifest next update: Sun 18 Oct 2026 09:34:03 +0000 Files and hashes: 1: 4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl (hash: KCiHHYMkMFD4rkgGKqQoKULb0GR53SR8HCo/49h5AhQ=) 2: 406749E4977C11F188CAEE0F4A11F970.roa (hash: mUzwEBEIYs4Q+pXwSXu3nH8Y1qE0+nzYoQdjfbjh0SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF8C9, serialNumber=E2455320A7EE5FD08DB2EBB45C60F8871EFF696C Validity Not Before: Oct 11 09:34:03 2026 GMT Not After : Oct 18 09:34:03 2026 GMT Subject: CN=6acb580c-0429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:d1:8b:58:82:f6:00:09:a6:7b:b2:99:62: da:61:ff:45:e3:42:40:15:36:af:03:14:3c:be:06: e7:97:67:f8:f5:bd:ee:6a:60:ba:3f:79:03:2c:ca: 5e:ae:18:36:a2:01:f7:23:37:1a:e9:1b:b1:42:57: 15:12:63:5c:e3:66:30:2d:7d:b4:1e:37:37:43:f5: 3d:a4:ff:20:f5:af:37:3c:f9:7d:8b:37:56:11:cb: 15:97:c1:ae:6c:85:82:57:29:2c:dc:ec:97:ca:7b: 53:e5:cb:19:cc:8b:4d:26:1f:41:75:99:b9:ff:64: 28:95:77:30:ac:20:e0:dc:75:be:31:3f:d0:95:76: ad:86:29:b7:90:49:62:cb:dc:a5:63:ed:e9:28:f7: 5d:ab:5b:59:af:f4:02:38:e8:10:bd:0e:55:3a:9b: b6:0a:7d:c3:6a:ad:95:f0:e7:37:37:f8:f3:a9:0e: 35:09:3e:18:94:77:e9:ec:1e:57:cb:18:99:66:12: 46:0d:7f:11:47:ea:e4:7d:7b:e2:fe:52:6d:77:2c: dc:ca:d7:83:84:d4:6f:a5:e9:6b:c9:b0:3d:ee:47: 69:9e:78:f0:9d:0e:72:43:82:69:e7:0a:52:af:3d: 36:e1:3a:65:f2:92:31:1d:39:06:7a:75:a9:dc:9c: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3E:D7:4D:27:5D:A2:39:12:8F:B9:34:E1:EC:7A:92:EB:70:CF:D7 X509v3 Authority Key Identifier: keyid:E2:45:53:20:A7:EE:5F:D0:8D:B2:EB:B4:5C:60:F8:87:1E:FF:69:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c8:b6:ab:ed:e2:97:82:aa:bb:3e:46:e1:70:03:37:b1:9c: 0a:2d:62:c7:aa:89:66:81:18:87:8a:9f:b8:9c:12:9d:07:75: c5:de:a8:e1:ad:f5:de:43:fc:f1:ce:c8:10:52:d6:ac:dc:76: 18:b4:0b:40:21:06:4e:0f:00:60:eb:95:24:e0:59:a3:2a:6c: 05:6a:f3:d3:a6:57:af:fd:62:4c:1e:eb:97:07:53:95:80:24: a4:54:d3:7f:5d:9e:aa:1a:5a:f7:d3:f1:8a:11:c9:bc:4b:3b: 8e:c8:21:31:6e:11:d2:62:7a:2c:f3:7f:95:ad:78:ac:d0:12: bb:ff:aa:94:2d:ae:1a:ba:3c:f2:c0:c3:c7:86:23:62:38:83: 90:40:e3:31:d4:71:41:28:b2:f3:3d:6a:bf:da:4e:75:c0:b9: 82:e1:d1:ed:9e:6c:c6:db:05:11:8b:66:33:02:80:cd:f5:be: d7:f3:ca:e0:43:4b:8d:ae:45:be:21:f1:d9:d1:48:63:d1:55: 8b:d8:0c:03:25:0b:23:6f:17:34:e6:40:bc:00:10:00:13:6b: de:ff:73:79:fc:3f:40:14:0e:fa:e2:14:6c:e2:e7:71:a2:a8: c2:af:e8:c2:52:26:33:df:fa:f9:57:a3:d9:ca:62:54:ba:c0: 3a:c9:99:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjhDOTExMC8GA1UEBRMoRTI0NTUzMjBBN0VFNUZEMDhEQjJFQkI0NUM2MEY4ODcx RUZGNjk2QzAeFw0yNjEwMTEwOTM0MDNaFw0yNjEwMTgwOTM0MDNaMBgxFjAUBgNV BAMTDTZhY2I1ODBjLTA0MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQeNGLWIL2AAmme7KZYtph/0XjQkAVNq8DFDy+BueXZ/j1ve5qYLo/eQMsyl6u GDaiAfcjNxrpG7FCVxUSY1zjZjAtfbQeNzdD9T2k/yD1rzc8+X2LN1YRyxWXwa5s hYJXKSzc7JfKe1PlyxnMi00mH0F1mbn/ZCiVdzCsIODcdb4xP9CVdq2GKbeQSWLL 3KVj7eko912rW1mv9AI46BC9DlU6m7YKfcNqrZXw5zc3+POpDjUJPhiUd+nsHlfL GJlmEkYNfxFH6uR9e+L+Um13LNzK14OE1G+l6WvJsD3uR2meePCdDnJDgmnnClKv PTbhOmXykjEdOQZ6dancnK4xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCz7XTSdd ojkSj7k04ex6kutwz9cwHwYDVR0jBBgwFoAU4kVTIKfuX9CNsuu0XGD4hx7/aWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOEM5LzY3ODZFNkZDOTc3 QjExRjFCNzUzOUUyRTQ5MTFGOTcwLzRrVlRJS2Z1WDlDTnN1dTBYR0Q0aHg3X2FX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNGtWVElLZnVYOUNOc3V1MFhHRDRoeDdfYVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG OEM5LzY3ODZFNkZDOTc3QjExRjFCNzUzOUUyRTQ5MTFGOTcwLzRrVlRJS2Z1WDlD TnN1dTBYR0Q0aHg3X2FXdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC2yLar7eKXgqq7PkbhcAM3sZwKLWLHqolmgRiHip+4nBKdB3XF3qjhrfXeQ/zx zsgQUtas3HYYtAtAIQZODwBg65Uk4FmjKmwFavPTplev/WJMHuuXB1OVgCSkVNN/ XZ6qGlr30/GKEcm8SzuOyCExbhHSYnos83+VrXis0BK7/6qULa4aujzywMPHhiNi OIOQQOMx1HFBKLLzPWq/2k51wLmC4dHtnmzG2wURi2YzAoDN9b7X88rgQ0uNrkW+ IfHZ0Uhj0VWL2AwDJQsjbxc05kC8ABAAE2ve/3N5/D9AFA764hRs4udxoqjCr+jC UiYz3/r5V6PZymJUusA6yZm1 -----END CERTIFICATE-----Generated at Tue Oct 13 09:13:52 2026 by rpki-client