$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: bkepRLeIQmjRi4tia+DosezzAyvs2n0XF3W5eGBSExw= Subject key identifier: B9:38:91:93:F7:82:03:48:03:C3:E1:B0:22:11:E0:0A:68:85:3B:9B Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 087C Signing time: Thu 24 Sep 2026 20:48:43 +0000 Manifest this update: Thu 24 Sep 2026 20:48:43 +0000 Manifest next update: Thu 01 Oct 2026 20:48:43 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: bRwE2EdiVRVJvQvezedpYY49BMUnedJSLshfPQ7E8zA=) 2: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: L0U0RcVKixHM80nNmnQh09Mgzv1FHdU2PsTdoVdSV8U=) 3: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: SfIPzDPx+vk2QttaA/BFMlEfJZc2n17RQ43Dr50jvLs=) 4: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: gCroShM9MPy9hkOuo/TmE62NW3KmfiqLbSetYf/sQtk=) 5: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Gd7CExBZM5BBf+T9t2y84eMZfBgGlZ7L5uDoPb1T73A=) 6: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: KYjRsSmZFGs+FoyNnOuXfuvWzg10BoAKlArtMc3CJYg=) 7: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: fTOR9/QC+OhH2+hrGoKHcs/jMnPvIkd1epQi4PDNnQE=) 8: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: WAr5HKGDc2RarHCoXbJPfLibBljcpHIXpcteTrNCl3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Sep 24 20:48:43 2026 GMT Not After : Oct 1 20:48:43 2026 GMT Subject: CN=6ab58cab-280a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:06:34:3f:d7:8a:18:bf:5d:f4:97:67:85: 4a:94:82:f3:29:df:c3:da:8d:c0:85:a5:94:7f:54: ce:a9:fd:ac:1b:d5:fc:8d:72:cc:05:59:75:31:86: 7b:db:fd:9d:da:5f:6b:cc:e5:3f:2e:b5:8c:d2:22: 14:85:69:a0:4a:0c:b3:08:e0:45:af:e2:98:ab:ad: 49:d7:c7:fd:5e:75:52:d5:a1:78:be:3d:14:81:84: 38:99:f9:11:73:50:c2:76:e4:c1:77:f2:f4:36:22: 51:49:42:47:5e:94:10:be:cb:34:c5:68:fc:1b:62: de:62:58:3e:71:6d:cd:68:fc:4a:b2:2f:b2:72:0e: 86:d3:45:30:e0:68:c4:67:f3:30:d0:06:fd:fb:84: 75:4b:ea:06:aa:58:22:b7:f7:fd:04:ec:a1:47:f7: 1d:38:a6:f1:d7:59:12:2d:02:63:1d:47:99:7c:e3: 06:26:94:c8:57:6f:a7:2d:5f:77:29:4b:a1:aa:fd: 88:8a:f0:4e:86:4f:d2:13:a4:77:7e:8a:ba:d1:87: 1a:07:e9:92:ef:b0:c3:6e:87:c7:0e:ca:34:c7:0f: 2c:b4:c4:76:ee:2b:04:df:9d:87:d4:14:68:99:81: d8:a8:05:8f:18:ed:8f:a7:e0:3a:6e:4a:4f:3a:3e: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:38:91:93:F7:82:03:48:03:C3:E1:B0:22:11:E0:0A:68:85:3B:9B X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ba:38:23:d7:bf:7b:7b:34:7a:eb:19:96:1b:ce:b3:97:a3: be:5c:40:18:d5:2e:1e:d5:50:1e:e8:ee:56:9e:1a:74:b2:de: af:75:e1:fd:05:79:7a:52:52:d3:ff:1d:7d:dc:62:63:ad:d6: 55:f1:90:15:5d:84:53:90:ca:d1:55:92:b2:dd:30:45:d2:2a: 4c:d0:cd:34:a6:91:b0:06:6d:c8:93:40:8d:df:9c:56:50:fd: 3a:21:b4:ad:00:22:d3:d7:c8:1f:81:b4:d0:71:46:74:39:83: dc:df:ea:74:6e:20:d0:3c:b2:50:15:3e:59:95:43:b4:26:e6: 8f:ae:15:89:13:b6:79:c9:f8:58:e7:cc:42:c4:fd:46:e5:c0: d9:a8:f3:53:f6:bc:4c:4e:8e:f5:ea:d4:71:cb:d8:39:a6:54: 5f:72:e1:31:bf:27:e3:db:4c:0f:9b:e8:50:b8:dd:74:5c:db: e9:59:ee:84:30:b7:80:ed:15:59:f7:83:f6:b2:48:9a:7f:a7: 7b:2d:a9:77:72:49:c1:af:0c:f2:45:cd:62:5f:b0:63:20:ad: 66:23:c0:5e:47:10:a0:03:5b:bf:c3:c1:43:96:1d:16:70:92: d0:c8:90:88:77:36:27:12:e8:b0:a6:d1:9f:98:68:d1:69:01: 92:e5:1c:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjYwOTI0MjA0ODQzWhcNMjYxMDAxMjA0ODQzWjAYMRYwFAYD VQQDEw02YWI1OGNhYi0yODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuo4GND/Xihi/XfSXZ4VKlILzKd/D2o3AhaWUf1TOqf2sG9X8jXLMBVl1MYZ7 2/2d2l9rzOU/LrWM0iIUhWmgSgyzCOBFr+KYq61J18f9XnVS1aF4vj0UgYQ4mfkR c1DCduTBd/L0NiJRSUJHXpQQvss0xWj8G2LeYlg+cW3NaPxKsi+ycg6G00Uw4GjE Z/Mw0Ab9+4R1S+oGqlgit/f9BOyhR/cdOKbx11kSLQJjHUeZfOMGJpTIV2+nLV93 KUuhqv2IivBOhk/SE6R3foq60YcaB+mS77DDbofHDso0xw8stMR27isE352H1BRo mYHYqAWPGO2Pp+A6bkpPOj4PDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLk4kZP3 ggNIA8PhsCIR4ApohTubMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKbo4I9e/e3s0eusZlhvOs5ejvlxAGNUuHtVQHujuVp4adLLer3Xh/QV5elJS 0/8dfdxiY63WVfGQFV2EU5DK0VWSst0wRdIqTNDNNKaRsAZtyJNAjd+cVlD9OiG0 rQAi09fIH4G00HFGdDmD3N/qdG4g0DyyUBU+WZVDtCbmj64ViRO2ecn4WOfMQsT9 RuXA2ajzU/a8TE6O9erUccvYOaZUX3LhMb8n49tMD5voULjddFzb6VnuhDC3gO0V WfeD9rJImn+ney2pd3JJwa8M8kXNYl+wYyCtZiPAXkcQoANbv8PBQ5YdFnCS0MiQ iHc2JxLosKbRn5ho0WkBkuUcqA== -----END CERTIFICATE-----Generated at Sat Sep 26 13:36:22 2026 by rpki-client