$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: m7F9QdI4HB3jySD2IAQBb5EGJrv/Z05QVBM4IiYsxA0= Subject key identifier: 0D:AC:BE:8C:03:18:76:24:80:AD:FF:ED:89:8D:8D:0E:FF:30:B5:41 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 021A Signing time: Mon 21 Sep 2026 02:56:22 +0000 Manifest this update: Mon 21 Sep 2026 02:56:22 +0000 Manifest next update: Mon 28 Sep 2026 02:56:22 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: 27dgpc9er+EL5K1ZLi2qywHqhv6kAlzFHv/o0iNe7y4=) 2: C6F2B810858711F1BFD2CAA18FA30FBC.roa (hash: ZMTrBfsMxmzIzO9B7U8qM9itshNtWwyMLZ+DyDQjh0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Sep 21 02:56:22 2026 GMT Not After : Sep 28 02:56:22 2026 GMT Subject: CN=6ab09cd6-d12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:98:97:69:6b:69:a3:50:26:e5:df:7c:06: 35:1e:1b:b3:63:9c:7f:60:38:5a:36:ca:a0:a7:1e: e6:c5:20:b8:7d:e4:37:4d:4d:dd:31:5d:bb:bf:60: 81:f8:89:9c:88:ac:33:83:0e:e2:04:30:98:1d:37: 44:41:1c:b3:9d:d4:a6:73:d5:cb:33:d0:e7:c6:b4: a1:3b:09:f0:b5:1a:44:7d:2e:94:20:12:96:34:2e: e7:1f:36:0c:7d:ca:eb:07:f8:12:0e:ed:6b:f8:86: d1:87:45:17:92:1f:37:b1:9c:74:e5:b9:8e:da:13: b7:da:30:b9:2a:be:56:d4:0c:81:f3:ea:b4:cb:a2: a6:4a:a4:b2:ef:e5:7b:ee:a8:ab:fc:a0:f3:f6:38: 0a:d5:34:03:80:7e:a6:4c:51:91:ca:02:e8:38:11: c6:50:7f:cc:05:8a:7b:18:a9:66:f7:a3:73:2f:9f: 72:25:fb:28:5c:53:48:1b:db:9d:1f:55:bb:91:1d: d5:d4:91:10:a3:1f:c9:1c:eb:48:06:4f:06:d9:c8: 3d:5e:bc:88:a7:7f:fe:08:65:ed:45:5f:be:cb:bc: 54:c9:ac:fb:90:40:9c:67:99:99:01:4f:49:02:55: ab:56:d6:74:71:fa:03:f3:86:aa:5d:1c:b6:7d:95: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AC:BE:8C:03:18:76:24:80:AD:FF:ED:89:8D:8D:0E:FF:30:B5:41 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ec:06:02:99:08:43:e6:c4:ac:73:5f:90:cd:9f:dc:ac:d8: bd:58:d9:fc:5e:61:88:8e:42:07:3d:70:66:45:4a:f5:8d:1f: 24:fc:30:7c:82:f1:38:ae:ab:20:0e:04:4c:a6:85:00:61:ef: 88:35:6a:ed:12:dc:e2:85:19:a9:d9:67:ad:e9:d6:9e:c0:03: 30:ea:89:a8:9f:ca:42:d6:16:94:e7:42:fd:a4:aa:61:4c:d1: 97:fa:16:34:45:9c:e8:77:dd:a2:8c:4b:49:4f:3d:52:42:af: 06:8c:af:9c:49:43:e2:8f:7b:66:d0:dc:3e:a9:b1:0e:61:9a: 97:10:ee:b5:61:f9:d3:cf:99:57:10:4f:1c:8a:c4:ed:e8:7a: 40:a1:33:ac:08:c4:39:4f:41:be:70:d0:a1:0e:d3:0b:83:2f: 16:ed:1d:bd:54:70:21:42:7d:6b:82:a3:28:4d:55:89:f4:5d: 2c:90:77:4b:21:24:0f:29:b3:8f:30:ee:68:d2:7a:bb:2e:1e: 63:9f:a2:bb:77:e5:b9:54:e4:6c:eb:b8:e8:94:56:66:05:f1: f6:e7:81:bb:d6:d1:9f:3d:1a:8d:5d:58:fb:0d:21:31:ed:da: 83:c0:74:4e:48:17:3e:0d:03:ef:5e:0e:98:f4:e3:cb:12:27: 0e:cd:56:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjYwOTIxMDI1NjIyWhcNMjYwOTI4MDI1NjIyWjAYMRYwFAYD VQQDEw02YWIwOWNkNi1kMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvyYl2lraaNQJuXffAY1HhuzY5x/YDhaNsqgpx7mxSC4feQ3TU3dMV27v2CB +ImciKwzgw7iBDCYHTdEQRyzndSmc9XLM9DnxrShOwnwtRpEfS6UIBKWNC7nHzYM fcrrB/gSDu1r+IbRh0UXkh83sZx05bmO2hO32jC5Kr5W1AyB8+q0y6KmSqSy7+V7 7qir/KDz9jgK1TQDgH6mTFGRygLoOBHGUH/MBYp7GKlm96NzL59yJfsoXFNIG9ud H1W7kR3V1JEQox/JHOtIBk8G2cg9XryIp3/+CGXtRV++y7xUyaz7kECcZ5mZAU9J AlWrVtZ0cfoD84aqXRy2fZWe8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2svowD GHYkgK3/7YmNjQ7/MLVBMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs+wGApkIQ+bErHNfkM2f3KzYvVjZ/F5hiI5CBz1wZkVK9Y0fJPwwfILxOK6r IA4ETKaFAGHviDVq7RLc4oUZqdlnrenWnsADMOqJqJ/KQtYWlOdC/aSqYUzRl/oW NEWc6HfdooxLSU89UkKvBoyvnElD4o97ZtDcPqmxDmGalxDutWH508+ZVxBPHIrE 7eh6QKEzrAjEOU9BvnDQoQ7TC4MvFu0dvVRwIUJ9a4KjKE1VifRdLJB3SyEkDymz jzDuaNJ6uy4eY5+iu3fluVTkbOu46JRWZgXx9ueBu9bRnz0ajV1Y+w0hMe3ag8B0 TkgXPg0D714OmPTjyxInDs1WUQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:28:49 2026 by rpki-client