$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: XGv11uRyx6Fzap+PrpAzuGx9aoxpqLU3PzfmmQ0tGWA= Subject key identifier: F1:19:84:5B:5C:91:00:90:8E:32:B8:2B:85:9C:25:9F:BA:26:ED:5E Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 090D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 08C2 Signing time: Sun 20 Sep 2026 20:27:51 +0000 Manifest this update: Sun 20 Sep 2026 20:27:51 +0000 Manifest next update: Sun 27 Sep 2026 20:27:51 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: pVFCpJEGwHCDn14422gwBKkkLR8AffeeTMfTWvs+m6A=) 2: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=) 3: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=) 4: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: MaFJmDPMqlk1C6MUJjdtLiNgPwGqra//weYceabgP/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: Sep 20 20:27:51 2026 GMT Not After : Sep 27 20:27:51 2026 GMT Subject: CN=6ab041c7-985c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:f7:c7:c3:87:36:f5:d9:84:91:bc:be:d9: fb:7f:83:e2:c0:e5:da:f3:d3:e5:57:f2:48:f5:3b: 3d:a1:1e:9a:ed:8d:32:3c:12:fc:8c:94:b7:c0:37: 69:98:e4:f8:b6:05:0a:0b:ce:8d:32:8f:57:4b:ad: a4:00:99:4b:60:31:a4:3d:ee:01:5b:18:2b:fe:66: 36:17:f2:bd:b6:d1:c8:1d:77:ca:73:65:7f:c3:23: 54:c0:aa:17:99:15:e7:a4:96:54:a9:fe:a4:d2:d3: a4:c6:35:0a:46:16:b5:66:ae:b3:8e:e6:ef:55:7b: a1:a7:2f:e4:22:f5:3e:29:88:5b:d7:33:3e:dd:6c: bf:26:b4:55:d2:b8:3c:d7:10:05:a7:ba:15:27:7c: 78:44:31:c1:2c:ac:6b:c7:05:d2:be:f9:3b:e2:d7: a3:ae:c2:f1:20:3e:45:ee:76:71:ca:a3:4e:82:7d: 23:8e:6f:47:e2:68:6a:c7:56:05:02:f3:8c:24:cb: d2:6b:40:7d:61:97:f1:e0:4c:12:c3:31:4e:e2:ae: cd:a5:89:ba:68:6c:70:c6:d6:e6:3e:20:84:53:69: 99:23:a7:46:3d:8a:30:9a:66:03:2a:65:17:46:5e: e2:c1:f0:0f:9c:6a:34:44:a0:ca:c1:85:1b:b1:14: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:19:84:5B:5C:91:00:90:8E:32:B8:2B:85:9C:25:9F:BA:26:ED:5E X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d3:30:18:e6:81:d3:61:c5:76:28:33:a6:7e:51:c5:01:ea: 82:4e:35:61:f8:27:5a:88:7d:e4:61:8d:c0:5b:54:fc:92:2f: 58:48:38:0e:fe:8b:66:ca:b9:09:34:b3:6e:5c:c5:fe:67:8f: c0:fe:aa:91:03:20:1f:e7:ff:14:9c:e4:27:25:ad:35:aa:ca: 78:5c:95:a5:91:5d:be:01:ef:09:45:5d:ac:55:b3:df:16:57: 72:48:22:25:e3:4d:00:8d:bf:e4:f4:ef:fe:82:4e:29:6d:58: bc:65:d4:3b:d3:bd:82:29:c6:f7:e5:e9:71:ee:1c:70:0e:8a: 8d:d7:f8:c3:b4:96:c0:e2:4f:0f:56:87:bb:98:5d:82:56:32: b7:f0:86:73:2e:4a:38:27:98:ac:bb:86:8f:d6:9f:3e:5b:82: 4f:4d:16:53:ea:b8:31:28:58:11:79:29:f7:18:36:ed:32:d4: 96:db:83:23:23:bd:4b:30:f6:88:cf:29:bb:ee:50:ba:b2:e2: ce:b9:bd:6d:c0:9a:8d:96:10:29:ee:7e:6a:67:7d:02:d3:60: bd:ff:30:b8:70:e2:0c:6e:b3:cc:bf:55:75:b3:e3:6b:a9:de: ed:02:9e:ed:0d:f0:53:4a:4d:6f:a1:41:60:0c:22:c9:20:1d: e5:08:7b:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjYwOTIwMjAyNzUxWhcNMjYwOTI3MjAyNzUxWjAYMRYwFAYD VQQDEw02YWIwNDFjNy05ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t33x8OHNvXZhJG8vtn7f4PiwOXa89PlV/JI9Ts9oR6a7Y0yPBL8jJS3wDdp mOT4tgUKC86NMo9XS62kAJlLYDGkPe4BWxgr/mY2F/K9ttHIHXfKc2V/wyNUwKoX mRXnpJZUqf6k0tOkxjUKRha1Zq6zjubvVXuhpy/kIvU+KYhb1zM+3Wy/JrRV0rg8 1xAFp7oVJ3x4RDHBLKxrxwXSvvk74tejrsLxID5F7nZxyqNOgn0jjm9H4mhqx1YF AvOMJMvSa0B9YZfx4EwSwzFO4q7NpYm6aGxwxtbmPiCEU2mZI6dGPYowmmYDKmUX Rl7iwfAPnGo0RKDKwYUbsRTjhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEZhFtc kQCQjjK4K4WcJZ+6Ju1eMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvdMwGOaB02HFdigzpn5RxQHqgk41YfgnWoh95GGNwFtU/JIvWEg4Dv6LZsq5 CTSzblzF/mePwP6qkQMgH+f/FJzkJyWtNarKeFyVpZFdvgHvCUVdrFWz3xZXckgi JeNNAI2/5PTv/oJOKW1YvGXUO9O9ginG9+Xpce4ccA6Kjdf4w7SWwOJPD1aHu5hd glYyt/CGcy5KOCeYrLuGj9afPluCT00WU+q4MShYEXkp9xg27TLUltuDIyO9SzD2 iM8pu+5QurLizrm9bcCajZYQKe5+amd9AtNgvf8wuHDiDG6zzL9VdbPja6ne7QKe 7Q3wU0pNb6FBYAwiySAd5Qh7Fg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:56 2026 by rpki-client