$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: w5UCk9s65ciEFJ6FnuVYXg7MJolsHgd5MEXOpcdR48U= Subject key identifier: 55:EC:0B:94:80:A2:7F:66:8F:4C:C9:31:B3:D8:45:8B:8B:67:BE:BF Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 03A5 Signing time: Mon 21 Sep 2026 00:32:45 +0000 Manifest this update: Mon 21 Sep 2026 00:32:45 +0000 Manifest next update: Mon 28 Sep 2026 00:32:45 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: xnx/wepCXgCh86OHKq51OslezI0EFXCDQmeQldC06Vw=) 2: 2CE2D8C2924D11F1BEC529D43811F970.roa (hash: 2Zqqq8CmUd4n+HR7fT+QRClfMOfng4re27zUhAVIAbo=) 3: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=) 4: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=) 5: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: JiCW8fyrxd1H5hhanenqtI3Q+to3q8hEENBSB39tRpc=) 6: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Sep 21 00:32:45 2026 GMT Not After : Sep 28 00:32:45 2026 GMT Subject: CN=6ab07b2d-f551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:87:e4:fa:74:60:df:ce:e0:68:47:c5:12: c8:0e:22:3b:fb:cf:56:f8:99:00:34:b7:c0:fd:d6: fb:82:e7:b5:d7:04:40:19:76:66:52:c7:24:f6:99: f4:68:c2:09:75:89:4d:fb:f3:a5:ee:0e:00:41:9e: 89:30:63:f4:07:7a:4b:bf:ea:fc:49:88:df:62:f4: 17:b8:dc:58:0c:d3:66:a6:44:8b:2d:df:9d:8c:ea: 42:c6:a8:cd:76:e7:15:2c:f7:66:c0:8f:2c:de:7e: 20:48:b7:83:ae:b2:52:75:31:ad:1d:b7:71:48:4b: a8:2d:f7:1a:65:ff:04:be:11:c6:88:49:57:70:b5: a3:a1:03:9d:db:bc:a7:63:1e:f0:53:f4:9c:13:66: 06:57:94:2a:dc:0d:05:69:50:49:f2:01:8b:bd:34: ec:5f:79:17:dc:66:0b:cf:76:50:79:59:0d:79:9c: 6c:33:55:06:0a:3e:7a:c8:5a:ec:6e:a6:fe:d8:df: 62:ad:4d:8b:c4:49:5b:98:7f:a9:e7:05:00:05:5d: 6a:ee:84:84:5d:3d:c0:99:c2:01:44:92:bd:19:03: cc:46:c8:fc:86:ca:1f:74:72:1b:74:59:2b:18:57: 6e:34:44:d6:ed:6e:06:ca:34:93:aa:6b:b8:1a:9c: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EC:0B:94:80:A2:7F:66:8F:4C:C9:31:B3:D8:45:8B:8B:67:BE:BF X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:3a:35:84:cf:00:6c:dc:1c:72:1e:ef:5c:7c:72:cd:5d:ea: e0:db:b1:44:83:4d:3a:55:5c:57:07:df:19:59:17:dc:59:d7: f2:6d:67:67:58:1d:f9:5a:22:09:e5:49:73:96:6c:39:c8:aa: 7b:11:18:b6:40:0b:3e:e5:42:5e:95:44:9d:3a:2b:03:9d:ba: b4:ee:98:06:05:3b:84:fe:7b:f4:8f:e4:db:fd:0e:d2:09:fb: c9:bf:d2:08:7e:68:0a:f7:49:a1:85:b5:78:88:39:b9:31:a1: 06:45:b7:ad:94:c4:44:f8:9a:d8:2b:f9:3f:e8:91:39:1c:cc: 79:d4:48:77:90:ae:80:04:da:16:24:b2:79:8f:fc:56:20:49: 21:a0:a0:6d:0b:10:e5:8a:c8:f9:82:d7:2d:0d:ed:75:64:2e: d3:0a:5d:3a:90:8c:94:bf:6d:e4:74:b1:02:60:1a:99:ab:e0: ce:84:22:2e:9b:3b:cf:19:66:4c:90:9b:66:8f:e1:a9:fa:29: b0:ed:03:77:a1:58:b8:00:a2:c9:b0:bb:7a:8f:02:c7:1f:18: fb:79:b2:7f:ee:1e:e0:35:14:34:c8:9f:06:3a:94:45:3c:db: a1:c4:83:92:07:8a:de:58:b3:2b:55:03:17:5e:33:89:2c:15: 2b:12:fd:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjYwOTIxMDAzMjQ1WhcNMjYwOTI4MDAzMjQ1WjAYMRYwFAYD VQQDEw02YWIwN2IyZC1mNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlW6H5Pp0YN/O4GhHxRLIDiI7+89W+JkANLfA/db7gue11wRAGXZmUsck9pn0 aMIJdYlN+/Ol7g4AQZ6JMGP0B3pLv+r8SYjfYvQXuNxYDNNmpkSLLd+djOpCxqjN ducVLPdmwI8s3n4gSLeDrrJSdTGtHbdxSEuoLfcaZf8EvhHGiElXcLWjoQOd27yn Yx7wU/ScE2YGV5Qq3A0FaVBJ8gGLvTTsX3kX3GYLz3ZQeVkNeZxsM1UGCj56yFrs bqb+2N9irU2LxElbmH+p5wUABV1q7oSEXT3AmcIBRJK9GQPMRsj8hsofdHIbdFkr GFduNETW7W4GyjSTqmu4GpwddwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXsC5SA on9mj0zJMbPYRYuLZ76/MB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTo1hM8AbNwcch7vXHxyzV3q4NuxRINNOlVcVwffGVkX3FnX8m1nZ1gd+Voi CeVJc5ZsOciqexEYtkALPuVCXpVEnTorA526tO6YBgU7hP579I/k2/0O0gn7yb/S CH5oCvdJoYW1eIg5uTGhBkW3rZTERPia2Cv5P+iRORzMedRId5CugATaFiSyeY/8 ViBJIaCgbQsQ5YrI+YLXLQ3tdWQu0wpdOpCMlL9t5HSxAmAamavgzoQiLps7zxlm TJCbZo/hqfopsO0Dd6FYuACiybC7eo8Cxx8Y+3myf+4e4DUUNMifBjqURTzbocSD kgeK3lizK1UDF14ziSwVKxL9ww== -----END CERTIFICATE-----Generated at Tue Sep 22 23:46:11 2026 by rpki-client