$ rpki-client -vvvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft File: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json) Hash identifier: ikoPBGe0slQGkVRJM0bIHZ0i98DBYr7RwaqCNzBYOpc= Subject key identifier: FE:E6:65:F8:6E:59:33:F6:1E:FD:43:38:5E:C6:B5:E8:EA:46:24:9C Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft Manifest number: 0424 Signing time: Mon 21 Sep 2026 00:08:12 +0000 Manifest this update: Mon 21 Sep 2026 00:08:11 +0000 Manifest next update: Mon 28 Sep 2026 00:08:11 +0000 Files and hashes: 1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: sBTGwlGa9y1Oy6WSKTxwBmuyxZtrmpPy75Vd8Oqkiio=) 2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: 5qVS8yAP9geafMCui47y2bneVvGFNSs25MQvHFvL3Q0=) 3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: gLOFNsHejik+yQKsEBrjAw7cANoRp3jJQV4pA0a+JR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB Validity Not Before: Sep 21 00:08:11 2026 GMT Not After : Sep 28 00:08:11 2026 GMT Subject: CN=6ab0756c-11b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e1:a6:11:79:ef:64:7c:24:b4:fb:6b:75:57: a7:ea:9a:fa:79:a1:c3:ed:04:93:88:15:e2:b1:dd: e6:61:60:3c:6d:f0:bb:63:22:ba:85:b1:8d:60:74: 96:f6:ee:91:12:41:c0:3d:c0:d3:1e:60:d6:28:70: 6f:4a:9f:49:ad:88:13:0e:da:16:67:57:84:b4:6f: 46:50:0f:d2:0d:2e:e0:8a:63:08:b2:58:8d:d7:c5: cd:d9:fd:50:18:b3:8a:25:64:e3:b9:0e:10:93:72: ea:ac:5c:92:f4:f7:4b:e0:5c:c3:3a:63:76:f2:e8: 93:d6:6a:60:2c:a4:b7:10:e0:c1:4f:fc:3f:d4:2e: 01:d9:ef:39:ad:6e:2a:31:98:e5:06:a2:5b:9b:1f: 5c:9b:bb:ed:9b:bc:a7:39:33:ac:bb:e0:88:b4:71: 71:c5:c3:0e:67:ea:f0:3f:09:32:bf:5a:e3:1e:f6: c7:10:fa:27:a4:1a:4a:10:db:15:bb:15:51:49:32: f6:65:1b:dd:6d:d5:a2:aa:c7:a6:cd:f9:8b:0c:0a: d0:d1:1e:51:7a:71:c9:d9:29:65:3a:6c:ee:ff:01: 48:1f:e5:29:95:5b:4d:ba:72:91:82:e6:1f:67:9f: 0c:60:98:d0:a4:93:54:46:5c:45:32:78:62:99:48: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E6:65:F8:6E:59:33:F6:1E:FD:43:38:5E:C6:B5:E8:EA:46:24:9C X509v3 Authority Key Identifier: keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:96:8c:db:e8:d3:14:ba:3f:f6:be:cd:d2:ee:08:91:7f:19: 98:2a:ac:91:63:cd:7f:99:d0:24:b5:2b:ad:14:0f:be:99:c5: c3:d5:48:3f:ab:8c:e3:2a:d8:82:7e:b2:4f:5e:3c:d2:5c:2c: 31:3c:5d:99:c2:6d:a8:6a:83:a7:05:4b:37:6e:2d:02:15:12: b8:ac:8e:4a:1f:53:cb:aa:64:57:d5:4f:94:0d:b1:cc:8e:a2: be:92:49:6c:9d:0b:4d:0f:83:45:8d:72:1f:f3:15:1a:1f:40: 2d:13:9c:23:00:5a:57:94:61:e9:50:8b:33:b1:cb:35:0f:59: b9:1b:b3:f2:93:39:7c:27:68:04:77:d3:d7:58:2b:b5:1b:c9: 12:dc:95:a4:c6:f6:ad:d2:cd:db:e1:b1:83:3c:35:1f:27:3c: 35:6a:ad:89:bf:f2:e5:a0:27:c0:2e:51:19:28:86:ea:2e:90: d6:57:d4:d2:95:51:15:7b:c8:92:ca:9b:bb:c3:af:f3:69:22: 68:d5:2e:3e:79:92:af:db:ad:90:aa:bd:21:9c:dc:c0:a5:d0: 93:ca:cb:af:60:0b:29:12:81:54:13:8f:b4:27:1a:15:60:78: 80:c3:b0:a2:ca:b1:3f:1c:b2:56:42:c7:e4:81:82:f4:be:63: d3:f2:f8:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwQjUxMTAvBgNVBAUTKDdFNjVDNThGQTM0M0ExMEM1MzQzNTBBQjQ5N0ZEMDkw Q0VFRkJGQkIwHhcNMjYwOTIxMDAwODExWhcNMjYwOTI4MDAwODExWjAYMRYwFAYD VQQDEw02YWIwNzU2Yy0xMWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+GmEXnvZHwktPtrdVen6pr6eaHD7QSTiBXisd3mYWA8bfC7YyK6hbGNYHSW 9u6REkHAPcDTHmDWKHBvSp9JrYgTDtoWZ1eEtG9GUA/SDS7gimMIsliN18XN2f1Q GLOKJWTjuQ4Qk3LqrFyS9PdL4FzDOmN28uiT1mpgLKS3EODBT/w/1C4B2e85rW4q MZjlBqJbmx9cm7vtm7ynOTOsu+CItHFxxcMOZ+rwPwkyv1rjHvbHEPonpBpKENsV uxVRSTL2ZRvdbdWiqsemzfmLDArQ0R5RenHJ2SllOmzu/wFIH+UplVtNunKRguYf Z58MYJjQpJNURlxFMnhimUgwuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7mZfhu WTP2Hv1DOF7GtejqRiScMB8GA1UdIwQYMBaAFH5lxY+jQ6EMU0NQq0l/0JDO77+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBCNS82OTQ2M0QwNENB M0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9ReFRRMUNyU1hfUWtNN3Z2 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtWEZqNk5Eb1F4VFExQ3JTWF9Ra003dnY3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBCNS82OTQ2M0QwNENBM0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9R eFRRMUNyU1hfUWtNN3Z2N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk5aM2+jTFLo/9r7N0u4IkX8ZmCqskWPNf5nQJLUrrRQPvpnFw9VIP6uM4yrY gn6yT1480lwsMTxdmcJtqGqDpwVLN24tAhUSuKyOSh9Ty6pkV9VPlA2xzI6ivpJJ bJ0LTQ+DRY1yH/MVGh9ALROcIwBaV5Rh6VCLM7HLNQ9ZuRuz8pM5fCdoBHfT11gr tRvJEtyVpMb2rdLN2+Gxgzw1Hyc8NWqtib/y5aAnwC5RGSiG6i6Q1lfU0pVRFXvI ksqbu8Ov82kiaNUuPnmSr9utkKq9IZzcwKXQk8rLr2ALKRKBVBOPtCcaFWB4gMOw osqxPxyyVkLH5IGC9L5j0/L4Ew== -----END CERTIFICATE-----Generated at Tue Sep 22 18:26:17 2026 by rpki-client