$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: C/kHo2WXrZSt9OrBHUnawIVm3YUzmDxNRiK6jKbXDbk= Subject key identifier: 4B:4E:77:BC:9F:D2:4B:28:91:33:44:3E:B1:58:EF:E8:E8:8C:C9:62 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 0992 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 097F Signing time: Sun 20 Sep 2026 19:58:32 +0000 Manifest this update: Sun 20 Sep 2026 19:58:32 +0000 Manifest next update: Sun 27 Sep 2026 19:58:32 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: d8gfWM0Q7DAfDM+cZjqk+I8mb5+y8MRopWm/nGB8GK8=) 2: 2636893049C611F1A0494403A4833773.roa (hash: LbI/zXwrZvEy2m8RCRFUKgZJykGAWt1/GiJpmBz1/G0=) 3: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2450 (0x992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Sep 20 19:58:32 2026 GMT Not After : Sep 27 19:58:32 2026 GMT Subject: CN=6ab03ae8-9086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:cb:de:c9:c3:a2:9e:2e:2b:f6:72:19:92: 84:0a:1c:f8:16:8c:9d:6a:d3:e5:9b:b3:93:f5:78: 56:d4:d5:c1:b0:af:50:35:9b:18:a8:47:ce:45:cd: a4:2f:d8:78:db:ee:0b:5f:af:06:20:55:ee:37:e8: f8:49:18:74:7a:fe:dc:d4:8b:a1:df:07:51:17:d6: e9:06:19:fb:66:69:d2:ea:f8:6b:eb:83:c0:47:57: 19:89:2d:c5:2d:79:f2:77:d0:f2:79:82:b6:78:21: 0e:fb:f7:78:19:fc:00:d3:2b:85:44:e1:86:4e:23: 45:f4:31:98:9b:f8:f0:e1:ab:e3:f3:47:87:00:b6: 6e:46:2f:dc:c3:f9:c2:a0:9f:1e:79:e4:3d:f5:7f: 98:cb:8f:86:25:c0:c6:03:e9:54:26:30:d4:ca:e0: c6:90:30:b4:fa:2d:c8:d2:e2:93:46:43:91:cb:3c: e3:57:62:40:bb:cb:1f:09:7d:86:39:6e:5e:69:c9: b2:e7:23:d7:5e:5d:b6:42:20:1e:c2:34:a0:40:6b: 85:6d:46:4e:da:03:98:8e:00:d0:33:63:33:7d:4c: fb:b4:64:ff:02:ea:d3:59:87:05:bc:79:f3:27:33: b4:9d:45:66:c9:5c:3a:21:ca:e2:72:2d:b6:f7:1e: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:77:BC:9F:D2:4B:28:91:33:44:3E:B1:58:EF:E8:E8:8C:C9:62 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:50:f9:8b:50:69:c2:06:f3:fc:7e:5b:c5:29:a5:42:69:2a: d2:c6:20:ff:a9:12:2b:fc:ed:44:1a:15:47:16:e5:db:55:1e: be:4c:58:7b:7f:73:d9:56:12:bf:a7:29:cc:4f:10:fe:94:91: 9a:0e:aa:ae:c8:d3:c7:c1:46:68:66:37:01:62:3a:67:d3:c8: a7:1a:59:f5:e6:c0:4c:d0:03:c8:cf:41:f3:0c:6c:7d:bd:72: ba:64:c1:65:0a:e4:d1:2a:11:8b:84:3d:6a:17:3b:34:d4:37: 09:93:ae:4f:b0:7e:4a:bd:d5:dc:b6:8a:14:34:13:5d:4c:c1: 73:40:96:c3:88:16:9e:d9:aa:c7:27:97:4a:ab:5d:80:56:bd: 8f:2d:ed:57:86:5c:40:f1:98:6d:f2:ec:57:00:01:69:7e:c9: 53:ee:d2:87:1d:9d:19:af:0c:86:6c:81:4b:f7:ce:c1:d6:01: 03:e9:32:dd:ec:52:5d:1c:3f:37:71:f2:e4:96:a5:99:c8:f1: 05:bd:d4:77:3f:72:8d:83:37:5c:1c:61:f0:70:bf:71:a0:25: 10:d7:08:cd:36:1e:de:df:47:0c:fb:7d:c4:cb:2f:39:41:9c: 27:ff:1d:2b:cf:c6:9c:21:6d:27:fa:fa:e6:bb:b6:e6:5c:25: da:90:36:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjYwOTIwMTk1ODMyWhcNMjYwOTI3MTk1ODMyWjAYMRYwFAYD VQQDEw02YWIwM2FlOC05MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbnL3snDop4uK/ZyGZKEChz4FoydatPlm7OT9XhW1NXBsK9QNZsYqEfORc2k L9h42+4LX68GIFXuN+j4SRh0ev7c1Iuh3wdRF9bpBhn7ZmnS6vhr64PAR1cZiS3F LXnyd9DyeYK2eCEO+/d4GfwA0yuFROGGTiNF9DGYm/jw4avj80eHALZuRi/cw/nC oJ8eeeQ99X+Yy4+GJcDGA+lUJjDUyuDGkDC0+i3I0uKTRkORyzzjV2JAu8sfCX2G OW5eacmy5yPXXl22QiAewjSgQGuFbUZO2gOYjgDQM2MzfUz7tGT/AurTWYcFvHnz JzO0nUVmyVw6Icrici229x4EGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtOd7yf 0ksokTNEPrFY7+jojMliMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtlD5i1Bpwgbz/H5bxSmlQmkq0sYg/6kSK/ztRBoVRxbl21UevkxYe39z2VYS v6cpzE8Q/pSRmg6qrsjTx8FGaGY3AWI6Z9PIpxpZ9ebATNADyM9B8wxsfb1yumTB ZQrk0SoRi4Q9ahc7NNQ3CZOuT7B+Sr3V3LaKFDQTXUzBc0CWw4gWntmqxyeXSqtd gFa9jy3tV4ZcQPGYbfLsVwABaX7JU+7Shx2dGa8MhmyBS/fOwdYBA+ky3exSXRw/ N3Hy5JalmcjxBb3Udz9yjYM3XBxh8HC/caAlENcIzTYe3t9HDPt9xMsvOUGcJ/8d K8/GnCFtJ/r65ru25lwl2pA2pw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:36:59 2026 by rpki-client