$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: OmCuCihfpFo3TTEbMIYeHWLvIjtf179LzP5j2TU4W+w= Subject key identifier: F1:44:3C:D1:B2:B6:55:78:CF:64:02:D2:A5:5C:C1:95:B5:87:86:24 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0640 Signing time: Sat 10 Oct 2026 22:58:51 +0000 Manifest this update: Sat 10 Oct 2026 22:58:50 +0000 Manifest next update: Sat 17 Oct 2026 22:58:50 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: 2W0hPHehfmr3WIBkimmWdmCGPxtRIyQFfMGeIgagEDg=) 2: CE7C5CB68D7111F199777AC57111F970.roa (hash: GfLxsqqj8OHM9JcOwSeCnw3ScXddEC0QU7of3bUAy9Y=) 3: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=) 4: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=) 5: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 22:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Oct 10 22:58:50 2026 GMT Not After : Oct 17 22:58:50 2026 GMT Subject: CN=6acac32b-b6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6f:5a:75:72:e4:8a:ba:ff:4a:b4:17:b5:5d: 39:d1:19:75:10:39:d4:b6:81:4d:28:b3:9d:75:b3: fd:db:3b:c6:95:66:7b:42:04:20:19:0d:b0:38:66: 0a:08:eb:17:6b:42:f9:fa:5c:f1:b2:f9:30:7c:f3: 55:56:44:8c:0f:20:63:e4:75:ed:86:eb:d9:4e:74: 96:b4:e1:ce:02:fc:30:c7:ea:7d:fa:4b:93:27:6a: a5:a1:3e:ab:55:b9:c3:2a:16:81:c1:bd:56:97:ec: a9:c3:eb:b5:ba:15:22:bd:fc:0f:87:27:9a:5e:11: c2:67:9d:1e:8d:0c:8b:5b:dc:62:da:a1:55:c0:a4: f8:82:e8:6f:56:4b:f1:3c:21:99:c9:c5:50:3a:99: 72:9b:7b:54:ec:e4:34:99:80:60:4f:d0:97:04:5e: ae:77:f1:6e:3c:cf:ed:53:c4:3c:9d:12:af:8e:50: 53:30:79:38:78:73:4d:81:82:45:d6:36:33:d0:d5: 45:a6:73:84:cd:25:89:86:a5:c4:8b:41:ca:6d:ab: 78:38:fd:e7:cf:cd:28:bc:b7:32:88:65:54:9f:fe: 4e:eb:27:96:d1:2e:00:c8:d6:2f:ed:7f:18:bb:ca: 4b:71:62:52:1d:c6:d7:bd:0f:e6:4e:6c:a5:4b:0d: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:44:3C:D1:B2:B6:55:78:CF:64:02:D2:A5:5C:C1:95:B5:87:86:24 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:60:19:a9:73:75:36:94:5e:62:8e:3a:6b:b8:68:83:37:b4: c8:7b:67:32:77:a8:f2:70:85:49:b0:24:40:e2:c8:51:82:66: 0a:9c:50:2b:3b:ef:06:5e:a0:78:1a:3c:8d:b9:26:47:43:e8: f3:00:90:09:ed:23:1b:4c:15:4a:1a:db:5f:a8:57:4b:23:46: 99:30:24:e8:f8:1e:79:57:90:92:dd:22:e1:53:a0:fb:ba:96: b8:19:aa:73:bd:b1:8d:52:5f:52:3e:00:d7:4b:5d:e0:3a:b3: 7c:6a:71:8a:a2:e5:50:92:d8:07:62:31:0c:4e:36:32:79:86: 85:b1:9b:d1:5b:29:e7:c9:15:35:de:85:3f:41:f9:29:f0:a6: 58:2e:f8:ba:3b:6b:8c:49:39:47:a5:36:5c:b5:65:30:e1:4a: 57:63:75:dc:e2:f0:24:4a:91:69:71:ca:a6:da:87:d7:ba:ba: 32:de:2d:2e:18:9e:c7:d7:fc:1a:d7:6c:f0:a7:9f:e8:3b:56: fc:de:83:8c:a0:49:c0:77:a6:ec:35:c0:3c:ce:bc:fb:ed:bc: 4e:ad:09:6f:97:8c:6a:dd:55:94:f8:13:aa:d1:10:c7:1c:0a: 0b:ce:6e:36:09:be:bc:df:cb:03:75:96:88:03:43:89:78:d2: fb:19:c9:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjYxMDEwMjI1ODUwWhcNMjYxMDE3MjI1ODUwWjAYMRYwFAYD VQQDEw02YWNhYzMyYi1iNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9W9adXLkirr/SrQXtV050Rl1EDnUtoFNKLOddbP92zvGlWZ7QgQgGQ2wOGYK COsXa0L5+lzxsvkwfPNVVkSMDyBj5HXthuvZTnSWtOHOAvwwx+p9+kuTJ2qloT6r VbnDKhaBwb1Wl+ypw+u1uhUivfwPhyeaXhHCZ50ejQyLW9xi2qFVwKT4guhvVkvx PCGZycVQOplym3tU7OQ0mYBgT9CXBF6ud/FuPM/tU8Q8nRKvjlBTMHk4eHNNgYJF 1jYz0NVFpnOEzSWJhqXEi0HKbat4OP3nz80ovLcyiGVUn/5O6yeW0S4AyNYv7X8Y u8pLcWJSHcbXvQ/mTmylSw3hxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFEPNGy tlV4z2QC0qVcwZW1h4YkMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQmAZqXN1NpReYo46a7hogze0yHtnMneo8nCFSbAkQOLIUYJmCpxQKzvvBl6g eBo8jbkmR0Po8wCQCe0jG0wVShrbX6hXSyNGmTAk6PgeeVeQkt0i4VOg+7qWuBmq c72xjVJfUj4A10td4DqzfGpxiqLlUJLYB2IxDE42MnmGhbGb0Vsp58kVNd6FP0H5 KfCmWC74ujtrjEk5R6U2XLVlMOFKV2N13OLwJEqRaXHKptqH17q6Mt4tLhiex9f8 Gtds8Kef6DtW/N6DjKBJwHem7DXAPM68++28Tq0Jb5eMat1VlPgTqtEQxxwKC85u Ngm+vN/LA3WWiANDiXjS+xnJ4g== -----END CERTIFICATE-----Generated at Sun Oct 11 13:52:06 2026 by rpki-client