$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: 4hKIWq8jJw/kYC0+pRysefIRy4ExLl1j/BgX4sOj3ls= Subject key identifier: 1A:49:8B:6F:46:41:B0:34:37:6B:58:50:55:D9:15:7B:31:D4:AF:1F Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 098A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0954 Signing time: Sun 20 Sep 2026 14:44:23 +0000 Manifest this update: Sun 20 Sep 2026 14:44:22 +0000 Manifest next update: Sun 27 Sep 2026 14:44:22 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: 6IdsDKi/x/63wv1P8jSQWLoq9czhovyeA2qnFkIA/H8=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: TJX/2z4AnWBNVG5vc+6iQbCnon+csxAc9hGSLvA14T4=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2442 (0x98a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Sep 20 14:44:22 2026 GMT Not After : Sep 27 14:44:22 2026 GMT Subject: CN=6aaff147-2135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:ca:16:8d:75:2b:e5:ca:9f:6b:f1:bb:a7: 90:24:61:30:b4:8a:99:7c:f6:2e:43:06:0f:c8:52: 83:5d:47:99:aa:94:af:cf:48:00:05:32:97:76:14: 95:60:2e:69:f0:4c:28:c0:ea:b6:ee:e9:1e:d2:74: d4:18:22:e4:bc:89:62:5f:34:02:af:5d:d8:1a:6c: 93:1f:9d:5f:00:31:59:04:d0:c4:61:b8:c5:cf:2f: ff:5a:79:25:19:f5:f6:c7:a0:84:4c:96:cf:e2:a4: 19:a1:88:6e:bd:3d:76:a9:09:58:09:30:a6:b8:be: a2:7e:a6:0b:c8:68:35:c4:67:fd:c1:54:aa:d7:ce: 0b:dd:99:6b:36:68:d4:8d:90:0f:65:dd:d9:9c:35: a4:99:5d:60:c7:d1:d6:64:50:71:36:2b:eb:e1:72: fc:79:58:6c:84:c2:f6:f3:f7:66:fe:08:20:3a:40: 1f:af:27:59:cd:83:61:f7:6b:92:94:60:3a:17:b8: 65:9e:9f:bc:15:1a:ee:4b:a3:7c:1f:f0:cd:9d:c7: c9:fe:7f:de:c5:9e:9f:da:af:f7:7a:d9:18:af:73: 6b:a7:a4:0d:58:fa:bb:ab:80:2b:a1:13:b4:d1:be: 9f:ed:7b:53:b1:59:1c:e4:ca:f7:7a:53:e4:e8:53: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:49:8B:6F:46:41:B0:34:37:6B:58:50:55:D9:15:7B:31:D4:AF:1F X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:59:94:14:29:bc:69:54:29:ba:42:33:bd:57:c1:bf:87:c0: da:9f:d0:c8:94:f0:72:56:42:01:4a:81:59:3f:8c:c0:ec:c5: d4:22:73:93:7d:5b:90:03:d9:81:bd:93:c0:5f:2a:43:e7:7f: 10:59:ee:48:7d:ec:a0:c9:c8:da:f8:67:62:f3:5d:8a:0a:be: 00:dd:df:c4:37:b2:79:81:60:c5:67:31:0e:db:dc:de:32:e9: c4:cb:31:92:53:7f:38:cf:31:13:95:10:b8:ce:94:89:c4:dc: 76:db:24:fb:6d:1a:e5:13:84:49:43:40:e0:b5:79:7a:31:7a: 7c:aa:94:7b:40:46:2f:72:71:ba:22:91:27:62:33:8d:7b:d6: e7:d4:01:48:0f:d6:60:c8:ec:c4:2e:52:39:25:4f:99:3d:58: a9:2e:19:24:ae:3e:c1:ea:cb:ef:83:78:69:ea:aa:1d:67:f9: 64:f1:9b:a3:67:5b:71:de:3a:2a:39:0a:44:03:16:f3:24:3d: dc:b2:01:d5:af:e5:03:af:ad:60:42:5f:05:8d:dc:26:f5:33: 52:eb:8e:8c:5c:53:eb:a0:5d:5b:a5:7a:a2:27:93:68:63:c0: fb:e4:0d:e0:c6:eb:92:b7:2d:b4:a8:74:90:b3:23:a6:f2:35: ab:41:25:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwOTIwMTQ0NDIyWhcNMjYwOTI3MTQ0NDIyWjAYMRYwFAYD VQQDEw02YWFmZjE0Ny0yMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkrKFo11K+XKn2vxu6eQJGEwtIqZfPYuQwYPyFKDXUeZqpSvz0gABTKXdhSV YC5p8EwowOq27uke0nTUGCLkvIliXzQCr13YGmyTH51fADFZBNDEYbjFzy//Wnkl GfX2x6CETJbP4qQZoYhuvT12qQlYCTCmuL6ifqYLyGg1xGf9wVSq184L3ZlrNmjU jZAPZd3ZnDWkmV1gx9HWZFBxNivr4XL8eVhshML28/dm/gggOkAfrydZzYNh92uS lGA6F7hlnp+8FRruS6N8H/DNncfJ/n/exZ6f2q/3etkYr3Nrp6QNWPq7q4AroRO0 0b6f7XtTsVkc5Mr3elPk6FPlBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpJi29G QbA0N2tYUFXZFXsx1K8fMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzFmUFCm8aVQpukIzvVfBv4fA2p/QyJTwclZCAUqBWT+MwOzF1CJzk31bkAPZ gb2TwF8qQ+d/EFnuSH3soMnI2vhnYvNdigq+AN3fxDeyeYFgxWcxDtvc3jLpxMsx klN/OM8xE5UQuM6UicTcdtsk+20a5ROESUNA4LV5ejF6fKqUe0BGL3JxuiKRJ2Iz jXvW59QBSA/WYMjsxC5SOSVPmT1YqS4ZJK4+werL74N4aeqqHWf5ZPGbo2dbcd46 KjkKRAMW8yQ93LIB1a/lA6+tYEJfBY3cJvUzUuuOjFxT66BdW6V6oieTaGPA++QN 4MbrkrcttKh0kLMjpvI1q0ElgA== -----END CERTIFICATE-----Generated at Sun Sep 20 17:57:45 2026 by rpki-client