$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: MCC+2dl5gTqL3uCtJtYnYCyW3JtDIslWEJRwkoxygFU= Subject key identifier: 51:09:BA:5C:AE:7B:0C:79:EE:B0:97:C7:3E:F1:A2:B9:7C:9C:BA:70 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 3624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 35D3 Signing time: Mon 28 Sep 2026 14:46:05 +0000 Manifest this update: Mon 28 Sep 2026 14:46:04 +0000 Manifest next update: Mon 05 Oct 2026 14:46:04 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: xqC13mRGtp1FAe5GrQAXdaCHQKBXDbguujmrpXEyhVY=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: reaXyWDA2ljuxsntm0i6DnDHoaBzJzPoCC4N+GYDna4=) 3: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: qc7dfpxoyaWy9hmAOoxHUqM2HrHxDCq2dYCwFXa7BDs=) 4: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: 4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13860 (0x3624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Sep 28 14:46:04 2026 GMT Not After : Oct 5 14:46:04 2026 GMT Subject: CN=6aba7dac-a818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:de:b7:a2:58:67:32:f0:44:7d:74:e5:d2: c9:dc:69:ae:a9:c8:df:e5:f9:28:35:7f:18:52:46: d6:53:3b:b2:86:64:31:45:22:f1:ca:c1:58:ad:f6: 45:cd:d2:3e:7f:0f:38:b3:42:2e:29:29:e8:ae:df: 2d:d0:01:b8:49:02:43:49:66:11:c7:b5:a9:70:6a: f4:c0:3a:cd:fb:a0:5b:4d:14:5a:f1:36:4d:ba:b0: d5:07:66:8b:e2:ec:5e:ea:32:41:7a:73:10:9b:23: 46:91:89:06:38:81:cb:a9:95:4c:df:68:3f:c9:d9: ad:29:65:8e:46:8d:81:84:9a:58:a1:48:8f:ee:39: 87:11:8e:8b:ac:ce:99:a6:5a:7c:f0:1a:25:77:f7: 19:7c:63:b6:20:ed:0a:09:52:81:1c:97:15:4e:59: 86:5c:23:34:b3:e3:60:d0:48:8c:03:af:d5:be:a5: 41:20:f4:1e:3a:d7:79:c7:18:1b:87:d5:a5:f5:3d: b3:aa:2d:0b:e4:a1:ef:1c:8a:35:b2:e3:40:b4:37: 2c:ab:5e:5b:e1:0d:39:55:8f:e4:ab:18:44:bc:da: d4:f4:66:45:7e:f4:31:b9:0b:14:c6:3f:9f:1b:e0: 35:84:be:65:b4:46:6b:26:42:9d:84:28:0e:2f:5f: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:09:BA:5C:AE:7B:0C:79:EE:B0:97:C7:3E:F1:A2:B9:7C:9C:BA:70 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d8:22:49:f2:36:32:b6:bc:70:c0:e1:54:fa:f4:d5:93:3c: c6:11:de:16:97:70:87:f1:a1:bc:3b:ac:00:3c:17:a0:e6:d1: 77:54:b0:c2:da:04:b1:13:b4:94:e5:d4:6e:5b:03:a0:e2:91: ed:7d:98:80:af:20:6e:ac:50:48:1e:cf:af:68:fe:3b:97:51: 4f:1f:b8:92:5d:78:ef:81:63:c5:6b:4c:84:aa:1f:d7:c0:d0: eb:13:90:83:18:cb:3a:23:14:9a:a0:cd:d7:6d:ac:fb:69:93: ea:ee:2f:01:0a:55:0c:c8:9f:25:ff:93:3b:d7:27:e4:af:f9: 41:5f:9a:c9:01:5d:d3:cd:be:10:16:cb:89:d9:e4:cd:f0:9f: 0b:73:78:b4:4d:0b:fe:19:92:b4:aa:e2:73:3d:b9:39:26:81: 86:25:af:c5:a3:4d:fb:9b:29:1a:d2:40:f7:af:1d:f8:55:df: 55:ad:d7:32:dd:6a:62:05:c6:cc:a6:31:46:53:1f:0f:c9:61: 42:40:3c:ff:07:7a:be:ac:a8:a2:bc:65:2a:72:48:f1:ee:5a: 18:46:b5:8f:27:88:56:ba:59:ec:e0:43:a6:35:eb:85:29:fc: a9:8a:51:52:31:52:af:a1:9e:62:8f:dd:b4:13:89:de:74:61: 5d:a1:f1:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjYwOTI4MTQ0NjA0WhcNMjYxMDA1MTQ0NjA0WjAYMRYwFAYD VQQDEw02YWJhN2RhYy1hODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KLet6JYZzLwRH105dLJ3Gmuqcjf5fkoNX8YUkbWUzuyhmQxRSLxysFYrfZF zdI+fw84s0IuKSnort8t0AG4SQJDSWYRx7WpcGr0wDrN+6BbTRRa8TZNurDVB2aL 4uxe6jJBenMQmyNGkYkGOIHLqZVM32g/ydmtKWWORo2BhJpYoUiP7jmHEY6LrM6Z plp88Bold/cZfGO2IO0KCVKBHJcVTlmGXCM0s+Ng0EiMA6/VvqVBIPQeOtd5xxgb h9Wl9T2zqi0L5KHvHIo1suNAtDcsq15b4Q05VY/kqxhEvNrU9GZFfvQxuQsUxj+f G+A1hL5ltEZrJkKdhCgOL183lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEJulyu ewx57rCXxz7xorl8nLpwMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQdgiSfI2Mra8cMDhVPr01ZM8xhHeFpdwh/GhvDusADwXoObRd1SwwtoEsRO0 lOXUblsDoOKR7X2YgK8gbqxQSB7Pr2j+O5dRTx+4kl1474FjxWtMhKof18DQ6xOQ gxjLOiMUmqDN122s+2mT6u4vAQpVDMifJf+TO9cn5K/5QV+ayQFd082+EBbLidnk zfCfC3N4tE0L/hmStKricz25OSaBhiWvxaNN+5spGtJA968d+FXfVa3XMt1qYgXG zKYxRlMfD8lhQkA8/wd6vqyoorxlKnJI8e5aGEa1jyeIVrpZ7OBDpjXrhSn8qYpR UjFSr6GeYo/dtBOJ3nRhXaHxZw== -----END CERTIFICATE-----Generated at Mon Sep 28 18:43:41 2026 by rpki-client