$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: IX1U475aCuUW0LLXjBFWz+WInBAWSueLt0UL4btdj0Q= Subject key identifier: 27:CA:1F:B6:AE:F4:8D:62:6B:C8:2F:8A:52:95:E3:E5:10:86:E6:A6 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 03CD Signing time: Mon 21 Sep 2026 00:21:36 +0000 Manifest this update: Mon 21 Sep 2026 00:21:35 +0000 Manifest next update: Mon 28 Sep 2026 00:21:35 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: kmlzETfkGCkaV3zUBLOPKUUgifV5qhuqAZ/TgKlBr9o=) 2: 585DC828A2EB11F1B8CE2B844A11F970.roa (hash: YGgsb1w7jArLrmGgXNJ/wg9e0SOlAFlVMyebYaZXBLo=) 3: 74B133CAA2EB11F1AFE949014B11F970.roa (hash: jpsmNAeJXm9/rS9zpwSK8/DCHkzoASRFsnVivNpp/hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Sep 21 00:21:35 2026 GMT Not After : Sep 28 00:21:35 2026 GMT Subject: CN=6ab0788f-c11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:3a:55:d7:c1:c4:f8:da:a3:4c:40:fa:25: c1:c8:0b:c1:7a:01:2f:4f:b4:b2:d6:38:22:45:36: 9f:dc:4d:76:1f:ce:fe:e2:17:b8:72:b1:de:e8:d3: 1e:e4:75:a5:d0:75:03:ea:58:0c:ee:49:83:b2:19: 60:b0:02:5d:6e:5e:59:83:6f:6e:b4:90:7e:df:09: 41:1c:15:42:05:86:35:d4:2a:70:d7:14:58:2f:fc: c2:56:83:a1:1a:96:46:ea:11:8f:57:24:12:cd:d5: 61:53:a7:40:f9:25:ff:8f:16:7a:58:5f:aa:fc:71: be:48:63:6e:85:a0:c2:d9:54:c1:b6:57:18:df:20: ce:a0:13:00:92:5a:29:a7:52:ac:6d:bb:45:2d:d0: 77:28:0d:8e:72:ae:1e:27:bb:a0:3f:7f:42:82:25: 63:e1:f9:1d:15:36:84:a5:89:96:27:90:a4:a3:81: 49:62:dd:ca:af:c3:81:69:63:f0:1a:43:cc:72:de: b0:7e:e1:84:02:e2:61:22:92:f6:42:1a:fb:9a:6c: 07:74:0c:44:46:27:28:c5:6a:81:f3:f8:db:09:17: 48:59:1d:b3:84:a5:bd:3a:3b:65:6a:14:31:ed:20: d1:6e:cd:c9:53:7f:f7:f8:7b:d8:ea:fb:5c:ab:c5: 8f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CA:1F:B6:AE:F4:8D:62:6B:C8:2F:8A:52:95:E3:E5:10:86:E6:A6 X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:06:fd:b4:37:fa:4f:54:6c:ce:3d:8e:8b:86:e5:ef:5e:ac: 36:d7:3f:e1:9b:5d:48:53:c7:e3:e7:1c:25:46:2c:2d:77:bf: 7f:5f:dc:bf:07:2c:bc:9f:4c:be:29:df:41:a4:d7:62:74:79: 58:2d:88:4d:0a:4e:bc:ac:76:f7:7e:ae:c3:3e:83:b8:62:d5: 72:a2:69:fe:90:a3:6b:02:fd:2d:2b:6c:e8:c6:9a:5a:41:d9: f7:11:a0:9a:a0:29:41:bb:71:cf:fa:f2:13:6b:83:d2:7a:ae: d0:f6:f1:31:74:c5:19:3a:31:dc:bf:6c:1e:43:14:4c:de:84: 8f:03:83:38:3c:86:14:43:13:25:5d:07:bc:e6:5a:40:e6:35: e3:f5:bc:c3:67:d9:91:f4:ea:4c:7a:dc:79:79:b3:2e:20:ce: fd:b1:d2:ed:f7:d1:7c:93:62:c4:15:52:bf:c3:06:45:89:5b: 4f:0d:cb:02:c3:3c:df:0d:75:10:48:1e:51:36:6b:4e:a8:23: f0:bc:2b:2d:56:ef:4d:44:5e:f2:17:91:00:a3:c1:3f:ed:f5: ed:2a:88:b1:9f:45:2b:1a:50:b1:8c:f3:70:ad:aa:b0:80:84: d8:52:5d:f5:2a:5d:2f:7f:da:6e:11:57:3d:1a:99:fc:e4:9a: 2a:6e:84:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjYwOTIxMDAyMTM1WhcNMjYwOTI4MDAyMTM1WjAYMRYwFAYD VQQDEw02YWIwNzg4Zi1jMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVo6VdfBxPjao0xA+iXByAvBegEvT7Sy1jgiRTaf3E12H87+4he4crHe6NMe 5HWl0HUD6lgM7kmDshlgsAJdbl5Zg29utJB+3wlBHBVCBYY11Cpw1xRYL/zCVoOh GpZG6hGPVyQSzdVhU6dA+SX/jxZ6WF+q/HG+SGNuhaDC2VTBtlcY3yDOoBMAklop p1KsbbtFLdB3KA2Ocq4eJ7ugP39CgiVj4fkdFTaEpYmWJ5Cko4FJYt3Kr8OBaWPw GkPMct6wfuGEAuJhIpL2Qhr7mmwHdAxERicoxWqB8/jbCRdIWR2zhKW9OjtlahQx 7SDRbs3JU3/3+HvY6vtcq8WPywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfKH7au 9I1ia8gvilKV4+UQhuamMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQb9tDf6T1Rszj2Oi4bl716sNtc/4ZtdSFPH4+ccJUYsLXe/f1/cvwcsvJ9M vinfQaTXYnR5WC2ITQpOvKx2936uwz6DuGLVcqJp/pCjawL9LSts6MaaWkHZ9xGg mqApQbtxz/ryE2uD0nqu0PbxMXTFGTox3L9sHkMUTN6EjwODODyGFEMTJV0HvOZa QOY14/W8w2fZkfTqTHrceXmzLiDO/bHS7ffRfJNixBVSv8MGRYlbTw3LAsM83w11 EEgeUTZrTqgj8LwrLVbvTURe8heRAKPBP+317SqIsZ9FKxpQsYzzcK2qsICE2FJd 9SpdL3/abhFXPRqZ/OSaKm6Evg== -----END CERTIFICATE-----Generated at Tue Sep 22 00:43:27 2026 by rpki-client