$ rpki-client -vvvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: ns9bY/nDBoRufhvham5LRfj1fiNee5Ca5AGo5EWWxvE= Subject key identifier: DB:06:F8:B3:0F:78:91:EF:D3:8B:D7:11:77:CB:FA:B9:18:3A:0B:66 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1DA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1D2C Signing time: Tue 22 Sep 2026 16:07:40 +0000 Manifest this update: Tue 22 Sep 2026 16:07:39 +0000 Manifest next update: Tue 29 Sep 2026 16:07:39 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: OwVvl9lDYo/F1OGKtRcqOXDTopO0f2CKhF7gkFszvuI=) 2: 0754E1A6115411F19A223E75263D8C67.roa (hash: 55PFz+vUv71kKeDh846cKzQorrEytg+Lp9t2MnqHd5c=) 3: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: yFCKbTM4ZsRv87Y6Zagp1QstakU7qHyCQABhJGTJ82A=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: Up9Voxo6f5gLlI/IfXH3StiM4EBdfHVFloNHgcadWBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7593 (0x1da9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Sep 22 16:07:39 2026 GMT Not After : Sep 29 16:07:39 2026 GMT Subject: CN=6ab2a7cb-7fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:8e:76:e9:85:47:65:95:9e:07:76:93:6b: cd:b2:a2:2f:ef:88:06:51:99:15:51:0d:b0:34:a2: 31:bf:84:48:95:82:f5:17:17:47:d5:c2:6a:6c:96: 12:e4:57:51:27:c6:eb:13:27:61:4d:e5:ed:84:a4: d4:e4:43:97:1d:b4:55:d5:ba:40:8d:a9:78:e5:a7: 91:10:c8:e0:5f:b8:98:3a:ad:02:59:c7:04:fb:9d: 44:12:8e:95:60:47:0a:8d:80:d6:b7:ea:42:6c:73: 93:66:17:d3:9e:bb:e4:80:5d:b2:b6:74:0c:9f:71: 2b:ca:34:d0:c1:4e:f9:69:fa:b3:bc:63:43:b0:59: 67:a5:7f:c9:bd:e2:52:8f:61:1b:49:2d:b5:19:71: 38:30:b8:00:ed:3e:59:97:dc:e9:f2:f1:15:49:8c: 71:bd:8a:a0:70:49:0f:25:e8:39:d4:a1:9c:45:ac: ec:73:ac:02:d1:74:d8:83:c1:e9:e6:89:b6:71:0a: 87:3a:6a:8a:bd:de:e5:9a:36:0f:bc:bc:91:29:c6: a7:29:03:6e:32:ab:88:3b:ae:90:d6:56:68:51:67: 54:24:81:1c:19:2f:4b:80:c7:06:5d:11:b8:0b:ec: e5:70:31:ce:62:b1:6e:76:6b:b2:9a:69:8e:1e:51: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:06:F8:B3:0F:78:91:EF:D3:8B:D7:11:77:CB:FA:B9:18:3A:0B:66 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:47:e2:ac:21:f1:c6:f8:96:27:73:19:b7:7e:3a:78:7c:eb: e3:da:a8:da:64:1a:0a:0c:f9:4d:31:ac:a7:b8:6b:09:53:a8: a2:ec:2b:b4:b9:f9:4a:dc:2d:42:33:ff:71:a4:f8:2f:bf:53: b7:69:21:63:0c:cf:0f:c6:4c:2f:1e:b6:f3:c1:80:3d:40:ed: e2:a7:a7:90:b7:3c:7d:a1:e6:ea:bf:1a:92:80:e1:3d:ab:1c: 5b:32:d7:f3:8f:c4:fa:cc:78:04:7c:ee:f1:8b:59:6f:be:6c: 0a:6b:47:33:55:1f:c8:e8:a9:49:d2:d4:91:b4:86:95:86:73: 62:1f:2f:e5:65:5a:13:dc:e4:b9:cf:fa:f2:3b:c1:32:8a:39: e7:eb:bd:06:d1:4b:24:f2:b7:8b:83:a7:81:4c:1c:68:c3:88: 4f:3e:e7:49:36:5f:c4:c4:96:f3:a7:ad:a1:50:ad:71:3d:42: 14:36:ad:95:62:ca:f8:8f:e7:aa:ce:f3:f9:0c:fd:89:b0:0b: 3b:a4:57:92:9e:a1:47:97:3d:ed:e2:94:fe:c2:2d:a9:c8:80: eb:95:68:8b:22:57:80:77:47:cc:64:a6:a8:47:89:f4:5e:4c: 71:03:fb:46:31:b6:99:35:2d:9c:9a:fd:24:f8:48:3a:9c:6b: b4:07:66:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjYwOTIyMTYwNzM5WhcNMjYwOTI5MTYwNzM5WjAYMRYwFAYD VQQDEw02YWIyYTdjYi03ZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCKOdumFR2WVngd2k2vNsqIv74gGUZkVUQ2wNKIxv4RIlYL1FxdH1cJqbJYS 5FdRJ8brEydhTeXthKTU5EOXHbRV1bpAjal45aeREMjgX7iYOq0CWccE+51EEo6V YEcKjYDWt+pCbHOTZhfTnrvkgF2ytnQMn3EryjTQwU75afqzvGNDsFlnpX/JveJS j2EbSS21GXE4MLgA7T5Zl9zp8vEVSYxxvYqgcEkPJeg51KGcRazsc6wC0XTYg8Hp 5om2cQqHOmqKvd7lmjYPvLyRKcanKQNuMquIO66Q1lZoUWdUJIEcGS9LgMcGXRG4 C+zlcDHOYrFudmuymmmOHlGdnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsG+LMP eJHv04vXEXfL+rkYOgtmMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALkfirCHxxviWJ3MZt346eHzr49qo2mQaCgz5TTGsp7hrCVOoouwrtLn5Stwt QjP/caT4L79Tt2khYwzPD8ZMLx6288GAPUDt4qenkLc8faHm6r8akoDhPascWzLX 84/E+sx4BHzu8YtZb75sCmtHM1UfyOipSdLUkbSGlYZzYh8v5WVaE9zkuc/68jvB Moo55+u9BtFLJPK3i4OngUwcaMOITz7nSTZfxMSW86etoVCtcT1CFDatlWLK+I/n qs7z+Qz9ibALO6RXkp6hR5c97eKU/sItqciA65VoiyJXgHdHzGSmqEeJ9F5McQP7 RjG2mTUtnJr9JPhIOpxrtAdmzQ== -----END CERTIFICATE-----Generated at Tue Sep 22 19:38:14 2026 by rpki-client