$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft File: RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft (raw, json) Hash identifier: mQRq3uNLL5kHCfNJNi+2FyY29Ld0Fd/gYufrLzKVuDo= Subject key identifier: D9:3C:36:2D:98:25:40:CD:DF:2E:3D:BA:A0:CE:64:7F:59:C9:A8:FD Authority key identifier: 44:FB:C5:5D:CD:D2:A8:42:7D:4F:78:F8:14:04:84:A2:6E:52:77:90 Certificate issuer: /CN=A917BAC9/serialNumber=44FBC55DCDD2A8427D4F78F8140484A26E527790 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft Manifest number: 1A Signing time: Mon 21 Sep 2026 08:56:06 +0000 Manifest this update: Mon 21 Sep 2026 08:56:05 +0000 Manifest next update: Mon 28 Sep 2026 08:56:05 +0000 Files and hashes: 1: RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl (hash: czIHfqtwY3X8dBLfk8QDn9n7R3PQ6Gg3u+PZN/TyfvI=) 2: A4C79D56915C11F1B31E34186B11F970.roa (hash: txZBE76GyRH2FzSb4nahHUjabcAmRenCXZB0dWzn970=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC9, serialNumber=44FBC55DCDD2A8427D4F78F8140484A26E527790 Validity Not Before: Sep 21 08:56:05 2026 GMT Not After : Sep 28 08:56:05 2026 GMT Subject: CN=6ab0f126-2c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3e:4b:9f:58:aa:c5:83:8d:14:1b:4a:28:d3: 57:2b:48:72:ac:49:a8:4a:45:ea:6a:1e:19:fe:e2: 28:f5:9f:6f:a8:07:86:79:f1:6f:18:69:2b:77:51: e3:8d:e3:21:db:4a:b3:e0:f4:5e:b2:0e:20:82:5f: a0:05:d3:be:6d:fd:18:68:ef:b0:75:6d:47:13:7c: b4:f6:f1:d9:fc:84:d0:27:c2:b5:99:10:53:ea:92: 87:6b:17:16:2b:82:72:67:9a:d9:3d:4e:ce:b6:de: 76:25:ef:6d:8c:4f:ea:ac:d7:d9:62:27:d2:fe:d2: cd:c9:70:08:2f:4c:db:49:3a:83:42:20:cb:e6:53: 1a:da:44:04:b7:bb:f4:91:3c:3b:e9:da:94:7c:3d: 48:44:f2:2a:10:3b:a3:2e:d5:e9:5a:d1:86:4f:47: 56:6a:0c:23:95:ed:4d:e2:a9:b4:ac:6d:fb:1f:f8: d4:eb:96:25:bb:8e:67:36:6c:8f:b5:72:95:2c:fa: 8b:6c:b6:17:58:b2:30:4e:bd:47:d3:5b:07:ce:01: fe:3e:90:63:fc:71:75:22:e3:49:31:4b:87:bc:75: 7e:68:0b:a5:55:9b:18:bd:a9:3a:4a:b2:89:88:3a: c0:f6:64:a4:2e:0d:28:0e:b9:82:99:80:f7:6f:d2: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3C:36:2D:98:25:40:CD:DF:2E:3D:BA:A0:CE:64:7F:59:C9:A8:FD X509v3 Authority Key Identifier: keyid:44:FB:C5:5D:CD:D2:A8:42:7D:4F:78:F8:14:04:84:A2:6E:52:77:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f6:1e:91:e6:81:fc:25:af:03:db:79:70:78:fa:a3:65:7c: a3:f7:7b:20:39:53:cd:95:8a:c2:cb:68:e5:a4:0d:ae:2f:bb: 68:9e:bd:5a:f1:33:67:31:90:3e:06:ac:e2:bd:9a:9a:22:d3: 2b:cf:db:42:77:11:08:94:e6:0e:60:a5:8c:45:a9:7d:b7:07: 5a:95:65:3c:a1:2e:7d:9a:a0:ac:5b:5d:71:30:91:ad:f3:6a: ed:e1:d7:61:db:d7:be:0f:17:f7:e7:05:63:7b:bf:55:a3:48: fc:fd:39:a6:ee:38:7a:26:9e:c7:c4:d3:82:a9:da:c9:b4:40: 30:10:ed:07:28:a6:08:1c:3c:36:70:2b:e2:8a:c0:3d:3e:11: 9a:49:b2:53:ce:86:56:22:43:57:0f:1b:65:f8:c3:e6:cc:30: 31:55:76:be:ac:8f:62:90:90:f0:9d:1f:cd:fb:79:31:38:b0: 4d:61:d5:61:24:2a:67:4e:63:0a:15:84:55:dd:8f:e6:c5:4e: c4:cb:f1:66:da:25:6b:55:39:db:8d:f6:e2:35:44:44:c8:fd: e3:04:09:3a:3e:2b:a6:f8:78:98:3f:7b:9e:81:33:3d:cc:6c: 82:b2:f4:53:98:e0:23:78:50:af:2b:65:81:f9:61:64:3e:42: 91:db:5a:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkFDOTExMC8GA1UEBRMoNDRGQkM1NURDREQyQTg0MjdENEY3OEY4MTQwNDg0QTI2 RTUyNzc5MDAeFw0yNjA5MjEwODU2MDVaFw0yNjA5MjgwODU2MDVaMBgxFjAUBgNV BAMTDTZhYjBmMTI2LTJjMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXPkufWKrFg40UG0oo01crSHKsSahKRepqHhn+4ij1n2+oB4Z58W8YaSt3UeON 4yHbSrPg9F6yDiCCX6AF075t/Rho77B1bUcTfLT28dn8hNAnwrWZEFPqkodrFxYr gnJnmtk9Ts623nYl722MT+qs19liJ9L+0s3JcAgvTNtJOoNCIMvmUxraRAS3u/SR PDvp2pR8PUhE8ioQO6Mu1ela0YZPR1ZqDCOV7U3iqbSsbfsf+NTrliW7jmc2bI+1 cpUs+otsthdYsjBOvUfTWwfOAf4+kGP8cXUi40kxS4e8dX5oC6VVmxi9qTpKsomI OsD2ZKQuDSgOuYKZgPdv0hDPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2Tw2LZgl QM3fLj26oM5kf1nJqP0wHwYDVR0jBBgwFoAURPvFXc3SqEJ9T3j4FASEom5Sd5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQUM5LzhFQjZFNUFDOTE1 ODExRjE4NjBFN0Y0NTZBMTFGOTcwL1JQdkZYYzNTcUVKOVQzajRGQVNFb201U2Q1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlB2RlhjM1NxRUo5VDNqNEZBU0VvbTVTZDVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QUM5LzhFQjZFNUFDOTE1ODExRjE4NjBFN0Y0NTZBMTFGOTcwL1JQdkZYYzNTcUVK OVQzajRGQVNFb201U2Q1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA69h6R5oH8Ja8D23lwePqjZXyj93sgOVPNlYrCy2jlpA2uL7tonr1a8TNnMZA+ BqzivZqaItMrz9tCdxEIlOYOYKWMRal9twdalWU8oS59mqCsW11xMJGt82rt4ddh 29e+Dxf35wVje79Vo0j8/Tmm7jh6Jp7HxNOCqdrJtEAwEO0HKKYIHDw2cCviisA9 PhGaSbJTzoZWIkNXDxtl+MPmzDAxVXa+rI9ikJDwnR/N+3kxOLBNYdVhJCpnTmMK FYRV3Y/mxU7Ey/Fm2iVrVTnbjfbiNUREyP3jBAk6Pium+HiYP3uegTM9zGyCsvRT mOAjeFCvK2WB+WFkPkKR21qh -----END CERTIFICATE-----Generated at Tue Sep 22 19:52:50 2026 by rpki-client