$ rpki-client -vvvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: 8Y9mMF+WzeUCqbDxfy9malm0zg0GCzXtZhiXJiMCT+0= Subject key identifier: FE:82:F6:3C:2B:B5:2C:91:F1:C6:91:24:F4:1C:0A:2D:67:3E:B9:B4 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 1862 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 1838 Signing time: Sun 20 Sep 2026 16:29:10 +0000 Manifest this update: Sun 20 Sep 2026 16:29:10 +0000 Manifest next update: Sun 27 Sep 2026 16:29:10 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: 3Ls0eMyGK3waweg5YIbAZgfCpgKnOxnmoAwUJ2ewbM8=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: We6jmeEEyT0HEMr/GY7jQ9dR91pmG5jYjCWmk5TFv3Q=) 3: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: G7CUtd3m+KDiwG1MCgyxY5Ml5ZuJVANVfOkXBqSh68I=) 4: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: 5RREE6T02f31QWKKvKnKTP9nUut80+i9xP6eu2x6Dn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6242 (0x1862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Sep 20 16:29:10 2026 GMT Not After : Sep 27 16:29:10 2026 GMT Subject: CN=6ab009d6-26e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:de:35:b9:52:76:15:e6:83:7c:be:6b:3f:e9: 46:28:a6:41:ab:91:2a:65:2d:3e:27:d2:f6:2f:58: 31:32:1f:8e:b0:cf:b0:72:c5:3c:1e:0f:b0:1d:6b: a3:5b:5d:cf:a8:30:51:71:17:d3:d4:6c:39:88:a6: 1f:91:db:a0:ac:6e:5c:7e:94:45:1b:17:04:07:0f: 7c:c3:cc:8e:0b:1a:98:75:58:e4:93:b2:34:3d:2e: 4c:14:19:36:84:86:47:da:f9:8e:62:8b:61:e9:19: 7d:03:92:49:e9:54:39:bf:09:b0:40:c6:91:03:5f: 6d:e9:47:54:75:bd:9c:3e:23:5a:12:45:68:64:df: 27:af:0e:ba:96:1e:cf:af:67:ea:2e:e6:b9:d0:56: 69:e0:d6:72:71:9d:dd:d7:36:46:2e:78:e4:aa:25: df:3b:72:69:54:f5:8c:80:42:43:33:02:cc:16:cb: 04:3e:21:cb:08:fd:4b:c8:64:ae:8c:f2:eb:c8:e5: 10:26:d9:51:00:91:6d:4a:e0:5f:48:03:14:96:fc: ac:05:32:13:dd:b9:8c:55:94:92:06:f6:20:4f:75: b4:50:54:8b:d1:e7:d4:ee:a4:fd:37:db:88:51:2d: 35:0c:63:d4:8f:fd:26:7d:77:d4:ae:b0:bb:77:3d: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:82:F6:3C:2B:B5:2C:91:F1:C6:91:24:F4:1C:0A:2D:67:3E:B9:B4 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b3:d0:f0:7f:f9:85:40:19:70:f8:6e:cc:95:45:2b:a7:8f: 18:65:f3:c2:76:73:38:f3:18:1f:8b:a3:c7:fd:33:05:ef:73: 19:ca:a5:ca:89:52:2a:46:44:32:bf:88:4e:ec:4a:08:93:35: 4e:d1:f2:4b:80:f1:28:0b:b4:1a:0f:23:82:f7:21:97:85:f1: 33:07:21:9e:b8:4a:a5:31:35:04:70:fc:9e:5b:af:9c:8a:b9: bc:f0:ec:a5:a4:0a:60:39:21:ae:14:36:e7:cf:c6:69:6b:af: 8a:82:fa:ab:64:d0:1d:37:76:77:45:fa:6c:0f:6c:7a:36:e6: 12:bb:1b:93:e7:b0:dd:bf:f5:fb:88:55:ad:22:e6:a6:a5:56: 0b:5a:59:f3:63:22:ab:93:f8:73:e4:bc:d8:7e:37:22:ed:cc: 22:86:35:37:9a:ee:d6:58:03:c6:64:a6:b9:68:a7:5b:cf:cb: b2:46:9f:5d:c0:95:10:93:a0:fc:d9:86:c7:b8:85:c5:5a:ef: 8d:9d:be:ed:6a:8f:1b:37:0b:e2:68:4a:ac:bb:7e:32:8f:ad: 9d:a4:6c:b1:4f:ec:98:5a:04:e9:0f:1e:bf:ce:06:46:b7:a8: 12:cb:63:ae:11:f3:85:6b:5e:00:70:d6:c3:15:60:7c:63:d8: ef:06:37:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjYwOTIwMTYyOTEwWhcNMjYwOTI3MTYyOTEwWjAYMRYwFAYD VQQDEw02YWIwMDlkNi0yNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t41uVJ2FeaDfL5rP+lGKKZBq5EqZS0+J9L2L1gxMh+OsM+wcsU8Hg+wHWuj W13PqDBRcRfT1Gw5iKYfkdugrG5cfpRFGxcEBw98w8yOCxqYdVjkk7I0PS5MFBk2 hIZH2vmOYoth6Rl9A5JJ6VQ5vwmwQMaRA19t6UdUdb2cPiNaEkVoZN8nrw66lh7P r2fqLua50FZp4NZycZ3d1zZGLnjkqiXfO3JpVPWMgEJDMwLMFssEPiHLCP1LyGSu jPLryOUQJtlRAJFtSuBfSAMUlvysBTIT3bmMVZSSBvYgT3W0UFSL0efU7qT9N9uI US01DGPUj/0mfXfUrrC7dz0f8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6C9jwr tSyR8caRJPQcCi1nPrm0MB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo7PQ8H/5hUAZcPhuzJVFK6ePGGXzwnZzOPMYH4ujx/0zBe9zGcqlyolSKkZE Mr+ITuxKCJM1TtHyS4DxKAu0Gg8jgvchl4XxMwchnrhKpTE1BHD8nluvnIq5vPDs paQKYDkhrhQ258/GaWuvioL6q2TQHTd2d0X6bA9sejbmErsbk+ew3b/1+4hVrSLm pqVWC1pZ82Miq5P4c+S82H43Iu3MIoY1N5ru1lgDxmSmuWinW8/LskafXcCVEJOg /NmGx7iFxVrvjZ2+7WqPGzcL4mhKrLt+Mo+tnaRssU/smFoE6Q8ev84GRreoEstj rhHzhWteAHDWwxVgfGPY7wY3vw== -----END CERTIFICATE-----Generated at Mon Sep 21 23:51:24 2026 by rpki-client