$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: r83Loa0yH/PTOmw6lCuAmEg01eAetEpKY3GzSXQEot8= Subject key identifier: 88:A3:5A:BE:DA:56:AF:99:62:E7:BD:16:78:14:DD:B7:51:55:9A:76 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 067F Signing time: Sun 20 Sep 2026 22:28:01 +0000 Manifest this update: Sun 20 Sep 2026 22:28:01 +0000 Manifest next update: Sun 27 Sep 2026 22:28:01 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: 8djANFLy6g46PnJEHYflFnV12IqP0zcUG2sDUapStP0=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: 30kBWOx1m1nSXGGOJPuoiodt0X6arWCmu2hhEcaPUOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Sep 20 22:28:01 2026 GMT Not After : Sep 27 22:28:01 2026 GMT Subject: CN=6ab05df1-d9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:8e:14:7d:07:8a:92:49:da:7f:02:4e:2f: af:ea:af:2b:31:83:d8:75:91:75:cc:35:0c:6f:0b: 1d:bd:4a:bb:82:c5:51:be:87:6d:ee:05:fe:bf:97: 6c:bd:ea:d8:c3:ea:4a:22:8e:0f:98:66:4c:56:72: 46:10:20:97:4f:07:72:0e:2c:d1:10:1d:cd:53:56: 28:fa:dd:1d:7e:8d:3b:b7:f9:f0:53:4e:ea:e1:21: df:0c:68:89:79:bb:0c:01:a1:80:77:b6:77:57:0c: 32:17:c8:5a:7e:72:d5:f5:74:b5:90:ed:6b:f8:d8: 10:cf:20:b6:b6:eb:30:f3:ea:6d:5f:17:bd:10:aa: 43:f0:57:34:1a:88:be:0a:10:fc:d8:2b:c8:d1:53: e1:42:17:47:22:f5:48:66:1a:a7:9c:06:5a:b3:bb: c9:c3:43:48:8f:30:33:1a:f2:b1:b6:c4:c5:5e:22: 65:bb:ae:3e:49:4e:49:ef:3a:65:f6:5b:82:af:4e: e6:0a:ae:71:44:a5:ba:40:1c:59:68:56:27:68:20: 56:57:c6:9a:b0:94:84:7d:b6:f2:6f:dc:a3:4f:e9: 7a:47:79:2c:9f:33:23:fd:ee:67:85:5e:10:b4:a9: dd:b0:99:01:01:3f:ea:cb:34:76:e1:cb:a1:5d:af: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A3:5A:BE:DA:56:AF:99:62:E7:BD:16:78:14:DD:B7:51:55:9A:76 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f8:d7:4e:dd:82:88:96:74:ee:62:d9:ee:cc:ba:4a:38:7d: ca:2d:3e:15:0c:1c:f4:5f:6c:d5:f9:57:ea:ba:9d:c3:ef:00: 4d:e4:88:e1:21:6d:49:28:a9:5c:47:ce:b8:3b:57:6d:74:65: 6f:cb:9a:71:f8:f0:b3:7f:24:c9:3b:04:09:cb:da:8d:dd:d8: 4a:af:fc:57:c2:a5:6a:b5:9f:42:cb:b7:c9:be:27:cb:a4:84: 85:c6:bd:4a:fb:f1:28:a8:6f:c4:54:19:4e:65:98:e9:e3:41: a1:29:ef:c2:73:01:af:87:5f:e4:50:82:d9:69:b9:96:f1:a6: 93:f8:60:23:c7:0f:2c:39:33:b5:58:79:c9:71:42:7b:8d:a8: a4:b0:9e:71:85:8c:3d:a3:f3:44:ad:77:3e:f9:6a:a0:52:90: 97:3b:5d:84:ae:61:9d:a1:c3:d9:d1:a4:c1:6a:48:79:17:d7: 13:49:45:cc:73:ea:e7:c0:4c:9a:f1:d2:79:61:72:e8:67:e3: 62:95:f1:5e:22:e7:0d:99:ef:5c:f8:58:63:21:91:2e:2b:25: 38:8b:0e:49:ee:82:e9:c4:a1:f3:26:b7:b2:ac:4a:9e:8c:49: e2:fc:c4:37:f2:63:6b:4b:6b:6e:d8:fe:97:6e:82:18:67:2e: 7f:25:bd:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjYwOTIwMjIyODAxWhcNMjYwOTI3MjIyODAxWjAYMRYwFAYD VQQDEw02YWIwNWRmMS1kOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yeOFH0HipJJ2n8CTi+v6q8rMYPYdZF1zDUMbwsdvUq7gsVRvodt7gX+v5ds verYw+pKIo4PmGZMVnJGECCXTwdyDizREB3NU1Yo+t0dfo07t/nwU07q4SHfDGiJ ebsMAaGAd7Z3VwwyF8hafnLV9XS1kO1r+NgQzyC2tusw8+ptXxe9EKpD8Fc0Goi+ ChD82CvI0VPhQhdHIvVIZhqnnAZas7vJw0NIjzAzGvKxtsTFXiJlu64+SU5J7zpl 9luCr07mCq5xRKW6QBxZaFYnaCBWV8aasJSEfbbyb9yjT+l6R3ksnzMj/e5nhV4Q tKndsJkBAT/qyzR24cuhXa8fnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIijWr7a Vq+ZYue9FngU3bdRVZp2MB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABfjXTt2CiJZ07mLZ7sy6Sjh9yi0+FQwc9F9s1flX6rqdw+8ATeSI4SFtSSip XEfOuDtXbXRlb8uacfjws38kyTsECcvajd3YSq/8V8KlarWfQsu3yb4ny6SEhca9 SvvxKKhvxFQZTmWY6eNBoSnvwnMBr4df5FCC2Wm5lvGmk/hgI8cPLDkztVh5yXFC e42opLCecYWMPaPzRK13PvlqoFKQlztdhK5hnaHD2dGkwWpIeRfXE0lFzHPq58BM mvHSeWFy6GfjYpXxXiLnDZnvXPhYYyGRLislOIsOSe6C6cSh8ya3sqxKnoxJ4vzE N/Jja0trbtj+l26CGGcufyW91A== -----END CERTIFICATE-----Generated at Mon Sep 21 13:55:22 2026 by rpki-client