$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: uhYKhm909mkcyTm5nIxbKMEIw8u5LBD95SlmhcB1nhI= Subject key identifier: 7B:B6:85:18:9F:15:A9:18:50:EE:B1:64:08:70:6E:CB:D7:3F:0F:DB Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0C22 Signing time: Tue 22 Sep 2026 18:42:36 +0000 Manifest this update: Tue 22 Sep 2026 18:42:35 +0000 Manifest next update: Tue 29 Sep 2026 18:42:35 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: jzxsVAmr3Ff6UG4lK6mh/YUHpDaCUHty3JH9bMKvKzw=) 2: 614D895A75DC11F19A6AA48A6DA30FBC.roa (hash: J5F3yuhEXayGWTKZqGEyENb3lEvu+CWT2L181CXwpDw=) 3: 94FFF24CA5CA11F181152D707111F970.roa (hash: Sg/maMpg/w2UI4nRD9hbatihlbcBBZLif00188ZZAbA=) 4: 290B43C0A79611F1864335344711F970.roa (hash: nN752nqhRtARbodYQ3u7efmdKu6erwNwIIGPPDmLusE=) 5: E4C4CC72EB8411F09FAB30C6536F56BC.roa (hash: m6A5k7GrCQsQt6UQStLqk4vDI2cF1RjOvSbk8wVUoVE=) 6: D9C0AD2EF44811F08A68E332626F56BC.roa (hash: RzHBWYWw5IHkZGciQV9CfmaSyQYYH4ManuyCrGOl3Iw=) 7: 94469964A5CA11F181152D707111F970.roa (hash: QqrZhvjRVVLJYdk/4iDOjN1gnzEDjY7DvM5B+0DqUxE=) 8: BA16840475D911F1B46C33AD6CA30FBC.roa (hash: /qKxnSXL8e1JhFVlrKwLNg4T/NwR0oewdz+ElfcHN+w=) 9: BB848D8675D911F1B46C33AD6CA30FBC.roa (hash: hKK67kho1xmsmO4LWvmGhYdHu4g9sHo6GKRHNdTGbfY=) 10: B899690275D911F1B46C33AD6CA30FBC.roa (hash: fmi7Xv25W86/nRUdBaLjYoJWXUK1k9Dy00DZvttwrRQ=) 11: BCA6A73A75D911F1B46C33AD6CA30FBC.roa (hash: 200zdhmpRY9TDWyoBotBxLY/NlAK1wTrZHNyeeHEV/Q=) 12: 8137CEBC07E911F18CE8BD7B223D8C67.roa (hash: wHgEjCXqndOJLXZ9J6FfS2MgjM1Wq0AwJ0Oymtfq0bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Sep 22 18:42:35 2026 GMT Not After : Sep 29 18:42:35 2026 GMT Subject: CN=6ab2cc1b-7377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:66:47:62:29:1d:74:3d:6e:9f:ee:02:d1: c1:8a:1e:dd:1a:e1:99:6e:f3:24:80:33:0f:b1:06: 20:21:03:84:9e:ac:45:1a:b2:75:06:6d:7d:b6:91: 19:f9:06:f9:3c:0a:4e:da:c5:88:07:fb:e4:8a:45: 45:70:87:8d:d6:76:54:95:27:40:fb:d8:8e:67:89: b4:9c:83:e5:13:cd:d2:be:25:ae:ee:b3:ed:7b:b8: 55:21:74:12:0c:ef:54:6a:75:b5:da:ff:64:f3:d8: 52:d4:de:06:c6:c9:73:65:95:60:0d:2d:54:7d:0d: cd:f8:15:6c:50:8f:28:fc:47:4b:ef:7d:84:8d:67: c1:30:83:b1:75:4d:01:6e:03:b0:ba:21:88:f0:d6: 31:12:40:c9:be:5f:ce:3a:20:5a:fb:8d:d0:25:85: 2b:10:2c:f7:86:5f:81:29:dd:73:3f:0d:cc:71:bb: 7f:62:e4:3a:35:12:81:02:88:03:52:ad:12:9f:5c: 36:62:58:ce:ba:7c:b0:de:8e:f3:59:bf:17:29:39: cb:27:7a:00:70:41:97:6d:9b:78:aa:34:6f:93:22: d8:16:ea:7e:c8:75:07:6c:16:b6:8f:d3:ac:32:b7: 85:15:26:07:ac:e2:2b:e9:71:80:81:7e:4c:52:e3: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B6:85:18:9F:15:A9:18:50:EE:B1:64:08:70:6E:CB:D7:3F:0F:DB X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ce:79:0a:5b:e3:84:c7:6d:55:75:6b:21:2b:08:c6:e1:06: 9e:c3:df:9e:c5:68:9d:10:5f:2b:18:3c:22:44:6d:97:8c:d2: be:70:21:42:87:58:2b:1b:d1:4d:e9:cf:69:30:f7:33:e9:fb: db:a5:b5:03:d2:e9:8f:0c:80:0d:68:30:d3:51:f1:4c:b6:09: b6:b5:bf:45:ec:a1:21:e5:0f:7d:fc:85:b2:a7:7f:8e:1e:31: d2:6b:c2:5f:0e:c5:e8:8c:2c:6a:2e:bf:55:4c:35:4f:21:8f: ca:da:06:dd:92:4e:43:54:a5:94:72:38:af:80:db:b5:36:c0: f7:0c:5f:f0:a1:a6:05:7b:4f:99:3c:c8:9f:61:49:ab:19:ae: be:60:60:16:09:1e:6c:ec:fb:e3:f4:db:e2:8f:cf:ab:d7:f7: f4:10:f2:3a:b2:44:69:e6:57:2b:d3:a5:e3:38:22:fa:32:39: 77:1b:ea:0f:53:db:5f:0b:f6:a6:e6:a7:b5:24:0e:7e:4c:74: a8:9f:e7:05:45:ed:c0:d3:75:e4:d6:22:4b:2b:1b:8a:b1:20: 83:2c:92:95:30:c9:de:fc:64:5d:9e:e7:d6:50:bc:f0:20:5c: fa:37:56:b8:6a:89:85:6e:d0:bd:ba:c7:05:0b:f7:67:5c:a9: 73:0a:e4:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwOTIyMTg0MjM1WhcNMjYwOTI5MTg0MjM1WjAYMRYwFAYD VQQDEw02YWIyY2MxYi03Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gBmR2IpHXQ9bp/uAtHBih7dGuGZbvMkgDMPsQYgIQOEnqxFGrJ1Bm19tpEZ +Qb5PApO2sWIB/vkikVFcIeN1nZUlSdA+9iOZ4m0nIPlE83SviWu7rPte7hVIXQS DO9UanW12v9k89hS1N4GxslzZZVgDS1UfQ3N+BVsUI8o/EdL732EjWfBMIOxdU0B bgOwuiGI8NYxEkDJvl/OOiBa+43QJYUrECz3hl+BKd1zPw3Mcbt/YuQ6NRKBAogD Uq0Sn1w2YljOunyw3o7zWb8XKTnLJ3oAcEGXbZt4qjRvkyLYFup+yHUHbBa2j9Os MreFFSYHrOIr6XGAgX5MUuMOoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHu2hRif FakYUO6xZAhwbsvXPw/bMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqs55ClvjhMdtVXVrISsIxuEGnsPfnsVonRBfKxg8IkRtl4zSvnAhQodYKxvR TenPaTD3M+n726W1A9LpjwyADWgw01HxTLYJtrW/ReyhIeUPffyFsqd/jh4x0mvC Xw7F6Iwsai6/VUw1TyGPytoG3ZJOQ1SllHI4r4DbtTbA9wxf8KGmBXtPmTzIn2FJ qxmuvmBgFgkebOz74/Tb4o/Pq9f39BDyOrJEaeZXK9Ol4zgi+jI5dxvqD1PbXwv2 puantSQOfkx0qJ/nBUXtwNN15NYiSysbirEggyySlTDJ3vxkXZ7n1lC88CBc+jdW uGqJhW7QvbrHBQv3Z1ypcwrktw== -----END CERTIFICATE-----Generated at Wed Sep 23 00:54:32 2026 by rpki-client