$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: hKAvZ6qE08hzlRwxISXy8Ttq4Mb7+a6Rnqj7OqhvUVI= Subject key identifier: 60:7D:7B:66:4E:A8:8F:29:71:27:1D:D1:E1:6E:C0:EA:30:D2:48:74 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0C21 Signing time: Sun 20 Sep 2026 18:48:12 +0000 Manifest this update: Sun 20 Sep 2026 18:48:11 +0000 Manifest next update: Sun 27 Sep 2026 18:48:11 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: c8GxU7DtHZ25qXYvCgYt4nuo8i+uQHGW92fI7etxcU4=) 2: 94469964A5CA11F181152D707111F970.roa (hash: QqrZhvjRVVLJYdk/4iDOjN1gnzEDjY7DvM5B+0DqUxE=) 3: BB848D8675D911F1B46C33AD6CA30FBC.roa (hash: hKK67kho1xmsmO4LWvmGhYdHu4g9sHo6GKRHNdTGbfY=) 4: 94FFF24CA5CA11F181152D707111F970.roa (hash: Sg/maMpg/w2UI4nRD9hbatihlbcBBZLif00188ZZAbA=) 5: BA16840475D911F1B46C33AD6CA30FBC.roa (hash: /qKxnSXL8e1JhFVlrKwLNg4T/NwR0oewdz+ElfcHN+w=) 6: E4C4CC72EB8411F09FAB30C6536F56BC.roa (hash: m6A5k7GrCQsQt6UQStLqk4vDI2cF1RjOvSbk8wVUoVE=) 7: 290B43C0A79611F1864335344711F970.roa (hash: nN752nqhRtARbodYQ3u7efmdKu6erwNwIIGPPDmLusE=) 8: B899690275D911F1B46C33AD6CA30FBC.roa (hash: fmi7Xv25W86/nRUdBaLjYoJWXUK1k9Dy00DZvttwrRQ=) 9: D9C0AD2EF44811F08A68E332626F56BC.roa (hash: RzHBWYWw5IHkZGciQV9CfmaSyQYYH4ManuyCrGOl3Iw=) 10: BCA6A73A75D911F1B46C33AD6CA30FBC.roa (hash: 200zdhmpRY9TDWyoBotBxLY/NlAK1wTrZHNyeeHEV/Q=) 11: 8137CEBC07E911F18CE8BD7B223D8C67.roa (hash: wHgEjCXqndOJLXZ9J6FfS2MgjM1Wq0AwJ0Oymtfq0bs=) 12: 614D895A75DC11F19A6AA48A6DA30FBC.roa (hash: J5F3yuhEXayGWTKZqGEyENb3lEvu+CWT2L181CXwpDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Sep 20 18:48:11 2026 GMT Not After : Sep 27 18:48:11 2026 GMT Subject: CN=6ab02a6b-6a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:04:f8:7a:ef:7b:e3:1e:4f:70:bc:30:f9: 95:a2:c5:26:0a:28:e8:33:44:b4:08:f5:e6:d4:d6: 41:4e:a5:87:bb:eb:0d:eb:ce:b3:ee:89:8a:d3:52: 6a:2a:8b:9b:b7:b2:4a:7f:8b:00:e5:39:01:91:d8: b8:8f:9d:9a:5d:22:55:0c:12:c5:0a:36:55:48:35: 0a:4f:60:8a:ac:f9:34:3a:ff:0e:c6:30:3e:76:8c: a1:3c:81:9a:cd:94:42:2e:68:9d:92:8a:a3:5e:4b: 46:22:9f:eb:9c:79:d3:1e:60:0f:a5:23:48:97:89: 77:f6:f0:82:dc:93:02:a0:5f:dc:c6:1a:b8:36:e1: 39:61:7f:5a:d2:b4:b9:22:fc:88:e5:5a:27:5b:c5: 4e:07:26:54:a7:3b:57:da:39:5a:84:db:d9:e6:45: ec:42:6f:55:8a:5e:1c:d7:17:82:2e:82:76:99:2e: 18:4e:d5:34:15:9d:b4:99:d4:a2:13:82:7b:cd:a7: 40:9b:60:f0:6c:cf:d7:9e:b9:18:05:b6:d7:2d:86: 53:3b:14:29:27:dc:b4:55:92:40:92:20:34:74:ed: 38:9b:d5:fb:4d:53:57:ab:e4:7f:0c:59:5a:c7:53: 76:5e:2f:76:19:90:1b:24:f3:36:31:6e:d8:aa:51: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7D:7B:66:4E:A8:8F:29:71:27:1D:D1:E1:6E:C0:EA:30:D2:48:74 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:0f:14:61:ec:91:ad:b7:70:29:a5:43:81:71:ce:7d:f5:bc: 6e:ac:7f:82:29:3b:b3:22:dd:5d:fb:49:bf:a9:ac:1c:a8:fb: 73:a7:2b:f8:3d:0b:8f:7b:11:ef:e3:9d:09:c6:ab:d4:d0:1d: aa:a7:ce:50:55:98:39:5c:5f:0c:3a:fc:8e:48:7a:c7:53:48: 98:64:a4:2a:ee:9e:ea:6d:cc:f1:74:40:15:9c:fe:d5:74:ad: 5b:1f:b9:67:47:5a:55:4d:74:1e:74:e3:ae:7f:b1:2c:ef:59: 2b:aa:8f:cb:83:57:d5:15:40:a9:db:6e:b5:ad:b2:7e:74:3a: dc:eb:6b:e6:fa:a4:d4:38:5b:0c:94:56:f7:c2:68:2e:c3:72: e7:92:e7:00:b8:1d:0d:ac:d7:ea:b3:6c:5f:08:36:e7:03:45: 96:82:19:1f:f3:3e:72:8b:24:f1:ea:d5:ac:b7:ab:de:55:b6: 70:17:cf:88:43:9c:70:56:16:e3:33:57:de:cf:48:e6:f9:76: 00:08:44:1f:e9:54:e4:1a:06:21:3a:76:76:d5:6b:b2:71:6f: 77:58:19:43:64:53:21:22:4e:a6:16:b7:43:95:22:c8:30:58: 1a:f5:b3:25:e5:8c:ad:11:ae:52:7e:e9:d3:c3:8f:a1:5e:cb: cf:c0:4a:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwOTIwMTg0ODExWhcNMjYwOTI3MTg0ODExWjAYMRYwFAYD VQQDEw02YWIwMmE2Yi02YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhsE+Hrve+MeT3C8MPmVosUmCijoM0S0CPXm1NZBTqWHu+sN686z7omK01Jq Koubt7JKf4sA5TkBkdi4j52aXSJVDBLFCjZVSDUKT2CKrPk0Ov8OxjA+doyhPIGa zZRCLmidkoqjXktGIp/rnHnTHmAPpSNIl4l39vCC3JMCoF/cxhq4NuE5YX9a0rS5 IvyI5VonW8VOByZUpztX2jlahNvZ5kXsQm9Vil4c1xeCLoJ2mS4YTtU0FZ20mdSi E4J7zadAm2DwbM/XnrkYBbbXLYZTOxQpJ9y0VZJAkiA0dO04m9X7TVNXq+R/DFla x1N2Xi92GZAbJPM2MW7YqlFg+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGB9e2ZO qI8pcScd0eFuwOow0kh0MB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvg8UYeyRrbdwKaVDgXHOffW8bqx/gik7syLdXftJv6msHKj7c6cr+D0Lj3sR 7+OdCcar1NAdqqfOUFWYOVxfDDr8jkh6x1NImGSkKu6e6m3M8XRAFZz+1XStWx+5 Z0daVU10HnTjrn+xLO9ZK6qPy4NX1RVAqdtuta2yfnQ63Otr5vqk1DhbDJRW98Jo LsNy55LnALgdDazX6rNsXwg25wNFloIZH/M+cosk8erVrLer3lW2cBfPiEOccFYW 4zNX3s9I5vl2AAhEH+lU5BoGITp2dtVrsnFvd1gZQ2RTISJOpha3Q5UiyDBYGvWz JeWMrRGuUn7p08OPoV7Lz8BKXA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:51:54 2026 by rpki-client