$ rpki-client -vvvf rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft File: nFFy5DAbErBXIH5LhA56y5CyCK4.mft (raw, json) Hash identifier: H5D15xNjAMamGKhaoAiQKdUywMUxSsuenlpW6wc59vI= Subject key identifier: 49:B0:38:0A:3F:64:DB:02:65:E0:3B:5B:C8:29:17:B5:DF:0F:36:4D Authority key identifier: 9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE Certificate issuer: /CN=A919125D/serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft Manifest number: 19 Signing time: Mon 21 Sep 2026 08:57:44 +0000 Manifest this update: Mon 21 Sep 2026 08:57:43 +0000 Manifest next update: Mon 28 Sep 2026 08:57:43 +0000 Files and hashes: 1: nFFy5DAbErBXIH5LhA56y5CyCK4.crl (hash: ub68PAtOk+z41IU6qtEnYCEVRZIrcMigEKHDpfYRq1E=) 2: 74EA4288947611F1B81B112D5F11F970.roa (hash: xf63CpVG1xYHFcYXOGVTTTSM5albmIZRt5CqNRfPUy4=) 3: 2D766076947611F18F33E6295F11F970.roa (hash: nYN/boG0EONSsyNSFsdFD5f6WoaCZ/bo3AQVDqm6EiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919125D, serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE Validity Not Before: Sep 21 08:57:43 2026 GMT Not After : Sep 28 08:57:43 2026 GMT Subject: CN=6ab0f188-4da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:cd:20:4a:54:c6:1d:e5:de:d4:f5:86:77: b4:8c:dd:d7:57:03:eb:52:39:1e:3e:44:02:50:ce: 59:a5:4c:b6:7b:c7:02:40:74:72:a1:bf:76:2f:a0: ab:8d:1a:09:0c:72:1d:52:04:5a:57:75:5e:7e:d5: dc:1d:50:0d:6f:bd:16:93:99:04:87:ec:6e:0a:e6: e7:64:84:8b:a3:78:5c:06:01:2e:f6:a1:b1:55:90: eb:88:50:65:6c:95:26:99:2e:c9:f0:a4:79:04:3c: 2c:02:4b:a5:83:a4:d7:7b:5b:58:58:08:a4:8c:e2: 67:ff:d2:57:b3:21:ae:12:72:5c:cd:c3:e7:03:17: c9:e1:92:33:b9:3a:b6:29:b1:46:99:ff:52:3d:62: 95:23:e7:0a:83:91:fc:23:77:5a:4b:d7:9b:5f:24: 75:92:3a:e9:81:8a:b2:39:75:0f:79:95:9a:c8:78: 1f:35:d4:39:57:3f:95:ec:45:07:ee:0e:81:3c:bc: 16:fa:af:d4:ea:fc:a1:c1:8a:80:f0:3f:56:c4:06: 1e:d9:6a:34:cd:30:95:da:fb:79:fb:16:55:89:68: bc:3e:3b:32:e5:84:f9:81:5c:50:9d:b5:4a:70:c0: 18:1d:10:28:7b:6d:bf:62:03:70:db:b4:a9:48:fb: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B0:38:0A:3F:64:DB:02:65:E0:3B:5B:C8:29:17:B5:DF:0F:36:4D X509v3 Authority Key Identifier: keyid:9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:2e:aa:9e:7e:96:0d:66:6e:89:86:d1:b9:f9:cf:a3:18:a2: cd:2d:ec:d2:3c:7c:87:ab:f3:da:0a:66:33:80:15:e3:54:21: 7d:ca:e1:99:a0:ef:b5:64:db:80:80:d9:cb:21:02:39:bf:41: 00:42:b6:5f:a8:e9:22:f4:cc:89:91:7b:53:4a:28:6f:90:88: 46:9e:33:7e:03:0a:e5:9c:8e:04:9a:af:4a:64:4f:b7:ad:3a: df:a2:1a:a2:4d:18:01:87:46:74:01:60:61:1b:0f:01:d4:86: b5:39:1a:21:d0:b3:7d:72:a3:72:39:c4:92:6f:21:df:a0:69: f2:d6:d8:98:ec:95:d5:33:f8:d0:3b:5e:06:d9:20:04:5a:a4: a9:e4:58:8d:67:05:81:eb:c7:67:6f:a6:43:fa:ee:37:8c:72: 42:c9:51:aa:38:9b:01:78:2e:26:da:00:cb:af:4f:b4:54:81: 0d:3e:a2:98:54:c4:ba:43:46:dc:50:e8:50:09:d7:35:12:a4: 66:7e:8b:6e:17:b0:e0:e3:bd:04:ac:45:d8:ec:51:a4:9c:6c: 07:0c:f9:38:96:60:40:1b:bf:29:64:f3:84:6a:82:50:04:c6: 33:b7:30:61:e4:5c:57:4b:0a:04:78:f1:b5:6f:45:1d:8b:50: b9:20:31:71 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTI1RDExMC8GA1UEBRMoOUM1MTcyRTQzMDFCMTJCMDU3MjA3RTRCODQwRTdBQ0I5 MEIyMDhBRTAeFw0yNjA5MjEwODU3NDNaFw0yNjA5MjgwODU3NDNaMBgxFjAUBgNV BAMTDTZhYjBmMTg4LTRkYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMI80gSlTGHeXe1PWGd7SM3ddXA+tSOR4+RAJQzlmlTLZ7xwJAdHKhv3YvoKuN GgkMch1SBFpXdV5+1dwdUA1vvRaTmQSH7G4K5udkhIujeFwGAS72obFVkOuIUGVs lSaZLsnwpHkEPCwCS6WDpNd7W1hYCKSM4mf/0lezIa4SclzNw+cDF8nhkjO5OrYp sUaZ/1I9YpUj5wqDkfwjd1pL15tfJHWSOumBirI5dQ95lZrIeB811DlXP5XsRQfu DoE8vBb6r9Tq/KHBioDwP1bEBh7ZajTNMJXa+3n7FlWJaLw+OzLlhPmBXFCdtUpw wBgdECh7bb9iA3DbtKlI+0inAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSbA4Cj9k 2wJl4DtbyCkXtd8PNk0wHwYDVR0jBBgwFoAUnFFy5DAbErBXIH5LhA56y5CyCK4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMjVEL0YwNEEzRkY2OTQ3 NTExRjFCNDgxRjdERjVFMTFGOTcwL25GRnk1REFiRXJCWElINUxoQTU2eTVDeUNL NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkZGeTVEQWJFckJYSUg1TGhBNTZ5NUN5Q0s0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MjVEL0YwNEEzRkY2OTQ3NTExRjFCNDgxRjdERjVFMTFGOTcwL25GRnk1REFiRXJC WElINUxoQTU2eTVDeUNLNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1LqqefpYNZm6JhtG5+c+jGKLNLezSPHyHq/PaCmYzgBXjVCF9yuGZoO+1ZNuA gNnLIQI5v0EAQrZfqOki9MyJkXtTSihvkIhGnjN+AwrlnI4Emq9KZE+3rTrfohqi TRgBh0Z0AWBhGw8B1Ia1ORoh0LN9cqNyOcSSbyHfoGny1tiY7JXVM/jQO14G2SAE WqSp5FiNZwWB68dnb6ZD+u43jHJCyVGqOJsBeC4m2gDLr0+0VIENPqKYVMS6Q0bc UOhQCdc1EqRmfotuF7Dg470ErEXY7FGknGwHDPk4lmBAG78pZPOEaoJQBMYztzBh 5FxXSwoEePG1b0Udi1C5IDFx -----END CERTIFICATE-----Generated at Tue Sep 22 22:01:59 2026 by rpki-client