$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: WUxykNtM/ZYkl3PDfHtsG3ReCSJ3MH8FDOG7PC7CKOI= Subject key identifier: 2D:1A:EA:E8:00:C1:47:1C:22:CF:04:97:67:0D:2C:B3:8E:D7:AB:DE Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 0202 Signing time: Mon 21 Sep 2026 03:14:24 +0000 Manifest this update: Mon 21 Sep 2026 03:14:24 +0000 Manifest next update: Mon 28 Sep 2026 03:14:24 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: FYzWAu1ku4KDAjjQPVy7oHUIKjVm8owNc+C41Zoj8vE=) 2: B6B34C7E80F211F1958CCFA465A30FBC.roa (hash: Ym/+JBhkEZ5Bpl7vO2rxrswxWBhGXCPumfmGo7E+pVU=) 3: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: RCE7v/cxnBGfMPk3MtJPuEIln4OQNI5lz0I7q4Ez8SY=) 4: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: uQETdOBNe+Ai7qHHdjas7+cwdq4hlfeAOCRsaHC0QMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Sep 21 03:14:24 2026 GMT Not After : Sep 28 03:14:24 2026 GMT Subject: CN=6ab0a110-ebb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:97:6b:cd:33:99:d3:41:d0:d2:e0:62:8f:3c: fc:af:f5:db:5d:b7:a7:ce:71:ff:fb:16:74:62:02: bc:31:cf:fb:35:86:a6:f4:a0:b8:e5:2f:84:dd:2d: af:3d:d9:7c:90:18:91:ad:2f:a7:b6:44:ed:f5:3b: 3d:95:a9:42:c8:73:16:47:2c:3d:0e:52:38:16:34: 14:16:c0:ad:28:b1:b2:5f:e4:4e:fe:14:66:5f:23: 81:12:d7:a2:15:69:79:2c:93:bc:4f:85:6c:59:e6: b7:ba:c9:1d:5f:f3:7a:cb:e9:16:55:4d:48:f6:3d: 30:12:95:f4:ba:c2:a1:0a:9e:90:47:42:1f:00:4e: 7b:2a:f8:ff:dd:e0:70:07:3d:48:cf:75:c2:a9:79: ae:7c:95:91:24:85:6f:bd:69:c8:66:11:41:b3:bf: 49:e6:fe:d6:1a:db:9b:a1:0b:94:88:6a:05:49:96: 30:26:ce:6a:fd:d3:6e:06:e9:b2:9a:78:bd:95:03: 6b:aa:c5:74:41:6d:d9:d7:ef:a2:da:ac:ed:cf:41: 4d:70:d2:db:7d:3a:ca:dc:c1:27:7a:0e:5a:dc:04: 8e:b2:26:ca:b6:bc:95:f9:a9:33:71:22:60:90:2c: f9:0b:2d:95:75:d6:68:56:59:1f:29:4c:31:38:c8: de:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1A:EA:E8:00:C1:47:1C:22:CF:04:97:67:0D:2C:B3:8E:D7:AB:DE X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f5:7e:73:63:81:51:45:aa:28:c9:e9:d2:63:bd:f5:59:50: 80:d8:83:65:52:76:fd:fc:8f:06:ec:49:8f:70:e9:01:a3:29: c2:41:6b:f3:6d:31:1f:75:a8:e1:06:d5:19:32:da:6d:1b:d8: 41:f5:ca:16:af:48:9f:d5:12:6f:36:3e:5a:96:7b:f2:2c:89: d5:d5:33:ee:e7:4b:9b:2e:2b:61:69:88:66:ef:04:99:5c:50: d0:16:7a:2c:ed:9a:c3:80:70:fe:14:35:c2:43:70:af:ea:f4: a5:55:da:6f:d7:62:f0:12:2a:4f:cc:74:a9:52:d7:5c:55:55: 91:6c:e7:46:2d:67:43:7b:d1:9d:24:b7:6f:cc:d3:62:61:3f: 4e:48:52:88:f3:5c:5b:4f:7a:e1:ba:3f:dd:50:71:a4:fe:5d: 47:26:7f:08:8d:83:e8:e5:d0:c6:e9:ce:ae:ce:13:9d:0f:42: f9:3f:f9:7e:03:02:bd:24:9b:66:dc:ee:18:99:ab:3f:ce:6b: 28:11:2a:02:e0:9d:c6:aa:f4:8e:a3:0d:f5:11:35:f0:be:cd: 66:e6:4e:78:d4:44:ae:3c:d6:ca:0b:d1:4d:4e:d2:a6:f0:a7: 78:47:85:df:79:48:c2:55:7d:cc:8c:e2:66:2d:08:af:96:25: ce:7b:5b:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjYwOTIxMDMxNDI0WhcNMjYwOTI4MDMxNDI0WjAYMRYwFAYD VQQDEw02YWIwYTExMC1lYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pdrzTOZ00HQ0uBijzz8r/XbXbenznH/+xZ0YgK8Mc/7NYam9KC45S+E3S2v Pdl8kBiRrS+ntkTt9Ts9lalCyHMWRyw9DlI4FjQUFsCtKLGyX+RO/hRmXyOBEtei FWl5LJO8T4VsWea3uskdX/N6y+kWVU1I9j0wEpX0usKhCp6QR0IfAE57Kvj/3eBw Bz1Iz3XCqXmufJWRJIVvvWnIZhFBs79J5v7WGtuboQuUiGoFSZYwJs5q/dNuBumy mni9lQNrqsV0QW3Z1++i2qztz0FNcNLbfTrK3MEneg5a3ASOsibKtryV+akzcSJg kCz5Cy2VddZoVlkfKUwxOMjexwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0a6ugA wUccIs8El2cNLLOO16veMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWvV+c2OBUUWqKMnp0mO99VlQgNiDZVJ2/fyPBuxJj3DpAaMpwkFr820xH3Wo 4QbVGTLabRvYQfXKFq9In9USbzY+WpZ78iyJ1dUz7udLmy4rYWmIZu8EmVxQ0BZ6 LO2aw4Bw/hQ1wkNwr+r0pVXab9di8BIqT8x0qVLXXFVVkWznRi1nQ3vRnSS3b8zT YmE/TkhSiPNcW0964bo/3VBxpP5dRyZ/CI2D6OXQxunOrs4TnQ9C+T/5fgMCvSSb ZtzuGJmrP85rKBEqAuCdxqr0jqMN9RE18L7NZuZOeNRErjzWygvRTU7SpvCneEeF 33lIwlV9zIziZi0Ir5YlzntbTQ== -----END CERTIFICATE-----Generated at Tue Sep 22 23:02:14 2026 by rpki-client