$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: 1LZOLnldRNYG6wfqILaFhRTAs9eLxKs02hgISgMlisw= Subject key identifier: 24:CB:F6:52:07:46:A1:7A:0B:3E:3F:C6:95:65:15:3A:94:A8:90:10 Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: 01DE Signing time: Mon 21 Sep 2026 03:33:19 +0000 Manifest this update: Mon 21 Sep 2026 03:33:19 +0000 Manifest next update: Mon 28 Sep 2026 03:33:19 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: OsfUHSMfyv8eeNz5SeoQHtf8wggcUFf1D7+6D1/ZWDg=) 2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: O7Lj4yPFpwZm2VwkuRfj2gTrVG1pPTs7zZ1NbT7XSSw=) 3: Z4aH_tdZ0tOLwEu69Vy4G69gf-4.asa (hash: Aislko8MBzysrn48sutN/9wnmjDSj9ZREo4lAeWYs0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Sep 21 03:33:19 2026 GMT Not After : Sep 28 03:33:19 2026 GMT Subject: CN=6ab0a57f-a51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:c0:2e:59:4f:25:c5:ea:82:f6:67:c6:0f: d5:72:02:8a:79:e6:6f:9f:ba:05:31:57:9f:7f:a0: 81:d3:82:79:ef:66:f1:2f:3d:36:37:ec:1d:05:4b: d4:89:8d:3e:49:73:62:49:c8:6f:b7:d7:2d:3c:79: 36:ca:44:51:82:08:17:c0:b3:43:e8:25:18:e8:80: 9e:9d:7e:40:88:e7:ca:57:3c:0e:3a:9e:d5:1c:a1: aa:2a:c0:29:0c:7c:fc:fa:af:8f:06:15:42:d3:12: 0d:90:99:61:6e:9b:13:9c:84:b6:bb:c0:4e:3f:8a: 8c:cb:5e:68:25:af:49:de:3b:fb:b1:e2:9a:b2:51: f5:ee:5a:95:8b:fc:3d:8c:74:c7:1c:ac:55:d7:f4: 29:49:3d:25:36:86:db:3c:e4:15:a8:83:53:e6:aa: c9:a5:96:c9:f7:78:1a:a2:68:af:fa:f6:3b:14:bb: 45:a4:55:61:b5:d3:a1:4c:85:47:e2:fe:69:d1:2e: f8:3d:0b:a4:e5:f1:f7:6e:be:6e:55:aa:64:1e:ff: 26:db:e0:e0:e1:b3:db:d4:d2:8d:6a:02:5c:1e:11: 3b:7c:f9:a9:31:b4:29:bd:dc:79:26:90:f5:b1:17: bd:94:b4:69:0d:69:f0:16:ea:17:26:11:c5:d8:93: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CB:F6:52:07:46:A1:7A:0B:3E:3F:C6:95:65:15:3A:94:A8:90:10 X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:51:dc:bf:73:da:55:45:82:7e:09:9e:03:92:70:09:7b:33: da:52:98:0f:02:78:55:89:47:e9:52:44:a3:5f:3e:3d:a7:77: e1:b9:f1:0b:08:23:bd:84:ea:50:fb:e1:e7:8f:06:db:d9:9e: da:4b:ff:2d:97:c0:81:c2:dd:35:8d:aa:53:e4:64:b4:64:25: 14:1e:1b:50:67:28:a4:d3:32:9b:c0:02:19:50:5b:ac:5f:8a: 5e:b9:f4:f3:05:57:45:dd:7b:22:8f:a7:02:50:b3:04:3f:b9: 66:9b:61:4b:4f:2b:dc:d7:25:d2:67:1a:12:4c:0f:05:d3:d1: fa:2f:23:80:de:a7:d6:3d:e6:7a:5b:20:5e:ca:7d:f6:a7:85: ab:2a:80:66:bd:0e:c2:33:70:c1:0a:41:17:8f:bb:f0:56:fb: 34:64:08:db:db:ee:49:be:c4:88:fc:9b:81:67:86:6f:57:f9: ae:8f:94:40:43:e9:bd:7a:c5:41:7b:79:8d:75:65:63:74:74: 5f:b5:26:72:52:68:84:64:ab:d5:57:79:68:17:36:85:29:a6: 10:92:97:31:35:58:88:5d:c5:c6:62:6e:36:67:a8:d9:58:7b: 7e:c2:52:05:be:43:69:09:78:f0:28:1e:50:14:d1:df:e5:f6: a4:01:4e:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjYwOTIxMDMzMzE5WhcNMjYwOTI4MDMzMzE5WjAYMRYwFAYD VQQDEw02YWIwYTU3Zi1hNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfvALllPJcXqgvZnxg/VcgKKeeZvn7oFMVeff6CB04J572bxLz02N+wdBUvU iY0+SXNiSchvt9ctPHk2ykRRgggXwLND6CUY6ICenX5AiOfKVzwOOp7VHKGqKsAp DHz8+q+PBhVC0xINkJlhbpsTnIS2u8BOP4qMy15oJa9J3jv7seKaslH17lqVi/w9 jHTHHKxV1/QpST0lNobbPOQVqINT5qrJpZbJ93gaomiv+vY7FLtFpFVhtdOhTIVH 4v5p0S74PQuk5fH3br5uVapkHv8m2+Dg4bPb1NKNagJcHhE7fPmpMbQpvdx5JpD1 sRe9lLRpDWnwFuoXJhHF2JO6FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTL9lIH RqF6Cz4/xpVlFTqUqJAQMB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAslHcv3PaVUWCfgmeA5JwCXsz2lKYDwJ4VYlH6VJEo18+Pad34bnxCwgjvYTq UPvh548G29me2kv/LZfAgcLdNY2qU+RktGQlFB4bUGcopNMym8ACGVBbrF+KXrn0 8wVXRd17Io+nAlCzBD+5ZpthS08r3Ncl0mcaEkwPBdPR+i8jgN6n1j3melsgXsp9 9qeFqyqAZr0OwjNwwQpBF4+78Fb7NGQI29vuSb7EiPybgWeGb1f5ro+UQEPpvXrF QXt5jXVlY3R0X7UmclJohGSr1Vd5aBc2hSmmEJKXMTVYiF3FxmJuNmeo2Vh7fsJS Bb5DaQl48CgeUBTR3+X2pAFOHg== -----END CERTIFICATE-----Generated at Tue Sep 22 08:52:14 2026 by rpki-client