$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft File: FOZzxKcds0p1aBNYfkghLaLnczA.mft (raw, json) Hash identifier: BoErLVSPDIj1TyHNDHGHfFrQYvbXw1313wheW6YygyY= Subject key identifier: BA:E4:76:40:CB:74:4F:1D:A2:3A:3E:24:74:82:52:CA:AD:83:93:1D Authority key identifier: 14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30 Certificate issuer: /CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330 Certificate serial: 0AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft Manifest number: 0ADE Signing time: Sun 20 Sep 2026 19:23:30 +0000 Manifest this update: Sun 20 Sep 2026 19:23:29 +0000 Manifest next update: Sun 27 Sep 2026 19:23:29 +0000 Files and hashes: 1: FOZzxKcds0p1aBNYfkghLaLnczA.crl (hash: c7aeOVwfFsdOJ7WCbBogEG16IT3L9fsCFydsWtl8/vQ=) 2: EFACF8725A9611F1BEF054C8C8833773.roa (hash: H2seh8ndbPmzBsoU50PQUQi8emQoFFvHq08sQLmrLP8=) 3: ED99CAA81DC411EF9E620C48C4F9AE02.roa (hash: B3rKvJIZKAiFNSNTP07OGjXr92JcCAag/b1E9OB/h34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F33, serialNumber=14E673C4A71DB34A756813587E48212DA2E77330 Validity Not Before: Sep 20 19:23:29 2026 GMT Not After : Sep 27 19:23:29 2026 GMT Subject: CN=6ab032b2-b8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:11:6d:95:bc:8a:23:59:2a:ca:9d:28:5c:da: fd:56:ff:82:03:a6:f3:53:6a:17:bc:7f:c3:3e:67: d5:2e:2d:fd:60:3d:2c:90:eb:86:b1:be:d1:d7:04: 07:08:6c:5c:f7:ed:b5:72:70:63:6d:f6:f5:cb:31: 3b:c4:d0:8f:be:31:2d:28:a1:aa:96:45:26:6d:2c: db:99:b1:7c:b4:61:9f:e9:91:37:18:b2:7c:ed:e3: 80:2d:10:96:00:42:1b:7b:bb:48:dc:bb:3e:59:4b: e0:2d:8e:3f:6d:79:64:50:dc:a4:f1:bb:42:db:56: d6:6f:a5:2a:4b:db:6e:1c:8c:4a:00:05:f9:06:28: de:11:39:03:d8:93:29:9c:a4:e6:64:a4:28:b8:cc: 0d:3e:7c:da:08:c5:53:0b:6e:3a:7b:c0:f8:83:4b: 35:e0:b6:bb:1f:06:74:45:6f:40:da:0d:bd:7a:2c: 10:cd:2c:2f:1f:60:3f:41:a2:16:b5:88:72:10:b5: f3:06:d8:af:9b:d9:ca:14:cb:52:68:7c:ce:f2:36: 89:95:0a:df:24:04:89:24:92:0d:c0:13:26:81:ce: b6:54:48:19:9b:81:7e:3a:36:88:3f:b3:bd:1f:d9: ad:2e:53:c6:9a:f5:24:57:ff:a2:00:19:bc:0d:18: 71:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E4:76:40:CB:74:4F:1D:A2:3A:3E:24:74:82:52:CA:AD:83:93:1D X509v3 Authority Key Identifier: keyid:14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:6f:90:a3:6a:92:95:c1:1b:bc:39:61:f6:7c:27:22:fc:89: 71:2b:a4:f8:36:00:1a:6a:92:21:44:df:f4:3c:84:cc:2d:b5: 95:4e:f1:d7:b3:4d:89:d6:28:81:90:7d:31:84:b1:b0:75:8d: 4c:f1:cb:f4:25:f5:78:0d:97:3e:57:17:b0:32:98:78:ec:29: 70:f9:e4:34:77:d0:d4:9c:64:0a:39:98:ca:48:69:71:6d:1f: e6:24:10:4b:78:01:90:77:ec:c7:8f:4c:71:fb:31:60:5d:68: b2:c7:bd:30:5f:32:22:33:37:57:b2:19:5e:19:99:8b:f2:29: ce:dc:a4:a7:36:38:f2:0f:32:ce:69:dc:a8:90:0c:ed:c2:27: 56:bf:d3:2f:70:10:89:0b:16:95:7f:76:92:3b:0d:7c:80:90: 57:4f:3a:55:48:59:e6:75:3b:18:55:78:af:30:a0:74:07:5e: 8b:77:25:81:c7:ac:f8:c5:75:2d:22:87:4d:fd:b3:56:84:7e: df:c7:4e:df:d0:44:04:8e:5f:e2:fd:f8:dc:22:3b:4b:f9:f2: 57:6a:11:dd:71:36:6c:f6:f0:20:5c:c7:aa:22:eb:18:d0:b7: 5d:e1:40:90:71:23:ba:fa:dc:9a:e6:8e:64:2d:52:d5:4c:a9: 13:06:9f:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGMzMxMTAvBgNVBAUTKDE0RTY3M0M0QTcxREIzNEE3NTY4MTM1ODdFNDgyMTJE QTJFNzczMzAwHhcNMjYwOTIwMTkyMzI5WhcNMjYwOTI3MTkyMzI5WjAYMRYwFAYD VQQDEw02YWIwMzJiMi1iOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgxFtlbyKI1kqyp0oXNr9Vv+CA6bzU2oXvH/DPmfVLi39YD0skOuGsb7R1wQH CGxc9+21cnBjbfb1yzE7xNCPvjEtKKGqlkUmbSzbmbF8tGGf6ZE3GLJ87eOALRCW AEIbe7tI3Ls+WUvgLY4/bXlkUNyk8btC21bWb6UqS9tuHIxKAAX5BijeETkD2JMp nKTmZKQouMwNPnzaCMVTC246e8D4g0s14La7HwZ0RW9A2g29eiwQzSwvH2A/QaIW tYhyELXzBtivm9nKFMtSaHzO8jaJlQrfJASJJJINwBMmgc62VEgZm4F+OjaIP7O9 H9mtLlPGmvUkV/+iABm8DRhxwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrkdkDL dE8dojo+JHSCUsqtg5MdMB8GA1UdIwQYMBaAFBTmc8SnHbNKdWgTWH5IIS2i53Mw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkYzMy9FNkVDMkQ5Mjgw OTExMUVBQUJDREZGNkNDNEY5QUUwMi9GT1p6eEtjZHMwcDFhQk5ZZmtnaExhTG5j ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPWnp4S2NkczBwMWFCTllma2doTGFMbmN6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkYzMy9FNkVDMkQ5MjgwOTExMUVBQUJDREZGNkNDNEY5QUUwMi9GT1p6eEtjZHMw cDFhQk5ZZmtnaExhTG5jekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAum+Qo2qSlcEbvDlh9nwnIvyJcSuk+DYAGmqSIUTf9DyEzC21lU7x17NNidYo gZB9MYSxsHWNTPHL9CX1eA2XPlcXsDKYeOwpcPnkNHfQ1JxkCjmYykhpcW0f5iQQ S3gBkHfsx49McfsxYF1osse9MF8yIjM3V7IZXhmZi/IpztykpzY48g8yzmncqJAM 7cInVr/TL3AQiQsWlX92kjsNfICQV086VUhZ5nU7GFV4rzCgdAdei3clgces+MV1 LSKHTf2zVoR+38dO39BEBI5f4v343CI7S/nyV2oR3XE2bPbwIFzHqiLrGNC3XeFA kHEjuvrcmuaOZC1S1UypEwafRw== -----END CERTIFICATE-----Generated at Tue Sep 22 20:02:04 2026 by rpki-client