$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: UesZEFg4idJKmsI90qhQxBFVq/XHPR/WXfizjOY4GmY= Subject key identifier: 43:5D:2F:48:3B:15:6F:00:D4:9C:44:AF:D3:7F:E3:01:94:E6:60:EF Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: FE Signing time: Sun 20 Sep 2026 20:13:25 +0000 Manifest this update: Sun 20 Sep 2026 20:13:24 +0000 Manifest next update: Sun 27 Sep 2026 20:13:24 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: jsGv5nV3xnFo71FiBCWCGbUdOHqs1nJlLy6l2kP6jYs=) 2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: NPJSodbwWKPxaxqcL20NVvStl+UOM4gI9IHpj1XGIKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Sep 20 20:13:24 2026 GMT Not After : Sep 27 20:13:24 2026 GMT Subject: CN=6ab03e65-7ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:89:5a:02:3b:fd:54:66:7a:68:7c:54:90: b2:57:ff:d1:50:f6:10:34:7d:c4:12:3f:50:e6:e3: e1:56:92:92:5d:d3:c8:45:d6:b1:e0:bc:5e:b5:77: db:af:eb:3d:12:37:b9:25:54:22:48:d3:05:a0:91: 9b:8d:21:59:ca:16:a1:f7:e2:4b:45:a2:db:de:cd: 1a:d6:ce:ea:da:3d:15:a2:64:48:c4:b7:cc:da:75: 94:e4:bc:e5:94:e2:a6:18:a0:b0:be:63:e6:ec:fc: 64:2e:29:05:65:a6:20:52:ff:39:3f:6c:04:7d:42: 54:c4:db:33:a9:17:48:d5:6d:09:16:03:55:15:91: 71:98:73:33:f9:b5:87:a7:8d:ee:34:47:99:45:15: 4a:94:6b:68:c5:89:1c:4c:bc:33:55:15:4b:cd:d4: 5c:48:73:a9:5b:20:90:3a:fc:b5:99:d3:66:3d:aa: 5d:4f:5b:a3:d9:c0:b7:f1:11:a5:3a:2b:57:a6:17: 86:d6:11:aa:54:cf:54:b7:6d:21:de:18:c9:ac:42: 75:1d:23:00:bb:75:92:1c:70:da:b3:f6:9a:ea:33: ef:9b:fa:cb:1d:94:b7:a9:40:92:37:ee:f5:d5:6d: c7:c6:e4:8a:43:14:f7:15:27:38:70:7d:62:43:66: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:2F:48:3B:15:6F:00:D4:9C:44:AF:D3:7F:E3:01:94:E6:60:EF X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b2:28:da:60:90:1f:b4:3a:7c:a8:a0:d6:cb:84:a9:eb:9b: ba:5d:df:a3:cd:60:25:31:c5:e4:79:60:2a:8c:f0:f6:18:2b: 97:71:a8:99:1b:df:84:5d:f7:6c:69:02:f3:80:91:e3:a4:95: 8d:fb:3f:6d:bf:66:f8:e4:26:aa:00:8d:b3:d7:3a:9d:08:02: 4b:32:55:93:74:1e:fc:a4:49:cb:cf:23:8b:5f:08:5d:f3:20: 76:2e:45:db:fa:b5:c0:10:57:40:82:e4:f9:06:21:7f:ca:e9: c5:54:25:ac:4e:79:96:c3:04:eb:6c:3b:8a:cd:72:ce:d6:df: 3b:0e:61:86:f0:2f:c8:16:97:c2:c8:ea:7f:a0:37:d5:3d:39: e2:68:3a:80:c9:bf:26:1b:4c:8a:9b:ae:f3:49:d8:60:9b:49: 2b:1a:36:ad:7d:39:5a:9c:c1:a4:f3:48:e3:9a:93:f5:b7:a4: 09:36:27:8d:7c:e2:3c:a4:5a:de:25:dc:fa:44:62:8b:c5:f8: 9e:46:e6:30:c5:1b:3a:6a:ed:99:13:4d:38:8d:71:95:a9:27: 88:da:12:e2:59:24:9b:f3:a7:08:e7:a9:98:87:73:af:fa:f7: 00:54:05:f0:75:8f:79:3d:75:6c:a0:64:91:86:ab:31:94:51: 98:bc:8e:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKDE3ODAwOTZDQzkwQUI2QUVBRjA4RDc5QUIxOEM1NEM3 Qjc3QTUzQTAwHhcNMjYwOTIwMjAxMzI0WhcNMjYwOTI3MjAxMzI0WjAYMRYwFAYD VQQDEw02YWIwM2U2NS03YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+6JWgI7/VRmemh8VJCyV//RUPYQNH3EEj9Q5uPhVpKSXdPIRdax4LxetXfb r+s9Eje5JVQiSNMFoJGbjSFZyhah9+JLRaLb3s0a1s7q2j0VomRIxLfM2nWU5Lzl lOKmGKCwvmPm7PxkLikFZaYgUv85P2wEfUJUxNszqRdI1W0JFgNVFZFxmHMz+bWH p43uNEeZRRVKlGtoxYkcTLwzVRVLzdRcSHOpWyCQOvy1mdNmPapdT1uj2cC38RGl OitXpheG1hGqVM9Ut20h3hjJrEJ1HSMAu3WSHHDas/aa6jPvm/rLHZS3qUCSN+71 1W3HxuSKQxT3FSc4cH1iQ2YodwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENdL0g7 FW8A1JxEr9N/4wGU5mDvMB8GA1UdIwQYMBaAFBeACWzJCraurwjXmrGMVMe3elOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My9BQjcxOUZDRTNC NjUxMUYwODc0MkRBMzlDNEY5QUUwMi9GNEFKYk1rS3RxNnZDTmVhc1l4VXg3ZDZV NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My9BQjcxOUZDRTNCNjUxMUYwODc0MkRBMzlDNEY5QUUwMi9GNEFKYk1rS3Rx NnZDTmVhc1l4VXg3ZDZVNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPrIo2mCQH7Q6fKig1suEqeubul3fo81gJTHF5HlgKozw9hgrl3GomRvfhF33 bGkC84CR46SVjfs/bb9m+OQmqgCNs9c6nQgCSzJVk3Qe/KRJy88ji18IXfMgdi5F 2/q1wBBXQILk+QYhf8rpxVQlrE55lsME62w7is1yztbfOw5hhvAvyBaXwsjqf6A3 1T054mg6gMm/JhtMipuu80nYYJtJKxo2rX05WpzBpPNI45qT9bekCTYnjXziPKRa 3iXc+kRii8X4nkbmMMUbOmrtmRNNOI1xlakniNoS4lkkm/OnCOepmIdzr/r3AFQF 8HWPeT11bKBkkYarMZRRmLyOyw== -----END CERTIFICATE-----Generated at Tue Sep 22 06:54:15 2026 by rpki-client