$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: ysRSiJ6u1aA2p5KlVyW0/YNdHJVU1x+pIbAyiAMxHDk= Subject key identifier: 43:3D:20:FE:6D:B7:8F:AD:D7:9F:4C:EE:B2:EA:90:ED:E8:F1:B0:D7 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0CC0 Signing time: Sun 20 Sep 2026 18:29:05 +0000 Manifest this update: Sun 20 Sep 2026 18:29:04 +0000 Manifest next update: Sun 27 Sep 2026 18:29:04 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: TscRtUkZyF4AtBrawTc8TEuOsN7jrjdg2e5K/kYvS0w=) 2: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: 9brcnHryI3Y4I0qze8pkKOj7kUBQ8kANoxfoueYgUMM=) 3: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: cEvLZrkv6DMpSj0Vfia9IhgiuszRtIWI2Gda9xI8ARY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Sep 20 18:29:04 2026 GMT Not After : Sep 27 18:29:04 2026 GMT Subject: CN=6ab025f1-5d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:d6:b8:82:d1:37:83:b7:80:c6:2c:97:4e: d5:e3:a5:6a:f8:e1:54:2e:d1:02:82:15:23:9b:7e: 8a:38:ef:13:b8:d5:f5:86:03:dd:1e:4b:46:58:7b: cb:00:6d:8d:3b:c0:27:56:44:b7:c1:ab:c6:3a:e0: 88:f4:ea:e4:d0:d7:61:70:74:62:07:c2:70:a4:1d: e9:19:10:dc:e4:b2:af:2f:d9:de:e2:f9:22:bc:f2: b2:5d:8a:5b:e2:72:76:0c:e4:b5:6c:48:bc:5f:c7: f1:34:6e:43:eb:d6:86:16:01:06:1e:23:6b:ca:38: cb:78:21:8b:a6:ab:fd:dc:98:47:20:48:55:58:b8: 3e:14:72:2c:c5:ec:d0:67:53:9f:b6:39:2f:d4:76: 2a:4e:ea:e1:28:4b:bc:62:91:9b:29:4b:a8:cc:6e: c8:39:8e:2a:ab:40:0f:5f:7a:eb:26:03:b7:02:4c: 9a:2d:db:f3:61:86:1f:c4:15:b2:47:b8:b0:bc:24: 88:2b:6a:e9:ba:3b:17:04:6e:0f:c8:05:a8:17:c1: a3:5e:08:d0:c7:25:d6:b5:8e:ed:f1:79:bb:cf:93: 30:05:70:fb:86:a2:c1:3e:fe:5f:fa:d3:79:92:45: 25:d8:3f:b7:d4:ed:00:19:86:2e:1b:40:f2:92:cc: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3D:20:FE:6D:B7:8F:AD:D7:9F:4C:EE:B2:EA:90:ED:E8:F1:B0:D7 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:43:68:6d:a9:d7:69:83:ff:06:83:e7:ab:67:80:e6:d6:a7: b1:53:78:ed:21:c0:fb:90:6e:e2:98:e2:9a:1a:95:8e:4a:cf: 33:e6:7b:c0:99:d6:06:85:dc:cc:a2:4d:4e:fa:43:1b:71:22: 97:28:ec:d5:9d:fe:b1:db:cb:4c:d4:91:c1:22:29:38:3e:28: 3f:5d:45:e0:6d:ea:0b:d3:ea:56:fa:95:8b:fc:c7:80:a3:f8: 2f:29:19:33:f6:c1:47:34:08:d1:9b:5f:d4:d2:61:99:ae:2f: 8f:05:1f:e9:aa:fa:21:cb:63:12:39:c6:15:c9:f3:29:e0:31: f5:02:4d:d6:e2:d6:ba:ff:7a:51:d3:fb:6f:76:8a:2e:03:7c: 49:5a:11:d7:a8:a0:be:99:26:f3:10:54:d3:a7:7d:fc:ef:0f: 71:63:aa:f7:4c:14:5d:3c:e7:bf:43:93:c4:03:7e:18:9d:72: 06:41:95:9c:01:97:76:3c:35:f2:ed:70:fd:53:89:f0:0d:31: 1d:24:46:84:46:4f:15:78:12:41:dd:cf:a8:4f:a6:65:9c:89: bf:4c:15:c6:35:cd:73:94:9c:52:fd:91:da:53:99:12:3c:14: a5:b8:5c:cc:43:48:ff:9a:45:b4:4a:dc:cd:de:35:d0:57:72: 77:26:49:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjYwOTIwMTgyOTA0WhcNMjYwOTI3MTgyOTA0WjAYMRYwFAYD VQQDEw02YWIwMjVmMS01ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpjWuILRN4O3gMYsl07V46Vq+OFULtECghUjm36KOO8TuNX1hgPdHktGWHvL AG2NO8AnVkS3wavGOuCI9Ork0NdhcHRiB8JwpB3pGRDc5LKvL9ne4vkivPKyXYpb 4nJ2DOS1bEi8X8fxNG5D69aGFgEGHiNryjjLeCGLpqv93JhHIEhVWLg+FHIsxezQ Z1Oftjkv1HYqTurhKEu8YpGbKUuozG7IOY4qq0APX3rrJgO3AkyaLdvzYYYfxBWy R7iwvCSIK2rpujsXBG4PyAWoF8GjXgjQxyXWtY7t8Xm7z5MwBXD7hqLBPv5f+tN5 kkUl2D+31O0AGYYuG0DykswT9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEM9IP5t t4+t159M7rLqkO3o8bDXMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0NobanXaYP/BoPnq2eA5tansVN47SHA+5Bu4pjimhqVjkrPM+Z7wJnWBoXc zKJNTvpDG3Eilyjs1Z3+sdvLTNSRwSIpOD4oP11F4G3qC9PqVvqVi/zHgKP4LykZ M/bBRzQI0Ztf1NJhma4vjwUf6ar6IctjEjnGFcnzKeAx9QJN1uLWuv96UdP7b3aK LgN8SVoR16igvpkm8xBU06d9/O8PcWOq90wUXTznv0OTxAN+GJ1yBkGVnAGXdjw1 8u1w/VOJ8A0xHSRGhEZPFXgSQd3PqE+mZZyJv0wVxjXNc5ScUv2R2lOZEjwUpbhc zENI/5pFtErczd410FdydyZJ3w== -----END CERTIFICATE-----Generated at Tue Sep 22 10:10:07 2026 by rpki-client