$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: 7o4GNCTHUde3PA3kUX+lrlXyjA74pL7WkXLyUI3w0ZA= Subject key identifier: 8C:C7:3A:98:9A:43:84:F9:A2:C6:A0:FE:7C:89:2E:EA:01:75:56:0D Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 0A04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1B3C Signing time: Sun 20 Sep 2026 17:10:53 +0000 Manifest this update: Sun 20 Sep 2026 17:10:52 +0000 Manifest next update: Sun 27 Sep 2026 17:10:52 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: Iz0m+8R0KUlLM0HmSwzETwynw2BhZv3uQI0BhCdIwv4=) 2: C3D424C4F4F611F0B230A1D14E6F56BC.roa (hash: eIWV2PVAmeguQkSyB8K0knff+OjMcoKXdZxZHafjh0o=) 3: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (hash: 7tv/5D9HntchiRfctALMuiuXJj9zM35Uyt8wDbjn1wE=) 4: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: xbADL7cJr+2vRtqNmInV63ZP0c0h+KFlCiFFTFNf4Uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Sep 20 17:10:52 2026 GMT Not After : Sep 27 17:10:52 2026 GMT Subject: CN=6ab0139c-3cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:32:b5:53:60:bb:39:b6:fc:1a:d9:15:6b: fa:84:9d:0f:7e:71:84:cc:bf:a0:a7:b2:cc:ed:e6: ce:b7:d5:c9:64:a7:df:87:aa:45:dc:5a:aa:4b:13: 3c:57:dd:bb:8d:08:c5:b2:32:3c:a2:47:b9:6d:51: c2:97:c1:09:97:fb:1e:57:71:e0:cc:f4:6b:5e:34: c7:2c:3b:3a:0e:11:96:f2:70:96:17:29:8d:74:c3: 32:af:a9:44:95:c5:60:fd:6a:f6:65:8f:14:81:35: d2:cd:9b:2e:e1:34:6d:f3:0b:95:72:7d:a7:0c:df: 70:97:fe:6d:0c:70:3b:8f:6b:19:fd:00:02:d2:76: 78:fd:e3:8d:91:f4:00:fd:e8:35:f8:6b:38:14:e5: fa:27:9b:2a:d1:6c:7d:3e:58:53:23:6f:39:b0:a3: 3b:71:d3:5d:ab:c6:7f:1f:37:05:aa:ce:ce:d4:31: 29:6c:20:5a:65:ef:e5:6d:1e:b9:5d:d1:7c:c2:78: 27:1e:4f:49:64:5c:49:16:9b:7a:c6:80:52:6a:f5: 1f:78:4f:c3:05:c0:9e:f6:41:d9:09:10:b8:d6:9d: 43:7b:d5:c2:d1:7c:bc:ef:73:5a:6a:b4:69:c3:3b: 0a:f4:be:da:d8:9f:28:59:1e:73:1f:9a:e1:3e:a9: 00:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:3A:98:9A:43:84:F9:A2:C6:A0:FE:7C:89:2E:EA:01:75:56:0D X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0b:ba:d0:1f:ad:9e:89:61:7a:25:25:25:aa:1b:0e:2f:64: a7:39:b4:36:4c:c3:8a:24:fe:02:64:ae:38:e7:d6:34:bd:ef: e0:6f:b1:10:ce:dd:ae:4b:20:b3:34:25:d7:e7:40:34:95:6e: 64:2f:45:b8:83:9d:9e:cf:fa:bb:58:8d:97:89:ba:a7:eb:0c: 9a:59:1f:5e:1c:4e:ce:4b:e5:c7:b8:f9:a1:69:69:c6:e2:31: 34:7c:30:6d:8c:1f:2a:07:ff:61:76:32:73:c8:06:a0:b2:20: fd:7d:2e:39:ac:33:9d:b8:67:c6:a2:71:a4:d3:d3:ae:73:ae: 3c:b7:6c:53:f5:7e:87:7a:25:44:31:32:4e:36:5f:01:12:76: e6:38:cd:d9:cc:04:34:4a:e3:c0:55:b0:f9:89:2e:d9:04:16: d7:33:ed:bc:df:bc:c4:28:d0:71:87:8a:24:de:ba:3c:66:2e: 4d:7d:c0:cf:6f:8a:f3:59:c2:5a:5c:74:71:99:eb:8b:e4:40: 33:d4:b8:ac:ba:70:8d:c1:af:c8:6f:3c:bd:3d:5c:00:e7:f8: 04:98:08:86:0d:16:ab:c3:70:52:76:66:ea:bd:72:0f:2e:8c: 48:45:ea:9e:e6:3b:40:58:f4:dc:90:0c:ba:41:4f:14:cd:d3: e5:33:d7:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjYwOTIwMTcxMDUyWhcNMjYwOTI3MTcxMDUyWjAYMRYwFAYD VQQDEw02YWIwMTM5Yy0zY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTMytVNguzm2/BrZFWv6hJ0PfnGEzL+gp7LM7ebOt9XJZKffh6pF3FqqSxM8 V927jQjFsjI8oke5bVHCl8EJl/seV3HgzPRrXjTHLDs6DhGW8nCWFymNdMMyr6lE lcVg/Wr2ZY8UgTXSzZsu4TRt8wuVcn2nDN9wl/5tDHA7j2sZ/QAC0nZ4/eONkfQA /eg1+Gs4FOX6J5sq0Wx9PlhTI285sKM7cdNdq8Z/HzcFqs7O1DEpbCBaZe/lbR65 XdF8wngnHk9JZFxJFpt6xoBSavUfeE/DBcCe9kHZCRC41p1De9XC0Xy873NaarRp wzsK9L7a2J8oWR5zH5rhPqkA3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzHOpia Q4T5osag/nyJLuoBdVYNMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIwu60B+tnolheiUlJaobDi9kpzm0NkzDiiT+AmSuOOfWNL3v4G+xEM7drksg szQl1+dANJVuZC9FuIOdns/6u1iNl4m6p+sMmlkfXhxOzkvlx7j5oWlpxuIxNHww bYwfKgf/YXYyc8gGoLIg/X0uOawznbhnxqJxpNPTrnOuPLdsU/V+h3olRDEyTjZf ARJ25jjN2cwENErjwFWw+Yku2QQW1zPtvN+8xCjQcYeKJN66PGYuTX3Az2+K81nC Wlx0cZnri+RAM9S4rLpwjcGvyG88vT1cAOf4BJgIhg0Wq8NwUnZm6r1yDy6MSEXq nuY7QFj03JAMukFPFM3T5TPXRA== -----END CERTIFICATE-----Generated at Tue Sep 22 18:30:08 2026 by rpki-client