$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft File: FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft (raw, json) Hash identifier: C/WDysvHZGl7qAbXfJ+SZIZ6hnPB63RHRErunOhccpA= Subject key identifier: B1:84:4A:23:98:A3:BD:86:06:FA:63:DD:12:FE:EF:E0:34:D5:3C:20 Authority key identifier: 15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79 Certificate issuer: /CN=A91B539C/serialNumber=157FAE07B301ECB484CBB8083B68237192056C79 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft Manifest number: 33 Signing time: Mon 21 Sep 2026 08:37:57 +0000 Manifest this update: Mon 21 Sep 2026 08:37:57 +0000 Manifest next update: Mon 28 Sep 2026 08:37:57 +0000 Files and hashes: 1: FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl (hash: fcStHtXMfnHVN9BVfP8JgQ73udvfyVdE75nLXgMnXyg=) 2: DA76ABD0688611F19B84FAD56C47A888.roa (hash: yWiFxFgKw6kCu5u2sZNHSYxj5QrnFeWSEHXikTWB910=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B539C, serialNumber=157FAE07B301ECB484CBB8083B68237192056C79 Validity Not Before: Sep 21 08:37:57 2026 GMT Not After : Sep 28 08:37:57 2026 GMT Subject: CN=6ab0ece5-647a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:17:92:63:da:e5:61:9b:a3:c3:e6:75:25: 6a:06:7d:71:08:9b:74:e8:b0:60:fc:e9:62:d0:de: 42:7e:a6:5f:aa:ff:52:23:99:6f:ae:f8:06:80:a3: f1:01:ce:e4:ba:3f:78:6f:08:11:23:c5:0e:fd:0f: f1:41:55:22:22:f5:db:89:6b:b0:ae:ac:95:82:69: 18:03:b2:90:c9:dc:f6:78:ca:62:90:00:71:ad:1e: 67:00:e7:e8:f7:a5:3a:d1:4a:29:41:8e:2e:f2:24: ab:5c:3f:f2:42:4d:32:64:d3:cc:f4:49:09:21:f6: a3:b3:22:be:a5:28:85:7e:8d:69:55:51:08:d6:91: a6:b9:48:2f:97:96:06:fa:09:08:f7:c7:2d:c0:eb: c7:f7:5f:33:8e:26:0e:08:db:c9:21:12:a4:ed:58: 62:af:2f:fe:2e:7a:0b:35:8f:a0:b7:c1:2a:0d:79: 24:fd:e0:55:cb:bb:d7:4b:5b:38:18:40:4a:25:ac: b9:d7:a2:bc:27:bf:b0:e5:f9:63:28:03:c6:54:2b: 51:44:df:51:49:81:ef:ec:3f:12:09:2f:22:4d:10: 25:4b:30:6e:cd:c7:8a:5c:a2:59:7c:61:58:88:c2: 43:c6:9a:92:d4:f8:05:1f:7f:03:61:90:36:ae:35: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:84:4A:23:98:A3:BD:86:06:FA:63:DD:12:FE:EF:E0:34:D5:3C:20 X509v3 Authority Key Identifier: keyid:15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ac:af:91:d8:8a:e2:43:ea:59:eb:ed:0a:b2:6d:f3:a9:94: 51:93:e5:03:7b:a0:a7:0f:bf:3b:8f:79:50:df:2b:91:03:f4: 59:64:58:e3:7e:a8:9e:af:15:13:e4:b0:63:46:83:77:02:c0: 49:9c:74:8c:18:a5:f1:51:2f:11:be:87:3d:7e:91:14:a3:ed: 14:d4:e1:ca:7e:45:14:68:51:47:84:0f:b5:96:b5:df:54:40: 60:3a:e4:74:db:5f:99:b2:6b:c3:2a:30:05:86:e6:2d:ee:98: 64:da:5c:9e:83:86:95:c5:58:a7:04:e5:5d:95:ca:f7:07:53: 6e:5b:d7:64:a1:c5:9e:c3:2f:b0:c0:a8:86:43:4a:ab:8f:0f: e2:c6:79:70:f3:44:2c:ae:fe:19:2c:de:57:79:a2:f1:13:4e: 5c:b7:86:b9:6a:75:87:17:0e:89:56:62:88:96:52:4b:e3:87: c1:3f:b6:6c:90:5d:57:21:6a:49:d7:da:91:7e:e6:99:15:b2: 93:a8:da:70:67:ce:01:1e:07:cc:34:4b:23:64:c2:3b:ed:13: 3b:35:5f:51:71:bf:67:49:16:b7:08:7c:3e:85:6e:49:b9:a5: 6d:5c:16:80:f2:67:8e:7a:7d:b4:7b:7f:18:3f:1a:6f:40:46: 82:32:38:15 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTM5QzExMC8GA1UEBRMoMTU3RkFFMDdCMzAxRUNCNDg0Q0JCODA4M0I2ODIzNzE5 MjA1NkM3OTAeFw0yNjA5MjEwODM3NTdaFw0yNjA5MjgwODM3NTdaMBgxFjAUBgNV BAMTDTZhYjBlY2U1LTY0N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClmxeSY9rlYZujw+Z1JWoGfXEIm3TosGD86WLQ3kJ+pl+q/1IjmW+u+AaAo/EB zuS6P3hvCBEjxQ79D/FBVSIi9duJa7CurJWCaRgDspDJ3PZ4ymKQAHGtHmcA5+j3 pTrRSilBji7yJKtcP/JCTTJk08z0SQkh9qOzIr6lKIV+jWlVUQjWkaa5SC+Xlgb6 CQj3xy3A68f3XzOOJg4I28khEqTtWGKvL/4uegs1j6C3wSoNeST94FXLu9dLWzgY QEolrLnXorwnv7Dl+WMoA8ZUK1FE31FJge/sPxIJLyJNECVLMG7Nx4pcoll8YViI wkPGmpLU+AUffwNhkDauNSC/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsYRKI5ij vYYG+mPdEv7v4DTVPCAwHwYDVR0jBBgwFoAUFX+uB7MB7LSEy7gIO2gjcZIFbHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1MzlDLzU4RjY2NTZFNjg4 NjExRjFBOUREMzBDRTZDNDdBODg4L0ZYLXVCN01CN0xTRXk3Z0lPMmdqY1pJRmJI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRlgtdUI3TUI3TFNFeTdnSU8yZ2pjWklGYkhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 MzlDLzU4RjY2NTZFNjg4NjExRjFBOUREMzBDRTZDNDdBODg4L0ZYLXVCN01CN0xT RXk3Z0lPMmdqY1pJRmJIay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAnrK+R2IriQ+pZ6+0Ksm3zqZRRk+UDe6CnD787j3lQ3yuRA/RZZFjjfqierxUT 5LBjRoN3AsBJnHSMGKXxUS8Rvoc9fpEUo+0U1OHKfkUUaFFHhA+1lrXfVEBgOuR0 21+ZsmvDKjAFhuYt7phk2lyeg4aVxVinBOVdlcr3B1NuW9dkocWewy+wwKiGQ0qr jw/ixnlw80Qsrv4ZLN5XeaLxE05ct4a5anWHFw6JVmKIllJL44fBP7ZskF1XIWpJ 19qRfuaZFbKTqNpwZ84BHgfMNEsjZMI77RM7NV9Rcb9nSRa3CHw+hW5JuaVtXBaA 8meOen20e38YPxpvQEaCMjgV -----END CERTIFICATE-----Generated at Mon Sep 21 18:12:35 2026 by rpki-client