$ rpki-client -vvf rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft File: FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft (raw, json) Hash identifier: lEQBpGkgTspJ3N/RUW0thofXohA8GUkJyXY7E62Pz7o= Subject key identifier: B2:91:21:BB:1F:51:5D:2F:C7:9B:21:0E:CF:33:A9:D4:22:A2:A2:D9 Authority key identifier: 15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79 Certificate issuer: /CN=A91B539C/serialNumber=157FAE07B301ECB484CBB8083B68237192056C79 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft Manifest number: 16 Signing time: Mon 27 Jul 2026 11:24:15 +0000 Manifest this update: Mon 27 Jul 2026 11:24:15 +0000 Manifest next update: Mon 03 Aug 2026 11:24:15 +0000 Files and hashes: 1: FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl (hash: YLCP6C5G7vPATD4sxQApvkXT5bRK6C7ZZ/G1ILp0KAA=) 2: DA76ABD0688611F19B84FAD56C47A888.roa (hash: yWiFxFgKw6kCu5u2sZNHSYxj5QrnFeWSEHXikTWB910=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B539C, serialNumber=157FAE07B301ECB484CBB8083B68237192056C79 Validity Not Before: Jul 27 11:24:15 2026 GMT Not After : Aug 3 11:24:15 2026 GMT Subject: CN=6a673fdf-4ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:62:71:be:c2:f4:61:d2:19:62:eb:a2:2a: 01:2b:4f:5c:a1:47:d9:e4:5a:44:fb:3a:53:fa:bb: e2:5a:8b:0c:15:a8:f4:3f:1c:7a:08:0c:57:79:fe: 12:94:48:6c:e4:bc:5e:fc:d6:3e:52:a5:18:df:f7: 67:56:ee:ff:05:ed:40:f7:ef:3c:7b:5e:d5:9e:02: 0e:33:13:e7:e1:a6:34:14:97:d8:16:5d:18:53:fb: 87:fe:d1:14:5b:62:0c:aa:b5:14:6d:30:f0:f1:91: 1c:95:a1:d0:6f:bd:33:a1:e1:c1:2a:e8:f4:d1:10: f5:08:5e:56:67:86:57:7e:c0:1b:d8:63:a3:39:13: dc:1a:ee:db:6e:7c:ba:d3:b7:57:ed:ed:05:03:15: 12:43:61:ac:55:8d:e9:f1:8f:ec:60:33:84:1e:6e: ab:e7:c3:13:25:96:98:97:50:11:87:31:fa:75:70: fe:0c:62:64:1f:3d:8c:d7:e6:60:00:74:24:ab:8a: 56:79:bd:fc:13:02:d3:13:e5:be:2b:46:e1:fe:64: 4c:55:23:75:0b:26:fd:80:ad:d0:07:3c:28:71:ed: 20:38:18:dc:6d:41:25:9a:f4:da:8e:94:d6:78:ed: 15:f8:ac:6b:d2:1f:f9:95:54:24:c5:21:a4:fb:9b: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:91:21:BB:1F:51:5D:2F:C7:9B:21:0E:CF:33:A9:D4:22:A2:A2:D9 X509v3 Authority Key Identifier: keyid:15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c4:7f:90:04:7c:60:8d:ef:38:14:06:36:b1:79:23:a8:46: ad:24:a2:37:16:bd:7b:bf:59:0c:82:1f:27:28:d7:1e:18:57: f6:0f:3e:93:29:a7:0a:06:ac:0a:b2:e5:28:6f:45:62:c4:68: fe:bd:1f:ad:b8:bf:6a:9d:dc:b6:5c:52:03:df:6d:ba:e5:7c: 2c:55:f6:f7:17:c9:bd:e0:a3:98:4d:6c:8e:1a:c8:e3:20:8f: a8:1f:b3:19:07:8e:86:2f:31:c2:b1:d0:72:3d:65:ef:d5:33: 6f:ea:71:50:e8:50:63:a7:45:77:72:5c:a7:e7:64:5b:0c:86: ea:e9:f4:d1:21:fc:53:8f:07:55:59:f3:91:77:2d:ee:7a:4a: 55:a2:8b:68:1a:73:7b:65:aa:a9:80:81:70:52:21:de:bf:fa: df:54:98:07:18:49:ac:9d:c8:9d:d8:07:68:d9:3b:4c:86:44: a1:68:b4:66:0f:b8:79:c9:3f:ae:20:c5:55:1b:f3:5f:28:9c: c0:b0:61:25:38:72:2b:6f:74:0c:14:8b:9e:26:3d:af:4f:1b: 54:90:37:52:f0:38:00:17:f8:2d:53:2a:3b:58:31:67:56:c1: 72:b6:e3:59:b2:b8:a8:54:6a:27:89:67:d7:f5:8a:96:10:da: 0f:4b:7e:76 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTM5QzExMC8GA1UEBRMoMTU3RkFFMDdCMzAxRUNCNDg0Q0JCODA4M0I2ODIzNzE5 MjA1NkM3OTAeFw0yNjA3MjcxMTI0MTVaFw0yNjA4MDMxMTI0MTVaMBgxFjAUBgNV BAMTDTZhNjczZmRmLTRjYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPRWJxvsL0YdIZYuuiKgErT1yhR9nkWkT7OlP6u+JaiwwVqPQ/HHoIDFd5/hKU SGzkvF781j5SpRjf92dW7v8F7UD37zx7XtWeAg4zE+fhpjQUl9gWXRhT+4f+0RRb YgyqtRRtMPDxkRyVodBvvTOh4cEq6PTREPUIXlZnhld+wBvYY6M5E9wa7ttufLrT t1ft7QUDFRJDYaxVjenxj+xgM4QebqvnwxMllpiXUBGHMfp1cP4MYmQfPYzX5mAA dCSrilZ5vfwTAtMT5b4rRuH+ZExVI3ULJv2ArdAHPChx7SA4GNxtQSWa9NqOlNZ4 7RX4rGvSH/mVVCTFIaT7m7IHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUspEhux9R XS/HmyEOzzOp1CKiotkwHwYDVR0jBBgwFoAUFX+uB7MB7LSEy7gIO2gjcZIFbHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1MzlDLzU4RjY2NTZFNjg4 NjExRjFBOUREMzBDRTZDNDdBODg4L0ZYLXVCN01CN0xTRXk3Z0lPMmdqY1pJRmJI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRlgtdUI3TUI3TFNFeTdnSU8yZ2pjWklGYkhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 MzlDLzU4RjY2NTZFNjg4NjExRjFBOUREMzBDRTZDNDdBODg4L0ZYLXVCN01CN0xT RXk3Z0lPMmdqY1pJRmJIay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4xH+QBHxgje84FAY2sXkjqEatJKI3Fr17v1kMgh8nKNceGFf2Dz6TKacKBqwK suUob0VixGj+vR+tuL9qndy2XFID32265XwsVfb3F8m94KOYTWyOGsjjII+oH7MZ B46GLzHCsdByPWXv1TNv6nFQ6FBjp0V3clyn52RbDIbq6fTRIfxTjwdVWfORdy3u ekpVootoGnN7ZaqpgIFwUiHev/rfVJgHGEmsncid2Ado2TtMhkShaLRmD7h5yT+u IMVVG/NfKJzAsGElOHIrb3QMFIueJj2vTxtUkDdS8DgAF/gtUyo7WDFnVsFytuNZ srioVGoniWfX9YqWENoPS352 -----END CERTIFICATE-----Generated at Tue Jul 28 15:40:04 2026 by rpki-client