$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft File: Fkl8IIYtsywfe60cEQzGsoBSRXU.mft (raw, json) Hash identifier: f/XxwEMIcrWsQpliaLGdS/EEBMmMFXrFk46H1PykJOg= Subject key identifier: 2E:DD:E4:D7:74:F4:B3:1D:C4:84:D7:09:97:1A:DE:C9:A6:5E:7C:EC Authority key identifier: 16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75 Certificate issuer: /CN=A91BA3E7/serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft Manifest number: 20 Signing time: Mon 21 Sep 2026 08:51:41 +0000 Manifest this update: Mon 21 Sep 2026 08:51:40 +0000 Manifest next update: Mon 28 Sep 2026 08:51:40 +0000 Files and hashes: 1: Fkl8IIYtsywfe60cEQzGsoBSRXU.crl (hash: 1aVLXmuF4H9hssAeZ/D6ih5mAXlkHiIsdeHhWkVUp10=) 2: 2C58A8288A3C11F18F5718FE3111F970.roa (hash: SONSYy4tIc7OLfGgQbiSXlMj9cIg5ZBgBiRgNLwC7Qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA3E7, serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575 Validity Not Before: Sep 21 08:51:40 2026 GMT Not After : Sep 28 08:51:40 2026 GMT Subject: CN=6ab0f01d-6d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:cc:97:35:23:f7:75:bb:e2:50:f9:ca:97: 11:e0:b7:c3:fd:01:0b:9e:ad:6e:9e:3d:41:85:3a: 95:8c:7e:6e:c7:e9:d8:b6:15:d4:bb:a4:a7:29:41: 88:02:d0:84:cb:b7:9a:24:77:56:80:f4:ad:e0:1d: ad:dc:93:42:ea:2c:6c:21:1b:fa:74:00:73:ca:7e: 9d:b9:f5:ef:91:69:e4:69:3d:41:90:8f:e1:ee:9f: 96:c9:07:39:44:1a:10:7b:1f:41:de:53:eb:07:e3: dd:7e:2d:7c:7b:77:5b:d8:6b:59:af:1b:af:7b:8f: db:e0:67:4d:0f:f5:89:4b:e4:44:75:1a:0f:72:ea: 07:e9:db:15:0d:ba:38:c3:10:74:03:1b:df:da:92: 78:be:63:6d:00:98:2b:d8:ba:2f:64:04:36:41:3a: 0a:bb:38:77:8f:03:bd:52:a0:f0:10:90:dc:29:f4: be:21:58:7e:67:97:f1:d0:14:5b:9e:c7:df:7e:d3: 10:e3:45:4e:ec:25:18:5f:13:4e:92:85:43:f6:63: 87:d7:2b:6f:1c:8d:be:a6:b0:86:ff:12:46:9a:e5: a0:b1:5b:1d:c5:db:5f:19:94:08:be:d5:b9:3a:4f: 22:43:d9:da:21:32:ed:ff:a7:ea:65:b3:8e:63:17: 56:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:E4:D7:74:F4:B3:1D:C4:84:D7:09:97:1A:DE:C9:A6:5E:7C:EC X509v3 Authority Key Identifier: keyid:16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:45:4a:b3:b2:97:e6:c2:d7:c9:79:42:d6:2e:74:3b:0c:f1: fe:ed:9f:50:1a:bb:29:ad:b5:a8:5f:66:c8:a4:a8:c0:79:15: 4b:31:53:2a:78:62:b5:fa:b7:a6:6d:0a:58:a5:35:3a:3b:99: 17:4d:a5:ed:1b:69:ed:8e:69:8a:6f:3e:cf:5b:65:f4:d1:6e: 13:d1:15:e7:fb:cf:a8:74:92:ad:7c:07:8c:03:36:1c:a7:3f: f1:80:ea:8d:8c:eb:4b:f9:99:c0:4f:85:28:0e:42:04:29:90: 31:7b:82:d1:93:59:2b:f1:b5:73:45:4c:05:8d:a0:06:8b:c6: e4:90:cd:f9:6e:85:74:f0:6a:52:83:32:e7:2d:de:ff:08:f0: a9:ec:c2:f6:d1:3d:81:63:98:12:76:39:89:e7:e7:a7:3b:75: 43:df:01:d9:2b:9e:e6:44:9d:f9:a1:11:15:9c:5d:12:b6:4d: d2:74:82:88:60:e3:26:cd:3d:63:e9:e5:ae:40:c8:26:41:74: 0c:ab:91:b9:f3:9a:98:99:5a:e3:b9:cf:a5:fb:33:e6:3a:de: 66:35:9d:a1:1d:81:b6:58:df:e8:18:f4:da:4c:98:62:81:b9: 89:14:2e:fd:13:c6:0b:46:8c:3d:1b:c2:b3:49:63:3b:52:67: 38:3f:0f:6b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTNFNzExMC8GA1UEBRMoMTY0OTdDMjA4NjJEQjMyQzFGN0JBRDFDMTEwQ0M2QjI4 MDUyNDU3NTAeFw0yNjA5MjEwODUxNDBaFw0yNjA5MjgwODUxNDBaMBgxFjAUBgNV BAMTDTZhYjBmMDFkLTZkNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpm8yXNSP3dbviUPnKlxHgt8P9AQuerW6ePUGFOpWMfm7H6di2FdS7pKcpQYgC 0ITLt5okd1aA9K3gHa3ck0LqLGwhG/p0AHPKfp259e+RaeRpPUGQj+Hun5bJBzlE GhB7H0HeU+sH491+LXx7d1vYa1mvG697j9vgZ00P9YlL5ER1Gg9y6gfp2xUNujjD EHQDG9/akni+Y20AmCvYui9kBDZBOgq7OHePA71SoPAQkNwp9L4hWH5nl/HQFFue x99+0xDjRU7sJRhfE06ShUP2Y4fXK28cjb6msIb/Ekaa5aCxWx3F218ZlAi+1bk6 TyJD2dohMu3/p+pls45jF1aVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULt3k13T0 sx3EhNcJlxreyaZefOwwHwYDVR0jBBgwFoAUFkl8IIYtsywfe60cEQzGsoBSRXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBM0U3LzY0Nzc2QkVFOEEx RjExRjE5RTRFQzdBMTY4MTFGOTcwL0ZrbDhJSVl0c3l3ZmU2MGNFUXpHc29CU1JY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmtsOElJWXRzeXdmZTYwY0VRekdzb0JTUlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB M0U3LzY0Nzc2QkVFOEExRjExRjE5RTRFQzdBMTY4MTFGOTcwL0ZrbDhJSVl0c3l3 ZmU2MGNFUXpHc29CU1JYVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRRUqzspfmwtfJeULWLnQ7DPH+7Z9QGrsprbWoX2bIpKjAeRVLMVMqeGK1+rem bQpYpTU6O5kXTaXtG2ntjmmKbz7PW2X00W4T0RXn+8+odJKtfAeMAzYcpz/xgOqN jOtL+ZnAT4UoDkIEKZAxe4LRk1kr8bVzRUwFjaAGi8bkkM35boV08GpSgzLnLd7/ CPCp7ML20T2BY5gSdjmJ5+enO3VD3wHZK57mRJ35oREVnF0Stk3SdIKIYOMmzT1j 6eWuQMgmQXQMq5G585qYmVrjuc+l+zPmOt5mNZ2hHYG2WN/oGPTaTJhigbmJFC79 E8YLRow9G8KzSWM7Umc4Pw9r -----END CERTIFICATE-----Generated at Mon Sep 21 23:49:21 2026 by rpki-client