$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: b9jRAPm6zg5+JN1jAAKorpF1kDdrfK5VAmvv6X3Xr60= Subject key identifier: 88:6F:7F:1E:DF:DC:FF:37:DD:B7:BF:D1:EE:D8:A8:92:56:2C:3E:BB Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 11A2 Signing time: Sat 10 Oct 2026 17:40:45 +0000 Manifest this update: Sat 10 Oct 2026 17:40:44 +0000 Manifest next update: Sat 17 Oct 2026 17:40:44 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: uQxvsKlFR7NYKjW+POkxLQZ6uekhLrqSkoXt+g1E8w4=) 2: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: Tkxg3E9zZ6oNMWL2MvDhktoFqNUlB3qfA8SouJ2KXDk=) 3: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: Oct 10 17:40:44 2026 GMT Not After : Oct 17 17:40:44 2026 GMT Subject: CN=6aca789c-b6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:2a:ea:d6:fc:30:3b:25:17:fe:8a:f4:a4: 6b:8d:da:c9:a7:b3:30:ba:40:df:f1:4d:8e:fb:b1: 6b:13:90:be:53:a6:15:73:1b:c8:8e:49:eb:95:68: 61:65:b9:29:7e:03:36:27:0a:06:42:8c:3d:69:81: 42:01:99:14:c3:38:47:50:a5:58:5a:5a:b9:6a:16: 49:3d:f6:2b:68:cc:65:b8:36:af:56:aa:ce:f4:af: 23:d0:29:53:45:4a:52:41:83:bc:89:7b:f9:a4:02: fc:48:df:0c:c0:77:6c:67:c1:fc:7c:73:39:c9:6a: 18:5c:22:b1:79:ef:f0:9f:60:67:b8:fd:65:4e:56: 02:cc:c8:dd:2f:a9:0b:06:07:6d:6a:c5:71:d5:08: ae:a9:ea:72:64:c1:9e:0b:cb:16:f2:95:75:6f:92: c7:61:e1:4f:cb:2b:db:53:73:de:a4:d0:eb:ca:c5: cc:16:6e:71:be:76:26:93:c5:cd:01:ed:85:26:25: 8c:ca:f9:eb:b6:82:d2:bc:0a:df:d6:5f:f3:2b:e7: 77:0f:96:e5:6a:8b:74:c9:18:ec:e6:f9:37:d2:e4: a8:78:04:89:7f:c8:30:fd:cf:7d:d1:57:6a:1e:6f: b5:6b:bc:e8:ca:f0:99:d7:40:ce:12:40:f2:bf:e5: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:7F:1E:DF:DC:FF:37:DD:B7:BF:D1:EE:D8:A8:92:56:2C:3E:BB X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a7:64:20:98:3e:e5:25:80:35:54:ef:4c:a8:c8:e4:c8:bd: 35:11:78:84:0d:0f:a5:19:2e:73:26:25:b8:72:d6:0a:72:d1: c0:c8:9b:b1:ef:79:ce:80:91:ab:cb:cc:2f:58:80:14:e0:f8: aa:13:33:ae:13:a2:b4:8b:d7:87:bd:63:33:96:25:d4:07:99: 81:b2:31:60:a8:59:41:15:af:ac:6f:22:b9:7a:36:4f:bb:a9: 81:1c:45:52:24:ad:af:2b:2b:57:81:a7:cb:78:fd:6c:28:53: 00:68:aa:94:e7:61:7f:05:ac:16:29:d3:ac:2d:2e:bc:7d:c9: 33:9c:4d:43:48:5c:e3:8d:35:59:68:1b:ba:85:e0:99:f7:57: c9:a7:8d:77:ca:bd:59:54:a6:8b:0a:51:ab:7b:8d:60:d7:2d: 6a:f2:f3:b4:6b:7b:40:1c:40:a1:9c:47:60:71:14:0d:db:61: 2b:26:5d:de:f7:33:ed:4b:37:b6:13:d1:bd:94:91:c0:e9:18: 11:6f:e7:e4:bd:e6:7c:90:76:eb:02:60:b1:9b:3b:e2:3f:89: 80:c5:f8:99:cc:35:87:a7:f8:7e:19:3f:a2:8c:30:67:84:fd: c9:1a:3d:5a:42:9f:01:03:94:d6:00:f4:54:26:54:b8:52:21: 68:e4:1d:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjYxMDEwMTc0MDQ0WhcNMjYxMDE3MTc0MDQ0WjAYMRYwFAYD VQQDEw02YWNhNzg5Yy1iNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprgq6tb8MDslF/6K9KRrjdrJp7MwukDf8U2O+7FrE5C+U6YVcxvIjknrlWhh ZbkpfgM2JwoGQow9aYFCAZkUwzhHUKVYWlq5ahZJPfYraMxluDavVqrO9K8j0ClT RUpSQYO8iXv5pAL8SN8MwHdsZ8H8fHM5yWoYXCKxee/wn2BnuP1lTlYCzMjdL6kL BgdtasVx1QiuqepyZMGeC8sW8pV1b5LHYeFPyyvbU3PepNDrysXMFm5xvnYmk8XN Ae2FJiWMyvnrtoLSvArf1l/zK+d3D5blaot0yRjs5vk30uSoeASJf8gw/c990Vdq Hm+1a7zoyvCZ10DOEkDyv+UQcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhvfx7f 3P833be/0e7YqJJWLD67MB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX6dkIJg+5SWANVTvTKjI5Mi9NRF4hA0PpRkucyYluHLWCnLRwMibse95zoCR q8vML1iAFOD4qhMzrhOitIvXh71jM5Yl1AeZgbIxYKhZQRWvrG8iuXo2T7upgRxF UiStrysrV4Gny3j9bChTAGiqlOdhfwWsFinTrC0uvH3JM5xNQ0hc4401WWgbuoXg mfdXyaeNd8q9WVSmiwpRq3uNYNctavLztGt7QBxAoZxHYHEUDdthKyZd3vcz7Us3 thPRvZSRwOkYEW/n5L3mfJB26wJgsZs74j+JgMX4mcw1h6f4fhk/oowwZ4T9yRo9 WkKfAQOU1gD0VCZUuFIhaOQdFQ== -----END CERTIFICATE-----Generated at Sun Oct 11 22:11:37 2026 by rpki-client