$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: mCic/6bHywi02SXmlYJru2gZyHVjM0rFZGcppQWq41U= Subject key identifier: 74:FC:68:45:68:16:12:D1:20:83:C7:22:A1:A0:99:A8:7A:06:27:C1 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 021C Signing time: Fri 25 Sep 2026 02:56:54 +0000 Manifest this update: Fri 25 Sep 2026 02:56:53 +0000 Manifest next update: Fri 02 Oct 2026 02:56:53 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: I77B1c/emoUGbt73S0AUIXwGKCX9n3MXW5aIszjZWqU=) 2: C6F2B810858711F1BFD2CAA18FA30FBC.roa (hash: ZMTrBfsMxmzIzO9B7U8qM9itshNtWwyMLZ+DyDQjh0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Sep 25 02:56:53 2026 GMT Not After : Oct 2 02:56:53 2026 GMT Subject: CN=6ab5e2f5-0aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:63:5f:5d:fc:5c:6f:4a:dc:28:0c:b8:17:99: 3f:45:41:bc:ea:8c:f1:92:0b:e7:13:87:16:2d:66: 9d:14:27:1b:04:17:19:77:35:31:38:5d:10:86:69: ac:06:ec:25:dd:16:7f:b4:62:3d:b8:00:13:2b:10: 4e:be:e7:0e:ab:72:d8:70:da:f5:6d:20:bd:0d:5d: fd:c3:00:a1:b5:8e:e6:41:5b:38:38:6f:fe:08:06: 25:f1:3f:17:29:d4:fc:ae:be:24:c1:09:bb:e1:c5: c0:ad:0c:d0:1a:95:98:ef:93:e0:13:62:c9:f4:2b: 5b:2f:ed:80:c0:3f:b5:2f:d6:34:5b:31:59:d2:d4: 1f:43:58:0c:d0:a1:0a:44:21:1a:f1:d7:07:bb:0b: e4:a2:75:6a:bd:64:64:fa:07:7a:fc:90:c4:15:c8: db:37:79:e9:8e:ab:a6:e6:95:47:93:e7:2e:6b:fd: db:69:09:d8:17:53:ef:07:ca:a1:bf:d8:65:75:ba: cc:a9:78:35:ff:a6:ff:9d:04:e6:18:92:b9:3a:f2: e5:10:bc:79:a4:d4:33:b5:2e:c5:46:d1:1b:e4:31: 3a:75:b6:b5:e2:19:66:1e:4a:ce:7f:49:7b:46:fa: 73:a9:db:55:ef:6a:a6:77:54:b9:33:e7:58:f3:c8: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FC:68:45:68:16:12:D1:20:83:C7:22:A1:A0:99:A8:7A:06:27:C1 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d8:1e:72:34:4c:f2:f6:0f:99:df:80:24:d7:5a:ef:27:99: 27:b9:ec:5f:07:a6:59:a1:b5:79:76:f2:50:77:16:08:25:d4: f3:b2:3c:be:8d:86:e6:62:8f:88:32:0d:2b:c5:9c:9a:3d:0b: f6:8e:9b:44:b6:d7:b9:bb:7c:75:fb:ba:1d:fe:60:40:50:ed: 2a:6d:e8:2d:5f:12:4d:d0:b5:57:8e:ee:86:86:d0:4b:d4:37: c0:94:25:a8:bf:d5:03:79:39:56:5d:9f:76:04:3b:e7:08:d0: 37:5f:a2:fa:47:88:dd:6b:0d:48:39:b9:2d:e1:42:3d:d4:c3: a6:21:65:62:c2:94:ad:db:d2:26:7d:12:b3:27:e1:5a:98:ae: 29:b5:0c:35:72:8d:a0:0b:0c:dd:4c:66:4e:7a:11:e9:24:54: 19:de:b0:08:b2:60:49:2a:10:68:6f:94:11:53:11:b2:20:af: d2:cf:11:d4:70:cf:ab:70:91:02:65:16:ad:f8:38:77:44:46: 85:3b:70:28:d2:32:75:9c:11:97:36:0d:b8:7f:cb:b6:3e:9e: f7:0e:03:06:4a:0a:d1:31:87:e1:7e:7d:de:ee:8d:a0:02:ec: 60:7a:a5:80:52:e4:64:b1:a0:d2:61:21:8f:d9:8d:a0:4e:a6: ee:d9:04:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjYwOTI1MDI1NjUzWhcNMjYxMDAyMDI1NjUzWjAYMRYwFAYD VQQDEw02YWI1ZTJmNS0wYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjWNfXfxcb0rcKAy4F5k/RUG86ozxkgvnE4cWLWadFCcbBBcZdzUxOF0Qhmms Buwl3RZ/tGI9uAATKxBOvucOq3LYcNr1bSC9DV39wwChtY7mQVs4OG/+CAYl8T8X KdT8rr4kwQm74cXArQzQGpWY75PgE2LJ9CtbL+2AwD+1L9Y0WzFZ0tQfQ1gM0KEK RCEa8dcHuwvkonVqvWRk+gd6/JDEFcjbN3npjqum5pVHk+cua/3baQnYF1PvB8qh v9hldbrMqXg1/6b/nQTmGJK5OvLlELx5pNQztS7FRtEb5DE6dba14hlmHkrOf0l7 RvpzqdtV72qmd1S5M+dY88hXXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHT8aEVo FhLRIIPHIqGgmah6BifBMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApNgecjRM8vYPmd+AJNda7yeZJ7nsXwemWaG1eXbyUHcWCCXU87I8vo2G5mKP iDINK8Wcmj0L9o6bRLbXubt8dfu6Hf5gQFDtKm3oLV8STdC1V47uhobQS9Q3wJQl qL/VA3k5Vl2fdgQ75wjQN1+i+keI3WsNSDm5LeFCPdTDpiFlYsKUrdvSJn0Ssyfh WpiuKbUMNXKNoAsM3UxmTnoR6SRUGd6wCLJgSSoQaG+UEVMRsiCv0s8R1HDPq3CR AmUWrfg4d0RGhTtwKNIydZwRlzYNuH/Ltj6e9w4DBkoK0TGH4X593u6NoALsYHql gFLkZLGg0mEhj9mNoE6m7tkEEA== -----END CERTIFICATE-----Generated at Sat Sep 26 18:21:49 2026 by rpki-client