$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft File: FU2hKxG1QFxQywEZ42qL8-0NIbw.mft (raw, json) Hash identifier: J4ZJ2Jg7mt0ZKoNRPF+aG5YV8UP/0HRlFUoGMfQPFvA= Subject key identifier: 16:9C:18:DD:4A:2D:CB:F9:D6:5F:CA:3D:45:CB:17:E2:4B:EA:52:C2 Authority key identifier: 15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC Certificate issuer: /CN=A912A2C1/serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft Manifest number: 3F Signing time: Fri 25 Sep 2026 08:37:40 +0000 Manifest this update: Fri 25 Sep 2026 08:37:39 +0000 Manifest next update: Fri 02 Oct 2026 08:37:39 +0000 Files and hashes: 1: FU2hKxG1QFxQywEZ42qL8-0NIbw.crl (hash: PRXFGAp89N5Xh2NPMhI9VlD3GeW7ReEQMcJAS1AxZgQ=) 2: 77A068EA57D611F1A509C21FCD833773.roa (hash: obXRKQp33behMNw0kLg97yChlSrOJ2Iv9yjscfOnr/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A2C1, serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC Validity Not Before: Sep 25 08:37:39 2026 GMT Not After : Oct 2 08:37:39 2026 GMT Subject: CN=6ab632d4-c9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:90:21:39:cd:4e:28:76:79:21:2c:fd:78: c1:18:13:97:68:ad:8c:dc:83:e0:74:0e:df:e1:81: 10:41:e4:1f:7a:0f:03:88:37:4e:43:4c:65:4d:55: 7d:d5:04:83:ee:d4:df:5a:c6:56:60:50:3c:08:76: da:ea:a0:81:7e:18:02:ea:ad:eb:48:cf:1e:92:10: b4:58:10:6a:67:7b:87:1b:4f:1c:0e:bb:61:c0:46: c8:b2:f1:eb:f8:a8:27:ae:6d:54:b4:da:ca:21:30: 7c:6b:0f:c5:9d:b2:73:dc:60:22:59:f6:ad:2c:1c: bf:3a:8b:cf:f2:53:cb:be:05:65:a3:95:4f:d8:34: b0:26:b6:46:f9:d6:c7:b7:e8:be:5e:2d:50:9b:ed: 13:0e:c0:d4:67:55:b1:4f:26:10:e0:20:bf:4d:1f: 3c:65:a6:51:6e:c0:30:cd:48:dd:81:d6:f9:ea:ef: ea:e6:83:d7:34:4c:60:e3:45:a0:94:94:48:ee:b7: 35:ec:1d:87:6e:89:2f:e1:05:7a:b5:81:0c:df:5c: 36:98:7a:a0:95:b8:82:a8:1c:3d:8a:f7:38:f0:cf: e9:c2:2f:cf:7f:10:dc:6f:b1:c7:47:75:c3:7e:26: 82:7a:09:f6:37:0a:95:32:0d:7c:ce:d1:5d:95:21: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:18:DD:4A:2D:CB:F9:D6:5F:CA:3D:45:CB:17:E2:4B:EA:52:C2 X509v3 Authority Key Identifier: keyid:15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4c:47:13:0c:26:f6:c2:80:c3:61:34:f6:45:27:26:52:69: ff:10:a1:0b:fd:be:7a:8e:91:db:0f:e4:c8:8d:9e:b3:b1:12: 27:b3:b9:16:aa:ea:dc:0e:d1:15:72:a2:be:a2:ed:c2:1b:1d: 5a:a5:9d:ee:8c:c6:6e:69:a2:35:1f:65:dc:2d:b7:bd:75:7c: 4b:20:27:85:83:96:e3:7c:90:3f:49:da:69:ff:a6:5d:d5:98: 4a:fc:73:1e:97:a4:59:74:b7:46:53:14:da:96:79:e0:89:a4: b7:96:16:79:87:6e:c3:97:f1:5b:b2:2a:de:da:4b:60:21:a2: 7e:d9:33:a9:68:cc:a9:4d:ee:9f:0b:28:63:cf:ce:6d:3f:81: 28:06:1b:bd:45:3c:b5:43:ff:c3:29:8f:41:b4:ca:9a:e6:1b: de:a4:93:34:33:0a:19:2b:41:00:8c:35:ef:2e:8c:64:9c:6a: 2c:39:53:24:c0:a4:58:4f:e9:d9:56:c5:77:ed:a3:9b:a2:50: 02:b1:b2:97:f1:34:4a:7b:50:e4:1e:e1:52:3c:dc:eb:06:27: 33:f0:c1:e1:f8:fe:ad:40:af:be:7c:84:99:76:79:c2:d6:09: 9f:6e:a6:a4:19:f3:33:ee:a0:b6:4a:df:1a:a7:6b:b6:ce:e7: 53:2e:9b:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTJDMTExMC8GA1UEBRMoMTU0REExMkIxMUI1NDA1QzUwQ0IwMTE5RTM2QThCRjNF RDBEMjFCQzAeFw0yNjA5MjUwODM3MzlaFw0yNjEwMDIwODM3MzlaMBgxFjAUBgNV BAMTDTZhYjYzMmQ0LWM5YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3LpAhOc1OKHZ5ISz9eMEYE5dorYzcg+B0Dt/hgRBB5B96DwOIN05DTGVNVX3V BIPu1N9axlZgUDwIdtrqoIF+GALqretIzx6SELRYEGpne4cbTxwOu2HARsiy8ev4 qCeubVS02sohMHxrD8WdsnPcYCJZ9q0sHL86i8/yU8u+BWWjlU/YNLAmtkb51se3 6L5eLVCb7RMOwNRnVbFPJhDgIL9NHzxlplFuwDDNSN2B1vnq7+rmg9c0TGDjRaCU lEjutzXsHYduiS/hBXq1gQzfXDaYeqCVuIKoHD2K9zjwz+nCL89/ENxvscdHdcN+ JoJ6CfY3CpUyDXzO0V2VIVvBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFpwY3Uot y/nWX8o9RcsX4kvqUsIwHwYDVR0jBBgwFoAUFU2hKxG1QFxQywEZ42qL8+0NIbww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBMkMxLzE4OUNEOTY0NTdE NjExRjFCQ0QwNzBDQ0NDODMzNzczL0ZVMmhLeEcxUUZ4UXl3RVo0MnFMOC0wTkli dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlUyaEt4RzFRRnhReXdFWjQycUw4LTBOSWJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB MkMxLzE4OUNEOTY0NTdENjExRjFCQ0QwNzBDQ0NDODMzNzczL0ZVMmhLeEcxUUZ4 UXl3RVo0MnFMOC0wTklidy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9TEcTDCb2woDDYTT2RScmUmn/EKEL/b56jpHbD+TIjZ6zsRIns7kWqurcDtEV cqK+ou3CGx1apZ3ujMZuaaI1H2XcLbe9dXxLICeFg5bjfJA/Sdpp/6Zd1ZhK/HMe l6RZdLdGUxTalnngiaS3lhZ5h27Dl/Fbsire2ktgIaJ+2TOpaMypTe6fCyhjz85t P4EoBhu9RTy1Q//DKY9BtMqa5hvepJM0MwoZK0EAjDXvLoxknGosOVMkwKRYT+nZ VsV37aObolACsbKX8TRKe1DkHuFSPNzrBicz8MHh+P6tQK++fISZdnnC1gmfbqak GfMz7qC2St8ap2u2zudTLptK -----END CERTIFICATE-----Generated at Fri Sep 25 18:15:23 2026 by rpki-client