$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: PfxjD6Bmc4shUybLYkixQgqs+mYjGFEzvtt0XICwxoA= Subject key identifier: 2A:07:9D:27:7F:A2:8C:5F:90:F7:6B:A7:16:DE:22:C4:AB:F8:FE:BB Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 08C4 Signing time: Thu 24 Sep 2026 20:28:40 +0000 Manifest this update: Thu 24 Sep 2026 20:28:39 +0000 Manifest next update: Thu 01 Oct 2026 20:28:39 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: WrrlMXlACEEfa4DQl+OtzeSFUHAiZfIPKpaYkbknLK4=) 2: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=) 3: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=) 4: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: MaFJmDPMqlk1C6MUJjdtLiNgPwGqra//weYceabgP/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: Sep 24 20:28:39 2026 GMT Not After : Oct 1 20:28:39 2026 GMT Subject: CN=6ab587f8-0ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:aa:24:57:e9:e9:4c:49:c0:01:09:9a:68: c7:3f:38:1c:29:0e:bd:c4:47:e8:90:21:76:fe:6c: 28:7a:f3:b6:44:8b:00:59:74:cb:ef:1b:3f:77:e7: 21:5f:29:95:80:e4:5f:b0:d9:b8:2b:5e:64:cd:e1: e3:a4:12:41:bb:79:6a:98:95:2e:3f:de:e3:fb:97: f6:1a:c7:0f:46:35:e0:f6:12:a1:d3:e4:44:81:f8: fa:e5:48:b2:d2:c2:be:76:50:71:99:db:0f:6d:83: f4:89:26:2e:f2:02:15:0c:a6:67:0f:aa:6d:ee:01: 10:e6:d2:27:58:b6:28:b0:97:af:7a:5c:f5:0a:4e: ba:be:2e:80:0f:6e:74:74:ee:fd:a9:f7:04:5c:95: d7:05:59:7a:c3:86:56:42:43:12:7e:f4:18:b6:0f: 32:c2:7b:ca:ad:3e:7f:c8:d4:b0:df:8d:57:27:c0: ad:d2:5a:27:00:4f:71:5d:5b:2f:3f:06:f2:e0:26: 86:23:1a:c2:3e:56:30:5f:52:27:18:81:0f:3f:07: 6a:02:36:53:b8:c1:38:62:5c:8f:56:1b:0d:f1:60: f2:ee:0a:25:dd:af:ef:3f:9c:cd:de:45:c7:14:91: f5:25:84:b2:6a:ea:48:15:9b:7b:b7:db:70:61:5d: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:07:9D:27:7F:A2:8C:5F:90:F7:6B:A7:16:DE:22:C4:AB:F8:FE:BB X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6d:ed:80:08:30:db:c0:ec:30:cf:dd:b9:e1:a9:6e:a4:46: 2d:0d:6d:2b:61:dc:c5:0d:ab:fc:8c:7d:5b:15:d0:24:e2:26: 2c:cb:9d:78:c7:25:e0:11:87:36:0b:64:34:9b:5b:f3:e2:7a: 5b:23:c1:ae:50:17:45:ff:a0:f2:47:45:cd:eb:3e:e6:cd:dc: 17:0a:f6:5a:9b:f3:89:cb:fd:32:e1:5b:73:17:89:41:88:a4: 88:5f:a1:a8:6a:33:b2:bd:00:66:85:3e:96:73:d7:9b:c5:1a: 99:50:61:03:20:a2:be:a9:af:69:14:e9:6d:4e:ec:c1:5f:71: 9c:32:28:82:d1:69:c3:e1:45:f0:bb:17:75:c9:d8:e7:a0:dd: 8f:ad:d9:b5:03:de:e8:bf:3d:63:e3:84:fa:ab:e5:4b:08:35: ed:f0:ef:b9:47:c2:2b:ae:52:33:b3:9c:dc:cc:20:90:7b:29: c0:03:88:76:65:a2:b7:73:d9:b1:0d:fa:b9:a3:0a:1d:23:25: 05:4c:7a:20:f9:5a:c2:90:bd:f1:fc:8e:63:f1:be:a5:a0:fe: 92:5c:c5:7d:aa:df:4e:27:0a:62:9d:45:0d:8a:30:97:d5:65: 9b:07:a2:d9:2f:a6:86:22:4c:bc:b6:87:49:dd:2b:a1:eb:a8: 98:d4:4a:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjYwOTI0MjAyODM5WhcNMjYxMDAxMjAyODM5WjAYMRYwFAYD VQQDEw02YWI1ODdmOC0wZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6uqJFfp6UxJwAEJmmjHPzgcKQ69xEfokCF2/mwoevO2RIsAWXTL7xs/d+ch XymVgORfsNm4K15kzeHjpBJBu3lqmJUuP97j+5f2GscPRjXg9hKh0+REgfj65Uiy 0sK+dlBxmdsPbYP0iSYu8gIVDKZnD6pt7gEQ5tInWLYosJevelz1Ck66vi6AD250 dO79qfcEXJXXBVl6w4ZWQkMSfvQYtg8ywnvKrT5/yNSw341XJ8Ct0lonAE9xXVsv Pwby4CaGIxrCPlYwX1InGIEPPwdqAjZTuME4YlyPVhsN8WDy7gol3a/vP5zN3kXH FJH1JYSyaupIFZt7t9twYV0ozQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoHnSd/ ooxfkPdrpxbeIsSr+P67MB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsW3tgAgw28DsMM/dueGpbqRGLQ1tK2HcxQ2r/Ix9WxXQJOImLMudeMcl4BGH NgtkNJtb8+J6WyPBrlAXRf+g8kdFzes+5s3cFwr2Wpvzicv9MuFbcxeJQYikiF+h qGozsr0AZoU+lnPXm8UamVBhAyCivqmvaRTpbU7swV9xnDIogtFpw+FF8LsXdcnY 56Ddj63ZtQPe6L89Y+OE+qvlSwg17fDvuUfCK65SM7Oc3MwgkHspwAOIdmWit3PZ sQ36uaMKHSMlBUx6IPlawpC98fyOY/G+paD+klzFfarfTicKYp1FDYowl9Vlmwei 2S+mhiJMvLaHSd0roeuomNRKHw== -----END CERTIFICATE-----Generated at Sat Sep 26 01:23:27 2026 by rpki-client