$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: zNtRpbntYvykR0gl9D9N8fng0TH14SFiTEMEhY9R3o8= Subject key identifier: 9F:FA:B9:B3:7F:09:07:48:C9:E4:73:59:12:6C:00:07:C9:E3:8E:E0 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 034F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 0349 Signing time: Wed 23 Sep 2026 00:35:21 +0000 Manifest this update: Wed 23 Sep 2026 00:35:21 +0000 Manifest next update: Wed 30 Sep 2026 00:35:21 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: EwAk2IWitDEmCRy4lyxRt36Z8v8+LpYG4TY96Anse58=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: m3cZCOL4b89wYo+1IDry+3qvdA4N289UzAOZJV0uUGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 847 (0x34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Sep 23 00:35:21 2026 GMT Not After : Sep 30 00:35:21 2026 GMT Subject: CN=6ab31ec9-b81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:aa:cf:97:8d:06:ff:0c:5c:0e:e5:d8:f3: eb:db:b2:9e:38:53:9a:08:77:d9:aa:bc:55:36:c3: 83:64:68:03:12:26:d4:ce:00:82:e5:c8:fc:e1:35: 6d:b6:f9:98:b9:dc:9f:eb:e8:b4:30:7b:90:d9:dd: ae:78:9d:b0:ab:dc:d6:6a:67:e3:0f:51:80:3f:0a: ea:cd:bd:e3:b9:d8:62:54:74:d0:c5:20:a0:b9:da: e9:66:bf:e0:ef:40:79:de:75:c9:b3:5f:c6:11:db: 85:b3:13:bc:4b:ac:2e:55:e1:bd:9a:c9:56:55:f9: c8:49:db:10:d3:92:66:e0:6e:c9:c6:4e:5b:1a:21: 5f:3d:39:bf:2d:33:1f:3b:ee:f3:48:dd:d3:a3:06: af:21:96:5e:47:b9:12:ff:60:2e:a7:4c:3e:f1:fb: 04:b7:d9:56:b0:43:9d:60:4f:92:05:9c:bf:70:df: db:e2:5c:73:97:4b:41:82:b0:f8:71:6c:97:09:14: 78:39:36:f3:d6:46:ce:59:2a:fc:d4:77:31:64:47: b0:60:cd:99:bd:e7:07:3e:aa:80:91:61:0d:83:fd: 20:01:27:24:6d:94:d4:f7:11:80:79:dc:53:8e:61: 60:7e:6f:e5:e6:f5:f5:f3:ec:15:b9:ea:28:70:e8: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FA:B9:B3:7F:09:07:48:C9:E4:73:59:12:6C:00:07:C9:E3:8E:E0 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0e:9f:f0:8b:22:5b:62:2d:68:5a:39:b8:d2:76:42:bb:69: 29:6c:37:1a:59:a2:4f:58:12:68:bb:47:c5:87:a3:ff:fa:d0: a5:cf:57:7b:aa:d0:fc:9f:59:fe:27:34:d9:f8:f5:ac:d0:c6: 65:7e:49:45:92:46:d4:af:96:46:a3:34:4a:1b:35:99:15:7b: 51:fa:57:d7:cf:8f:e4:0b:c1:12:19:42:13:75:38:31:be:02: be:ab:4f:79:78:53:46:4f:66:98:d2:15:4f:9a:2d:e6:77:da: 66:c5:e1:5c:0e:dd:b5:4f:c6:51:50:f0:e7:17:01:f5:f5:6f: 14:9e:66:12:38:34:c8:ab:40:04:83:e2:ef:f2:0a:e6:e7:8d: 41:be:20:d2:b8:e0:5b:81:d2:70:1f:aa:ed:06:7a:d3:aa:f8: 83:e3:e2:38:22:30:c7:cf:c2:41:55:16:fe:45:c2:63:5d:a6: 26:92:91:84:c8:3a:d4:50:85:c0:55:78:ec:6c:6d:67:f1:fb: 78:c8:80:8e:66:ce:ce:72:df:8f:93:76:fa:65:b0:9c:83:1b: d9:c5:76:8c:39:49:51:d3:8a:89:62:cd:06:ba:7a:64:b7:5c: 21:f2:db:6c:75:8b:91:9e:cd:b6:6f:e8:84:1e:c6:e4:96:b9: b3:68:61:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjYwOTIzMDAzNTIxWhcNMjYwOTMwMDAzNTIxWjAYMRYwFAYD VQQDEw02YWIzMWVjOS1iODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIGqz5eNBv8MXA7l2PPr27KeOFOaCHfZqrxVNsODZGgDEibUzgCC5cj84TVt tvmYudyf6+i0MHuQ2d2ueJ2wq9zWamfjD1GAPwrqzb3judhiVHTQxSCgudrpZr/g 70B53nXJs1/GEduFsxO8S6wuVeG9mslWVfnISdsQ05Jm4G7Jxk5bGiFfPTm/LTMf O+7zSN3TowavIZZeR7kS/2Aup0w+8fsEt9lWsEOdYE+SBZy/cN/b4lxzl0tBgrD4 cWyXCRR4OTbz1kbOWSr81HcxZEewYM2ZvecHPqqAkWENg/0gASckbZTU9xGAedxT jmFgfm/l5vX18+wVueoocOihJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/6ubN/ CQdIyeRzWRJsAAfJ447gMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVg6f8IsiW2ItaFo5uNJ2QrtpKWw3GlmiT1gSaLtHxYej//rQpc9Xe6rQ/J9Z /ic02fj1rNDGZX5JRZJG1K+WRqM0Shs1mRV7UfpX18+P5AvBEhlCE3U4Mb4CvqtP eXhTRk9mmNIVT5ot5nfaZsXhXA7dtU/GUVDw5xcB9fVvFJ5mEjg0yKtABIPi7/IK 5ueNQb4g0rjgW4HScB+q7QZ606r4g+PiOCIwx8/CQVUW/kXCY12mJpKRhMg61FCF wFV47GxtZ/H7eMiAjmbOznLfj5N2+mWwnIMb2cV2jDlJUdOKiWLNBrp6ZLdcIfLb bHWLkZ7Ntm/ohB7G5Ja5s2hhVw== -----END CERTIFICATE-----Generated at Thu Sep 24 03:09:37 2026 by rpki-client