$ rpki-client -vvvf rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft File: FzfOVvQLH76F5uXrA0_WsqFkb8w.mft (raw, json) Hash identifier: iW246xpKRDh1kNakeS9UxwOKtchIqPpY5dtlzWhkUSI= Subject key identifier: AA:C6:01:B9:39:28:17:39:41:CA:07:12:3A:C4:18:C6:38:4B:7B:84 Authority key identifier: 17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC Certificate issuer: /CN=A91443EA/serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft Manifest number: 18 Signing time: Wed 23 Sep 2026 08:45:02 +0000 Manifest this update: Wed 23 Sep 2026 08:45:02 +0000 Manifest next update: Wed 30 Sep 2026 08:45:02 +0000 Files and hashes: 1: FzfOVvQLH76F5uXrA0_WsqFkb8w.crl (hash: iJ4QszP7I+jCEpj84f50AUjhgAiqRcyeNRX8fu/EjE0=) 2: 41339BFA973D11F184508C1C3711F970.roa (hash: ErCTpmbM2VNJ1hvCRE7AmqqAa2l2NDuA3762i8vtV40=) 3: 72T5zLUyeM7VLgn276kJdhh3FIs.asa (hash: o/a6Ef5+Irp8WGLBEhxdmtOBpYmNP2JzAw60ujiyavU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443EA, serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC Validity Not Before: Sep 23 08:45:02 2026 GMT Not After : Sep 30 08:45:02 2026 GMT Subject: CN=6ab3918e-c705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:47:e6:e5:0c:3a:3a:9a:84:44:81:d5:9b: 32:08:b4:8d:26:1c:2f:eb:d9:3c:7c:c2:17:ba:52: bf:4d:c8:a3:d6:c5:05:c8:42:6e:8f:e5:90:3b:2a: 35:d9:69:3c:28:7e:85:9d:c8:7f:82:b3:00:43:01: a5:1e:fa:08:d7:5b:05:e0:d3:0f:be:3a:a0:92:ab: d8:34:98:83:99:d3:04:3e:22:5a:42:b5:d6:0b:88: f3:65:7d:7f:c9:1c:21:e4:e8:13:09:55:33:e7:1f: 23:fe:55:7d:25:b1:2e:40:8c:22:c7:a7:0f:fa:f7: 01:70:4c:2f:26:bb:b2:53:35:c9:4e:fb:4f:a6:ad: 8b:43:db:70:43:f5:6e:d0:36:97:3e:48:ca:58:73: e6:c8:23:7d:6f:cd:c3:9a:7f:43:7b:bf:ca:18:c8: 5b:f9:9d:1f:27:5e:d4:d4:6d:30:67:65:ec:37:97: 8b:97:68:07:a5:f0:b7:5f:46:42:99:73:c3:1f:1c: 80:26:15:c5:35:a5:0c:96:68:dd:2b:ca:3f:6e:30: 12:28:4b:96:4c:7e:d2:e0:f0:51:b0:36:48:7b:eb: 9d:4f:16:ac:81:8c:02:46:cf:c4:29:93:f1:11:5f: ea:b3:c9:d6:07:36:d8:c7:4c:fc:b5:4e:75:5d:fa: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C6:01:B9:39:28:17:39:41:CA:07:12:3A:C4:18:C6:38:4B:7B:84 X509v3 Authority Key Identifier: keyid:17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fc:e9:c3:89:85:56:d6:45:49:72:5d:84:31:2b:e8:53:73: cb:43:84:4e:ed:a2:6f:d1:fc:d3:8f:f1:c1:51:1b:4c:85:41: 19:45:c1:9b:26:b8:07:99:92:25:e0:ce:c8:d2:c7:87:9c:37: 00:77:29:ce:dc:c1:44:03:d5:e2:58:7e:db:ed:a2:7b:17:a9: 3a:a8:13:dc:4c:17:fe:b8:0c:81:5c:9c:87:ed:1c:e1:cc:ec: b9:67:32:ad:0a:b8:e8:80:6b:3d:c3:3e:6f:f2:b5:ed:3d:5d: b8:ac:5e:60:62:bd:e4:98:e7:13:a1:5a:cd:a6:41:ad:2f:42: 1e:89:bc:aa:cd:4f:3d:61:34:a9:65:22:4f:d9:77:f3:3e:b3: 41:33:6f:aa:14:c3:cd:61:bc:5c:43:1e:26:17:e9:c7:b3:92: 60:90:08:47:b3:12:90:80:a4:a3:b1:42:c7:7e:d0:97:6f:37: 7b:ba:c1:83:83:bd:ae:02:b9:e6:74:b0:18:be:f4:75:de:cb: 76:7f:a4:c0:63:5a:8a:61:2e:79:a3:d3:4f:d4:d6:75:6b:d2: 99:83:9f:88:8a:96:e5:ca:3d:63:06:e8:fd:ea:0e:92:66:7b: 01:4d:e0:41:d5:f2:3e:91:4f:15:a2:57:c2:63:f7:e1:5d:77: 13:d2:71:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDNFQTExMC8GA1UEBRMoMTczN0NFNTZGNDBCMUZCRTg1RTZFNUVCMDM0RkQ2QjJB MTY0NkZDQzAeFw0yNjA5MjMwODQ1MDJaFw0yNjA5MzAwODQ1MDJaMBgxFjAUBgNV BAMTDTZhYjM5MThlLWM3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQComEfm5Qw6OpqERIHVmzIItI0mHC/r2Tx8whe6Ur9NyKPWxQXIQm6P5ZA7KjXZ aTwofoWdyH+CswBDAaUe+gjXWwXg0w++OqCSq9g0mIOZ0wQ+IlpCtdYLiPNlfX/J HCHk6BMJVTPnHyP+VX0lsS5AjCLHpw/69wFwTC8mu7JTNclO+0+mrYtD23BD9W7Q Npc+SMpYc+bII31vzcOaf0N7v8oYyFv5nR8nXtTUbTBnZew3l4uXaAel8LdfRkKZ c8MfHIAmFcU1pQyWaN0ryj9uMBIoS5ZMftLg8FGwNkh7651PFqyBjAJGz8Qpk/ER X+qzydYHNtjHTPy1TnVd+iCRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqsYBuTko FzlBygcSOsQYxjhLe4QwHwYDVR0jBBgwFoAUFzfOVvQLH76F5uXrA0/WsqFkb8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0M0VBL0M1NUMxQjdFOTcz QzExRjFCOUE1MUJEQTM2MTFGOTcwL0Z6Zk9WdlFMSDc2RjV1WHJBMF9Xc3FGa2I4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRnpmT1Z2UUxINzZGNXVYckEwX1dzcUZrYjh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 M0VBL0M1NUMxQjdFOTczQzExRjFCOUE1MUJEQTM2MTFGOTcwL0Z6Zk9WdlFMSDc2 RjV1WHJBMF9Xc3FGa2I4dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAg/OnDiYVW1kVJcl2EMSvoU3PLQ4RO7aJv0fzTj/HBURtMhUEZRcGbJrgHmZIl 4M7I0seHnDcAdynO3MFEA9XiWH7b7aJ7F6k6qBPcTBf+uAyBXJyH7RzhzOy5ZzKt CrjogGs9wz5v8rXtPV24rF5gYr3kmOcToVrNpkGtL0IeibyqzU89YTSpZSJP2Xfz PrNBM2+qFMPNYbxcQx4mF+nHs5JgkAhHsxKQgKSjsULHftCXbzd7usGDg72uArnm dLAYvvR13st2f6TAY1qKYS55o9NP1NZ1a9KZg5+Iipblyj1jBuj96g6SZnsBTeBB 1fI+kU8VolfCY/fhXXcT0nGM -----END CERTIFICATE-----Generated at Thu Sep 24 12:40:37 2026 by rpki-client