$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: ySmnCHmFm7jntcKyTlncu2Q70KYALXSZWHpuYSAvw9c= Subject key identifier: 2E:E8:C6:09:00:72:A2:BA:B4:84:AA:1E:1D:CD:80:D7:6F:F7:1F:96 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0956 Signing time: Thu 24 Sep 2026 14:44:50 +0000 Manifest this update: Thu 24 Sep 2026 14:44:50 +0000 Manifest next update: Thu 01 Oct 2026 14:44:50 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: MiNTMAxYl/zPupHz4osLW67LTkassvgul8Ypjoi7DJg=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: TJX/2z4AnWBNVG5vc+6iQbCnon+csxAc9hGSLvA14T4=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Sep 24 14:44:50 2026 GMT Not After : Oct 1 14:44:50 2026 GMT Subject: CN=6ab53762-befd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:d4:70:c7:3c:54:90:ae:50:69:47:3d:12: 04:6a:df:f7:26:ef:b6:ec:28:f8:57:e2:ee:79:f2: 47:68:45:b1:4b:54:50:fb:98:1c:d5:fd:cf:38:85: dc:6c:5e:b7:94:08:a5:74:5c:47:09:b6:23:9f:2a: ad:47:68:75:9f:f6:fd:0b:fe:82:b3:41:a8:ea:cc: d5:c2:95:ae:fb:dd:60:b2:c8:0a:f7:6b:23:02:d3: 48:4d:07:8d:a1:12:98:05:1b:f0:55:1b:d4:2e:28: a7:7f:63:1d:95:c7:d4:8b:b9:83:24:50:40:e5:e6: f7:62:11:37:48:e5:1c:ab:cd:47:a9:17:50:6b:4e: 8a:10:ae:32:32:43:d3:fd:89:bd:2d:db:2d:44:82: 89:ec:a5:1b:bf:72:52:00:a8:af:86:c4:57:c8:13: ec:d9:7f:aa:13:69:0a:b7:8a:a9:5d:b6:23:21:33: 18:16:da:8b:8e:60:55:26:57:3c:7a:37:60:27:ed: 11:bd:0f:d1:24:1a:ed:86:9d:08:1d:2b:45:eb:37: f9:7b:49:3a:6f:2c:51:a2:b1:19:2f:df:41:d1:5d: cd:f0:6c:94:e2:73:06:ac:3c:16:84:54:f2:a6:fe: aa:08:a6:39:8e:af:9a:52:72:6d:05:9e:52:a3:60: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:C6:09:00:72:A2:BA:B4:84:AA:1E:1D:CD:80:D7:6F:F7:1F:96 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ed:26:73:fa:5d:ec:13:21:6a:5a:a4:bc:e9:57:9a:a9:46: 66:86:92:31:77:9c:bb:81:ce:04:29:a9:3a:d2:14:11:1d:dc: ee:26:3b:27:bd:e4:61:c2:c3:58:b6:2c:81:c2:d3:e2:d7:ae: 7d:65:06:36:33:07:77:8e:12:66:ae:14:97:29:1f:b5:31:b8: 8b:2f:46:c2:9b:00:47:cf:bc:ca:6b:32:a3:96:47:a5:b6:0b: 06:15:57:48:29:ba:30:e5:ec:5d:70:f1:bc:79:d3:e6:3f:b6: f4:cc:e3:c9:0b:44:ae:b9:e5:79:a1:de:ad:ff:85:34:1a:aa: 4b:65:c1:bc:32:36:a6:67:5c:90:79:0a:95:02:7b:6f:b5:c3: 06:40:55:0f:40:81:74:8a:d0:7d:48:7c:39:b4:35:ec:bb:9c: 36:48:27:c9:f4:c1:85:d8:d3:a3:33:1a:35:95:fd:e7:3e:0c: c0:66:bd:6f:2c:76:d8:ac:17:02:4b:9b:69:dd:86:fd:a4:b2: a4:88:33:b4:c7:70:f8:51:9c:bf:9b:46:4d:04:67:7c:61:a0: 6a:30:3e:77:b6:57:8f:f2:72:cf:c5:3f:00:88:64:c3:1a:39: 24:b8:65:d9:62:d2:93:84:9e:53:33:be:a3:6a:d2:99:5a:c7: 8c:7c:9c:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwOTI0MTQ0NDUwWhcNMjYxMDAxMTQ0NDUwWjAYMRYwFAYD VQQDEw02YWI1Mzc2Mi1iZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3LUcMc8VJCuUGlHPRIEat/3Ju+27Cj4V+LuefJHaEWxS1RQ+5gc1f3POIXc bF63lAildFxHCbYjnyqtR2h1n/b9C/6Cs0Go6szVwpWu+91gssgK92sjAtNITQeN oRKYBRvwVRvULiinf2MdlcfUi7mDJFBA5eb3YhE3SOUcq81HqRdQa06KEK4yMkPT /Ym9LdstRIKJ7KUbv3JSAKivhsRXyBPs2X+qE2kKt4qpXbYjITMYFtqLjmBVJlc8 ejdgJ+0RvQ/RJBrthp0IHStF6zf5e0k6byxRorEZL99B0V3N8GyU4nMGrDwWhFTy pv6qCKY5jq+aUnJtBZ5So2AdJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7oxgkA cqK6tISqHh3NgNdv9x+WMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnO0mc/pd7BMhalqkvOlXmqlGZoaSMXecu4HOBCmpOtIUER3c7iY7J73kYcLD WLYsgcLT4teufWUGNjMHd44SZq4UlykftTG4iy9GwpsAR8+8ymsyo5ZHpbYLBhVX SCm6MOXsXXDxvHnT5j+29MzjyQtErrnleaHerf+FNBqqS2XBvDI2pmdckHkKlQJ7 b7XDBkBVD0CBdIrQfUh8ObQ17LucNkgnyfTBhdjTozMaNZX95z4MwGa9byx22KwX Akubad2G/aSypIgztMdw+FGcv5tGTQRnfGGgajA+d7ZXj/Jyz8U/AIhkwxo5JLhl 2WLSk4SeUzO+o2rSmVrHjHycsA== -----END CERTIFICATE-----Generated at Fri Sep 25 14:19:07 2026 by rpki-client