$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: MCnGaCKzjj82+dqeMGgjWBDYbvkgUPuuhZ2u7qtFy90= Subject key identifier: 5C:72:83:61:20:9A:65:66:C4:2E:6D:F8:2B:11:30:B1:20:D6:21:8A Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 3622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 35D1 Signing time: Thu 24 Sep 2026 14:44:47 +0000 Manifest this update: Thu 24 Sep 2026 14:44:46 +0000 Manifest next update: Thu 01 Oct 2026 14:44:46 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: HeTVuDu2VZLnD1VeO5S3UtQ2MiTVo8A2R2Xg1aKi6TI=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: reaXyWDA2ljuxsntm0i6DnDHoaBzJzPoCC4N+GYDna4=) 3: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: 4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=) 4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: qc7dfpxoyaWy9hmAOoxHUqM2HrHxDCq2dYCwFXa7BDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13858 (0x3622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Sep 24 14:44:46 2026 GMT Not After : Oct 1 14:44:46 2026 GMT Subject: CN=6ab5375f-7e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:cf:1c:59:91:e4:aa:f9:3d:8c:cf:27:69: f9:f9:18:f5:55:d3:9d:5a:d3:f3:36:37:50:48:0f: 99:24:51:d9:0c:3f:ca:68:1f:71:5b:8a:bf:fd:83: 33:96:9d:21:84:fa:4b:9f:94:48:9b:1d:41:f6:95: 6c:c0:6e:df:bd:d4:86:47:a1:c0:2b:dd:90:a7:64: 74:85:a7:86:b9:5a:fe:3c:51:29:01:c0:f4:3a:de: 51:d5:22:aa:7e:86:8f:bb:66:87:f3:7e:db:9e:3a: 29:26:a5:7a:56:24:14:16:09:a7:fe:4b:f9:c7:e2: c6:47:b2:47:9f:aa:b7:6f:a8:1e:4e:14:4b:bc:43: 33:6c:5c:af:61:71:5c:3b:08:9b:6a:f2:bd:9e:c6: 68:98:52:2f:b1:e7:00:fe:58:d0:4f:48:0a:e8:dd: c0:56:0d:1f:83:8d:f2:ce:8d:e2:e6:58:18:c5:25: 24:af:1d:64:fc:ac:70:1b:72:d3:0f:0a:bc:9d:cf: f9:1b:7b:8b:17:88:f1:16:21:1b:65:a0:08:56:54: a8:5d:73:bb:87:e6:2c:3e:45:6b:dd:23:8a:b5:2c: 5f:7c:7b:75:d6:aa:68:5e:54:06:b7:18:53:86:51: 2f:7f:af:b9:46:4f:26:62:16:5b:94:41:a0:42:aa: d3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:72:83:61:20:9A:65:66:C4:2E:6D:F8:2B:11:30:B1:20:D6:21:8A X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5f:ee:c4:d5:a9:e6:54:b7:3f:43:24:20:93:90:b3:12:45: f2:71:b5:5f:63:c2:15:34:c7:36:cb:46:63:e3:e4:6c:ca:85: da:1f:00:55:55:21:18:49:dc:2a:80:9a:b8:61:d7:8a:f6:81: 2b:ed:1d:87:4e:85:17:40:b6:38:84:18:58:2a:25:ec:9c:af: 0e:63:a7:75:c8:79:22:f6:3a:45:11:28:57:1b:e7:65:de:ae: ad:93:48:c8:1a:db:99:65:72:fe:4d:90:ea:77:51:bb:27:d4: 3e:e8:c3:dd:80:5b:60:e0:e7:78:f4:f9:a4:25:48:12:29:1b: 2b:a8:9f:3a:56:4f:4c:24:4e:80:f5:f0:1c:f4:99:25:d2:06: 18:cf:ed:79:e0:de:f3:a0:b2:bd:22:ea:4b:92:de:a3:f8:12: 01:d5:63:e6:04:18:40:69:71:94:09:90:1c:10:0d:16:33:73: 49:34:a8:4c:53:b9:2d:b1:be:c9:85:48:9a:e0:6e:da:58:d5: 87:f1:8e:91:6f:30:21:3f:b1:9d:47:ed:16:df:bd:95:b3:12: 4c:72:8d:c4:36:10:14:27:17:4a:7f:35:f2:c8:b8:e3:5e:5d: 31:20:6a:50:06:45:5b:f2:c8:6a:01:ec:77:5b:7a:e2:a6:99: 18:ac:7b:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjYwOTI0MTQ0NDQ2WhcNMjYxMDAxMTQ0NDQ2WjAYMRYwFAYD VQQDEw02YWI1Mzc1Zi03ZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2jPHFmR5Kr5PYzPJ2n5+Rj1VdOdWtPzNjdQSA+ZJFHZDD/KaB9xW4q//YMz lp0hhPpLn5RImx1B9pVswG7fvdSGR6HAK92Qp2R0haeGuVr+PFEpAcD0Ot5R1SKq foaPu2aH837bnjopJqV6ViQUFgmn/kv5x+LGR7JHn6q3b6geThRLvEMzbFyvYXFc OwibavK9nsZomFIvsecA/ljQT0gK6N3AVg0fg43yzo3i5lgYxSUkrx1k/KxwG3LT Dwq8nc/5G3uLF4jxFiEbZaAIVlSoXXO7h+YsPkVr3SOKtSxffHt11qpoXlQGtxhT hlEvf6+5Rk8mYhZblEGgQqrTswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxyg2Eg mmVmxC5t+CsRMLEg1iGKMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiV/uxNWp5lS3P0MkIJOQsxJF8nG1X2PCFTTHNstGY+PkbMqF2h8AVVUhGEnc KoCauGHXivaBK+0dh06FF0C2OIQYWCol7JyvDmOndch5IvY6RREoVxvnZd6urZNI yBrbmWVy/k2Q6ndRuyfUPujD3YBbYODnePT5pCVIEikbK6ifOlZPTCROgPXwHPSZ JdIGGM/teeDe86CyvSLqS5Leo/gSAdVj5gQYQGlxlAmQHBANFjNzSTSoTFO5LbG+ yYVImuBu2ljVh/GOkW8wIT+xnUftFt+9lbMSTHKNxDYQFCcXSn818si4415dMSBq UAZFW/LIagHsd1t64qaZGKx7oQ== -----END CERTIFICATE-----Generated at Fri Sep 25 00:44:05 2026 by rpki-client