$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft File: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json) Hash identifier: Lp+fT//bd/K278l5v7FUwrqa2RlZEDSh3EQDoJQ/Qjc= Subject key identifier: 3A:AF:32:18:88:73:90:04:D3:FF:77:2B:FB:AC:A4:FB:E6:E7:42:EA Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft Manifest number: 6D Signing time: Thu 01 Oct 2026 09:23:55 +0000 Manifest this update: Thu 01 Oct 2026 09:23:55 +0000 Manifest next update: Thu 08 Oct 2026 09:23:55 +0000 Files and hashes: 1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: lsVV6ipFF8uHXn79JY3H5Ux5few40HgnZH+7U4XbwMA=) 2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: Ln2S+wJ8y0nN9Ehuf580iL5liKxjlD5bK/WsoPCx1Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 09:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Validity Not Before: Oct 1 09:23:55 2026 GMT Not After : Oct 8 09:23:55 2026 GMT Subject: CN=6abe26ab-b354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:01:7c:d8:60:f6:31:b8:ac:8f:7e:a0:b0: 0e:6f:66:7c:a5:02:16:a5:cb:4f:74:4f:0a:e0:8c: 64:68:8e:fa:b0:8f:09:be:dc:e9:66:aa:1c:47:0f: a9:64:aa:15:87:33:b1:8b:0f:15:19:43:d4:af:ec: ef:34:2d:5d:3d:96:34:29:1c:4b:5b:49:62:3c:c6: aa:c0:ca:cb:2e:94:cd:09:5c:c0:a7:6e:7e:a2:fd: a4:cf:68:29:0b:29:75:8a:21:6d:af:f9:ee:28:b6: 78:cf:c7:69:d7:c5:45:3d:bb:20:3d:5a:4a:1a:d5: e0:cd:a4:09:fd:4c:fb:fa:d9:bd:bc:aa:76:2f:76: 8e:da:9d:c6:60:a4:76:dd:a2:30:d9:92:49:5f:e6: cc:a5:81:a2:32:aa:8c:2a:9e:b5:9b:a9:48:e3:6b: 7a:61:47:5d:60:8b:e0:83:7c:e5:b7:a6:a9:53:29: b0:4f:bf:92:99:cd:f1:7e:16:5c:82:74:17:fe:66: 3c:bc:4e:97:9a:ce:24:0f:b2:af:9d:e0:fd:15:fa: 11:37:3b:9c:f8:1e:eb:ab:c6:ba:75:c2:fe:b7:fd: 2e:94:ac:8e:06:2c:f9:55:69:11:d7:57:91:aa:b5: 40:c8:b9:a4:02:3a:41:e1:fd:d1:9a:6a:25:42:84: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AF:32:18:88:73:90:04:D3:FF:77:2B:FB:AC:A4:FB:E6:E7:42:EA X509v3 Authority Key Identifier: keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:65:c8:0d:7e:f7:c6:b7:73:58:7e:03:86:41:4f:98:f8:9e: 9f:69:69:ee:66:52:f0:8d:50:17:b0:a2:a9:e0:d2:e0:c4:8f: 8b:41:59:44:ef:a4:be:b4:90:85:57:e7:f4:a1:b3:00:73:c7: f1:ef:d6:a4:b9:a3:75:65:59:18:65:f0:8f:0f:8c:82:60:a0: b2:a3:78:d7:64:1d:58:26:55:ff:f3:83:76:33:68:22:b2:a1: 0b:fe:83:0b:2b:b8:d8:02:82:0e:a2:81:c2:61:8d:59:f1:ad: c8:10:44:e7:df:9f:04:2b:49:e1:5c:54:6e:52:d8:03:21:b0: 40:7e:b6:90:6f:19:27:22:20:2a:ea:a4:f3:6d:d5:9c:17:e4: 83:12:bb:ae:94:5d:8b:b7:45:c3:7b:eb:68:8e:1a:de:41:c8: 22:ab:ad:71:2b:56:43:b1:bd:70:ee:72:d5:56:6f:62:32:79: dc:4f:e8:55:b7:d7:6c:81:f9:55:f2:0d:c1:41:2b:61:33:95: 8c:41:91:d7:26:54:66:2b:bc:71:f8:03:3e:6b:10:e2:c5:8d: f6:7b:b5:4f:75:07:b8:9b:77:fd:35:17:5a:32:f2:6f:a3:93: f1:34:88:7c:b2:30:6b:bf:c2:54:11:7a:9e:71:f8:a0:05:03: cd:d2:9b:80 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD MTY4MTk3RTAeFw0yNjEwMDEwOTIzNTVaFw0yNjEwMDgwOTIzNTVaMBgxFjAUBgNV BAMTDTZhYmUyNmFiLWIzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRXQF82GD2Mbisj36gsA5vZnylAhaly090TwrgjGRojvqwjwm+3OlmqhxHD6lk qhWHM7GLDxUZQ9Sv7O80LV09ljQpHEtbSWI8xqrAyssulM0JXMCnbn6i/aTPaCkL KXWKIW2v+e4otnjPx2nXxUU9uyA9Wkoa1eDNpAn9TPv62b28qnYvdo7ancZgpHbd ojDZkklf5sylgaIyqowqnrWbqUjja3phR11gi+CDfOW3pqlTKbBPv5KZzfF+FlyC dBf+Zjy8TpeaziQPsq+d4P0V+hE3O5z4Huurxrp1wv63/S6UrI4GLPlVaRHXV5Gq tUDIuaQCOkHh/dGaaiVChLVhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOq8yGIhz kATT/3cr+6yk++bnQuowHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RjkwL0Y5MTNENTE0MUMzNjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZ c1FYWEVqbTdaWGNGb0dYNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxZcgNfvfGt3NYfgOGQU+Y+J6faWnuZlLwjVAXsKKp4NLgxI+LQVlE76S+tJCF V+f0obMAc8fx79akuaN1ZVkYZfCPD4yCYKCyo3jXZB1YJlX/84N2M2gisqEL/oML K7jYAoIOooHCYY1Z8a3IEETn358EK0nhXFRuUtgDIbBAfraQbxknIiAq6qTzbdWc F+SDEruulF2Lt0XDe+tojhreQcgiq61xK1ZDsb1w7nLVVm9iMnncT+hVt9dsgflV 8g3BQSthM5WMQZHXJlRmK7xx+AM+axDixY32e7VPdQe4m3f9NRdaMvJvo5PxNIh8 sjBrv8JUEXqecfigBQPN0puA -----END CERTIFICATE-----Generated at Thu Oct 1 20:59:23 2026 by rpki-client