$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: OuT3QMNz1Np+PUt5o8pssDBmR9PqNnOxYBhGgYM/6uU= Subject key identifier: 80:A3:C3:C7:1A:A5:31:91:AD:42:56:F9:B0:A2:1F:FF:70:AD:31:8A Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 0461 Signing time: Tue 22 Sep 2026 23:49:57 +0000 Manifest this update: Tue 22 Sep 2026 23:49:57 +0000 Manifest next update: Tue 29 Sep 2026 23:49:57 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: opNd4lG7oJ2zWo7o9OzrvzBph0xVVS9R8ZgSXXNrL7k=) 2: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: Tj4ow2/jq+mUP/LMLTPrpgT8A3SwEW2gBwmbNDd2jrU=) 3: 1762C314878E11F199DA80955211F970.roa (hash: IzQBeC4PmDoF+drcIWyzoD8TumN/IGGjux0nGstfa/Q=) 4: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: 7W5oQwxnfaz/Da+/adv0pSip5O41XdqYh1qWJQtoYxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Sep 22 23:49:57 2026 GMT Not After : Sep 29 23:49:57 2026 GMT Subject: CN=6ab31425-7f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:f0:63:83:55:5a:62:f6:97:8a:00:53:05: d7:ec:c8:58:57:40:3e:05:87:bc:9f:ef:4c:cc:01: f5:ee:47:6c:6e:c9:c0:43:30:7f:04:72:e3:ff:01: e7:e8:af:b3:1f:c2:93:73:36:80:ef:f5:88:f4:e5: 03:c5:aa:3a:09:a3:3a:75:81:0e:12:f0:19:87:3c: c3:72:d8:d3:8a:f9:ed:04:a6:ab:09:a4:64:76:18: aa:95:fd:74:fb:dd:95:14:22:08:29:78:a5:75:9a: f4:2a:6b:72:14:60:61:dd:b7:1f:71:95:89:1d:e7: 87:0e:c9:04:13:b0:9e:7b:2e:f4:8b:d0:e6:79:27: 88:09:da:26:9a:44:d1:a4:a2:b8:2a:43:c4:e7:ad: 9d:58:52:f3:97:30:16:35:37:e4:8a:4d:c6:4e:68: 41:d7:19:eb:6b:3a:db:53:77:be:a5:b8:10:e2:99: 5f:96:d5:07:5f:b3:ae:6f:28:71:d7:ee:8d:1d:ab: 2b:0b:df:5a:c6:6e:18:3a:32:02:25:4a:7f:48:27: 99:32:94:6c:c3:03:b0:34:1c:42:b4:0b:d5:c3:a7: 65:93:da:7e:ed:b4:6f:9b:9c:0c:56:51:31:2f:70: 8f:cc:4b:19:8e:9f:af:f8:b8:4c:d4:53:00:af:90: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A3:C3:C7:1A:A5:31:91:AD:42:56:F9:B0:A2:1F:FF:70:AD:31:8A X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:22:53:4e:ec:20:bc:03:6c:ed:57:49:e6:53:2a:66:ef:37: 12:9f:ad:bb:9f:96:f9:06:bd:26:33:d9:f6:88:7f:e8:83:9f: 01:fb:cf:d1:b9:e2:73:18:40:a2:81:34:66:30:bc:94:13:e3: a2:42:30:9c:91:62:05:d8:2d:90:ff:4b:d4:20:28:b7:f2:4f: 97:45:c7:cb:fa:b2:ff:7e:e1:60:5a:7e:7a:b5:ea:9f:4d:31: 31:51:14:29:3b:f7:cf:4e:cf:b0:12:72:0d:da:02:9b:4d:b2: 77:e6:bb:a8:6a:47:4b:7c:40:e8:b3:d2:37:44:73:af:b7:4f: b3:45:cb:fc:59:97:8d:8f:a3:e5:e0:79:a6:32:75:a5:fe:c2: d9:a5:4b:58:dd:b9:e5:12:4f:93:64:6f:9a:86:c4:41:d4:b7: 85:fc:ef:c1:5c:8a:56:50:af:ed:46:87:5a:78:eb:f5:6e:0c: 49:56:49:ca:04:68:08:a6:c7:e0:bd:e8:3e:fe:0b:16:ea:c6: 2e:37:37:d7:a3:aa:60:53:0a:a5:cf:17:25:e8:f5:d1:ca:67: 3d:c8:4a:d2:a0:50:b0:35:29:94:95:d3:fa:8c:93:e4:48:9e: f1:91:92:5a:28:44:e4:bc:68:dc:49:7c:46:71:e2:90:2e:db: d4:38:02:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjYwOTIyMjM0OTU3WhcNMjYwOTI5MjM0OTU3WjAYMRYwFAYD VQQDEw02YWIzMTQyNS03ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfHwY4NVWmL2l4oAUwXX7MhYV0A+BYe8n+9MzAH17kdsbsnAQzB/BHLj/wHn 6K+zH8KTczaA7/WI9OUDxao6CaM6dYEOEvAZhzzDctjTivntBKarCaRkdhiqlf10 +92VFCIIKXildZr0KmtyFGBh3bcfcZWJHeeHDskEE7Ceey70i9DmeSeICdommkTR pKK4KkPE562dWFLzlzAWNTfkik3GTmhB1xnrazrbU3e+pbgQ4plfltUHX7Oubyhx 1+6NHasrC99axm4YOjICJUp/SCeZMpRswwOwNBxCtAvVw6dlk9p+7bRvm5wMVlEx L3CPzEsZjp+v+LhM1FMAr5ANowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICjw8ca pTGRrUJW+bCiH/9wrTGKMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATiJTTuwgvANs7VdJ5lMqZu83Ep+tu5+W+Qa9JjPZ9oh/6IOfAfvP0bnicxhA ooE0ZjC8lBPjokIwnJFiBdgtkP9L1CAot/JPl0XHy/qy/37hYFp+erXqn00xMVEU KTv3z07PsBJyDdoCm02yd+a7qGpHS3xA6LPSN0Rzr7dPs0XL/FmXjY+j5eB5pjJ1 pf7C2aVLWN255RJPk2RvmobEQdS3hfzvwVyKVlCv7UaHWnjr9W4MSVZJygRoCKbH 4L3oPv4LFurGLjc316OqYFMKpc8XJej10cpnPchK0qBQsDUplJXT+oyT5Eie8ZGS WihE5Lxo3El8RnHikC7b1DgCEQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:13:15 2026 by rpki-client