$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json) Hash identifier: +2PtY6wsa7FOxcBtPaGhNxui77C6++DDWU5JfER5Lx8= Subject key identifier: B6:DB:DF:30:10:57:48:9B:83:B3:8E:3D:7F:42:EE:4F:F0:FC:BC:19 Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Certificate serial: 0840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft Manifest number: 0825 Signing time: Tue 22 Sep 2026 20:58:48 +0000 Manifest this update: Tue 22 Sep 2026 20:58:48 +0000 Manifest next update: Tue 29 Sep 2026 20:58:48 +0000 Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: v7fD2/pRT8vMtXQTvl4DZ/0629Np2KHb3IqurjrdjmY=) 2: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4itdgnokjreqGm34fiN0BjbU5Y5cTecgH1DKcBRHiBU=) 3: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: /XDkwKIyB4rNulgFvMOv5/7NFn8IGhU7PA58aFqz6PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Validity Not Before: Sep 22 20:58:48 2026 GMT Not After : Sep 29 20:58:48 2026 GMT Subject: CN=6ab2ec08-d59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:d5:be:58:b2:7c:00:70:3b:66:fe:87:ca: 8b:c1:cb:4e:75:7d:40:42:ce:19:dd:db:21:f7:90: 82:e4:b4:b9:5d:f2:14:2f:61:f1:ec:ed:27:a8:cd: 9f:71:64:a3:83:d7:e3:1c:e9:74:32:ba:ed:af:2d: 22:82:a9:e0:96:3b:8b:70:15:ba:c6:0a:44:73:6f: 73:51:fd:a8:91:10:38:12:7d:a7:3c:f7:b4:01:49: 7e:58:93:93:e3:aa:ac:79:a4:d0:75:da:82:6e:3d: 72:eb:a0:77:bf:0d:e0:92:94:10:31:fa:d8:42:20: f6:5a:22:7c:fd:cd:35:73:86:5b:3c:77:03:74:b0: 84:44:15:e7:a7:74:43:01:20:c9:7f:b6:1f:0d:a8: ec:fb:19:42:c1:16:01:09:15:74:3b:4a:bd:fc:4c: 6c:4c:4a:90:f5:bf:f2:69:ae:6f:9e:2c:9f:aa:a3: 37:40:0f:01:72:28:69:69:eb:2d:53:d1:4f:d0:fa: f6:18:e4:f6:9b:6d:8c:f9:43:6c:7c:b2:de:c1:72: 33:17:4e:bf:3a:5e:b6:46:dc:2f:45:29:01:57:69: f8:e4:f7:8f:75:f1:c4:a0:08:80:fd:40:4c:8c:2e: 0f:4f:33:ba:f5:a3:88:95:0e:2a:33:7a:0e:12:b5: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DB:DF:30:10:57:48:9B:83:B3:8E:3D:7F:42:EE:4F:F0:FC:BC:19 X509v3 Authority Key Identifier: keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e8:f1:b5:7d:fb:4b:2f:84:ef:c0:21:d6:75:4d:96:3e:25: 67:f2:89:31:7f:11:fd:fd:89:d6:6f:de:7c:a0:28:01:f4:ad: 20:b9:fa:58:69:2b:2f:b2:5c:e9:bf:b1:5b:7d:c4:8c:ef:98: 92:19:cc:00:f2:07:0a:47:3b:0f:e8:b9:e6:07:1e:1b:3e:b8: 38:ff:61:68:da:5b:ca:78:7d:17:91:0d:41:b0:7d:24:fc:8a: db:4c:cf:c3:06:65:0a:9a:bc:55:79:f8:8e:84:30:df:0d:57: 75:5f:96:4b:69:f4:94:a7:2b:bf:5a:54:c0:b1:4d:00:31:94: 9e:1a:01:f9:a9:b1:12:55:47:23:b9:f8:d0:51:4a:4a:b9:af: 93:2f:6f:1f:8c:c8:2a:6d:92:99:0e:17:b1:88:be:04:00:4d: 4f:cd:be:86:37:5c:36:d6:5a:cd:30:6f:19:e0:44:d5:33:5f: 21:77:8a:16:96:a6:fc:f9:33:6e:df:d4:e5:d7:1e:3f:47:9d: 36:4d:99:75:71:29:1d:91:6a:1e:e8:b8:6e:bc:67:7e:1a:ba: dc:df:a1:bc:4a:e9:f9:e0:39:dc:92:9b:31:4f:f1:08:c9:24: 89:5d:e6:1e:f3:3d:de:2b:bf:10:2c:71:86:3d:59:9f:db:f7: 3c:23:6a:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC RTM0OTBFNzAwHhcNMjYwOTIyMjA1ODQ4WhcNMjYwOTI5MjA1ODQ4WjAYMRYwFAYD VQQDEw02YWIyZWMwOC1kNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWTVvliyfABwO2b+h8qLwctOdX1AQs4Z3dsh95CC5LS5XfIUL2Hx7O0nqM2f cWSjg9fjHOl0Mrrtry0igqngljuLcBW6xgpEc29zUf2okRA4En2nPPe0AUl+WJOT 46qseaTQddqCbj1y66B3vw3gkpQQMfrYQiD2WiJ8/c01c4ZbPHcDdLCERBXnp3RD ASDJf7YfDajs+xlCwRYBCRV0O0q9/ExsTEqQ9b/yaa5vniyfqqM3QA8Bcihpaest U9FP0Pr2GOT2m22M+UNsfLLewXIzF06/Ol62RtwvRSkBV2n45PePdfHEoAiA/UBM jC4PTzO69aOIlQ4qM3oOErUWlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbb3zAQ V0ibg7OOPX9C7k/w/LwZMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVp bDBkYlNFdmQwUHUtTkpEbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWOjxtX37Sy+E78Ah1nVNlj4lZ/KJMX8R/f2J1m/efKAoAfStILn6WGkrL7Jc 6b+xW33EjO+YkhnMAPIHCkc7D+i55gceGz64OP9haNpbynh9F5ENQbB9JPyK20zP wwZlCpq8VXn4joQw3w1XdV+WS2n0lKcrv1pUwLFNADGUnhoB+amxElVHI7n40FFK Srmvky9vH4zIKm2SmQ4XsYi+BABNT82+hjdcNtZazTBvGeBE1TNfIXeKFpam/Pkz bt/U5dceP0edNk2ZdXEpHZFqHui4brxnfhq63N+hvErp+eA53JKbMU/xCMkkiV3m HvM93iu/ECxxhj1Zn9v3PCNq6A== -----END CERTIFICATE-----Generated at Thu Sep 24 19:10:40 2026 by rpki-client