$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: H13ZeaAZzZ2mEMsJTxSqhZIZkkZAmPAzFVO4gsNQoKU= Subject key identifier: 56:56:BB:10:CD:52:6F:6E:45:8E:BB:F1:F2:3C:84:F8:D6:5F:70:6C Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 03CF Signing time: Fri 25 Sep 2026 00:21:39 +0000 Manifest this update: Fri 25 Sep 2026 00:21:38 +0000 Manifest next update: Fri 02 Oct 2026 00:21:38 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: QOs378CWV3z2lPyVWWGTcmIjdCR6du1ozfoEG22XE1w=) 2: 585DC828A2EB11F1B8CE2B844A11F970.roa (hash: YGgsb1w7jArLrmGgXNJ/wg9e0SOlAFlVMyebYaZXBLo=) 3: 74B133CAA2EB11F1AFE949014B11F970.roa (hash: jpsmNAeJXm9/rS9zpwSK8/DCHkzoASRFsnVivNpp/hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Sep 25 00:21:38 2026 GMT Not After : Oct 2 00:21:38 2026 GMT Subject: CN=6ab5be93-0c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:12:da:ee:bf:88:cb:f5:4e:be:55:63:98:7b: 20:1b:81:55:4d:08:ee:6c:e5:18:ed:5b:b3:4d:ef: b0:b5:b0:d9:b1:b7:f9:8f:28:e6:91:b9:ec:c0:dd: 28:a2:15:38:fe:1b:db:25:19:a5:47:f4:33:86:2d: 32:be:9b:db:7a:c9:1c:7d:e7:f9:c5:f9:41:26:59: 8f:b4:9d:4d:43:f6:ba:f8:37:5e:38:55:11:02:ca: 6d:5d:4d:31:da:4c:15:76:c1:ab:75:e3:af:2d:7f: 01:59:7c:a0:de:74:8c:ce:5c:a8:1b:11:f3:07:4c: 17:26:12:75:67:f9:81:41:6c:71:e9:52:33:4e:52: 2b:e5:7b:fb:0b:d2:6b:45:89:c5:c2:2a:5a:f0:ac: db:d8:4a:2a:bc:11:ca:e0:34:cf:a5:bc:88:7f:da: c4:8c:76:33:d1:c6:08:33:50:4c:ba:7f:ae:39:df: 81:1b:97:ce:ea:dc:67:35:de:ae:db:32:84:26:c5: 66:c4:07:fa:bd:1c:db:e5:84:65:7a:be:23:2c:12: 03:2a:cf:ef:84:c6:7a:a0:4b:9f:f2:5a:e8:d0:b3: c3:4c:11:e4:9f:59:56:77:39:b1:d4:50:99:ea:0b: 26:42:6f:82:72:20:7c:fd:1f:1d:fc:ee:a2:23:c9: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:56:BB:10:CD:52:6F:6E:45:8E:BB:F1:F2:3C:84:F8:D6:5F:70:6C X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:1b:9b:15:34:4e:b0:5e:53:09:bd:11:5e:e2:54:75:63:3a: d6:22:e8:7f:b6:5c:17:7f:24:be:e2:3a:c8:7f:bc:9b:cd:c7: 28:f7:26:69:1b:bb:c8:d5:57:f3:ff:d8:a7:a6:5e:44:94:a0: 22:0c:d8:32:2c:87:23:7c:a4:b8:23:12:c7:9a:c8:1f:31:ef: 5a:21:e7:43:48:10:4b:73:4c:5c:24:95:09:cd:3a:0d:97:93: c6:dd:eb:5f:3d:6b:d8:67:ca:a0:69:ab:9e:df:d6:81:f9:7c: df:3d:fc:d5:33:7a:28:15:90:f4:a1:92:91:61:17:49:6a:b6: e9:37:46:52:be:60:f9:4a:2a:3b:df:31:a7:3d:a9:e6:95:35: 2b:5f:ad:f4:00:7a:9d:6f:0c:9c:1c:a1:5c:00:18:4a:af:b4: d2:36:e1:2f:fe:49:7b:0d:f7:e2:0a:16:35:b0:77:e9:d7:cf: 9b:51:1c:bc:1e:94:d9:50:18:54:20:b9:b1:3c:99:ba:7b:1e: 26:71:aa:8b:4c:6c:92:77:14:76:be:8f:02:bf:ba:04:51:fe: 38:97:a9:50:56:0b:63:0a:16:98:42:ac:e3:15:c4:d6:25:00: 74:9c:62:a5:e9:4a:fb:fb:a6:ac:ce:a0:b0:64:73:61:35:a5: 17:75:5a:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjYwOTI1MDAyMTM4WhcNMjYxMDAyMDAyMTM4WjAYMRYwFAYD VQQDEw02YWI1YmU5My0wYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RLa7r+Iy/VOvlVjmHsgG4FVTQjubOUY7VuzTe+wtbDZsbf5jyjmkbnswN0o ohU4/hvbJRmlR/Qzhi0yvpvbeskcfef5xflBJlmPtJ1NQ/a6+DdeOFURAsptXU0x 2kwVdsGrdeOvLX8BWXyg3nSMzlyoGxHzB0wXJhJ1Z/mBQWxx6VIzTlIr5Xv7C9Jr RYnFwipa8Kzb2EoqvBHK4DTPpbyIf9rEjHYz0cYIM1BMun+uOd+BG5fO6txnNd6u 2zKEJsVmxAf6vRzb5YRler4jLBIDKs/vhMZ6oEuf8lro0LPDTBHkn1lWdzmx1FCZ 6gsmQm+CciB8/R8d/O6iI8lBrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZWuxDN Um9uRY678fI8hPjWX3BsMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsxubFTROsF5TCb0RXuJUdWM61iLof7ZcF38kvuI6yH+8m83HKPcmaRu7yNVX 8//Yp6ZeRJSgIgzYMiyHI3ykuCMSx5rIHzHvWiHnQ0gQS3NMXCSVCc06DZeTxt3r Xz1r2GfKoGmrnt/Wgfl83z381TN6KBWQ9KGSkWEXSWq26TdGUr5g+UoqO98xpz2p 5pU1K1+t9AB6nW8MnByhXAAYSq+00jbhL/5Jew334goWNbB36dfPm1EcvB6U2VAY VCC5sTyZunseJnGqi0xskncUdr6PAr+6BFH+OJepUFYLYwoWmEKs4xXE1iUAdJxi pelK+/umrM6gsGRzYTWlF3VasA== -----END CERTIFICATE-----Generated at Sat Sep 26 12:32:00 2026 by rpki-client