$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: 63DYrtpxrtiMYzIk4r7xFzD8GRRP7sJkoQL3bdSodKI= Subject key identifier: 2C:50:AE:44:D4:4E:2E:BF:A9:75:49:0E:76:FC:EF:C0:35:6C:D5:AE Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 03CE Signing time: Wed 23 Sep 2026 00:09:08 +0000 Manifest this update: Wed 23 Sep 2026 00:09:07 +0000 Manifest next update: Wed 30 Sep 2026 00:09:07 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: L9LmsIH2hMBVlN74la6d65TPPR+6k6v9UUPh9vMt34A=) 2: 585DC828A2EB11F1B8CE2B844A11F970.roa (hash: YGgsb1w7jArLrmGgXNJ/wg9e0SOlAFlVMyebYaZXBLo=) 3: 74B133CAA2EB11F1AFE949014B11F970.roa (hash: jpsmNAeJXm9/rS9zpwSK8/DCHkzoASRFsnVivNpp/hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Sep 23 00:09:07 2026 GMT Not After : Sep 30 00:09:07 2026 GMT Subject: CN=6ab318a3-6356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:e2:0b:f4:69:62:2e:68:c4:a3:ff:c6:b4: 52:b2:ab:c9:b0:a6:00:9c:61:09:ea:39:7e:11:99: 2f:b8:a4:7f:d2:73:13:e2:c3:55:ec:5c:67:13:e7: 65:9b:d5:d4:32:59:a1:e5:e6:a1:8e:cd:43:96:e3: c6:58:3e:a8:ba:5c:c4:d0:41:46:40:95:8b:78:82: 7a:79:23:a5:a6:1e:a3:a6:26:98:cb:db:c6:d9:f5: 97:ea:d0:3e:17:78:44:87:29:96:d6:51:8d:06:ca: 4a:7f:55:ad:25:1a:59:13:3d:36:29:d4:42:5b:cd: 2d:b8:ce:19:90:7a:d4:2f:36:41:dd:2a:33:32:d6: 1d:e0:02:d2:88:4f:a2:8d:5c:a2:2e:ad:3e:55:78: 75:a8:90:b4:51:94:1c:29:fb:83:be:d3:20:9c:e3: e2:02:7c:8d:c3:88:39:7c:d6:03:f5:b4:de:5d:30: 46:e4:99:53:cc:33:c5:93:31:0e:65:22:fa:78:ff: 58:c1:7e:4d:2b:32:3a:7e:70:04:46:32:9f:8e:bc: c7:17:e2:9a:e3:88:9a:9a:0a:3b:84:60:f1:f6:64: 4d:89:ff:22:50:f2:32:38:c2:59:57:cd:db:cb:ac: b8:34:1a:be:b4:ed:8b:10:35:b3:7a:94:28:3a:fc: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:50:AE:44:D4:4E:2E:BF:A9:75:49:0E:76:FC:EF:C0:35:6C:D5:AE X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1f:a0:1b:3b:6d:f4:8f:95:b0:78:17:e8:05:ea:74:35:26: 8f:9f:50:f0:4b:9b:a2:fd:8c:b9:59:60:3a:c2:ab:d0:91:33: 91:82:47:a9:2a:ca:72:8f:73:2b:8c:87:66:bc:21:a6:09:d7: 16:fb:4d:94:b4:ff:0e:d5:f0:61:23:3c:2e:13:0b:c0:33:ba: 4a:d1:a4:fa:35:eb:8d:c4:cd:a4:64:ef:00:40:ad:27:e4:af: 97:46:65:1a:70:6d:c9:d1:14:8a:36:e8:22:f8:71:a8:63:4e: d3:3c:17:11:0c:83:8f:ed:b2:cd:6d:61:4e:65:03:2c:10:8f: 6b:d0:13:64:b9:10:41:56:83:e6:71:ad:07:af:b1:c4:9e:7e: 85:95:eb:58:29:72:8c:f6:25:67:1a:c9:a7:56:cf:4f:98:72: d0:93:7b:aa:19:a2:99:97:3f:95:1a:4d:d0:af:c6:11:b4:30: b8:a3:f4:e9:89:d8:39:42:28:95:b0:e9:c1:ed:8a:6f:7e:99: cf:07:34:e0:4c:6d:2c:70:c1:74:2c:9a:75:94:a2:71:e7:47: 44:ff:50:92:80:0d:4d:35:92:c6:6d:dd:5a:12:aa:fd:f7:62: c5:de:5a:3c:e1:e5:a4:08:bf:d0:f5:f3:2e:90:21:4b:cf:cf: 44:c6:95:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjYwOTIzMDAwOTA3WhcNMjYwOTMwMDAwOTA3WjAYMRYwFAYD VQQDEw02YWIzMThhMy02MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllviC/RpYi5oxKP/xrRSsqvJsKYAnGEJ6jl+EZkvuKR/0nMT4sNV7FxnE+dl m9XUMlmh5eahjs1DluPGWD6oulzE0EFGQJWLeIJ6eSOlph6jpiaYy9vG2fWX6tA+ F3hEhymW1lGNBspKf1WtJRpZEz02KdRCW80tuM4ZkHrULzZB3SozMtYd4ALSiE+i jVyiLq0+VXh1qJC0UZQcKfuDvtMgnOPiAnyNw4g5fNYD9bTeXTBG5JlTzDPFkzEO ZSL6eP9YwX5NKzI6fnAERjKfjrzHF+Ka44iamgo7hGDx9mRNif8iUPIyOMJZV83b y6y4NBq+tO2LEDWzepQoOvztFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxQrkTU Ti6/qXVJDnb878A1bNWuMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQB+gGztt9I+VsHgX6AXqdDUmj59Q8Eubov2MuVlgOsKr0JEzkYJHqSrKco9z K4yHZrwhpgnXFvtNlLT/DtXwYSM8LhMLwDO6StGk+jXrjcTNpGTvAECtJ+Svl0Zl GnBtydEUijboIvhxqGNO0zwXEQyDj+2yzW1hTmUDLBCPa9ATZLkQQVaD5nGtB6+x xJ5+hZXrWClyjPYlZxrJp1bPT5hy0JN7qhmimZc/lRpN0K/GEbQwuKP06YnYOUIo lbDpwe2Kb36Zzwc04ExtLHDBdCyadZSicedHRP9QkoANTTWSxm3dWhKq/fdixd5a POHlpAi/0PXzLpAhS8/PRMaVdg== -----END CERTIFICATE-----Generated at Thu Sep 24 21:40:30 2026 by rpki-client