$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: h+hfbC0U+/S8jD5Tm2Rbcy9UJYDSxGxFVUZW14Otxp0= Subject key identifier: ED:69:B8:1A:F3:B3:5E:F2:00:C4:6D:F3:35:C8:AD:1B:9E:40:A4:3A Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1416 Signing time: Tue 22 Sep 2026 16:50:19 +0000 Manifest this update: Tue 22 Sep 2026 16:50:19 +0000 Manifest next update: Tue 29 Sep 2026 16:50:19 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: plsFk8G07nPblDJqhBsy31au2+39uL66KC5fpl4cgR0=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: DL6GA/K6cpxzI2cqMbQjFszw1dEV15dZjZ9FhFB5IeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5155 (0x1423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Sep 22 16:50:19 2026 GMT Not After : Sep 29 16:50:19 2026 GMT Subject: CN=6ab2b1cb-29e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:d7:1a:de:58:3b:b5:ca:2f:4e:f0:9f:72: 5e:5e:51:a5:c6:26:1b:33:9a:11:33:aa:bb:08:e3: 9d:69:e5:9c:b6:fa:c1:64:d9:34:f5:fb:c2:e9:6d: 9c:9f:9a:3c:6a:97:67:46:67:a1:c0:14:d6:73:78: e9:6d:fa:1f:d2:2e:bf:22:9a:9b:3a:ba:cd:ea:8a: b7:d0:b5:48:89:08:2b:20:dc:b3:79:06:d7:ca:cf: 46:b4:40:4e:04:cf:44:9f:44:f7:db:19:98:12:47: b5:49:78:10:f3:7a:04:b2:bb:3f:65:bc:1b:c5:59: 81:a9:c9:9b:fd:74:a0:91:4d:26:4d:d6:00:93:57: 75:a9:98:41:72:ce:3c:c8:b5:88:be:91:ff:1d:a0: fa:bb:e0:7c:2b:e2:11:d9:0a:96:49:73:0d:5f:f6: 45:26:eb:87:fe:03:f9:50:63:83:e8:ae:e2:b6:23: e5:ce:c2:a3:41:59:93:5d:2e:c6:ba:4d:c8:49:be: 1f:66:75:fc:15:93:96:8d:c8:d3:6f:53:b4:82:5b: 08:10:bc:6f:30:d5:bf:49:34:53:94:d5:c5:5b:96: a6:68:c6:2a:a7:b2:4e:fb:bb:59:cc:65:7f:3f:55: 3c:71:81:56:34:65:83:3a:9c:53:20:b8:8a:1e:38: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:69:B8:1A:F3:B3:5E:F2:00:C4:6D:F3:35:C8:AD:1B:9E:40:A4:3A X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:65:d7:35:62:98:84:fc:2a:42:a6:de:76:15:4c:ef:00:68: 1d:0e:ea:f1:88:f0:54:6e:d6:67:2b:e0:7d:e8:cb:f8:43:0a: 18:c3:39:d3:83:1f:7b:61:c4:6e:4d:94:0a:1a:73:86:2a:14: e2:62:69:33:07:f9:cb:8e:ff:f5:40:23:67:7d:a4:ce:33:4f: 8c:bb:e4:3c:8e:11:cc:29:8e:c5:29:5b:bf:f2:63:86:e2:34: 24:bc:74:6e:bc:bb:32:b0:ff:df:c7:e3:7b:67:b2:06:06:18: 2b:34:9b:5f:c5:85:8a:01:1f:23:36:09:99:7b:c4:e4:52:02: 56:b3:81:48:fe:4b:c3:e6:6c:9a:12:37:3d:f8:f9:5e:b6:06: f6:9f:8e:ff:85:61:8a:97:db:a0:11:c6:f0:91:e4:2c:8d:a6: 19:ce:3e:2d:b4:6f:6a:7e:79:0b:1c:58:8a:26:5d:64:58:9a: e8:fa:9e:2f:eb:f6:3a:ea:d6:db:3c:b4:87:37:e1:52:54:82: 54:79:26:f9:42:a2:c9:83:95:ff:fb:09:57:06:31:b1:42:fb: 0c:49:f8:d1:ce:d4:1a:38:d1:64:5e:29:a7:0a:34:2e:90:db: ab:72:8c:88:f4:ed:bb:3b:3d:04:ea:05:ac:a6:dd:43:6e:ca: 35:df:e5:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjYwOTIyMTY1MDE5WhcNMjYwOTI5MTY1MDE5WjAYMRYwFAYD VQQDEw02YWIyYjFjYi0yOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V3XGt5YO7XKL07wn3JeXlGlxiYbM5oRM6q7COOdaeWctvrBZNk09fvC6W2c n5o8apdnRmehwBTWc3jpbfof0i6/IpqbOrrN6oq30LVIiQgrINyzeQbXys9GtEBO BM9En0T32xmYEke1SXgQ83oEsrs/ZbwbxVmBqcmb/XSgkU0mTdYAk1d1qZhBcs48 yLWIvpH/HaD6u+B8K+IR2QqWSXMNX/ZFJuuH/gP5UGOD6K7itiPlzsKjQVmTXS7G uk3ISb4fZnX8FZOWjcjTb1O0glsIELxvMNW/STRTlNXFW5amaMYqp7JO+7tZzGV/ P1U8cYFWNGWDOpxTILiKHji7twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1puBrz s17yAMRt8zXIrRueQKQ6MB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyWXXNWKYhPwqQqbedhVM7wBoHQ7q8YjwVG7WZyvgfejL+EMKGMM504Mfe2HE bk2UChpzhioU4mJpMwf5y47/9UAjZ32kzjNPjLvkPI4RzCmOxSlbv/JjhuI0JLx0 bry7MrD/38fje2eyBgYYKzSbX8WFigEfIzYJmXvE5FICVrOBSP5Lw+ZsmhI3Pfj5 XrYG9p+O/4VhipfboBHG8JHkLI2mGc4+LbRvan55CxxYiiZdZFia6PqeL+v2OurW 2zy0hzfhUlSCVHkm+UKiyYOV//sJVwYxsUL7DEn40c7UGjjRZF4ppwo0LpDbq3KM iPTtuzs9BOoFrKbdQ27KNd/lug== -----END CERTIFICATE-----Generated at Wed Sep 23 09:13:51 2026 by rpki-client