$ rpki-client -vvvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: GXRFSVXc1sQpbm3niBXylUxvGEUPuslRoK8fbq/T06s= Subject key identifier: 53:9A:22:34:B4:B6:A0:CA:11:81:DF:AE:C5:21:16:82:A1:C8:2B:8E Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 0998 Signing time: Sat 26 Sep 2026 20:05:10 +0000 Manifest this update: Sat 26 Sep 2026 20:05:10 +0000 Manifest next update: Sat 03 Oct 2026 20:05:10 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: OGxTef1kDSjDQz/F6D8gY9dh3WU33bv7w12xkQBnPH0=) 2: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: bPFO6I2wWIPENqB/X87e5uIatc/LQckX7tfxgiWc7ts=) 3: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: +2GMR/V9mZr0Ife9tGdydPkVcoSqLY2zhQZIUiI3Hq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: Sep 26 20:05:10 2026 GMT Not After : Oct 3 20:05:10 2026 GMT Subject: CN=6ab82576-b985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:ed:37:54:cf:72:ae:66:e5:e4:53:69:f0: da:c4:2d:47:ee:37:dc:ce:d0:cc:9e:d0:23:b9:b2: 05:3d:dd:38:7d:0f:3b:42:3b:07:5a:36:e7:c3:74: 3e:90:57:d0:e5:be:f2:a2:ab:7b:dc:ef:45:82:16: 32:bd:4e:5d:91:c5:83:f8:c4:a0:ef:95:63:3b:bf: cc:30:43:32:ef:9c:a5:ef:e1:cf:b2:67:c7:5f:7a: 83:9e:1c:bb:44:4c:0c:50:f7:30:e3:8f:a3:26:ef: 2f:8e:18:0b:20:d2:9c:16:5d:ca:14:cb:44:67:46: 25:19:46:8c:21:8d:e7:c7:ce:44:18:35:90:42:71: 7f:ec:18:b4:d1:7c:a2:b5:e8:fc:4b:1c:50:2a:a9: 97:47:66:be:5e:a3:e4:45:45:1b:bc:45:62:ed:f2: dc:e2:c6:ed:1c:9c:54:70:27:59:f8:dd:f7:19:8d: 4a:15:d3:14:62:9e:37:0c:4f:58:14:4b:30:35:0e: 7a:84:f9:e6:95:14:61:96:26:00:03:1f:54:a5:4f: 64:7f:8d:a1:8a:7e:a0:ce:30:8e:b2:cd:b5:35:f9: 4d:51:6a:bc:c4:3a:6f:d4:db:fe:8e:6d:7e:80:b0: 9d:dd:83:07:93:28:18:d2:05:04:30:9f:51:89:3c: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9A:22:34:B4:B6:A0:CA:11:81:DF:AE:C5:21:16:82:A1:C8:2B:8E X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:24:68:ea:07:5a:bf:c1:7e:09:de:f5:4d:6b:c1:fd:fc:7d: 4e:1a:9e:0c:15:06:16:43:27:3e:c8:5c:ee:4a:ed:d9:e9:8a: 43:0c:34:c7:0a:05:1d:24:1d:07:24:dd:5f:0d:8b:8a:37:b5: 53:a3:31:d8:bf:42:dd:56:2e:20:6a:93:bc:3f:34:ca:bc:ab: d3:db:8c:dd:83:8e:83:43:7c:19:cc:ea:73:8c:f5:53:90:9d: 6c:2e:83:24:1b:9e:3e:3f:d9:af:ba:f5:74:0c:f8:cb:ad:3b: 6b:4d:2d:4d:9c:ab:d3:2d:ee:3f:b4:b9:39:c9:31:47:15:02: 14:78:27:e1:ce:89:82:75:a9:8c:2d:37:2a:c5:5f:78:ad:71: 87:95:37:52:6c:e0:9e:6c:7b:f8:42:b0:62:76:8d:c8:72:d1: 8c:d7:9d:3c:28:46:7b:fa:75:15:5e:fc:a6:2e:b4:12:43:45: 84:4f:6a:6c:3f:f1:24:42:c3:c7:ef:9d:7c:b9:54:da:ef:25: d1:28:20:aa:4b:0f:cf:87:e7:bc:14:70:7d:97:6f:3a:70:c4: 6c:80:36:a6:f1:cb:54:0c:66:7d:06:0a:75:3c:3f:77:2b:05: dd:4d:c9:4f:3a:c4:6a:1e:3b:ee:5d:60:4f:47:00:4b:dd:84: 57:7d:89:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjYwOTI2MjAwNTEwWhcNMjYxMDAzMjAwNTEwWjAYMRYwFAYD VQQDEw02YWI4MjU3Ni1iOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4vtN1TPcq5m5eRTafDaxC1H7jfcztDMntAjubIFPd04fQ87QjsHWjbnw3Q+ kFfQ5b7yoqt73O9FghYyvU5dkcWD+MSg75VjO7/MMEMy75yl7+HPsmfHX3qDnhy7 REwMUPcw44+jJu8vjhgLINKcFl3KFMtEZ0YlGUaMIY3nx85EGDWQQnF/7Bi00Xyi tej8SxxQKqmXR2a+XqPkRUUbvEVi7fLc4sbtHJxUcCdZ+N33GY1KFdMUYp43DE9Y FEswNQ56hPnmlRRhliYAAx9UpU9kf42hin6gzjCOss21NflNUWq8xDpv1Nv+jm1+ gLCd3YMHkygY0gUEMJ9RiTyu5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFOaIjS0 tqDKEYHfrsUhFoKhyCuOMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmSRo6gdav8F+Cd71TWvB/fx9ThqeDBUGFkMnPshc7krt2emKQww0xwoFHSQd ByTdXw2Lije1U6Mx2L9C3VYuIGqTvD80yryr09uM3YOOg0N8Gczqc4z1U5CdbC6D JBuePj/Zr7r1dAz4y607a00tTZyr0y3uP7S5OckxRxUCFHgn4c6JgnWpjC03KsVf eK1xh5U3Umzgnmx7+EKwYnaNyHLRjNedPChGe/p1FV78pi60EkNFhE9qbD/xJELD x++dfLlU2u8l0SggqksPz4fnvBRwfZdvOnDEbIA2pvHLVAxmfQYKdTw/dysF3U3J TzrEah477l1gT0cAS92EV32Jhw== -----END CERTIFICATE-----Generated at Sun Sep 27 19:29:27 2026 by rpki-client