$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: gbgVTjmPEE3KfX73RNi64WMIIBhBC1y+CnDQISXs99E= Subject key identifier: B6:AA:38:67:E7:3D:24:6E:33:30:F4:54:3E:A0:AC:34:00:7C:1C:5B Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0BFF Signing time: Wed 22 Jul 2026 19:12:59 +0000 Manifest this update: Wed 22 Jul 2026 19:12:59 +0000 Manifest next update: Wed 29 Jul 2026 19:12:59 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: wjBCyoINmi78IWbEqOBDJyu+CMMzzvjZSoBr63Bt3xs=) 2: BCA6A73A75D911F1B46C33AD6CA30FBC.roa (hash: 200zdhmpRY9TDWyoBotBxLY/NlAK1wTrZHNyeeHEV/Q=) 3: B899690275D911F1B46C33AD6CA30FBC.roa (hash: fmi7Xv25W86/nRUdBaLjYoJWXUK1k9Dy00DZvttwrRQ=) 4: D9C0AD2EF44811F08A68E332626F56BC.roa (hash: RzHBWYWw5IHkZGciQV9CfmaSyQYYH4ManuyCrGOl3Iw=) 5: BB848D8675D911F1B46C33AD6CA30FBC.roa (hash: hKK67kho1xmsmO4LWvmGhYdHu4g9sHo6GKRHNdTGbfY=) 6: 614D895A75DC11F19A6AA48A6DA30FBC.roa (hash: a9aKl465v7NDdlNX+gkLCpTJES/Srn/edKpf/fvxxmo=) 7: BA16840475D911F1B46C33AD6CA30FBC.roa (hash: /qKxnSXL8e1JhFVlrKwLNg4T/NwR0oewdz+ElfcHN+w=) 8: 8137CEBC07E911F18CE8BD7B223D8C67.roa (hash: wHgEjCXqndOJLXZ9J6FfS2MgjM1Wq0AwJ0Oymtfq0bs=) 9: E4C4CC72EB8411F09FAB30C6536F56BC.roa (hash: m6A5k7GrCQsQt6UQStLqk4vDI2cF1RjOvSbk8wVUoVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Jul 22 19:12:59 2026 GMT Not After : Jul 29 19:12:59 2026 GMT Subject: CN=6a61163b-6ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:26:48:c7:b1:79:ac:d2:02:8b:64:14:3c: b3:1e:5d:9d:c0:75:0f:80:6e:d5:27:e7:06:20:29: 81:49:9c:69:43:51:4c:1c:b3:1c:23:d3:a6:a7:a7: 2e:49:ed:1c:fb:e5:d2:20:b3:ed:44:9a:b7:33:cc: b5:6e:70:5a:a4:cc:76:e8:ce:2a:46:d9:20:38:41: 24:28:4a:90:78:7a:30:bb:5b:2f:2b:a4:21:6d:5e: 91:ba:a3:a5:15:dd:06:48:f1:bb:7a:77:d1:c3:44: bd:f1:61:3d:f3:c6:a2:ee:59:e8:ff:f8:5e:af:32: f9:2a:60:03:9a:38:5c:e9:aa:fa:d8:6e:d9:1d:79: 9d:4d:35:fa:95:a7:64:8e:bb:12:93:84:1e:44:98: e1:f9:d8:ad:12:5f:f4:12:bc:64:5e:01:22:69:58: 97:d1:bc:cd:8c:a1:39:3b:1f:61:97:cb:76:0a:35: 13:9f:ce:ec:b9:41:5d:aa:65:7c:f9:a2:a4:51:6a: c1:85:4e:8e:72:83:2c:2f:11:bd:09:88:f3:dd:6e: 41:db:7f:36:c7:88:45:95:4b:ad:33:3e:29:04:b8: 01:fb:ce:ba:ae:53:4f:4a:d2:19:1e:59:3f:13:49: e7:e0:17:0c:91:7d:23:e2:c3:16:ed:b8:fa:fa:02: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:38:67:E7:3D:24:6E:33:30:F4:54:3E:A0:AC:34:00:7C:1C:5B X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ac:cf:93:c1:86:32:66:68:dd:57:c8:a6:9a:38:8c:3d:59: a4:6e:25:25:48:43:7e:df:85:14:7c:49:4b:5d:b9:73:51:aa: 91:e7:fa:54:43:47:6d:2c:d0:c2:6a:c7:d9:93:ea:0a:30:19: a4:f5:64:dc:32:f7:ef:45:ed:aa:fc:5e:12:52:cf:5c:70:ac: 0c:68:60:fa:c5:ef:75:73:45:6e:6b:62:48:3d:01:36:99:bd: 05:a5:0e:54:e8:36:b2:ba:ea:94:b3:dc:19:f8:4a:00:19:9a: 97:d4:29:ee:88:bc:7f:67:b0:85:1e:21:95:f0:c0:8a:a2:69: f2:c9:8a:43:bd:cc:2b:ef:22:7a:a8:56:52:ac:65:69:f2:2e: 5b:93:cb:5c:04:2a:7f:08:c6:61:5e:33:68:f3:83:72:40:b9: 82:c7:f3:79:fa:a1:85:b8:36:ee:d3:c5:94:7c:11:c8:89:03: bc:e3:7b:fa:65:2f:82:37:78:4f:6a:b0:89:fd:93:f1:a1:9d: b1:79:8b:da:1b:04:43:b5:a3:7d:0a:de:9a:8a:12:e8:c5:96: eb:bf:2a:43:e6:a9:03:8e:eb:f4:53:7a:59:64:a5:e8:e0:d1: 92:66:6c:7e:15:d3:78:88:1b:bf:1e:2b:a9:2b:4b:04:48:1c: 24:5b:50:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwNzIyMTkxMjU5WhcNMjYwNzI5MTkxMjU5WjAYMRYwFAYD VQQDEw02YTYxMTYzYi02YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYEmSMexeazSAotkFDyzHl2dwHUPgG7VJ+cGICmBSZxpQ1FMHLMcI9Omp6cu Se0c++XSILPtRJq3M8y1bnBapMx26M4qRtkgOEEkKEqQeHowu1svK6QhbV6RuqOl Fd0GSPG7enfRw0S98WE988ai7lno//herzL5KmADmjhc6ar62G7ZHXmdTTX6ladk jrsSk4QeRJjh+ditEl/0ErxkXgEiaViX0bzNjKE5Ox9hl8t2CjUTn87suUFdqmV8 +aKkUWrBhU6OcoMsLxG9CYjz3W5B2382x4hFlUutMz4pBLgB+866rlNPStIZHlk/ E0nn4BcMkX0j4sMW7bj6+gJ0UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaqOGfn PSRuMzD0VD6grDQAfBxbMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMqzPk8GGMmZo3VfIppo4jD1ZpG4lJUhDft+FFHxJS125c1Gqkef6VENHbSzQ wmrH2ZPqCjAZpPVk3DL370XtqvxeElLPXHCsDGhg+sXvdXNFbmtiSD0BNpm9BaUO VOg2srrqlLPcGfhKABmal9Qp7oi8f2ewhR4hlfDAiqJp8smKQ73MK+8ieqhWUqxl afIuW5PLXAQqfwjGYV4zaPODckC5gsfzefqhhbg27tPFlHwRyIkDvON7+mUvgjd4 T2qwif2T8aGdsXmL2hsEQ7WjfQremooS6MWW678qQ+apA47r9FN6WWSl6ODRkmZs fhXTeIgbvx4rqStLBEgcJFtQHA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:06:52 2026 by rpki-client