$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft File: FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft (raw, json) Hash identifier: EvikHSSp5jCJrFRsZCfnrVJzJyn42/eK2XpL87DEj7w= Subject key identifier: C2:96:95:76:02:69:A5:F4:2B:CE:83:CF:34:91:54:AB:17:7A:8B:EA Authority key identifier: 17:35:B8:5E:3E:5E:54:03:A4:95:39:C2:6C:66:7C:8B:80:92:BD:A0 Certificate issuer: /CN=A919A43E/serialNumber=1735B85E3E5E5403A49539C26C667C8B8092BDA0 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft Manifest number: 21 Signing time: Mon 21 Sep 2026 08:51:56 +0000 Manifest this update: Mon 21 Sep 2026 08:51:55 +0000 Manifest next update: Mon 28 Sep 2026 08:51:55 +0000 Files and hashes: 1: FzW4Xj5eVAOklTnCbGZ8i4CSvaA.crl (hash: +ZEvpJoz2p66XVQwNwYsT+158EvzChTpe64bSuMqgH4=) 2: kJnsU6kgCJ7qDC1Hg6_Dm18_TRA.asa (hash: i98BHDyQ2hWxqbAWoQmF5RjBQp+mPsoSBtrXMWYS0ik=) 3: 13D1BA588A5D11F1831FA6813B11F970.roa (hash: Xf5SP5AS1EFI02JBBXyujYvXMblTTJZrdC5Wu0eO50w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.crl rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A43E, serialNumber=1735B85E3E5E5403A49539C26C667C8B8092BDA0 Validity Not Before: Sep 21 08:51:55 2026 GMT Not After : Sep 28 08:51:55 2026 GMT Subject: CN=6ab0f02c-ea21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:1b:f2:9f:33:31:dd:cf:03:e7:a5:6c:c9: 67:c2:5b:0e:8a:c2:61:7f:5e:eb:45:5b:bf:40:05: e9:4b:7f:63:36:8b:88:ba:19:65:2c:3b:6f:1f:6f: 5b:48:f4:90:00:2b:29:ac:45:3d:d3:84:78:3a:80: 6c:18:5b:96:5d:52:d0:18:d4:f6:bd:3e:70:7c:56: 0a:59:1e:dd:e5:88:8b:05:36:e0:f7:7b:ef:3e:a9: e6:38:50:f0:e7:48:54:4c:6b:73:f8:0d:1e:d0:44: bd:5c:4a:31:07:22:5e:bb:67:0e:e9:1a:6c:61:97: a2:df:63:fc:7a:b5:df:b0:3d:49:53:24:34:6d:b2: bc:7c:97:88:25:3e:45:4e:cc:31:19:8f:26:21:b0: ec:16:7b:1a:99:c4:42:f8:e0:9a:e4:4b:3d:cc:02: a9:c8:44:fb:5f:0f:f7:28:a4:29:8a:37:6b:19:99: 79:27:f3:37:c1:0c:08:51:82:00:4b:98:d2:38:82: 9f:5c:46:65:3d:77:47:19:59:d7:02:3c:dc:d4:b8: 68:76:34:54:8a:b9:05:d7:d2:ad:73:e9:1b:94:4a: bb:54:15:b3:63:68:fa:81:3d:47:7a:24:cc:f1:59: d5:77:60:29:00:65:b4:53:ea:3f:6c:06:b5:29:66: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:96:95:76:02:69:A5:F4:2B:CE:83:CF:34:91:54:AB:17:7A:8B:EA X509v3 Authority Key Identifier: keyid:17:35:B8:5E:3E:5E:54:03:A4:95:39:C2:6C:66:7C:8B:80:92:BD:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:41:14:b0:02:b1:66:97:be:72:99:96:34:ea:5f:63:67:ef: 23:b3:b4:3c:71:52:73:be:27:76:b2:3f:62:a7:e2:76:23:df: f4:ea:79:38:6b:2a:18:dc:ee:7a:55:05:82:db:83:29:63:fb: ba:61:9e:ba:31:6f:e4:6d:d2:ae:c8:0b:2d:b9:68:1e:03:2e: e4:a3:fb:eb:33:3c:dd:f2:54:a6:63:d7:8c:7c:aa:d8:3a:0e: 25:49:ca:20:89:e2:9c:63:9f:20:86:08:2e:03:39:3e:15:7f: 14:22:38:b1:66:3a:c0:b3:b3:7b:ce:c5:94:25:6a:01:83:fc: 5d:ce:9f:1a:20:bd:a1:89:e7:5b:90:30:98:22:42:a2:42:c6: 8f:a3:9c:28:1c:46:79:ba:9c:fa:6d:95:66:17:c2:b0:9b:a0: 53:b7:20:5b:6d:7b:ea:9b:48:32:eb:5c:34:73:e6:77:17:a7: ba:50:39:9a:83:35:6f:30:64:7f:e6:7a:5c:4b:0c:63:2a:58: 2f:f2:92:91:26:27:29:ed:69:65:1b:eb:82:54:51:7f:b3:a5: 90:03:98:37:c3:dd:f1:80:79:6d:9b:0b:3d:36:64:b5:e1:26: 1b:3b:5f:29:69:b9:92:aa:f0:88:4d:1d:75:17:9c:ad:b4:19: ce:48:73:61 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTQzRTExMC8GA1UEBRMoMTczNUI4NUUzRTVFNTQwM0E0OTUzOUMyNkM2NjdDOEI4 MDkyQkRBMDAeFw0yNjA5MjEwODUxNTVaFw0yNjA5MjgwODUxNTVaMBgxFjAUBgNV BAMTDTZhYjBmMDJjLWVhMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfZxvynzMx3c8D56VsyWfCWw6KwmF/XutFW79ABelLf2M2i4i6GWUsO28fb1tI 9JAAKymsRT3ThHg6gGwYW5ZdUtAY1Pa9PnB8VgpZHt3liIsFNuD3e+8+qeY4UPDn SFRMa3P4DR7QRL1cSjEHIl67Zw7pGmxhl6LfY/x6td+wPUlTJDRtsrx8l4glPkVO zDEZjyYhsOwWexqZxEL44JrkSz3MAqnIRPtfD/copCmKN2sZmXkn8zfBDAhRggBL mNI4gp9cRmU9d0cZWdcCPNzUuGh2NFSKuQXX0q1z6RuUSrtUFbNjaPqBPUd6JMzx WdV3YCkAZbRT6j9sBrUpZp8BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwpaVdgJp pfQrzoPPNJFUqxd6i+owHwYDVR0jBBgwFoAUFzW4Xj5eVAOklTnCbGZ8i4CSvaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNDNFL0Y4MDU4NTFDOEE1 QjExRjE5N0RCM0U2OTNBMTFGOTcwL0Z6VzRYajVlVkFPa2xUbkNiR1o4aTRDU3Zh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRnpXNFhqNWVWQU9rbFRuQ2JHWjhpNENTdmFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NDNFL0Y4MDU4NTFDOEE1QjExRjE5N0RCM0U2OTNBMTFGOTcwL0Z6VzRYajVlVkFP a2xUbkNiR1o4aTRDU3ZhQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhQRSwArFml75ymZY06l9jZ+8js7Q8cVJzvid2sj9ip+J2I9/06nk4ayoY3O56 VQWC24MpY/u6YZ66MW/kbdKuyAstuWgeAy7ko/vrMzzd8lSmY9eMfKrYOg4lScog ieKcY58ghgguAzk+FX8UIjixZjrAs7N7zsWUJWoBg/xdzp8aIL2hiedbkDCYIkKi QsaPo5woHEZ5upz6bZVmF8Kwm6BTtyBbbXvqm0gy61w0c+Z3F6e6UDmagzVvMGR/ 5npcSwxjKlgv8pKRJicp7WllG+uCVFF/s6WQA5g3w93xgHltmws9NmS14SYbO18p abmSqvCITR11F5yttBnOSHNh -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:30 2026 by rpki-client