$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: HTvv8rBPvLh4D70RJkD6S3OSDA+aGy1rlFTAexrw4QA= Subject key identifier: 46:DD:B8:21:EE:72:EB:50:B6:1D:FC:71:D2:9B:3A:67:C9:74:D8:7C Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 0205 Signing time: Sun 27 Sep 2026 03:34:32 +0000 Manifest this update: Sun 27 Sep 2026 03:34:32 +0000 Manifest next update: Sun 04 Oct 2026 03:34:32 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: sFjlIHuTVnCWCAtZdKyJhInAGqbBQMLtay+B+6nkuN8=) 2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: uQETdOBNe+Ai7qHHdjas7+cwdq4hlfeAOCRsaHC0QMs=) 3: B6B34C7E80F211F1958CCFA465A30FBC.roa (hash: Ym/+JBhkEZ5Bpl7vO2rxrswxWBhGXCPumfmGo7E+pVU=) 4: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: RCE7v/cxnBGfMPk3MtJPuEIln4OQNI5lz0I7q4Ez8SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Sep 27 03:34:32 2026 GMT Not After : Oct 4 03:34:32 2026 GMT Subject: CN=6ab88ec8-2604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:f8:48:af:eb:2a:18:62:43:fc:0c:0d:2c: 2e:de:2d:ec:54:d7:dd:e2:80:20:d9:8f:f6:83:f5: e1:2c:a0:60:23:d6:78:7b:d0:9a:ee:92:75:8d:3b: d8:9a:2d:80:5e:f1:18:77:64:79:b3:89:d4:68:38: be:d2:cd:11:87:33:54:94:ed:0d:25:a0:94:b5:32: 16:f1:ea:4b:ed:f9:85:02:4c:b0:4e:0a:1f:60:b8: 2d:70:f9:7a:9a:e8:56:5e:7e:89:22:59:64:28:e5: 30:f3:56:e0:32:d3:84:af:e6:58:2e:14:01:7d:b8: 84:21:4f:80:ff:e8:aa:21:25:3b:f7:90:2b:7b:a1: 59:8a:a9:06:a2:60:16:be:30:75:01:30:6f:ee:72: 31:e6:38:85:38:fa:ea:03:7b:5d:80:95:3f:8c:81: 28:4e:1b:d3:3b:97:be:15:c3:ec:ba:56:38:8d:93: 1e:c4:0c:51:72:e4:aa:ac:d0:5d:0c:8a:24:0b:2e: 38:b2:5d:92:34:b9:cb:2a:1e:7d:6d:3b:98:39:a1: a9:56:1e:8b:2d:63:d3:95:1d:7c:c3:8f:66:a5:e2: 4a:09:88:f0:9e:2c:3b:41:bc:6e:93:55:da:69:ef: 85:ca:9a:37:b2:55:b6:94:c2:40:91:96:88:d1:6e: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DD:B8:21:EE:72:EB:50:B6:1D:FC:71:D2:9B:3A:67:C9:74:D8:7C X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:74:36:7b:de:6b:a0:05:5e:b1:d4:0f:4c:14:1f:63:36:93: 70:d3:39:c3:42:5e:2f:89:3a:2a:e1:04:c3:36:c7:a2:04:8b: 2c:ac:e4:14:d8:e3:8e:42:b4:f5:ad:9c:db:74:d4:8f:13:1d: 2a:4c:52:9f:d1:bf:c0:6b:fa:64:5c:01:27:3e:60:91:d0:3a: fe:f4:40:56:92:16:44:47:14:3a:a3:7f:68:49:a0:f0:d2:aa: 78:57:18:e7:ce:98:9b:bd:b0:18:ce:3b:a5:c0:30:42:37:2e: 95:f3:f6:cf:b7:20:69:95:08:8e:f1:68:94:97:46:5e:b0:ce: b1:f8:5f:8c:20:ff:60:f9:7b:46:61:34:88:9b:13:ae:bd:d1: 54:1c:01:27:1e:1f:fe:0e:b9:20:e1:c0:f7:2f:f1:30:3c:9e: d4:31:ea:01:dd:7d:0e:f0:d0:73:ee:d5:71:2b:1b:0b:48:07: 03:f2:10:d0:5c:ee:1c:f7:00:35:dd:ae:c4:2b:29:35:18:20: 5f:93:31:2d:8b:b7:f8:ad:70:4a:6f:16:e0:90:dd:4b:71:f9: 3a:18:66:6f:81:eb:01:4c:28:ba:dd:93:80:13:84:7a:97:e3: 26:2e:f1:51:d5:3e:16:e1:27:4f:cc:43:0b:ee:1e:59:16:6c: 45:3a:bb:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjYwOTI3MDMzNDMyWhcNMjYxMDA0MDMzNDMyWjAYMRYwFAYD VQQDEw02YWI4OGVjOC0yNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDn4SK/rKhhiQ/wMDSwu3i3sVNfd4oAg2Y/2g/XhLKBgI9Z4e9Ca7pJ1jTvY mi2AXvEYd2R5s4nUaDi+0s0RhzNUlO0NJaCUtTIW8epL7fmFAkywTgofYLgtcPl6 muhWXn6JIllkKOUw81bgMtOEr+ZYLhQBfbiEIU+A/+iqISU795Are6FZiqkGomAW vjB1ATBv7nIx5jiFOPrqA3tdgJU/jIEoThvTO5e+FcPsulY4jZMexAxRcuSqrNBd DIokCy44sl2SNLnLKh59bTuYOaGpVh6LLWPTlR18w49mpeJKCYjwniw7Qbxuk1Xa ae+Fypo3slW2lMJAkZaI0W7w6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbduCHu cutQth38cdKbOmfJdNh8MB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArXQ2e95roAVesdQPTBQfYzaTcNM5w0JeL4k6KuEEwzbHogSLLKzkFNjjjkK0 9a2c23TUjxMdKkxSn9G/wGv6ZFwBJz5gkdA6/vRAVpIWREcUOqN/aEmg8NKqeFcY 586Ym72wGM47pcAwQjculfP2z7cgaZUIjvFolJdGXrDOsfhfjCD/YPl7RmE0iJsT rr3RVBwBJx4f/g65IOHA9y/xMDye1DHqAd19DvDQc+7VcSsbC0gHA/IQ0FzuHPcA Nd2uxCspNRggX5MxLYu3+K1wSm8W4JDdS3H5Ohhmb4HrAUwout2TgBOEepfjJi7x UdU+FuEnT8xDC+4eWRZsRTq7GA== -----END CERTIFICATE-----Generated at Sun Sep 27 23:52:13 2026 by rpki-client