$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: bJ1EW+Va38YRKih65wcpC82SGyQximr2YAwAjPODJWI= Subject key identifier: B6:91:83:1C:6F:DD:82:98:08:D6:0F:4C:96:0C:39:2A:60:F6:40:D7 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0CC3 Signing time: Sat 26 Sep 2026 18:35:52 +0000 Manifest this update: Sat 26 Sep 2026 18:35:51 +0000 Manifest next update: Sat 03 Oct 2026 18:35:51 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: 28AHtvrXZSxkACN2s0Bft1ti6WMZNCMdC6QWNbC3r3c=) 2: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: 9brcnHryI3Y4I0qze8pkKOj7kUBQ8kANoxfoueYgUMM=) 3: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: cEvLZrkv6DMpSj0Vfia9IhgiuszRtIWI2Gda9xI8ARY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Sep 26 18:35:51 2026 GMT Not After : Oct 3 18:35:51 2026 GMT Subject: CN=6ab81088-1cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:0f:d3:30:57:b3:17:57:98:2e:ea:ff:d7: be:09:ce:5d:0a:ad:bc:3c:1f:fb:97:89:bb:2b:28: 4b:fb:54:af:67:92:80:81:bf:2d:78:ed:9c:32:b1: 8c:1e:80:24:97:14:8a:e6:87:72:74:c0:8f:d0:59: 43:6e:b7:46:56:97:ca:28:17:3e:0f:80:e3:e2:15: 72:17:eb:28:09:76:1b:4a:e0:80:44:7f:64:a1:00: 36:f7:88:2e:b1:76:32:b4:3f:09:c9:ea:82:51:a7: 3b:c9:3a:5c:35:34:40:63:4c:e9:28:ab:84:0f:b3: 5b:59:fa:c0:c9:dc:37:47:06:6e:0f:18:53:3b:d6: c8:8b:e6:1d:de:9b:42:67:37:82:db:af:55:fb:2b: f8:2a:2f:93:75:2e:6f:63:fa:ed:3d:55:e8:03:67: 29:6b:12:a4:a9:83:7f:f9:1c:db:6f:33:f0:41:5d: 3e:30:f5:69:72:c8:da:3c:89:51:c9:b9:51:5a:30: d6:49:b8:83:5f:5a:03:3b:76:73:b1:eb:48:6f:82: 9b:d3:1b:01:5f:de:02:8c:21:64:b3:59:90:80:76: 62:2a:ed:37:01:6f:96:3a:93:f5:5a:3c:2b:ac:bf: f8:9b:be:e9:9d:7f:4f:19:c6:cf:d4:8a:0c:ed:ea: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:91:83:1C:6F:DD:82:98:08:D6:0F:4C:96:0C:39:2A:60:F6:40:D7 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3d:37:81:1d:06:bd:ab:8b:78:44:f6:8c:15:cf:23:c2:d7: 49:b3:94:28:4a:2e:97:78:73:d7:49:9a:04:ad:67:08:98:e9: 7e:4c:97:0f:a0:21:72:cf:4e:5e:e5:1e:4f:17:f8:42:ea:30: c8:20:84:55:26:c2:93:f7:b2:cb:6d:9d:04:36:6f:58:28:a5: 51:33:52:4a:4a:9c:86:82:20:45:39:7f:ea:a5:3f:c6:ee:01: 4b:92:2d:04:88:c4:f6:81:64:eb:4c:05:74:12:e1:20:04:a8: cb:a6:67:ef:43:cc:a3:35:86:7d:65:7b:38:41:96:22:35:4d: 6a:d9:5c:9a:c0:91:5c:f5:33:6d:ab:f8:8d:1b:73:22:23:c5: dc:be:8a:0f:0e:26:89:47:cb:e5:3d:4d:d1:35:8b:0a:2b:6b: ca:ca:08:56:ee:fc:48:0f:1f:64:60:f7:bd:8f:af:1a:f3:a7: ae:47:61:fe:74:96:c7:1d:77:7f:39:3f:9e:b1:8c:44:23:44: ad:65:7c:59:f4:26:f3:e0:6b:15:01:91:72:0a:80:54:a1:6b: 5c:ad:9a:13:d9:d3:9e:48:df:91:2e:ef:02:03:b2:c8:33:82: dd:08:c5:a0:b6:37:79:72:3a:e2:7a:08:c7:06:35:a5:06:71: 85:55:cc:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjYwOTI2MTgzNTUxWhcNMjYxMDAzMTgzNTUxWjAYMRYwFAYD VQQDEw02YWI4MTA4OC0xY2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXIP0zBXsxdXmC7q/9e+Cc5dCq28PB/7l4m7KyhL+1SvZ5KAgb8teO2cMrGM HoAklxSK5odydMCP0FlDbrdGVpfKKBc+D4Dj4hVyF+soCXYbSuCARH9koQA294gu sXYytD8JyeqCUac7yTpcNTRAY0zpKKuED7NbWfrAydw3RwZuDxhTO9bIi+Yd3ptC ZzeC269V+yv4Ki+TdS5vY/rtPVXoA2cpaxKkqYN/+RzbbzPwQV0+MPVpcsjaPIlR yblRWjDWSbiDX1oDO3ZzsetIb4Kb0xsBX94CjCFks1mQgHZiKu03AW+WOpP1Wjwr rL/4m77pnX9PGcbP1IoM7erdAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaRgxxv 3YKYCNYPTJYMOSpg9kDXMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlT03gR0GvauLeET2jBXPI8LXSbOUKEoul3hz10maBK1nCJjpfkyXD6Ahcs9O XuUeTxf4QuowyCCEVSbCk/eyy22dBDZvWCilUTNSSkqchoIgRTl/6qU/xu4BS5It BIjE9oFk60wFdBLhIASoy6Zn70PMozWGfWV7OEGWIjVNatlcmsCRXPUzbav4jRtz IiPF3L6KDw4miUfL5T1N0TWLCitrysoIVu78SA8fZGD3vY+vGvOnrkdh/nSWxx13 fzk/nrGMRCNErWV8WfQm8+BrFQGRcgqAVKFrXK2aE9nTnkjfkS7vAgOyyDOC3QjF oLY3eXI64noIxwY1pQZxhVXMdg== -----END CERTIFICATE-----Generated at Sun Sep 27 10:17:14 2026 by rpki-client