$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: qBvbVg/aPiKhpbwUXh3drSM6olqhL+oEBAGtn72vLBo= Subject key identifier: 58:1F:90:60:9C:01:82:C7:6E:E4:C5:8A:1D:02:D8:73:E2:8E:63:2C Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0D37 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0D23 Signing time: Sat 26 Sep 2026 17:28:41 +0000 Manifest this update: Sat 26 Sep 2026 17:28:41 +0000 Manifest next update: Sat 03 Oct 2026 17:28:41 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: pHOSRPoFOpYtyhZNQcyDmRs4pNoaXLjLxaYs+vDryQc=) 2: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Sep 26 17:28:41 2026 GMT Not After : Oct 3 17:28:41 2026 GMT Subject: CN=6ab800c9-53e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:8c:e8:49:4c:45:c6:bc:d1:82:e3:aa:c5: cd:a0:5e:05:e8:ca:9f:0c:6e:28:73:0a:04:d5:d1: 5f:a5:b3:87:8a:55:ce:17:9c:67:e8:cd:c4:c7:8a: 9e:1a:ab:e4:f3:f2:e4:fc:cc:c7:40:de:19:1b:29: ca:f6:22:ff:a6:62:e1:a6:d0:a4:eb:f7:b0:ef:a7: b7:ed:91:a9:e9:34:16:c9:22:60:4f:69:c9:fc:a1: 67:40:cf:21:ed:ef:b7:f8:25:c7:5c:13:db:5c:9c: 28:78:64:63:5a:1f:86:cf:07:83:fd:86:ba:3c:56: 6b:12:6a:74:79:e3:18:23:85:2f:3f:37:38:ef:fa: ef:22:00:a4:60:c6:37:83:2f:24:8b:74:60:bc:1c: 57:3b:a0:09:fa:dc:16:c0:1b:34:f3:78:f3:ca:fc: cd:4e:3f:33:2c:a9:5f:2c:35:ec:ca:12:38:3a:78: cd:50:62:8b:0a:1b:5f:59:0f:b8:0e:66:25:4f:bb: 6b:ee:ce:75:25:c7:a2:21:81:88:9b:b6:bc:ff:f8: c2:d8:9f:9e:d4:6a:79:03:7c:24:c7:5e:a6:d3:ad: 27:fa:97:57:f5:06:96:79:ec:aa:ce:f0:7c:69:5c: 67:3b:d0:20:cb:33:31:7d:5c:e5:a9:4e:92:a0:90: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1F:90:60:9C:01:82:C7:6E:E4:C5:8A:1D:02:D8:73:E2:8E:63:2C X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9a:2c:3a:92:cc:72:9a:c5:d8:47:4a:d6:0f:d0:37:ff:f5: cb:6f:2f:9a:a8:6e:86:28:70:b5:48:ee:59:ee:73:3a:da:38: 80:fe:80:aa:c5:b2:5d:7b:70:18:d7:b7:bd:ff:ff:e8:1b:7e: 6c:c7:69:95:a7:d6:ee:71:ae:55:5c:20:e0:92:e5:38:b0:ab: 74:90:18:f3:72:43:6b:e8:e6:91:dc:22:6a:94:3a:a5:f0:f3: a0:e1:87:7d:7e:02:c8:06:fb:a7:6e:8f:f2:9d:65:4a:aa:57: eb:84:d2:d0:8a:41:d7:0a:7e:18:c4:95:15:6c:47:c1:cd:db: 50:a8:50:8f:dc:58:be:1f:39:f6:74:ac:7b:c4:de:28:62:bc: d1:6d:b9:71:fa:e3:21:1e:8e:a6:75:b7:f2:b6:0e:33:bc:5b: d6:a5:c9:ec:c4:c6:d3:11:8f:3e:74:13:50:b4:0a:50:fb:9a: 12:2b:2c:2c:6c:b0:13:5d:ac:8d:94:48:7d:e5:a0:38:4b:67: 5d:a6:25:c3:2c:4e:c1:a2:ee:c1:9f:b4:18:17:43:d8:5d:6e: 3c:c7:f5:f6:25:55:de:c1:87:19:b6:cb:be:3f:6c:ab:2e:69: 16:86:d8:ab:bd:2a:23:94:a1:90:1a:03:f0:c8:fe:c1:f3:57: 85:75:35:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjYwOTI2MTcyODQxWhcNMjYxMDAzMTcyODQxWjAYMRYwFAYD VQQDEw02YWI4MDBjOS01M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZmM6ElMRca80YLjqsXNoF4F6MqfDG4ocwoE1dFfpbOHilXOF5xn6M3Ex4qe Gqvk8/Lk/MzHQN4ZGynK9iL/pmLhptCk6/ew76e37ZGp6TQWySJgT2nJ/KFnQM8h 7e+3+CXHXBPbXJwoeGRjWh+GzweD/Ya6PFZrEmp0eeMYI4UvPzc47/rvIgCkYMY3 gy8ki3RgvBxXO6AJ+twWwBs083jzyvzNTj8zLKlfLDXsyhI4OnjNUGKLChtfWQ+4 DmYlT7tr7s51JceiIYGIm7a8//jC2J+e1Gp5A3wkx16m060n+pdX9QaWeeyqzvB8 aVxnO9AgyzMxfVzlqU6SoJAF2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgfkGCc AYLHbuTFih0C2HPijmMsMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ5osOpLMcprF2EdK1g/QN//1y28vmqhuhihwtUjuWe5zOto4gP6AqsWyXXtw GNe3vf//6Bt+bMdplafW7nGuVVwg4JLlOLCrdJAY83JDa+jmkdwiapQ6pfDzoOGH fX4CyAb7p26P8p1lSqpX64TS0IpB1wp+GMSVFWxHwc3bUKhQj9xYvh859nSse8Te KGK80W25cfrjIR6OpnW38rYOM7xb1qXJ7MTG0xGPPnQTULQKUPuaEissLGywE12s jZRIfeWgOEtnXaYlwyxOwaLuwZ+0GBdD2F1uPMf19iVV3sGHGbbLvj9sqy5pFobY q70qI5ShkBoD8Mj+wfNXhXU15g== -----END CERTIFICATE-----Generated at Mon Sep 28 14:38:40 2026 by rpki-client