$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft File: FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json) Hash identifier: V6GLjLwJSiEIr9l70jzQ806Egfj7I4nqePYXvBqIEQo= Subject key identifier: 56:D1:D9:09:FE:8E:F7:A6:E7:F8:34:A3:73:86:2F:F8:71:EA:13:C9 Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft Manifest number: 03A3 Signing time: Wed 23 Sep 2026 00:15:43 +0000 Manifest this update: Wed 23 Sep 2026 00:15:43 +0000 Manifest next update: Wed 30 Sep 2026 00:15:43 +0000 Files and hashes: 1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: WOojTk3dxqFxWua8phfnS+0eoqSLltuOt/0tpvBrRsI=) 2: d2hdhEjRqO389T5s9Ys-ApT-ssk.asa (hash: i9ekswta4+k7LZLvi3gM+CdBL8cyX/FJF9t95LTKX2s=) 3: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QRtlstVkdBXEszVrg/iIFuaNaUBnHazamE53eJaDdno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C Validity Not Before: Sep 23 00:15:43 2026 GMT Not After : Sep 30 00:15:43 2026 GMT Subject: CN=6ab31a2f-6ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:44:c1:cb:03:90:cb:e3:20:31:b7:69:df: d8:0c:60:dc:2a:1d:26:47:e2:99:e9:ec:70:f7:62: 13:5c:8c:5d:9d:50:d3:95:be:42:56:95:67:45:1c: 15:d1:50:40:31:07:fb:1d:22:b0:44:00:81:2a:85: d8:cd:7b:12:f6:2f:32:d0:4e:98:66:ba:25:6f:1a: 40:45:33:ee:c3:12:be:30:54:ca:45:0f:8f:85:30: 24:56:1b:2e:76:1a:7e:75:bd:92:18:41:e2:3e:e0: 1b:2d:5f:ba:77:d7:47:06:ba:15:a8:2c:60:a2:3e: 8a:37:11:62:3c:b7:25:96:42:fc:12:10:46:90:a5: d0:0c:ca:d6:cb:6f:ba:ff:d6:1a:1f:c9:f7:b8:ff: bb:12:72:45:2d:a0:58:8c:8f:10:b5:48:38:21:c1: 31:c0:43:39:8c:3d:01:a9:2b:ad:a9:de:a6:a5:85: 40:b5:87:e9:34:df:86:32:42:10:71:b4:d8:fa:d0: 08:10:26:9f:9c:63:1e:e8:4c:da:42:bc:86:f3:c7: 04:54:28:21:d0:6f:1f:c6:6b:a3:91:dc:b4:5f:3e: d3:f6:5f:a0:e1:3f:e3:e8:32:4f:e2:60:a6:c5:b7: 94:56:7a:5e:b5:21:98:f7:91:c2:6f:06:f6:7a:14: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D1:D9:09:FE:8E:F7:A6:E7:F8:34:A3:73:86:2F:F8:71:EA:13:C9 X509v3 Authority Key Identifier: keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:22:9d:8e:fc:c6:59:5f:e7:63:a5:98:de:1c:ac:57:b1:dc: d4:76:b1:8d:2f:19:dd:ae:98:f9:84:24:91:17:da:18:50:9c: 9b:33:86:72:c7:3d:21:57:62:72:e9:3d:b4:ea:13:07:c8:74: c4:6e:f7:8a:03:bc:85:6b:cb:47:02:70:6a:1e:9c:27:45:df: 71:30:52:a5:b3:cc:e9:c1:31:54:f4:ac:19:3f:7f:12:6a:46: cb:69:e8:c3:bb:27:68:e4:59:5b:2f:60:ed:35:89:ea:6a:70: 90:b9:be:f1:2f:aa:d8:e6:c1:46:6c:c6:08:0a:d2:6d:0d:63: 39:04:2c:d5:37:c5:16:1d:51:56:5d:46:cd:44:e8:d2:e4:76: 0a:1a:09:cf:64:03:10:68:6b:a8:24:4e:2b:dc:f7:37:1e:ed: 54:44:a3:88:75:da:3e:a0:21:34:e9:49:8b:d3:93:4a:f2:6c: 0b:41:1a:cb:e5:e7:40:09:74:60:18:46:de:f0:52:03:48:75: 34:c5:4f:2b:3e:83:c3:d1:39:ad:01:2f:c4:c0:b6:d0:81:c4: 10:e7:ee:06:35:e3:6e:e4:e6:e1:8e:e0:99:21:ed:ee:d5:c3: 47:65:2b:6f:a9:b1:c5:c4:46:51:a1:3d:37:58:3a:85:9a:21: 0e:d3:aa:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3OEQxMTAvBgNVBAUTKDE0NUZCRjlFRTMxNzM3RTkxQzNDRDQ4NEVDMDE2QUUz QzhGMzgwM0MwHhcNMjYwOTIzMDAxNTQzWhcNMjYwOTMwMDAxNTQzWjAYMRYwFAYD VQQDEw02YWIzMWEyZi02YWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkVdEwcsDkMvjIDG3ad/YDGDcKh0mR+KZ6exw92ITXIxdnVDTlb5CVpVnRRwV 0VBAMQf7HSKwRACBKoXYzXsS9i8y0E6YZrolbxpARTPuwxK+MFTKRQ+PhTAkVhsu dhp+db2SGEHiPuAbLV+6d9dHBroVqCxgoj6KNxFiPLcllkL8EhBGkKXQDMrWy2+6 /9YaH8n3uP+7EnJFLaBYjI8QtUg4IcExwEM5jD0BqSutqd6mpYVAtYfpNN+GMkIQ cbTY+tAIECafnGMe6EzaQryG88cEVCgh0G8fxmujkdy0Xz7T9l+g4T/j6DJP4mCm xbeUVnpetSGY95HCbwb2ehRhLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbR2Qn+ jvem5/g0o3OGL/hx6hPJMB8GA1UdIwQYMBaAFBRfv57jFzfpHDzUhOwBauPI84A8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc4RC82N0I0NDgyOEZC NjYxMUVDQUJBMTAxNEZDNEY5QUUwMi9GRi1fbnVNWE4ta2NQTlNFN0FGcTQ4anpn RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGLV9udU1YTi1rY1BOU0U3QUZxNDhqemdEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTc4RC82N0I0NDgyOEZCNjYxMUVDQUJBMTAxNEZDNEY5QUUwMi9GRi1fbnVNWE4t a2NQTlNFN0FGcTQ4anpnRHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMyKdjvzGWV/nY6WY3hysV7Hc1HaxjS8Z3a6Y+YQkkRfaGFCcmzOGcsc9IVdi cuk9tOoTB8h0xG73igO8hWvLRwJwah6cJ0XfcTBSpbPM6cExVPSsGT9/EmpGy2no w7snaORZWy9g7TWJ6mpwkLm+8S+q2ObBRmzGCArSbQ1jOQQs1TfFFh1RVl1GzUTo 0uR2ChoJz2QDEGhrqCROK9z3Nx7tVESjiHXaPqAhNOlJi9OTSvJsC0Eay+XnQAl0 YBhG3vBSA0h1NMVPKz6Dw9E5rQEvxMC20IHEEOfuBjXjbuTm4Y7gmSHt7tXDR2Ur b6mxxcRGUaE9N1g6hZohDtOq4Q== -----END CERTIFICATE-----Generated at Thu Sep 24 02:33:36 2026 by rpki-client