$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: cXDyJMgPZtm/+YO2MwlnpV2b7thaHmd731z9E76JfZo= Subject key identifier: 98:B7:9C:14:43:DF:85:69:FE:23:84:ED:60:A4:72:D4:B7:D1:59:92 Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 09D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 0959 Signing time: Tue 22 Sep 2026 20:09:25 +0000 Manifest this update: Tue 22 Sep 2026 20:09:24 +0000 Manifest next update: Tue 29 Sep 2026 20:09:24 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: t7qKKdIQajp01uUsFPMb6a7yTe6sO6Km13qxmXo928w=) 2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: VEN7PHjgXJ17sdBlfk+R1gfjCu4511OjPAUhn66pLqw=) 3: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: 448SaP62zIEeDoT+BKnPnMZxQLrDOlT4PwJtIrUEjGQ=) 4: 6500BEB849E611F18B665F22B5833773.roa (hash: oRJVDNNEq9yJM3kRWRLDOu8PzfoDFGvUq7nhvQCa5c4=) 5: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: hipmINl5QhmUdtwVQhhZDP0tnwpiCxBXThMjdcaX9Jc=) 6: 78D63F3A49E611F1A18E902DB5833773.roa (hash: 6yed7TU5WsVwocy0PyrBQTwQ0MhVSm9L6l06FSV8VNI=) 7: 52DC15E02DA611F1B64DB1E8A2833773.roa (hash: AzbPG4+Ay9Py93BezJDBHyNMd2NxBXLctC8P1DC+Z84=) 8: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: pb+67QUwu5Hw/Dgr2vwKugBBsOlkl0MS1lsM8PjI48o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2513 (0x9d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: Sep 22 20:09:24 2026 GMT Not After : Sep 29 20:09:24 2026 GMT Subject: CN=6ab2e074-abf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:29:9c:96:5f:c0:a4:f0:54:e4:38:fe:8d: a1:09:2a:a0:bb:cf:17:a3:6e:9c:fe:ad:0f:60:08: 0d:96:98:c7:15:64:e1:6c:09:89:ba:4b:3b:29:58: d8:f0:b4:0c:e3:74:02:f7:40:03:88:d8:05:94:c1: d4:51:b7:f0:7c:f3:1d:e3:24:28:7a:76:90:8e:fc: d7:dc:72:7c:3a:39:fe:5b:b7:65:82:1b:1d:e4:ce: c5:03:48:c8:95:76:f4:e1:fe:cf:63:27:da:2e:cd: db:cb:bb:71:de:18:4b:26:cc:5c:4e:c2:e5:76:80: 7e:88:7b:0d:02:4a:a8:d4:87:70:2c:0e:59:4e:d2: 57:d8:d7:09:58:e5:4f:33:e5:2a:fd:2e:ac:c6:a4: 08:2c:8d:15:b0:3c:6b:bc:ff:24:2a:4b:9f:f8:4c: 24:10:aa:3b:7f:73:e3:30:b9:d9:a8:0b:70:6e:fd: 8c:3b:d2:81:9d:84:a0:d8:58:9a:01:12:54:98:1d: 8e:c1:08:71:60:9b:d4:36:ee:cc:5a:1d:ed:8b:b2: c3:e5:f9:85:75:96:35:b4:0f:fd:89:5d:be:34:91: ef:17:48:11:09:fd:c2:50:56:a7:3f:91:03:6a:b9: 57:cd:29:89:68:2c:23:7f:83:07:61:b8:3b:57:40: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:9C:14:43:DF:85:69:FE:23:84:ED:60:A4:72:D4:B7:D1:59:92 X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e1:18:bd:1e:b1:50:ef:d6:bc:4e:2f:e3:16:a4:b5:a3:66: 7c:ec:d5:6e:0b:23:c5:f3:04:e3:88:06:2c:bb:48:4b:e3:71: 53:dc:67:37:05:50:22:ac:49:5c:cc:83:44:86:00:a3:f4:79: ea:0a:c3:13:1f:28:71:11:89:5d:47:7c:df:51:00:ef:90:18: b8:4f:0a:59:77:a5:54:c2:29:2d:d5:fb:c4:1c:65:4e:7f:0d: d9:3c:07:49:34:42:6a:9b:02:7b:d0:01:76:e5:78:30:d8:fc: 13:cc:7a:dd:6e:b0:49:d5:0a:c9:15:2a:45:23:ef:41:6e:fc: 81:5c:48:fd:2c:8c:ff:6a:e1:26:2f:7e:c2:04:c6:be:14:8a: 4f:8e:b4:d2:ec:43:7b:52:63:69:50:f4:1a:56:da:d4:5a:39: d9:eb:5e:45:e8:ae:dc:23:46:17:3e:90:e5:8c:d9:a0:3d:87: 6d:97:fe:b8:84:be:19:1a:2d:85:c7:81:3f:a0:d6:57:d5:74: 6b:a3:16:9b:bb:77:56:ea:6a:0b:de:39:e2:ff:bd:ef:db:2b: 7f:79:bd:41:99:78:36:f0:fa:3d:95:61:a3:fc:3e:02:b2:a6: 64:a1:19:55:3b:a0:39:6a:5d:f5:98:f8:57:24:17:11:fd:d2: 9c:a0:3d:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjYwOTIyMjAwOTI0WhcNMjYwOTI5MjAwOTI0WjAYMRYwFAYD VQQDEw02YWIyZTA3NC1hYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHEpnJZfwKTwVOQ4/o2hCSqgu88Xo26c/q0PYAgNlpjHFWThbAmJuks7KVjY 8LQM43QC90ADiNgFlMHUUbfwfPMd4yQoenaQjvzX3HJ8Ojn+W7dlghsd5M7FA0jI lXb04f7PYyfaLs3by7tx3hhLJsxcTsLldoB+iHsNAkqo1IdwLA5ZTtJX2NcJWOVP M+Uq/S6sxqQILI0VsDxrvP8kKkuf+EwkEKo7f3PjMLnZqAtwbv2MO9KBnYSg2Fia ARJUmB2OwQhxYJvUNu7MWh3ti7LD5fmFdZY1tA/9iV2+NJHvF0gRCf3CUFanP5ED arlXzSmJaCwjf4MHYbg7V0DofQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJi3nBRD 34Vp/iOE7WCkctS30VmSMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYOEYvR6xUO/WvE4v4xaktaNmfOzVbgsjxfME44gGLLtIS+NxU9xnNwVQIqxJ XMyDRIYAo/R56grDEx8ocRGJXUd831EA75AYuE8KWXelVMIpLdX7xBxlTn8N2TwH STRCapsCe9ABduV4MNj8E8x63W6wSdUKyRUqRSPvQW78gVxI/SyM/2rhJi9+wgTG vhSKT4600uxDe1JjaVD0Glba1Fo52eteReiu3CNGFz6Q5YzZoD2HbZf+uIS+GRot hceBP6DWV9V0a6MWm7t3VupqC9454v+979srf3m9QZl4NvD6PZVho/w+ArKmZKEZ VTugOWpd9Zj4VyQXEf3SnKA9sg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:22:36 2026 by rpki-client