$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft File: FnODv1SihfFeIlHuqSMNgzal73o.mft (raw, json) Hash identifier: 17Vj5nEP6vi6QQyCiVP2b8GsdDgZwf98sgR2Lr/e7IY= Subject key identifier: D3:01:B6:A4:E8:8B:A8:BE:2E:52:FF:FD:C4:BD:29:4B:7D:BD:D8:6F Authority key identifier: 16:73:83:BF:54:A2:85:F1:5E:22:51:EE:A9:23:0D:83:36:A5:EF:7A Certificate issuer: /CN=A91E0DF1/serialNumber=167383BF54A285F15E2251EEA9230D8336A5EF7A Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FnODv1SihfFeIlHuqSMNgzal73o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft Manifest number: 21 Signing time: Fri 09 Oct 2026 09:39:38 +0000 Manifest this update: Fri 09 Oct 2026 09:39:38 +0000 Manifest next update: Fri 16 Oct 2026 09:39:38 +0000 Files and hashes: 1: FnODv1SihfFeIlHuqSMNgzal73o.crl (hash: zoFRwkFvBEyg94/ovb8INNExfNDGRuYFJ7xR7lbNG1c=) 2: 1F3E2AB4942311F1800E07964611F970.roa (hash: PRD7VDs1sPKClCFLR4CC9h54upXC7pDprLJycLCxeFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.crl rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FnODv1SihfFeIlHuqSMNgzal73o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0DF1, serialNumber=167383BF54A285F15E2251EEA9230D8336A5EF7A Validity Not Before: Oct 9 09:39:38 2026 GMT Not After : Oct 16 09:39:38 2026 GMT Subject: CN=6ac8b65a-b8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:59:5f:a9:09:57:04:b4:df:7e:df:01:d9: 92:2c:e1:a9:64:8e:4f:9e:34:c2:00:89:50:d3:81: f9:81:28:d4:15:38:63:3b:db:7e:23:b9:30:c0:24: 7d:10:a8:3f:ee:07:9b:0c:2a:6f:bf:74:01:8d:f5: 54:3c:78:4c:15:89:26:76:5b:6f:17:7e:ed:bc:2b: d6:b7:33:cc:4d:5d:25:e8:b8:a2:e1:3b:ec:dd:f7: 0c:cc:5d:5b:0b:9d:0f:91:bc:b4:ef:89:61:a5:59: 7a:13:21:79:41:da:0f:5c:30:1a:c1:a8:c3:0f:f5: 52:24:08:cb:e6:4c:a9:8b:c8:44:e2:4d:d2:a7:1a: 9f:05:ad:29:8a:44:95:b5:c8:86:c4:36:0c:e9:cb: 49:9c:91:03:22:e5:25:3f:1e:3c:ef:35:19:ed:7b: 1d:30:fa:1f:cc:e9:1d:1b:2b:77:c2:7f:e0:00:78: 90:f5:e1:68:9a:d0:87:ee:b3:71:e6:19:f2:e8:76: f2:86:83:ff:36:75:e0:71:b1:32:c8:7e:06:ff:99: f0:83:74:f3:f3:94:12:59:aa:ac:b8:6e:43:b6:cf: d8:02:43:f0:d6:09:7d:78:41:bd:52:ce:08:4c:23: 6f:3d:e7:d7:d3:10:6b:a8:f5:74:9c:8c:fc:a0:f4: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:01:B6:A4:E8:8B:A8:BE:2E:52:FF:FD:C4:BD:29:4B:7D:BD:D8:6F X509v3 Authority Key Identifier: keyid:16:73:83:BF:54:A2:85:F1:5E:22:51:EE:A9:23:0D:83:36:A5:EF:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FnODv1SihfFeIlHuqSMNgzal73o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:8f:3b:e4:0b:18:fd:1d:4b:dd:f3:64:e6:08:11:ca:0c: a1:6e:ee:aa:65:14:4c:17:81:3c:26:29:6b:9c:f2:8a:1c:1f: 8b:c3:27:88:ed:11:d5:3e:ce:73:d4:0e:d6:e3:48:cb:f2:a9: 56:ea:d5:e7:b1:c2:99:34:8a:a6:ed:33:0e:03:9f:bd:2d:8e: 82:06:de:e8:47:bd:4f:ba:e6:cd:4d:df:85:06:47:c2:de:67: 4e:3f:20:d3:c2:fd:6a:f5:80:8a:d0:17:3f:ec:87:07:aa:1a: 4f:60:eb:92:6b:64:82:62:85:16:75:80:5a:d4:0c:af:d6:82: a8:2c:2b:0b:c6:ab:57:55:3d:91:5c:7f:23:a9:b7:0e:82:42: 99:cc:03:b9:65:4d:7c:67:f7:26:f4:c5:0d:e6:56:8b:ca:00: a8:21:a9:29:cd:1b:fc:d3:36:73:f7:2d:c3:d0:7d:8b:f1:ca: a1:bc:18:d5:71:87:45:05:92:4b:83:e7:41:a4:0c:d3:54:3f: de:56:6c:6e:7b:c5:94:39:21:34:57:40:e7:62:bf:33:09:84: 48:77:76:2b:9e:bc:a2:05:1c:3f:c8:14:4f:10:5d:0c:b1:be: dc:13:fb:6a:8b:f5:e4:98:ea:33:5b:8c:25:dc:79:16:19:fd: 3e:df:ea:fa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MERGMTExMC8GA1UEBRMoMTY3MzgzQkY1NEEyODVGMTVFMjI1MUVFQTkyMzBEODMz NkE1RUY3QTAeFw0yNjEwMDkwOTM5MzhaFw0yNjEwMTYwOTM5MzhaMBgxFjAUBgNV BAMTDTZhYzhiNjVhLWI4YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkSllfqQlXBLTfft8B2ZIs4alkjk+eNMIAiVDTgfmBKNQVOGM7234juTDAJH0Q qD/uB5sMKm+/dAGN9VQ8eEwViSZ2W28Xfu28K9a3M8xNXSXouKLhO+zd9wzMXVsL nQ+RvLTviWGlWXoTIXlB2g9cMBrBqMMP9VIkCMvmTKmLyETiTdKnGp8FrSmKRJW1 yIbENgzpy0mckQMi5SU/HjzvNRntex0w+h/M6R0bK3fCf+AAeJD14Wia0Ifus3Hm GfLodvKGg/82deBxsTLIfgb/mfCDdPPzlBJZqqy4bkO2z9gCQ/DWCX14Qb1SzghM I28959fTEGuo9XScjPyg9NHHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0wG2pOiL qL4uUv/9xL0pS3292G8wHwYDVR0jBBgwFoAUFnODv1SihfFeIlHuqSMNgzal73ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwREYxLzgwM0RENjNBOTQy MjExRjFBNDUxQTI3QTQ2MTFGOTcwL0ZuT0R2MVNpaGZGZUlsSHVxU01OZ3phbDcz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRm5PRHYxU2loZkZlSWxIdXFTTU5nemFsNzNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw REYxLzgwM0RENjNBOTQyMjExRjFBNDUxQTI3QTQ2MTFGOTcwL0ZuT0R2MVNpaGZG ZUlsSHVxU01OZ3phbDczby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5hY875AsY/R1L3fNk5ggRygyhbu6qZRRMF4E8JilrnPKKHB+LwyeI7RHVPs5z 1A7W40jL8qlW6tXnscKZNIqm7TMOA5+9LY6CBt7oR71PuubNTd+FBkfC3mdOPyDT wv1q9YCK0Bc/7IcHqhpPYOuSa2SCYoUWdYBa1Ayv1oKoLCsLxqtXVT2RXH8jqbcO gkKZzAO5ZU18Z/cm9MUN5laLygCoIakpzRv80zZz9y3D0H2L8cqhvBjVcYdFBZJL g+dBpAzTVD/eVmxue8WUOSE0V0DnYr8zCYRId3YrnryiBRw/yBRPEF0Msb7cE/tq i/XkmOozW4wl3HkWGf0+3+r6 -----END CERTIFICATE-----Generated at Sun Oct 11 09:03:17 2026 by rpki-client