$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft File: fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json) Hash identifier: 4tcIl6asaZ3HiPSeJaV4gAw8po9RpeA5T1yDwI/fiqA= Subject key identifier: 7B:F5:E8:0F:D5:11:7F:B7:9E:33:0D:D7:F4:FC:8B:49:7A:D6:89:F1 Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft Manifest number: 0228 Signing time: Fri 25 Sep 2026 02:55:05 +0000 Manifest this update: Fri 25 Sep 2026 02:55:04 +0000 Manifest next update: Fri 02 Oct 2026 02:55:04 +0000 Files and hashes: 1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: DHWdlBnnv1Fy7Fe3O+rh4AV8wfI393DkIPpnn5bI+TQ=) 2: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: 2pNCzrFLeuNwJ+o+omJeHhkXCESRdRl7rsiGuuIXYT0=) 3: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: 5gWMY2ABlQc7NzKLI4CrxZ0mtja8StGBiRjgg1qjDGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Validity Not Before: Sep 25 02:55:04 2026 GMT Not After : Oct 2 02:55:04 2026 GMT Subject: CN=6ab5e289-b42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:af:39:b1:bc:de:36:89:de:ee:bd:79:8c: 3c:37:50:d5:e2:77:50:b5:70:56:d8:47:35:ab:5a: 3e:5f:6d:4b:d7:ae:f6:00:67:35:71:0e:9c:3c:47: 21:52:b2:9c:d5:b6:b4:8f:45:10:3f:5d:dd:24:e0: 4f:10:18:60:12:3a:90:ba:5c:4c:d0:42:f0:c8:c3: 39:83:4f:67:b0:c6:53:96:8e:66:f6:ba:c4:75:22: 46:af:9c:e9:35:a0:5a:dc:25:e7:37:aa:55:c4:1e: db:8b:b1:8e:cc:72:fb:e5:f2:03:19:c6:61:3b:8a: 14:5a:ef:41:17:6a:7a:9f:1e:c7:7c:6f:d1:04:43: d7:b4:5e:21:cf:c0:eb:0c:64:fb:8e:df:f2:a0:81: c1:75:d6:0f:dd:60:17:82:2c:0b:49:d0:25:18:ae: 06:64:6f:86:26:b5:35:f2:28:85:1e:02:0b:0e:d5: 00:a7:10:40:f3:8e:04:21:44:12:fd:22:cb:5c:c3: 4b:d8:8b:c9:97:47:f0:ef:41:8e:89:44:bc:28:71: 0b:c5:77:da:df:92:a5:43:f9:eb:af:dc:32:97:7b: 34:20:ac:84:f7:bf:91:6c:a9:26:9f:b5:02:4c:ae: 1f:1a:4d:e4:77:68:15:2a:44:b2:9c:d2:39:08:8f: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F5:E8:0F:D5:11:7F:B7:9E:33:0D:D7:F4:FC:8B:49:7A:D6:89:F1 X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d1:e8:01:ef:94:88:83:1e:84:24:bc:c4:f4:40:f7:c1:ad: e9:0b:61:6d:64:7d:a5:d3:63:94:fb:e2:21:36:43:50:60:f1: 1e:9e:3a:65:e8:5d:b0:27:d1:c4:a3:b5:a6:70:9c:ca:48:5b: 75:c1:c2:3c:39:e1:eb:ff:c6:03:df:55:8d:5e:75:ed:85:e6: 1a:0f:1d:9a:9d:36:f8:90:5b:d6:3f:13:0b:d6:13:25:25:0a: cf:91:5c:e1:00:b1:43:4c:99:5c:4a:cd:1b:86:cc:a5:31:54: 4a:80:13:79:eb:9b:98:eb:0d:8d:90:9a:67:b0:c8:d5:be:e4: 04:fa:1b:3d:b1:6b:e1:f8:e6:47:c3:ca:82:64:58:0d:a4:a7: 21:13:24:7a:66:07:02:f1:11:fe:91:07:47:3a:3a:70:da:9b: b7:b9:2d:97:cc:3a:f9:38:ac:64:b1:64:d5:08:73:5f:04:98: b2:36:af:0e:d4:b3:d5:79:91:9f:11:44:ab:3a:db:c9:01:8a: eb:fa:01:d4:b2:44:90:0f:98:75:c0:2a:ea:67:17:cb:c2:d7: 66:1b:4c:f8:a6:fb:9c:43:0d:bd:b3:42:f6:91:86:1f:77:c3: 0c:d3:7c:41:33:e3:ce:4f:01:c8:e5:4f:9f:60:f3:8c:2e:45: f9:68:ae:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2 MUZEQkVBMzIwHhcNMjYwOTI1MDI1NTA0WhcNMjYxMDAyMDI1NTA0WjAYMRYwFAYD VQQDEw02YWI1ZTI4OS1iNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1yvObG83jaJ3u69eYw8N1DV4ndQtXBW2Ec1q1o+X21L1672AGc1cQ6cPEch UrKc1ba0j0UQP13dJOBPEBhgEjqQulxM0ELwyMM5g09nsMZTlo5m9rrEdSJGr5zp NaBa3CXnN6pVxB7bi7GOzHL75fIDGcZhO4oUWu9BF2p6nx7HfG/RBEPXtF4hz8Dr DGT7jt/yoIHBddYP3WAXgiwLSdAlGK4GZG+GJrU18iiFHgILDtUApxBA844EIUQS /SLLXMNL2IvJl0fw70GOiUS8KHELxXfa35KlQ/nrr9wyl3s0IKyE97+RbKkmn7UC TK4fGk3kd2gVKkSynNI5CI8rJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHv16A/V EX+3njMN1/T8i0l61onxMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVBRC9COEI5MUM0NjdFMTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3 TDhkNjlnX01FcDVoX2I2akkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXdHoAe+UiIMehCS8xPRA98Gt6QthbWR9pdNjlPviITZDUGDxHp46ZehdsCfR xKO1pnCcykhbdcHCPDnh6//GA99VjV517YXmGg8dmp02+JBb1j8TC9YTJSUKz5Fc 4QCxQ0yZXErNG4bMpTFUSoATeeubmOsNjZCaZ7DI1b7kBPobPbFr4fjmR8PKgmRY DaSnIRMkemYHAvER/pEHRzo6cNqbt7ktl8w6+TisZLFk1QhzXwSYsjavDtSz1XmR nxFEqzrbyQGK6/oB1LJEkA+YdcAq6mcXy8LXZhtM+Kb7nEMNvbNC9pGGH3fDDNN8 QTPjzk8ByOVPn2DzjC5F+WiuiQ== -----END CERTIFICATE-----Generated at Fri Sep 25 05:15:09 2026 by rpki-client