$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json) Hash identifier: uMcd8jM8322mBBk0TD9H9bmCyMy++T5FqkcOKVmjJ9I= Subject key identifier: 35:4E:91:A9:0D:6D:31:A6:A7:D3:C6:8B:2C:90:EE:51:01:6A:86:A8 Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft Manifest number: 0225 Signing time: Fri 25 Sep 2026 02:57:31 +0000 Manifest this update: Fri 25 Sep 2026 02:57:30 +0000 Manifest next update: Fri 02 Oct 2026 02:57:30 +0000 Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: t2rrjIiVCW6ZTy6XHG/2+zbbNbjE1HgznGpl0Hi11pg=) 2: 27A66CC4335811F18709AA0FCA833773.roa (hash: pPUHKA5s9wq04L2qfb/B2EY59WS05X4PfzFkdep1N34=) 3: E5196DA6335811F1BC79FB1BCA833773.roa (hash: vyYp7IA/5MNA4gMbec/CoUCTSiktnAR4FwpLUhRjRvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Validity Not Before: Sep 25 02:57:30 2026 GMT Not After : Oct 2 02:57:30 2026 GMT Subject: CN=6ab5e31b-2f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:8e:65:20:fb:f9:11:b5:e9:43:5e:a3:d5: cc:32:95:bb:9f:ca:c6:02:15:99:7a:b9:06:26:9c: f9:91:3f:3d:58:82:84:35:96:d9:1a:9a:5b:0c:88: 20:88:c2:3f:e4:1d:7c:af:e2:6d:de:45:3a:17:93: c0:1d:b3:fe:77:d8:08:57:62:34:58:9b:54:bc:3f: 5e:3d:98:48:0f:3a:21:71:d3:dd:39:37:0d:5b:98: 8f:a2:9c:e1:fb:3a:fd:df:c9:b0:85:e1:9a:cc:cf: 25:3b:47:cc:6d:12:22:cf:7a:d8:b5:d9:cc:cd:dd: 4d:5a:79:b7:b9:11:bf:d7:0a:b0:5a:7c:fd:f8:89: 02:56:4d:55:e7:84:20:c3:44:43:ee:36:09:25:66: 13:c3:03:23:0f:36:49:a9:aa:2e:e4:74:a0:5c:f8: 72:64:09:a8:d5:61:d8:b2:3e:4f:51:f2:48:50:49: be:ef:bb:66:41:c6:b9:21:f7:1e:a0:4c:58:24:79: ba:94:b0:b5:fe:b1:76:6e:d5:d1:e9:4a:85:4f:2d: 1f:c6:a7:81:aa:c8:31:e8:f2:d7:dd:4d:ed:3a:d2: e1:32:68:29:03:bc:88:18:d7:9b:e5:14:a0:17:f5: 65:93:6a:87:81:92:34:aa:ba:e5:34:4f:47:ba:d3: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4E:91:A9:0D:6D:31:A6:A7:D3:C6:8B:2C:90:EE:51:01:6A:86:A8 X509v3 Authority Key Identifier: keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a0:c3:ec:2c:0a:85:71:dc:4f:09:4c:60:9e:e9:96:4d:71: 75:05:e3:28:f5:97:1d:99:c0:8f:de:80:7f:ad:4f:17:f6:80: b8:6e:ae:84:6f:ab:b7:c1:c0:d2:83:08:fd:5c:6c:fa:41:11: b1:4e:81:6c:70:ec:27:ac:08:0a:33:b9:c6:7e:e7:79:e1:db: ff:be:9b:b9:ba:36:c2:86:b5:f4:df:d0:bd:f6:e2:93:fa:1c: 8a:89:96:33:b4:3c:a6:92:0c:db:a4:70:47:3d:c7:51:c8:d1: fb:ab:d8:49:c7:af:e1:12:1b:33:aa:84:e8:9d:eb:49:c6:a7: 66:da:7f:ec:9a:25:43:a7:2f:b2:f5:1e:d6:bf:82:ba:bc:6e: a3:63:26:78:4b:38:c0:8c:2f:7c:27:04:76:6e:f8:ba:a3:7c: 5d:59:9e:e3:e0:9b:8f:e0:bb:42:84:34:37:6e:21:24:f9:cc: d7:5b:a9:95:a4:ce:6d:22:26:be:d5:1c:52:14:e4:83:6c:1b: 1a:aa:fb:ae:07:20:a2:75:bb:96:d0:b4:a7:9c:b4:04:e9:7a: e6:77:25:6b:15:d0:d6:da:ae:df:98:95:50:08:12:03:1a:1d: 3e:5a:a4:63:e2:6b:69:8c:c6:00:a9:c5:9e:d0:a8:39:82:27: 93:56:39:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjIxMTAvBgNVBAUTKDdDRDk1OEEwMDdGNEYwRTU2RTRBOEQyNDU3NjY4ODYy MkJBQjcyMjEwHhcNMjYwOTI1MDI1NzMwWhcNMjYxMDAyMDI1NzMwWjAYMRYwFAYD VQQDEw02YWI1ZTMxYi0yZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0OOZSD7+RG16UNeo9XMMpW7n8rGAhWZerkGJpz5kT89WIKENZbZGppbDIgg iMI/5B18r+Jt3kU6F5PAHbP+d9gIV2I0WJtUvD9ePZhIDzohcdPdOTcNW5iPopzh +zr938mwheGazM8lO0fMbRIiz3rYtdnMzd1NWnm3uRG/1wqwWnz9+IkCVk1V54Qg w0RD7jYJJWYTwwMjDzZJqaou5HSgXPhyZAmo1WHYsj5PUfJIUEm+77tmQca5Ifce oExYJHm6lLC1/rF2btXR6UqFTy0fxqeBqsgx6PLX3U3tOtLhMmgpA7yIGNeb5RSg F/Vlk2qHgZI0qrrlNE9HutPJHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVOkakN bTGmp9PGiyyQ7lEBaoaoMB8GA1UdIwQYMBaAFHzZWKAH9PDlbkqNJFdmiGIrq3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGMi81NzMyQzgzODg0 NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhPVnVTbzBrVjJhSVlpdXJj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZObFlvQWYwOE9WdVNvMGtWMmFJWWl1cmNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGMi81NzMyQzgzODg0NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhP VnVTbzBrVjJhSVlpdXJjaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjqDD7CwKhXHcTwlMYJ7plk1xdQXjKPWXHZnAj96Af61PF/aAuG6uhG+rt8HA 0oMI/Vxs+kERsU6BbHDsJ6wICjO5xn7neeHb/76bubo2woa19N/Qvfbik/ociomW M7Q8ppIM26RwRz3HUcjR+6vYScev4RIbM6qE6J3rScanZtp/7JolQ6cvsvUe1r+C urxuo2MmeEs4wIwvfCcEdm74uqN8XVme4+Cbj+C7QoQ0N24hJPnM11uplaTObSIm vtUcUhTkg2wbGqr7rgcgonW7ltC0p5y0BOl65nclaxXQ1tqu35iVUAgSAxodPlqk Y+JraYzGAKnFntCoOYInk1Y55A== -----END CERTIFICATE-----Generated at Sat Sep 26 11:07:58 2026 by rpki-client