$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: 2o8iAuOeKeDq2ycrhWxx9fMoXWXUF2fbkq9D3i+ZjQ8= Subject key identifier: 74:C4:C1:CD:3A:D8:07:2F:04:83:09:0B:9D:88:94:19:9D:ED:F2:97 Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 0871 Signing time: Wed 02 Sep 2026 20:54:51 +0000 Manifest this update: Wed 02 Sep 2026 20:54:51 +0000 Manifest next update: Wed 09 Sep 2026 20:54:51 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: qkfcb2vgrA8Tbzufxk4CL+096jYY94BSDjBZ8lRGLq0=) 2: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: gCroShM9MPy9hkOuo/TmE62NW3KmfiqLbSetYf/sQtk=) 3: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: fTOR9/QC+OhH2+hrGoKHcs/jMnPvIkd1epQi4PDNnQE=) 4: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: WAr5HKGDc2RarHCoXbJPfLibBljcpHIXpcteTrNCl3M=) 5: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: KYjRsSmZFGs+FoyNnOuXfuvWzg10BoAKlArtMc3CJYg=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: L0U0RcVKixHM80nNmnQh09Mgzv1FHdU2PsTdoVdSV8U=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Gd7CExBZM5BBf+T9t2y84eMZfBgGlZ7L5uDoPb1T73A=) 8: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: SfIPzDPx+vk2QttaA/BFMlEfJZc2n17RQ43Dr50jvLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 20:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Sep 2 20:54:51 2026 GMT Not After : Sep 9 20:54:51 2026 GMT Subject: CN=6a988d1b-c6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:11:d4:d0:c5:a8:23:49:6b:44:52:4c:be: 5d:05:7a:84:a7:29:7f:e2:ad:42:dd:d1:a9:dd:da: ca:ea:88:60:fc:fd:74:78:90:9e:a3:a2:aa:55:e1: c6:cd:df:51:21:99:e8:44:93:d5:0c:ef:65:c2:bf: 2f:b5:6e:76:4a:38:c9:1f:bb:4e:14:34:bd:6b:cc: 40:8d:46:8a:30:0d:a3:95:4b:f9:7e:4d:5d:b1:b1: b9:59:8a:68:56:db:37:8d:f1:f6:b3:ee:80:fc:91: 0a:d5:eb:b2:01:33:cd:40:24:45:b7:25:87:36:71: b3:48:6d:2b:71:7e:59:5c:20:7f:66:2e:dd:89:8a: 61:dd:d3:7a:a6:c8:77:55:36:99:02:94:7d:82:51: 14:c2:22:32:8d:0a:98:cd:fc:d6:af:b9:68:5f:98: 63:08:55:fe:b4:90:3c:43:de:70:68:fe:bc:a1:2d: 9f:28:55:fe:da:26:6a:1a:73:d2:d1:69:3a:44:08: 94:c4:a4:e2:5d:cb:29:c5:d0:c7:16:07:b7:6f:3a: a9:8f:d9:f7:68:5b:02:7d:ac:01:18:db:75:ef:68: 82:c5:e5:4b:3f:08:da:a4:00:2c:31:ae:b0:78:7d: bf:05:9e:11:cb:a3:5d:15:8d:4c:55:5a:93:1c:4d: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:C1:CD:3A:D8:07:2F:04:83:09:0B:9D:88:94:19:9D:ED:F2:97 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5a:cf:f8:0e:b2:6b:28:c7:04:6c:be:d3:4f:71:16:5f:80: 22:d5:0e:41:eb:d9:a7:3a:11:24:3a:d2:33:c0:b7:e6:d8:86: dc:d5:b1:ed:4f:99:1c:96:cd:a4:f4:b7:91:8b:7a:1a:74:28: 04:6d:21:4d:4f:f4:dc:d3:19:d7:58:ac:6f:22:43:f7:39:95: 4b:3a:47:53:30:e7:70:c5:92:d6:02:b5:97:d2:a2:9c:b9:a9: 85:10:ea:75:70:27:74:47:f9:02:13:bb:f3:73:fa:d5:43:03: 1c:44:07:93:96:57:18:b2:36:b6:1f:37:cf:f6:c1:0d:72:ff: ff:4c:95:49:fe:9e:b9:a9:d4:d6:a1:48:cd:c2:fa:4e:f8:51: 7a:21:06:ed:a8:5c:97:cd:0e:fa:d4:66:2b:c0:47:fc:4c:38: fa:c5:7b:4b:e3:da:04:39:e4:7d:01:91:f4:a8:3b:84:50:1a: 16:2a:65:0a:8a:d3:2f:bc:b2:7d:45:df:57:48:27:8d:1d:97: cb:e1:08:dd:79:28:46:6c:32:4a:27:24:2b:bb:0a:3e:44:99: c6:e9:ad:91:f0:fe:2c:9e:3e:22:e4:06:8c:4c:30:25:e5:27: b9:d1:9f:a0:fb:f0:eb:e9:be:77:83:25:0f:af:52:99:67:d3: 80:b7:0c:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjYwOTAyMjA1NDUxWhcNMjYwOTA5MjA1NDUxWjAYMRYwFAYD VQQDEw02YTk4OGQxYi1jNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DkR1NDFqCNJa0RSTL5dBXqEpyl/4q1C3dGp3drK6ohg/P10eJCeo6KqVeHG zd9RIZnoRJPVDO9lwr8vtW52SjjJH7tOFDS9a8xAjUaKMA2jlUv5fk1dsbG5WYpo Vts3jfH2s+6A/JEK1euyATPNQCRFtyWHNnGzSG0rcX5ZXCB/Zi7diYph3dN6psh3 VTaZApR9glEUwiIyjQqYzfzWr7loX5hjCFX+tJA8Q95waP68oS2fKFX+2iZqGnPS 0Wk6RAiUxKTiXcspxdDHFge3bzqpj9n3aFsCfawBGNt172iCxeVLPwjapAAsMa6w eH2/BZ4Ry6NdFY1MVVqTHE1t+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTEwc06 2AcvBIMJC52IlBmd7fKXMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPlrP+A6yayjHBGy+009xFl+AItUOQevZpzoRJDrSM8C35tiG3NWx7U+ZHJbN pPS3kYt6GnQoBG0hTU/03NMZ11isbyJD9zmVSzpHUzDncMWS1gK1l9KinLmphRDq dXAndEf5AhO783P61UMDHEQHk5ZXGLI2th83z/bBDXL//0yVSf6euanU1qFIzcL6 TvhReiEG7ahcl80O+tRmK8BH/Ew4+sV7S+PaBDnkfQGR9Kg7hFAaFiplCorTL7yy fUXfV0gnjR2Xy+EI3XkoRmwySickK7sKPkSZxumtkfD+LJ4+IuQGjEwwJeUnudGf oPvw6+m+d4MlD69SmWfTgLcMFg== -----END CERTIFICATE-----Generated at Thu Sep 3 13:01:21 2026 by rpki-client