$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: UseD0qjNIQecfd4Bt0M0skKcORuy9yqVCM7MHhFEiKM= Subject key identifier: 5C:80:1B:B0:58:CA:6A:5E:75:41:FD:2F:C8:A6:FB:94:1C:F8:A4:46 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 099A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 0987 Signing time: Tue 06 Oct 2026 20:09:22 +0000 Manifest this update: Tue 06 Oct 2026 20:09:21 +0000 Manifest next update: Tue 13 Oct 2026 20:09:21 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: r9BWtL55dHbuKaHWXlFvELcCm7biU8xZuog7vCZO7/Y=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0=) 3: 2636893049C611F1A0494403A4833773.roa (hash: LbI/zXwrZvEy2m8RCRFUKgZJykGAWt1/GiJpmBz1/G0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2458 (0x99a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Oct 6 20:09:21 2026 GMT Not After : Oct 13 20:09:21 2026 GMT Subject: CN=6ac55572-447b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:d7:da:78:82:16:6e:d2:af:49:ab:0c:d6: c3:01:ba:85:6a:b6:92:08:d7:0e:e0:f3:c7:40:bb: a5:01:d6:dd:fa:2b:04:16:ab:5a:9d:9b:f1:b2:d2: bd:ea:e8:a5:0a:66:04:17:2b:b4:0e:a0:21:1c:2c: ee:f3:40:ad:15:05:f2:a6:61:df:80:4d:ad:6c:f4: 95:a7:68:2e:67:d4:55:a4:4b:59:45:bd:d4:3f:c5: 9a:91:e0:3c:58:a4:1d:1f:56:6c:90:2b:73:f4:25: 7f:f8:b7:02:18:0e:46:a3:82:45:57:9c:8b:7b:e3: 80:9e:75:d8:46:8c:6e:db:74:a8:b7:23:b0:15:5f: 94:ca:99:5d:21:5a:28:73:cb:61:91:2e:15:b6:97: 0e:0f:54:a1:1c:4f:f8:bf:f1:98:36:59:2d:f3:aa: 19:37:ac:71:8b:e7:f2:4a:93:26:f9:74:ba:c7:32: 3f:22:96:68:de:7b:32:52:1a:4d:3e:5e:c3:14:43: d4:46:9a:73:76:da:ed:c7:8d:ed:f2:01:0a:24:75: 9e:cb:11:7d:82:48:62:c0:eb:2c:73:98:d1:7f:df: 1b:59:37:2a:73:f2:3f:24:47:f2:13:89:d0:a0:6c: de:30:e4:13:79:10:f0:1d:dc:aa:aa:a0:0a:5e:5a: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:80:1B:B0:58:CA:6A:5E:75:41:FD:2F:C8:A6:FB:94:1C:F8:A4:46 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:c5:a8:71:89:65:b3:b8:b0:0f:91:b4:ca:87:ca:a4:47: f3:a9:17:a0:5b:2b:08:98:72:7f:02:81:a1:4c:43:48:e5:16: ae:8b:21:6d:38:72:14:75:c5:52:23:63:6e:f6:c5:85:1a:0d: d6:2e:f2:aa:4c:5c:e9:d2:3d:c4:8f:3c:23:6a:1e:bb:9a:70: 95:f0:2c:5e:35:4f:8e:c8:fc:0f:4c:18:7a:2f:7e:ad:ac:0b: 5a:94:92:ae:a9:6d:c7:78:6e:78:bc:84:05:9f:6d:b8:af:af: b6:62:b6:e2:16:ab:98:ce:1d:18:5c:81:22:d2:a1:48:8e:27: cf:98:4d:f2:22:31:01:c4:ed:0e:a0:05:6d:e6:21:ff:77:07: 94:7b:21:a2:b7:09:3b:06:54:c8:fb:51:4a:af:06:0b:b5:50: 3f:74:54:37:6b:08:1b:a4:d3:a7:4a:b2:e3:c4:38:ee:c7:62: 81:eb:90:e9:2b:11:7f:88:9e:ec:1a:3c:51:de:45:23:76:25: 6c:2c:93:53:ea:9e:59:0d:c3:c1:da:eb:9d:24:70:05:10:6b: 66:17:0e:d8:bf:77:b7:f9:0a:bf:33:f4:0b:34:a4:d1:b6:d8: 4d:d5:e3:11:4c:a8:32:14:1c:c2:07:ff:8d:f1:77:63:5f:82: 08:60:fa:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjYxMDA2MjAwOTIxWhcNMjYxMDEzMjAwOTIxWjAYMRYwFAYD VQQDEw02YWM1NTU3Mi00NDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuizX2niCFm7Sr0mrDNbDAbqFaraSCNcO4PPHQLulAdbd+isEFqtanZvxstK9 6uilCmYEFyu0DqAhHCzu80CtFQXypmHfgE2tbPSVp2guZ9RVpEtZRb3UP8WakeA8 WKQdH1ZskCtz9CV/+LcCGA5Go4JFV5yLe+OAnnXYRoxu23SotyOwFV+UypldIVoo c8thkS4VtpcOD1ShHE/4v/GYNlkt86oZN6xxi+fySpMm+XS6xzI/IpZo3nsyUhpN Pl7DFEPURppzdtrtx43t8gEKJHWeyxF9gkhiwOssc5jRf98bWTcqc/I/JEfyE4nQ oGzeMOQTeRDwHdyqqqAKXlpPMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyAG7BY ympedUH9L8im+5Qc+KRGMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdmTFqHGJZbO4sA+RtMqHyqRH86kXoFsrCJhyfwKBoUxDSOUWroshbThyFHXF UiNjbvbFhRoN1i7yqkxc6dI9xI88I2oeu5pwlfAsXjVPjsj8D0wYei9+rawLWpSS rqltx3hueLyEBZ9tuK+vtmK24harmM4dGFyBItKhSI4nz5hN8iIxAcTtDqAFbeYh /3cHlHshorcJOwZUyPtRSq8GC7VQP3RUN2sIG6TTp0qy48Q47sdigeuQ6SsRf4ie 7Bo8Ud5FI3YlbCyTU+qeWQ3DwdrrnSRwBRBrZhcO2L93t/kKvzP0CzSk0bbYTdXj EUyoMhQcwgf/jfF3Y1+CCGD6ZQ== -----END CERTIFICATE-----Generated at Wed Oct 7 19:22:01 2026 by rpki-client