$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: BGJiNicQOeGPfXzP7SKS5uTLT32DdBbV5QLsTM3UO+4= Subject key identifier: 73:B5:D3:66:E0:99:4A:F9:6D:EC:75:9D:9C:EB:03:5E:22:6F:69:57 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0992 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 095C Signing time: Tue 06 Oct 2026 14:45:50 +0000 Manifest this update: Tue 06 Oct 2026 14:45:49 +0000 Manifest next update: Tue 13 Oct 2026 14:45:49 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: KbglUCOe2GwehSzPGWcAaIjr5JQe23Sm4rv9+Ee6hvs=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: TJX/2z4AnWBNVG5vc+6iQbCnon+csxAc9hGSLvA14T4=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2450 (0x992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Oct 6 14:45:49 2026 GMT Not After : Oct 13 14:45:49 2026 GMT Subject: CN=6ac5099e-9172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:79:d4:1b:c0:70:3c:80:9c:cf:eb:2e:ae: 30:0f:23:58:6d:5c:4a:ca:a7:e1:fe:53:dc:d2:56: 33:d2:74:93:9b:10:9b:ae:e7:07:5b:26:a0:40:ad: 88:28:a0:f0:a0:dd:3d:e5:bf:6a:6e:0d:c4:e5:07: 97:37:32:94:87:ce:49:6d:8f:c7:4a:05:84:40:f3: b1:2f:47:95:1f:4c:03:5a:b8:70:1c:28:78:a7:53: b1:74:c1:a3:de:01:21:32:83:bb:13:7f:7d:02:12: ff:68:fa:8a:40:f0:33:30:18:d3:74:f6:93:d3:d3: 17:7f:dd:c0:38:1a:93:b9:56:92:cc:89:34:09:86: 33:6a:18:15:87:cf:5f:e4:d9:f6:7c:0a:03:61:7a: 52:32:70:62:24:da:8a:0b:59:22:e3:7d:c6:98:62: 76:73:fa:5f:c5:2e:9c:d8:2d:4c:1a:ec:c1:db:2e: 95:1e:98:43:bd:50:cf:38:15:b1:ea:5c:eb:a8:5f: 86:54:f2:b8:9d:6e:4b:a8:a9:b5:41:17:33:1a:ba: 24:8a:33:e7:53:a8:9b:ad:d4:07:14:e8:9b:67:f5: 46:cd:65:3e:bc:cf:fb:e4:28:52:6e:8e:a6:c1:04: 63:2b:bf:c2:29:3e:30:c9:0d:60:c9:b1:f9:fc:bd: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B5:D3:66:E0:99:4A:F9:6D:EC:75:9D:9C:EB:03:5E:22:6F:69:57 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:21:20:7d:f2:37:1a:e8:aa:c9:84:49:ad:01:d9:fb:28:21: c6:16:03:14:3b:f7:19:01:e9:74:9d:2e:25:1b:93:35:0c:16: bf:09:26:66:c6:4a:ac:da:48:9d:bb:81:4a:7f:af:15:5b:c6: fb:0d:3a:5b:b5:cb:11:e5:b2:2c:5f:53:d8:98:86:c6:96:29: 89:a2:e7:3f:9a:51:fa:9f:c2:45:6d:c1:d6:63:5a:cc:21:17: 5d:60:dd:fc:ee:a0:ca:b0:07:9e:fc:3e:d7:48:ab:5a:1b:05: 03:a9:0d:8a:f6:28:e3:41:58:30:8c:62:2a:55:eb:3e:cc:38: 66:91:1e:e5:37:81:bc:80:ca:ef:ea:c3:fb:aa:35:74:1a:de: d3:80:e2:49:46:30:0b:c6:de:23:43:9a:2d:3a:08:e5:f9:99: 35:4d:ba:fb:50:d6:3d:af:9d:e4:fb:85:c2:32:fb:93:ff:07: 6d:94:f2:7e:3d:d5:1c:44:46:d4:81:f2:eb:39:60:7a:19:35: 24:69:46:db:55:89:b3:3a:9d:b5:ef:7a:e9:38:fc:c7:31:8b: 74:60:62:20:2e:3c:34:23:b3:e7:b1:ff:c0:1d:47:40:89:2a: c6:90:59:61:07:8c:5c:b6:ea:74:38:9f:87:58:79:ab:fd:26: c4:01:b5:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYxMDA2MTQ0NTQ5WhcNMjYxMDEzMTQ0NTQ5WjAYMRYwFAYD VQQDEw02YWM1MDk5ZS05MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eF51BvAcDyAnM/rLq4wDyNYbVxKyqfh/lPc0lYz0nSTmxCbrucHWyagQK2I KKDwoN095b9qbg3E5QeXNzKUh85JbY/HSgWEQPOxL0eVH0wDWrhwHCh4p1OxdMGj 3gEhMoO7E399AhL/aPqKQPAzMBjTdPaT09MXf93AOBqTuVaSzIk0CYYzahgVh89f 5Nn2fAoDYXpSMnBiJNqKC1ki433GmGJ2c/pfxS6c2C1MGuzB2y6VHphDvVDPOBWx 6lzrqF+GVPK4nW5LqKm1QRczGrokijPnU6ibrdQHFOibZ/VGzWU+vM/75ChSbo6m wQRjK7/CKT4wyQ1gybH5/L1v2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHO102bg mUr5bex1nZzrA14ib2lXMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGSEgffI3GuiqyYRJrQHZ+yghxhYDFDv3GQHpdJ0uJRuTNQwWvwkmZsZKrNpI nbuBSn+vFVvG+w06W7XLEeWyLF9T2JiGxpYpiaLnP5pR+p/CRW3B1mNazCEXXWDd /O6gyrAHnvw+10irWhsFA6kNivYo40FYMIxiKlXrPsw4ZpEe5TeBvIDK7+rD+6o1 dBre04DiSUYwC8beI0OaLToI5fmZNU26+1DWPa+d5PuFwjL7k/8HbZTyfj3VHERG 1IHy6zlgehk1JGlG21WJszqdte966Tj8xzGLdGBiIC48NCOz57H/wB1HQIkqxpBZ YQeMXLbqdDifh1h5q/0mxAG18w== -----END CERTIFICATE-----Generated at Wed Oct 7 14:32:25 2026 by rpki-client