$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: m5EzyCu+5362LuhHnxtIXQ7Kds9/Y/KEIiMq4mFNUk0= Subject key identifier: C0:36:63:0D:FC:E0:E9:21:C3:77:23:4A:C0:59:EA:2F:6E:B3:07:CE Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 3627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 35D6 Signing time: Sun 04 Oct 2026 14:45:25 +0000 Manifest this update: Sun 04 Oct 2026 14:45:25 +0000 Manifest next update: Sun 11 Oct 2026 14:45:25 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: Y28wLkUpHGzy08cMvgi8Nyhw1F9ejW4QROBmgwo4lXo=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: reaXyWDA2ljuxsntm0i6DnDHoaBzJzPoCC4N+GYDna4=) 3: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: qc7dfpxoyaWy9hmAOoxHUqM2HrHxDCq2dYCwFXa7BDs=) 4: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: 4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 14:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13863 (0x3627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Oct 4 14:45:25 2026 GMT Not After : Oct 11 14:45:25 2026 GMT Subject: CN=6ac26685-9831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:74:4c:9f:6f:b4:ed:cd:ba:47:cf:27:4c: 11:3f:6f:0a:9f:ca:15:4f:d1:8c:29:a1:4b:e0:89: ca:f3:0e:e3:d4:be:c2:f5:2a:f3:5c:43:db:de:0f: 9a:18:c2:81:b1:54:ab:38:0c:99:7a:81:df:c6:8e: 41:6b:26:7e:41:fa:0a:43:c6:d9:4b:22:43:7b:61: 3f:38:1f:dc:29:0c:1f:fe:c8:6a:fd:de:cc:29:e8: 71:86:d2:c4:f7:b0:48:21:c2:6c:e1:e8:73:4f:ff: 83:1b:fe:10:90:86:91:51:b8:3a:a9:fd:72:ef:aa: 3d:1b:2f:72:d0:21:0b:fd:3a:4d:4b:4e:00:ce:91: 24:1e:15:ca:54:36:71:c1:6f:e1:b5:e5:63:35:cf: d6:65:ca:63:71:22:c5:21:17:d2:6b:46:d1:a7:e5: 5b:98:18:0d:68:1b:e9:e3:26:38:72:01:a5:c3:86: a5:98:c1:0c:26:d6:5b:a4:91:c8:85:05:ef:b4:56: fc:b2:e2:65:dc:98:bd:21:56:64:db:5a:05:84:80: 00:e2:03:b7:aa:11:df:22:64:43:fc:e4:1f:bd:51: d9:9e:df:f3:ac:7d:5b:01:97:f0:ba:bd:b0:bf:f3: 2b:77:8c:b1:20:42:1b:29:9e:d3:5e:16:e6:cd:4f: f6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:36:63:0D:FC:E0:E9:21:C3:77:23:4A:C0:59:EA:2F:6E:B3:07:CE X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:14:f4:4c:ff:32:0d:60:2d:75:b5:b3:e3:fc:01:58:66:a1: 83:90:24:01:75:c4:df:8c:a7:2a:e7:5b:79:1e:00:0f:7d:36: e1:1b:f4:60:cb:68:86:91:c8:49:ea:14:99:49:f7:50:d7:af: af:a8:bb:e3:ca:32:41:ef:a3:6a:55:7c:d1:16:37:b5:0b:78: c6:0c:5c:4b:a5:40:11:6a:99:92:3c:3b:d4:2b:7d:b1:93:34: e0:65:89:85:d3:da:c5:61:4d:b0:c6:78:ff:a7:f8:c3:11:29: a4:1c:d1:86:01:79:13:ea:c8:65:cd:f9:af:11:2b:4c:41:22: 6b:b6:58:eb:5c:09:d9:e3:5e:6d:7d:51:16:77:aa:25:79:b9: 58:c3:cc:e3:d7:4f:5b:f9:3a:07:3d:10:46:5c:c7:09:c6:5f: 56:c2:3f:1d:c3:a8:5e:1e:7c:38:0c:f4:6b:7d:7a:db:de:80: 96:97:ae:18:2c:54:0c:0b:58:45:0f:c9:a2:d8:e3:d4:9c:71: 1d:f9:4f:b8:99:63:ec:f4:e5:5e:6b:16:e8:a2:76:e1:b4:4b: 4c:9f:e3:34:cf:39:15:52:b1:0d:2e:4f:13:ae:ff:b9:ad:68: e3:9f:26:b6:a7:f7:e7:12:5b:b2:66:c0:61:0b:c3:24:11:61: fb:71:ef:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjYxMDA0MTQ0NTI1WhcNMjYxMDExMTQ0NTI1WjAYMRYwFAYD VQQDEw02YWMyNjY4NS05ODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEd0TJ9vtO3NukfPJ0wRP28Kn8oVT9GMKaFL4InK8w7j1L7C9SrzXEPb3g+a GMKBsVSrOAyZeoHfxo5BayZ+QfoKQ8bZSyJDe2E/OB/cKQwf/shq/d7MKehxhtLE 97BIIcJs4ehzT/+DG/4QkIaRUbg6qf1y76o9Gy9y0CEL/TpNS04AzpEkHhXKVDZx wW/hteVjNc/WZcpjcSLFIRfSa0bRp+VbmBgNaBvp4yY4cgGlw4almMEMJtZbpJHI hQXvtFb8suJl3Ji9IVZk21oFhIAA4gO3qhHfImRD/OQfvVHZnt/zrH1bAZfwur2w v/Mrd4yxIEIbKZ7TXhbmzU/2jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMA2Yw38 4Okhw3cjSsBZ6i9uswfOMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnhT0TP8yDWAtdbWz4/wBWGahg5AkAXXE34ynKudbeR4AD3024Rv0YMtohpHI SeoUmUn3UNevr6i748oyQe+jalV80RY3tQt4xgxcS6VAEWqZkjw71Ct9sZM04GWJ hdPaxWFNsMZ4/6f4wxEppBzRhgF5E+rIZc35rxErTEEia7ZY61wJ2eNebX1RFneq JXm5WMPM49dPW/k6Bz0QRlzHCcZfVsI/HcOoXh58OAz0a316296AlpeuGCxUDAtY RQ/Jotjj1JxxHflPuJlj7PTlXmsW6KJ24bRLTJ/jNM85FVKxDS5PE67/ua1o458m tqf35xJbsmbAYQvDJBFh+3Hvqg== -----END CERTIFICATE-----Generated at Mon Oct 5 07:02:19 2026 by rpki-client