$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft File: FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json) Hash identifier: XZLnTHmHKG/qBMNbI4bH78CNkuEl4r7eL+P9HHN4E5g= Subject key identifier: CF:A9:98:6C:CF:48:7D:D2:F0:35:A3:80:25:50:88:2C:1D:3E:AE:64 Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3 Certificate issuer: /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3 Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft Manifest number: 09D6 Signing time: Fri 04 Sep 2026 19:46:13 +0000 Manifest this update: Fri 04 Sep 2026 19:46:13 +0000 Manifest next update: Fri 11 Sep 2026 19:46:13 +0000 Files and hashes: 1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: UxClukbdLBPVjA8YZWZejBQqootun4FfRb7WYzhY9RE=) 2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: 3/DJ3hL5G9etvpvOyj7MflbEEZYKEAa9BhYU/ttjjb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3 Validity Not Before: Sep 4 19:46:13 2026 GMT Not After : Sep 11 19:46:13 2026 GMT Subject: CN=6a9b2005-d6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:17:7b:a4:4e:af:fd:3c:df:3c:c5:2a:17: 96:10:9d:dd:5a:fb:53:d2:fb:55:6c:2e:45:46:64: a0:a0:ff:1f:db:21:a2:78:8f:3f:2c:d9:4b:46:35: 08:eb:fa:1e:37:90:8f:e1:e4:1f:f9:e4:fc:13:bc: 56:04:0f:33:91:58:f5:48:14:a4:a2:a0:40:e6:1d: d2:94:6d:3f:83:40:70:0e:64:6e:45:ae:bc:5d:53: fa:bf:d9:20:d5:57:0b:f6:f0:37:c4:47:11:7c:ff: 16:dc:f4:38:c9:04:ab:5f:b9:e5:3f:e2:6e:5e:4e: 6c:2a:26:b8:f2:2e:69:f4:8d:88:31:50:7e:91:ce: 91:02:1d:30:aa:55:10:b6:2e:60:93:35:46:77:58: 10:4e:96:f7:8b:b1:7a:57:3b:cb:a1:c5:cc:52:6d: e7:6c:e8:1a:a0:3f:f3:d6:1e:82:04:8f:ca:00:4a: 5e:42:a1:ee:eb:95:8e:48:80:85:67:c6:e0:3c:25: f1:9a:52:08:dd:07:bc:6c:2b:8e:cc:84:99:6f:7d: 83:eb:04:9b:e5:5f:37:1e:6b:d2:80:8e:80:34:37: 6c:69:21:78:1e:52:05:17:31:9e:80:62:13:64:20: 78:7b:78:9a:76:79:cd:88:8a:85:45:78:7f:a2:5a: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:98:6C:CF:48:7D:D2:F0:35:A3:80:25:50:88:2C:1D:3E:AE:64 X509v3 Authority Key Identifier: keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d9:ca:f9:fb:3b:0d:d3:11:7e:a2:42:06:ca:64:d8:89:d3: 81:44:64:01:b3:7b:ab:34:45:35:d2:49:63:ba:13:12:c5:1d: fd:11:c3:77:3f:86:51:ea:69:f8:55:44:4f:88:67:6c:fb:ff: 7f:9f:01:17:44:eb:df:1c:d9:d6:b2:f2:ae:42:0b:19:c5:bd: 28:ba:50:d9:c8:e1:b4:1e:93:cd:28:65:42:ec:93:c6:a9:b6: 52:a4:02:02:04:96:8a:96:c2:c8:c4:4e:b8:be:fa:91:cc:96: 5c:9d:20:98:fd:7a:40:8c:55:03:39:19:84:8e:e3:62:b9:6b: 9f:04:9c:a8:2c:82:2d:29:03:80:d6:d3:f0:c5:5a:10:ef:77: a3:5a:cf:82:09:11:cb:fe:1d:3c:96:62:10:ac:ea:fd:26:2c: 2e:bc:77:48:5a:58:02:d5:0f:cc:95:39:6c:1d:b2:c1:e3:3a: 93:78:6d:a2:79:0f:d3:76:b6:2a:ab:3f:09:dd:b4:2c:05:b7: fa:c2:6a:4c:34:61:76:13:43:b9:18:34:69:d9:e4:8f:4a:56: d1:3d:b8:11:e9:f0:96:bd:79:8f:f9:51:ed:d7:73:f1:0f:ca: 6d:4d:9b:9a:93:b4:c3:c6:45:de:3c:4c:c5:81:b7:82:1c:e5: bc:8e:c7:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1QkExMTAvBgNVBAUTKDE0MjBGODA3MDlEREQzREZDM0Y1MTE1NjU1MDNDRUY0 NDQ0QkVEQzMwHhcNMjYwOTA0MTk0NjEzWhcNMjYwOTExMTk0NjEzWjAYMRYwFAYD VQQDEw02YTliMjAwNS1kNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArU0Xe6ROr/083zzFKheWEJ3dWvtT0vtVbC5FRmSgoP8f2yGieI8/LNlLRjUI 6/oeN5CP4eQf+eT8E7xWBA8zkVj1SBSkoqBA5h3SlG0/g0BwDmRuRa68XVP6v9kg 1VcL9vA3xEcRfP8W3PQ4yQSrX7nlP+JuXk5sKia48i5p9I2IMVB+kc6RAh0wqlUQ ti5gkzVGd1gQTpb3i7F6VzvLocXMUm3nbOgaoD/z1h6CBI/KAEpeQqHu65WOSICF Z8bgPCXxmlII3Qe8bCuOzISZb32D6wSb5V83HmvSgI6ANDdsaSF4HlIFFzGegGIT ZCB4e3iadnnNiIqFRXh/oloWwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+pmGzP SH3S8DWjgCVQiCwdPq5kMB8GA1UdIwQYMBaAFBQg+AcJ3dPfw/URVlUDzvRES+3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjVCQS8wNDlEQ0QyMkFE NjExMUVBOEYxQThENjNDNEY5QUUwMi9GQ0Q0QnduZDA5X0Q5UkZXVlFQTzlFUkw3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZDRDRCd25kMDlfRDlSRldWUVBPOUVSTDdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjVCQS8wNDlEQ0QyMkFENjExMUVBOEYxQThENjNDNEY5QUUwMi9GQ0Q0QnduZDA5 X0Q5UkZXVlFQTzlFUkw3Y00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9nK+fs7DdMRfqJCBspk2InTgURkAbN7qzRFNdJJY7oTEsUd/RHDdz+GUepp +FVET4hnbPv/f58BF0Tr3xzZ1rLyrkILGcW9KLpQ2cjhtB6TzShlQuyTxqm2UqQC AgSWipbCyMROuL76kcyWXJ0gmP16QIxVAzkZhI7jYrlrnwScqCyCLSkDgNbT8MVa EO93o1rPggkRy/4dPJZiEKzq/SYsLrx3SFpYAtUPzJU5bB2yweM6k3htonkP03a2 Kqs/Cd20LAW3+sJqTDRhdhNDuRg0adnkj0pW0T24Eenwlr15j/lR7ddz8Q/KbU2b mpO0w8ZF3jxMxYG3ghzlvI7HRQ== -----END CERTIFICATE-----Generated at Fri Sep 4 23:21:49 2026 by rpki-client