$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft File: fOoThFDUNhs1PnBX2C_Bx2qMflg.mft (raw, json) Hash identifier: JPFJigPg/a5Cahoxn51HzTCPjc1GQshTqeaxy6eRTdM= Subject key identifier: 8B:4B:6A:D3:14:94:D7:0D:E6:2C:70:27:E6:13:5D:D4:FA:F2:5B:51 Authority key identifier: 7C:EA:13:84:50:D4:36:1B:35:3E:70:57:D8:2F:C1:C7:6A:8C:7E:58 Certificate issuer: /CN=A9173526/serialNumber=7CEA138450D4361B353E7057D82FC1C76A8C7E58 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft Manifest number: 1C Signing time: Mon 05 Oct 2026 09:27:07 +0000 Manifest this update: Mon 05 Oct 2026 09:27:06 +0000 Manifest next update: Mon 12 Oct 2026 09:27:06 +0000 Files and hashes: 1: fOoThFDUNhs1PnBX2C_Bx2qMflg.crl (hash: 5DcXxEyNVku97f6srwcvanQpIy4d8BVHx9ejspBwu+0=) 2: 864D2A94A1C411F1A29B73897011F970.roa (hash: CjCIDj8MlgWZJjzO4IRsVZ7VxVfQnt0GwQFvWoydvek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.crl rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173526, serialNumber=7CEA138450D4361B353E7057D82FC1C76A8C7E58 Validity Not Before: Oct 5 09:27:06 2026 GMT Not After : Oct 12 09:27:06 2026 GMT Subject: CN=6ac36d6b-7212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fd:f5:69:01:7a:45:ea:f2:85:f2:16:4e:45: ab:bd:2d:da:f1:dd:76:8d:20:13:64:50:8a:27:a9: 6b:b2:0b:21:8d:52:af:6c:94:35:da:36:56:cd:f9: f6:9a:ca:89:fb:b9:62:86:fe:7c:9d:91:bc:40:c2: 59:e3:83:f6:8e:17:25:d2:92:ce:73:09:89:35:c9: 46:31:fd:a2:bd:41:c9:ae:7d:1d:f1:38:f0:1b:cc: 2b:ae:17:b2:97:f0:d7:3b:46:46:0a:19:12:15:40: 6e:de:59:c3:d3:76:92:91:ed:71:05:c1:aa:70:5b: 87:87:8a:16:75:94:21:7b:f9:ca:fb:98:38:98:c3: 45:9e:c0:23:7a:c2:d3:0f:e3:b9:be:c4:3d:e9:2f: 9e:31:65:d5:3a:19:18:06:15:5a:be:8d:f6:3d:8c: 81:3b:fb:07:44:b2:78:59:8b:ca:3e:e2:97:30:f1: e8:39:e9:e3:51:6f:ba:87:df:c3:2d:bf:75:18:2f: 16:a3:b8:a5:51:4c:e0:c3:27:f2:30:77:d4:5a:de: eb:42:7a:da:0e:04:94:68:19:8d:fd:9e:a2:4d:f7: ec:f5:f5:bf:ac:45:32:e6:a7:4a:1a:34:1c:23:02: 52:20:ae:e5:21:0f:d9:79:fd:79:18:d2:15:69:de: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4B:6A:D3:14:94:D7:0D:E6:2C:70:27:E6:13:5D:D4:FA:F2:5B:51 X509v3 Authority Key Identifier: keyid:7C:EA:13:84:50:D4:36:1B:35:3E:70:57:D8:2F:C1:C7:6A:8C:7E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fOoThFDUNhs1PnBX2C_Bx2qMflg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173526/79B99B749AAC11F1B63AA1684111F970/fOoThFDUNhs1PnBX2C_Bx2qMflg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:fa:3e:6d:50:5d:f0:52:13:98:8c:1a:d8:8a:56:5e:83:45: fe:d5:3b:67:e8:55:62:83:61:3e:16:cd:20:13:8a:6a:eb:b4: 6e:6e:a3:02:db:a2:72:35:5e:6b:d1:2b:5b:73:da:51:98:94: 56:6e:22:f4:92:b9:c9:96:89:05:8d:d2:e9:6f:a0:83:fe:92: a7:00:28:e1:fe:79:6c:cd:4d:8b:33:16:65:61:b6:42:e4:50: 2b:38:33:f7:b2:91:18:01:45:78:e0:0d:08:47:bc:11:3e:d3: 90:1c:74:88:7d:46:ec:b9:4b:d8:8b:38:a1:9f:24:c5:b5:09: 8c:ad:1d:27:7c:d1:b4:08:5f:99:12:63:d5:98:78:ed:af:d3: e9:f2:63:ee:46:56:c2:eb:08:c6:71:6f:b6:25:fd:1d:9d:4c: 41:8f:96:32:6b:eb:46:a1:9f:0b:97:42:f1:98:72:ca:01:0e: c4:bf:9c:2e:48:69:a8:c8:bd:a8:34:59:05:72:e8:a9:71:96: 71:4e:72:9f:93:49:08:a2:cb:0d:2a:39:84:0e:7c:db:dc:42: 12:00:d2:b5:54:9e:74:81:8e:86:05:42:4e:ee:55:ae:05:d6: 12:7b:49:0f:bc:97:c5:01:27:1a:95:1c:5b:ba:a2:6c:0c:3e: 64:e5:9d:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzUyNjExMC8GA1UEBRMoN0NFQTEzODQ1MEQ0MzYxQjM1M0U3MDU3RDgyRkMxQzc2 QThDN0U1ODAeFw0yNjEwMDUwOTI3MDZaFw0yNjEwMTIwOTI3MDZaMBgxFjAUBgNV BAMTDTZhYzM2ZDZiLTcyMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDu/fVpAXpF6vKF8hZORau9Ldrx3XaNIBNkUIonqWuyCyGNUq9slDXaNlbN+faa yon7uWKG/nydkbxAwlnjg/aOFyXSks5zCYk1yUYx/aK9QcmufR3xOPAbzCuuF7KX 8Nc7RkYKGRIVQG7eWcPTdpKR7XEFwapwW4eHihZ1lCF7+cr7mDiYw0WewCN6wtMP 47m+xD3pL54xZdU6GRgGFVq+jfY9jIE7+wdEsnhZi8o+4pcw8eg56eNRb7qH38Mt v3UYLxajuKVRTODDJ/Iwd9Ra3utCetoOBJRoGY39nqJN9+z19b+sRTLmp0oaNBwj AlIgruUhD9l5/XkY0hVp3l1PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUi0tq0xSU 1w3mLHAn5hNd1PryW1EwHwYDVR0jBBgwFoAUfOoThFDUNhs1PnBX2C/Bx2qMflgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczNTI2Lzc5Qjk5Qjc0OUFB QzExRjFCNjNBQTE2ODQxMTFGOTcwL2ZPb1RoRkRVTmhzMVBuQlgyQ19CeDJxTWZs Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZk9vVGhGRFVOaHMxUG5CWDJDX0J4MnFNZmxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz NTI2Lzc5Qjk5Qjc0OUFBQzExRjFCNjNBQTE2ODQxMTFGOTcwL2ZPb1RoRkRVTmhz MVBuQlgyQ19CeDJxTWZsZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAi+j5tUF3wUhOYjBrYilZeg0X+1Ttn6FVig2E+Fs0gE4pq67RubqMC26JyNV5r 0Stbc9pRmJRWbiL0krnJlokFjdLpb6CD/pKnACjh/nlszU2LMxZlYbZC5FArODP3 spEYAUV44A0IR7wRPtOQHHSIfUbsuUvYizihnyTFtQmMrR0nfNG0CF+ZEmPVmHjt r9Pp8mPuRlbC6wjGcW+2Jf0dnUxBj5Yya+tGoZ8Ll0LxmHLKAQ7Ev5wuSGmoyL2o NFkFcuipcZZxTnKfk0kIossNKjmEDnzb3EISANK1VJ50gY6GBUJO7lWuBdYSe0kP vJfFAScalRxbuqJsDD5k5Z3z -----END CERTIFICATE-----Generated at Tue Oct 6 22:01:53 2026 by rpki-client