$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json) Hash identifier: Ujszxd5zsPx/WyM5EOY8CdF3SvJ81dGNLQKjYZjj0no= Subject key identifier: 49:2C:44:DE:C8:E9:C6:8A:AC:69:2E:89:45:C5:4D:B9:EF:17:A7:2E Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft Manifest number: 011D Signing time: Wed 21 Oct 2026 06:29:59 +0000 Manifest this update: Wed 21 Oct 2026 06:29:59 +0000 Manifest next update: Wed 28 Oct 2026 06:29:59 +0000 Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: J7JXitSHZo5y53IuJUSaj12huzDlG11IH/9+Q2p/0y0=) 2: sRUiG2trcmUK59z372qjDQndoA8.asa (hash: 9Rnwl/OBah1XEyWrjHCFdXkyGyYZc17DRreV4ymct+U=) 3: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: +6GhLzBq26qZLSAXHkP4lRMwMkM4IDi1gjQptQ2nnL4=) 4: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: z/pF1TiSSvu2UaCDjXshPW7+WO39dYPms0u7Umk74/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Validity Not Before: Oct 21 06:29:59 2026 GMT Not After : Oct 28 06:29:59 2026 GMT Subject: CN=6ad85be7-ab6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:fc:6f:78:34:42:5a:03:bd:3b:60:03:6a: 96:7c:ea:9c:e7:89:d0:21:14:53:f7:c0:72:89:b1: c9:c3:ed:0f:8b:53:42:b0:64:e5:a0:44:ba:a0:1c: 22:a9:79:37:a8:6a:63:d0:05:d4:44:9e:45:bd:86: e7:4f:70:35:cf:5c:cc:32:07:a1:87:c0:7a:04:66: e9:69:2f:64:ea:c7:aa:1c:ab:9e:5b:21:3d:64:a3: c9:ce:e0:4e:e6:b9:3a:44:41:3f:e2:57:7c:78:89: c0:8d:70:f7:fc:15:b2:60:22:90:a5:3b:22:1c:9a: 95:f3:d6:5c:ad:58:03:79:d3:65:4d:94:30:60:80: e7:1d:6e:36:41:ea:88:b4:5b:ea:77:3f:1f:07:90: c7:b8:aa:af:de:6e:a7:68:58:53:b8:5e:67:b7:dc: 21:b8:db:9c:d1:7f:6f:80:a3:79:91:8c:9d:52:d9: 75:06:72:c2:8e:49:a5:6d:32:ea:93:f2:cf:2e:ec: 59:f4:a9:50:7b:51:1c:46:e7:de:de:0a:3c:1c:79: a8:c5:9a:ef:04:cb:ed:5e:56:57:0a:fd:b2:37:bd: 45:ea:68:50:6a:1f:21:ef:93:55:39:b9:78:02:0d: ee:30:bb:4e:f1:08:b6:2c:7b:2c:7b:cb:15:c1:65: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2C:44:DE:C8:E9:C6:8A:AC:69:2E:89:45:C5:4D:B9:EF:17:A7:2E X509v3 Authority Key Identifier: keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:95:eb:9d:f9:96:aa:0a:9b:af:3c:38:0d:2e:4f:b9:e5:a4: f7:ff:81:2b:b0:6d:0a:1e:b5:91:93:d9:5e:bd:4b:71:ff:e8: ad:1e:5f:4f:ee:46:89:5a:65:81:9a:b5:46:3f:a7:84:c6:cc: 51:f2:82:e3:3e:00:57:0f:48:97:f0:ca:79:58:59:27:5b:a1: 8b:f7:c3:8b:fa:7d:ca:dc:11:28:05:22:9e:28:ea:89:21:b8: 1d:47:4f:ba:aa:9c:31:d5:34:8b:1b:33:68:09:71:b6:3a:03: a7:fd:ef:3b:c7:fa:c2:02:1c:b4:0c:c5:d8:db:ee:54:42:24: a0:64:16:40:98:6f:a9:fc:ce:99:13:a7:7a:06:ca:f5:bd:58: 6b:e9:8c:ac:47:d0:d7:e5:2e:ba:d1:aa:aa:2b:60:ff:ca:a0: b8:e2:78:93:21:87:14:58:8e:83:5e:8e:f4:64:30:6c:e3:7b: 41:f9:25:60:65:7b:83:d4:8b:38:2c:6e:29:73:39:fc:c1:75: 53:d7:0f:d6:e3:3f:df:c1:0e:d1:38:9a:70:66:b5:ab:47:79: 7e:d5:8e:5f:30:dc:52:32:07:9b:6e:74:61:89:03:93:59:2f: 52:b0:38:3a:7a:51:1d:5b:af:73:f1:27:a8:95:10:38:70:6d: 31:b5:2b:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlEOUIxMTAvBgNVBAUTKDdGMDM5N0M2QTk0RTUyNTk3NjgzNEJCRkQ1ODAyRjE1 Qjc5NUZCOEUwHhcNMjYxMDIxMDYyOTU5WhcNMjYxMDI4MDYyOTU5WjAYMRYwFAYD VQQDEw02YWQ4NWJlNy1hYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6P8b3g0QloDvTtgA2qWfOqc54nQIRRT98ByibHJw+0Pi1NCsGTloES6oBwi qXk3qGpj0AXURJ5FvYbnT3A1z1zMMgehh8B6BGbpaS9k6seqHKueWyE9ZKPJzuBO 5rk6REE/4ld8eInAjXD3/BWyYCKQpTsiHJqV89ZcrVgDedNlTZQwYIDnHW42QeqI tFvqdz8fB5DHuKqv3m6naFhTuF5nt9whuNuc0X9vgKN5kYydUtl1BnLCjkmlbTLq k/LPLuxZ9KlQe1EcRufe3go8HHmoxZrvBMvtXlZXCv2yN71F6mhQah8h75NVObl4 Ag3uMLtO8Qi2LHsse8sVwWUF+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEksRN7I 6caKrGkuiUXFTbnvF6cuMB8GA1UdIwQYMBaAFH8Dl8apTlJZdoNLv9WALxW3lfuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUQ5Qi9CMkE1NzdDMjI3 NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1VsbDJnMHVfMVlBdkZiZVYt NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUQ5Qi9CMkE1NzdDMjI3NDUxMUYwQUVEMkI0NjlDNEY5QUUwMi9md09YeHFsT1Vs bDJnMHVfMVlBdkZiZVYtNDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACZXrnfmWqgqbrzw4DS5PueWk9/+BK7BtCh61kZPZXr1Lcf/orR5fT+5GiVpl gZq1Rj+nhMbMUfKC4z4AVw9Il/DKeVhZJ1uhi/fDi/p9ytwRKAUinijqiSG4HUdP uqqcMdU0ixszaAlxtjoDp/3vO8f6wgIctAzF2NvuVEIkoGQWQJhvqfzOmROnegbK 9b1Ya+mMrEfQ1+UuutGqqitg/8qguOJ4kyGHFFiOg16O9GQwbON7QfklYGV7g9SL OCxuKXM5/MF1U9cP1uM/38EO0TiacGa1q0d5ftWOXzDcUjIHm250YYkDk1kvUrA4 OnpRHVuvc/EnqJUQOHBtMbUrIQ== -----END CERTIFICATE-----Generated at Wed Oct 21 23:49:56 2026 by rpki-client