$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: usqhVrHOY5SN7BqHKCkfyHAVIxEtlR06HWlboIwI+VI= Subject key identifier: 06:90:E8:7B:DA:CD:E4:3C:DA:0D:4E:A8:4E:E7:B6:86:DF:BE:21:F7 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0C27 Signing time: Fri 02 Oct 2026 19:05:12 +0000 Manifest this update: Fri 02 Oct 2026 19:05:11 +0000 Manifest next update: Fri 09 Oct 2026 19:05:11 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: I3snizEgG6SsDOJwtLaqRDflM/famY7yiZ35H81GKBg=) 2: E4C4CC72EB8411F09FAB30C6536F56BC.roa (hash: m6A5k7GrCQsQt6UQStLqk4vDI2cF1RjOvSbk8wVUoVE=) 3: D9C0AD2EF44811F08A68E332626F56BC.roa (hash: RzHBWYWw5IHkZGciQV9CfmaSyQYYH4ManuyCrGOl3Iw=) 4: BCA6A73A75D911F1B46C33AD6CA30FBC.roa (hash: 200zdhmpRY9TDWyoBotBxLY/NlAK1wTrZHNyeeHEV/Q=) 5: 94469964A5CA11F181152D707111F970.roa (hash: QqrZhvjRVVLJYdk/4iDOjN1gnzEDjY7DvM5B+0DqUxE=) 6: 614D895A75DC11F19A6AA48A6DA30FBC.roa (hash: J5F3yuhEXayGWTKZqGEyENb3lEvu+CWT2L181CXwpDw=) 7: 290B43C0A79611F1864335344711F970.roa (hash: nN752nqhRtARbodYQ3u7efmdKu6erwNwIIGPPDmLusE=) 8: 94FFF24CA5CA11F181152D707111F970.roa (hash: Sg/maMpg/w2UI4nRD9hbatihlbcBBZLif00188ZZAbA=) 9: BB848D8675D911F1B46C33AD6CA30FBC.roa (hash: hKK67kho1xmsmO4LWvmGhYdHu4g9sHo6GKRHNdTGbfY=) 10: 8137CEBC07E911F18CE8BD7B223D8C67.roa (hash: wHgEjCXqndOJLXZ9J6FfS2MgjM1Wq0AwJ0Oymtfq0bs=) 11: B899690275D911F1B46C33AD6CA30FBC.roa (hash: fmi7Xv25W86/nRUdBaLjYoJWXUK1k9Dy00DZvttwrRQ=) 12: BA16840475D911F1B46C33AD6CA30FBC.roa (hash: /qKxnSXL8e1JhFVlrKwLNg4T/NwR0oewdz+ElfcHN+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Oct 2 19:05:11 2026 GMT Not After : Oct 9 19:05:11 2026 GMT Subject: CN=6ac00067-e1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:29:d5:d3:6a:6d:7f:91:48:ff:e0:68:b9: 99:2c:36:45:d3:d2:f9:2c:07:38:66:51:7b:6a:ce: e9:54:73:ed:70:28:0e:c1:fd:16:b1:c5:5b:a9:1b: 36:f8:ec:3f:4a:84:4b:31:8e:a4:4f:91:c2:36:53: 01:3a:d5:e1:2a:ac:cf:c6:fb:15:12:d4:f0:ab:2e: 41:3a:34:a0:62:c7:e0:25:c0:93:79:d6:4e:d8:df: c4:f0:4f:5f:fc:cf:16:6f:ed:67:d4:e7:8f:6b:05: f6:b3:19:6a:0e:9b:34:4c:13:27:c6:08:24:4d:91: 45:57:e1:e2:00:5b:50:bd:1a:63:a9:26:c0:15:80: 0e:60:fa:b8:66:65:08:fe:a6:5c:cf:45:88:66:4d: 4b:d3:d0:d9:79:2e:b8:4e:b8:16:c3:0d:9a:45:d1: 91:46:da:74:ee:a9:bd:91:85:de:99:01:4c:58:51: 0f:8a:78:d7:ec:2d:6c:c8:90:82:ac:33:c0:73:9d: 62:6e:90:99:73:d7:f2:e0:30:3b:e0:c0:9b:70:24: ca:07:dd:f8:42:21:22:a5:7d:a4:3b:e9:a5:de:bf: db:7d:2f:33:ac:e9:1b:9d:a0:4c:ff:b9:2d:b0:2a: c6:51:11:50:07:9b:ea:05:03:e6:7f:b5:3c:90:d6: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:90:E8:7B:DA:CD:E4:3C:DA:0D:4E:A8:4E:E7:B6:86:DF:BE:21:F7 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:34:6a:61:37:b5:15:a4:0b:89:ed:7e:c5:86:8d:34:b1:b5: 82:b2:24:29:df:fe:56:f0:72:56:07:36:a0:0c:e3:59:e8:5e: d1:ad:b4:05:73:1c:b8:67:9b:c3:37:67:73:8e:72:3d:21:00: 49:51:28:f9:cc:b0:e8:f7:20:e6:7a:1d:c6:bb:26:a4:d3:84: 6d:e5:f2:18:ca:53:2d:5f:d9:3b:f0:83:71:10:24:ac:27:be: 01:fc:3a:19:67:99:cb:df:e4:07:be:f2:47:92:2a:3c:f0:99: 78:e4:57:de:d2:35:a8:3e:f7:58:88:64:53:dd:95:a5:e4:63: f4:3c:37:63:32:7f:e3:10:8c:99:b1:3c:db:2c:6d:88:98:7c: b0:eb:30:35:50:5a:0a:3c:e3:c4:a0:9a:a9:fa:85:60:eb:97: 47:c7:02:26:4f:ba:55:01:eb:18:8f:25:fb:44:f2:2c:9b:45: 83:43:73:47:ab:cb:38:a8:6c:79:81:65:8e:c1:95:63:7f:59: 5c:62:bb:c0:5e:76:89:a2:8f:cf:4d:e7:8c:2d:a4:13:ec:b2: f3:d0:e2:ab:a1:21:fb:40:4f:2f:8a:28:3b:d5:6a:7d:08:73: 4b:ed:65:cb:16:fe:bb:04:1d:da:c5:ea:a9:20:f2:5c:63:19: ba:bc:bc:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYxMDAyMTkwNTExWhcNMjYxMDA5MTkwNTExWjAYMRYwFAYD VQQDEw02YWMwMDA2Ny1lMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFYp1dNqbX+RSP/gaLmZLDZF09L5LAc4ZlF7as7pVHPtcCgOwf0WscVbqRs2 +Ow/SoRLMY6kT5HCNlMBOtXhKqzPxvsVEtTwqy5BOjSgYsfgJcCTedZO2N/E8E9f /M8Wb+1n1OePawX2sxlqDps0TBMnxggkTZFFV+HiAFtQvRpjqSbAFYAOYPq4ZmUI /qZcz0WIZk1L09DZeS64TrgWww2aRdGRRtp07qm9kYXemQFMWFEPinjX7C1syJCC rDPAc51ibpCZc9fy4DA74MCbcCTKB934QiEipX2kO+ml3r/bfS8zrOkbnaBM/7kt sCrGURFQB5vqBQPmf7U8kNb5KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAaQ6Hva zeQ82g1OqE7ntobfviH3MB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnTRqYTe1FaQLie1+xYaNNLG1grIkKd/+VvByVgc2oAzjWehe0a20BXMcuGeb wzdnc45yPSEASVEo+cyw6Pcg5nodxrsmpNOEbeXyGMpTLV/ZO/CDcRAkrCe+Afw6 GWeZy9/kB77yR5IqPPCZeORX3tI1qD73WIhkU92VpeRj9Dw3YzJ/4xCMmbE82yxt iJh8sOswNVBaCjzjxKCaqfqFYOuXR8cCJk+6VQHrGI8l+0TyLJtFg0NzR6vLOKhs eYFljsGVY39ZXGK7wF52iaKPz03njC2kE+yy89Diq6Eh+0BPL4ooO9VqfQhzS+1l yxb+uwQd2sXqqSDyXGMZury8nA== -----END CERTIFICATE-----Generated at Sun Oct 4 17:39:27 2026 by rpki-client