$ rpki-client -vvvf rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft File: nFFy5DAbErBXIH5LhA56y5CyCK4.mft (raw, json) Hash identifier: 6ZSxmCaWIcXNA7mPQyN5Y4oy6nu2Va5ICzKRuOEaXwc= Subject key identifier: 2B:09:DA:79:B4:00:43:A1:AF:27:D3:69:D6:CC:F6:99:1C:19:C6:41 Authority key identifier: 9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE Certificate issuer: /CN=A919125D/serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft Manifest number: 21 Signing time: Wed 07 Oct 2026 09:30:34 +0000 Manifest this update: Wed 07 Oct 2026 09:30:34 +0000 Manifest next update: Wed 14 Oct 2026 09:30:34 +0000 Files and hashes: 1: nFFy5DAbErBXIH5LhA56y5CyCK4.crl (hash: tLpNiSEM0zyR90iH1/U9zdhNfGoTeOo8AOHuAQ3QI/E=) 2: 74EA4288947611F1B81B112D5F11F970.roa (hash: xf63CpVG1xYHFcYXOGVTTTSM5albmIZRt5CqNRfPUy4=) 3: 2D766076947611F18F33E6295F11F970.roa (hash: nYN/boG0EONSsyNSFsdFD5f6WoaCZ/bo3AQVDqm6EiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919125D, serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE Validity Not Before: Oct 7 09:30:34 2026 GMT Not After : Oct 14 09:30:34 2026 GMT Subject: CN=6ac6113a-b10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:d9:7f:85:34:49:28:4d:da:46:e2:96:98: 0f:88:bc:cf:6d:4e:d1:13:88:bd:1a:3d:0e:37:10: 42:1d:7e:66:f5:94:08:5f:e7:ca:c3:61:df:12:e5: 18:8b:63:34:40:0a:6f:8d:15:1d:c6:02:6f:81:4a: 3a:59:9b:7d:1a:e3:20:e7:df:67:5c:06:75:91:75: 3d:0d:27:b0:16:11:cc:1f:67:46:ee:0c:d7:a6:10: 46:42:56:5a:9c:65:48:58:3f:35:aa:2a:f8:b2:bf: 92:08:41:f2:06:0f:2f:02:a8:8b:7f:f9:21:5d:7d: 15:d3:52:ea:5d:83:44:bc:a0:00:85:a7:cd:33:5f: 7a:4d:b5:cf:e7:86:fb:c5:d7:c2:e1:79:38:b5:31: ed:5b:25:33:47:ec:94:6f:9d:5e:45:ff:f3:c4:a4: 41:19:31:71:84:e3:7d:e4:10:37:5d:36:7a:9c:93: 76:83:b3:0d:0d:3e:85:26:5e:91:30:9f:0d:1a:e8: 68:79:72:60:e4:aa:d2:77:f4:aa:4e:43:58:95:1f: 2a:f5:5e:8e:94:06:20:4d:43:9f:e5:d0:67:1c:16: 50:7b:fb:cf:00:c6:e2:f4:3c:0c:03:78:51:43:8f: 1b:16:bd:e6:3a:9e:d8:f7:f1:75:75:d6:64:74:17: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:09:DA:79:B4:00:43:A1:AF:27:D3:69:D6:CC:F6:99:1C:19:C6:41 X509v3 Authority Key Identifier: keyid:9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:50:fb:aa:85:54:53:de:9d:ca:72:01:1b:36:1a:ae:06:c3: eb:e5:74:58:00:45:e9:87:c0:28:3c:47:c0:9d:ac:70:22:f0: 10:5f:10:9b:ac:e8:d5:59:85:1e:b5:56:75:30:e9:d9:31:d5: 94:be:6d:09:61:21:24:2c:ca:9b:38:54:63:76:a3:bd:c4:3c: 19:5c:03:49:43:40:af:66:97:58:4a:57:92:19:e0:69:80:c3: 64:97:59:d4:62:09:14:86:ff:f5:16:40:e5:5a:23:13:9f:17: 35:1f:15:19:30:d9:b1:56:bd:83:b6:37:da:ec:4e:d2:3f:1a: ba:0f:51:87:2a:6d:61:43:5e:f5:aa:6a:f0:0e:fb:3e:2f:91: 57:ad:c1:89:97:9a:d3:ed:79:9b:ad:34:fa:92:a9:41:48:8b: 4b:03:d0:ea:31:4e:77:ab:2d:17:a1:69:df:fa:c2:4a:9e:18: 27:f4:6e:07:ce:64:cc:88:3b:8e:02:ee:36:7f:3b:6e:5e:44: 2b:69:68:c3:7a:d0:91:bb:c7:d0:29:77:ef:be:9e:d6:b9:e2: 82:1f:bd:7b:66:ca:f4:07:91:3e:05:8a:d5:d8:59:55:85:ea: ad:3d:c4:88:8c:a7:e6:40:39:11:34:aa:10:9a:bd:1c:31:61: 90:31:4a:9c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTI1RDExMC8GA1UEBRMoOUM1MTcyRTQzMDFCMTJCMDU3MjA3RTRCODQwRTdBQ0I5 MEIyMDhBRTAeFw0yNjEwMDcwOTMwMzRaFw0yNjEwMTQwOTMwMzRaMBgxFjAUBgNV BAMTDTZhYzYxMTNhLWIxMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRntl/hTRJKE3aRuKWmA+IvM9tTtETiL0aPQ43EEIdfmb1lAhf58rDYd8S5RiL YzRACm+NFR3GAm+BSjpZm30a4yDn32dcBnWRdT0NJ7AWEcwfZ0buDNemEEZCVlqc ZUhYPzWqKviyv5IIQfIGDy8CqIt/+SFdfRXTUupdg0S8oACFp80zX3pNtc/nhvvF 18LheTi1Me1bJTNH7JRvnV5F//PEpEEZMXGE433kEDddNnqck3aDsw0NPoUmXpEw nw0a6Gh5cmDkqtJ39KpOQ1iVHyr1Xo6UBiBNQ5/l0GccFlB7+88AxuL0PAwDeFFD jxsWveY6ntj38XV11mR0F8mDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKwnaebQA Q6GvJ9Np1sz2mRwZxkEwHwYDVR0jBBgwFoAUnFFy5DAbErBXIH5LhA56y5CyCK4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMjVEL0YwNEEzRkY2OTQ3 NTExRjFCNDgxRjdERjVFMTFGOTcwL25GRnk1REFiRXJCWElINUxoQTU2eTVDeUNL NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkZGeTVEQWJFckJYSUg1TGhBNTZ5NUN5Q0s0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MjVEL0YwNEEzRkY2OTQ3NTExRjFCNDgxRjdERjVFMTFGOTcwL25GRnk1REFiRXJC WElINUxoQTU2eTVDeUNLNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxUPuqhVRT3p3KcgEbNhquBsPr5XRYAEXph8AoPEfAnaxwIvAQXxCbrOjVWYUe tVZ1MOnZMdWUvm0JYSEkLMqbOFRjdqO9xDwZXANJQ0CvZpdYSleSGeBpgMNkl1nU YgkUhv/1FkDlWiMTnxc1HxUZMNmxVr2Dtjfa7E7SPxq6D1GHKm1hQ171qmrwDvs+ L5FXrcGJl5rT7XmbrTT6kqlBSItLA9DqMU53qy0XoWnf+sJKnhgn9G4HzmTMiDuO Au42fztuXkQraWjDetCRu8fQKXfvvp7WueKCH717Zsr0B5E+BYrV2FlVheqtPcSI jKfmQDkRNKoQmr0cMWGQMUqc -----END CERTIFICATE-----Generated at Thu Oct 8 14:03:52 2026 by rpki-client