$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft File: FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft (raw, json) Hash identifier: F5DcDIBYTdRRCFx9mMu5aIHdiOdAnTWrN8n0LxxsZq0= Subject key identifier: 90:DD:78:65:30:CA:8A:4A:DB:08:40:A6:95:25:E0:51:2A:64:8B:A2 Authority key identifier: 17:35:B8:5E:3E:5E:54:03:A4:95:39:C2:6C:66:7C:8B:80:92:BD:A0 Certificate issuer: /CN=A919A43E/serialNumber=1735B85E3E5E5403A49539C26C667C8B8092BDA0 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft Manifest number: 28 Signing time: Mon 05 Oct 2026 09:17:15 +0000 Manifest this update: Mon 05 Oct 2026 09:17:15 +0000 Manifest next update: Mon 12 Oct 2026 09:17:15 +0000 Files and hashes: 1: FzW4Xj5eVAOklTnCbGZ8i4CSvaA.crl (hash: FM7jeh1UsEhR2MWfciRwKfUP6ZeADdOc8tyGiHNRwUQ=) 2: kJnsU6kgCJ7qDC1Hg6_Dm18_TRA.asa (hash: i98BHDyQ2hWxqbAWoQmF5RjBQp+mPsoSBtrXMWYS0ik=) 3: 13D1BA588A5D11F1831FA6813B11F970.roa (hash: Xf5SP5AS1EFI02JBBXyujYvXMblTTJZrdC5Wu0eO50w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.crl rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A43E, serialNumber=1735B85E3E5E5403A49539C26C667C8B8092BDA0 Validity Not Before: Oct 5 09:17:15 2026 GMT Not After : Oct 12 09:17:15 2026 GMT Subject: CN=6ac36b1b-2bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:33:ae:0a:f3:32:f5:24:e3:2c:ba:27:0f: 9a:86:22:52:e2:d0:e1:65:1b:ae:ba:38:f1:cd:96: 49:a1:16:90:7a:ae:66:2c:97:4d:dc:3b:d6:4c:76: 68:ca:63:f7:64:bc:cf:b3:c2:1e:36:b4:9c:54:24: 02:04:8e:91:66:13:fc:1b:38:eb:b4:8a:1f:52:bd: 6b:bb:cc:02:d7:c1:4f:cf:09:d5:84:22:af:0f:9c: 57:49:5b:89:71:32:31:f7:00:27:09:6c:1f:27:ee: a8:1f:4e:ca:78:61:42:cb:aa:7e:fe:ed:db:d2:41: 57:cd:93:bf:cf:24:ec:6f:f6:d9:01:cf:89:a1:09: ae:ba:b1:2d:f5:3a:72:4f:a9:35:4d:63:a4:0c:37: 54:e9:55:19:29:de:d5:0e:f2:f9:09:4c:b5:47:a9: bb:a1:23:bb:f6:6f:47:a0:0f:bb:2b:90:91:f4:e4: a6:d8:6c:89:ec:9e:19:e8:a8:cc:85:13:aa:ee:77: b3:65:87:14:73:74:b3:85:83:50:a9:df:da:52:df: e7:2a:cc:df:bb:46:2d:f7:c0:03:0e:ce:aa:ea:d9: 1c:94:d0:d3:23:0b:b6:bc:ae:23:7a:9a:7e:e6:f4: 3e:0a:5e:94:e0:c1:09:a3:8b:f3:9c:07:3a:cc:b8: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DD:78:65:30:CA:8A:4A:DB:08:40:A6:95:25:E0:51:2A:64:8B:A2 X509v3 Authority Key Identifier: keyid:17:35:B8:5E:3E:5E:54:03:A4:95:39:C2:6C:66:7C:8B:80:92:BD:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:f7:34:b0:db:1e:b4:4f:2b:2a:76:69:18:96:6c:b0:87:bb: a0:e2:4a:35:40:9f:e8:4b:77:e0:7f:ef:a7:05:02:bb:4b:14: 49:82:a9:05:90:fc:70:70:c0:37:82:4c:b7:61:70:c7:2d:b6: b9:56:7f:2d:41:77:11:f2:c8:c1:00:3e:6e:3f:3b:dd:3c:a2: 25:14:28:02:4e:ee:05:c7:e8:07:6e:8c:50:49:23:f3:68:9d: 67:9d:59:fa:c2:56:67:20:b3:45:7f:44:c5:66:dd:75:38:6c: c3:2f:8d:97:51:d1:f1:7a:e7:b7:ae:d4:06:50:21:a1:2b:a8: 7d:58:96:c9:30:f1:45:80:74:5b:ad:fb:61:48:09:b4:4c:99: b0:69:36:08:1e:39:bd:8d:16:47:82:5a:1c:8a:c0:c6:f3:02: 84:af:3c:35:f1:e0:99:fa:e3:34:7a:2b:f3:93:cf:c4:d0:c2: 9f:fe:ce:1b:f8:c5:e8:50:80:90:26:7a:fb:5d:b0:e5:e6:7d: 1a:cb:d9:37:8a:36:27:db:d7:c2:07:9d:58:f0:27:9c:fe:10: 3e:83:88:c8:a9:2d:27:9b:19:51:43:73:6c:53:40:db:31:25: 4e:1a:2b:ff:1e:83:82:2b:a8:5a:70:cd:82:df:0d:9a:dd:6c: 20:81:bd:96 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTQzRTExMC8GA1UEBRMoMTczNUI4NUUzRTVFNTQwM0E0OTUzOUMyNkM2NjdDOEI4 MDkyQkRBMDAeFw0yNjEwMDUwOTE3MTVaFw0yNjEwMTIwOTE3MTVaMBgxFjAUBgNV BAMTDTZhYzM2YjFiLTJiYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3ODOuCvMy9STjLLonD5qGIlLi0OFlG666OPHNlkmhFpB6rmYsl03cO9ZMdmjK Y/dkvM+zwh42tJxUJAIEjpFmE/wbOOu0ih9SvWu7zALXwU/PCdWEIq8PnFdJW4lx MjH3ACcJbB8n7qgfTsp4YULLqn7+7dvSQVfNk7/PJOxv9tkBz4mhCa66sS31OnJP qTVNY6QMN1TpVRkp3tUO8vkJTLVHqbuhI7v2b0egD7srkJH05KbYbInsnhnoqMyF E6rud7NlhxRzdLOFg1Cp39pS3+cqzN+7Ri33wAMOzqrq2RyU0NMjC7a8riN6mn7m 9D4KXpTgwQmji/OcBzrMuNNZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkN14ZTDK ikrbCECmlSXgUSpki6IwHwYDVR0jBBgwFoAUFzW4Xj5eVAOklTnCbGZ8i4CSvaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNDNFL0Y4MDU4NTFDOEE1 QjExRjE5N0RCM0U2OTNBMTFGOTcwL0Z6VzRYajVlVkFPa2xUbkNiR1o4aTRDU3Zh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRnpXNFhqNWVWQU9rbFRuQ2JHWjhpNENTdmFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NDNFL0Y4MDU4NTFDOEE1QjExRjE5N0RCM0U2OTNBMTFGOTcwL0Z6VzRYajVlVkFP a2xUbkNiR1o4aTRDU3ZhQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC+9zSw2x60TysqdmkYlmywh7ug4ko1QJ/oS3fgf++nBQK7SxRJgqkFkPxwcMA3 gky3YXDHLba5Vn8tQXcR8sjBAD5uPzvdPKIlFCgCTu4Fx+gHboxQSSPzaJ1nnVn6 wlZnILNFf0TFZt11OGzDL42XUdHxeue3rtQGUCGhK6h9WJbJMPFFgHRbrfthSAm0 TJmwaTYIHjm9jRZHglocisDG8wKErzw18eCZ+uM0eivzk8/E0MKf/s4b+MXoUICQ Jnr7XbDl5n0ay9k3ijYn29fCB51Y8Cec/hA+g4jIqS0nmxlRQ3NsU0DbMSVOGiv/ HoOCK6hacM2C3w2a3Wwggb2W -----END CERTIFICATE-----Generated at Wed Oct 7 06:07:58 2026 by rpki-client