$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: UvTIMpQ8eXLA5ZEH2YG8SFQY47ncsprZy5xSYz1gKXQ= Subject key identifier: 37:5B:42:8B:68:6B:6B:3A:31:8A:76:12:83:17:D4:E7:CC:B3:04:98 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0D2C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0D18 Signing time: Fri 04 Sep 2026 17:23:03 +0000 Manifest this update: Fri 04 Sep 2026 17:23:02 +0000 Manifest next update: Fri 11 Sep 2026 17:23:02 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: ipxFQQKQS0pt5NXqA+FMWRCNBAAWWU+C+6wfVVlkM70=) 2: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=) 3: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3372 (0xd2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Sep 4 17:23:02 2026 GMT Not After : Sep 11 17:23:02 2026 GMT Subject: CN=6a9afe77-bc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:9f:38:29:9e:9e:ea:ab:2b:53:ed:4c:78: dd:ff:40:c7:43:6c:69:c8:3d:3d:b8:bf:96:bf:4d: 8e:c5:06:1d:b1:e1:5e:f5:93:3f:da:88:01:43:10: 08:19:1b:e8:b1:37:2d:6f:ea:fe:67:e4:05:b1:d8: ee:cb:e9:06:78:68:46:9c:20:48:b9:97:65:06:4e: e6:02:62:16:b6:d5:67:7f:c6:cc:5a:e3:84:89:98: 67:4d:87:0c:a9:a2:9b:f7:9b:3d:4a:a4:e7:17:db: 3e:28:89:c4:70:b3:74:01:26:53:02:b1:af:b4:44: 2e:42:31:13:3a:eb:42:54:f6:0c:75:1c:aa:07:6e: c5:14:02:6d:bd:74:8b:6e:b5:8f:55:31:55:e6:9f: 47:38:24:eb:43:bd:ce:2b:ec:ad:7d:f6:15:a4:9f: ca:6a:8e:93:61:4e:bc:24:e0:71:79:f8:2e:44:2d: a2:fc:8d:ea:60:a4:97:48:80:c3:ea:2c:51:49:3b: bf:43:2c:bc:d8:73:33:91:de:8b:a0:b7:fb:5d:17: 35:d9:99:49:cc:c3:ba:45:e7:6e:0b:95:99:6f:b6: f5:ac:82:d6:e7:d8:8d:58:20:4e:cb:e5:e7:20:b2: b3:6a:09:92:f3:f7:de:e9:19:56:7b:c9:6b:b7:99: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5B:42:8B:68:6B:6B:3A:31:8A:76:12:83:17:D4:E7:CC:B3:04:98 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:94:bb:6c:c1:aa:e5:1f:5f:6d:f6:b3:b9:48:43:b1:3a:4d: 68:81:6b:83:7c:72:24:58:81:12:9e:e7:4c:45:6f:0e:62:b5: be:e1:80:9a:f4:45:0c:87:17:19:e5:1d:7e:92:7d:94:64:6e: d3:3d:cb:1d:82:5b:78:48:17:e3:45:ac:d5:3c:4d:49:0c:5e: 3e:9a:fb:6a:2f:d7:40:94:0c:72:fb:d4:a6:4f:58:4c:67:94: a9:25:70:3f:3b:af:64:7e:33:b0:a2:cf:18:25:b8:a1:16:ab: 73:0c:bc:16:2e:6f:49:57:6f:52:a4:f7:c4:53:67:65:12:8f: fc:7c:f6:38:39:ef:f9:2b:07:22:55:46:39:c1:ba:e3:7f:be: dc:f6:b5:57:85:30:56:20:e7:b7:dc:92:a5:9e:0d:d8:af:aa: 36:dc:88:07:da:6d:d6:54:bb:1a:bb:46:a8:d7:ed:5e:ae:5c: d1:1e:ff:ff:41:4b:6e:46:20:e3:b2:46:a3:7d:ca:04:06:3c: b1:2c:f5:0f:5b:5e:93:68:79:8d:ea:00:1a:66:63:5e:5f:81: ca:70:1f:dd:f4:1d:43:12:4d:86:b8:db:b5:2a:79:70:60:0e: b8:9d:61:85:c2:b4:a8:0e:15:00:3f:d8:8e:30:cc:30:73:9f: 99:09:1c:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjYwOTA0MTcyMzAyWhcNMjYwOTExMTcyMzAyWjAYMRYwFAYD VQQDEw02YTlhZmU3Ny1iYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptSfOCmenuqrK1PtTHjd/0DHQ2xpyD09uL+Wv02OxQYdseFe9ZM/2ogBQxAI GRvosTctb+r+Z+QFsdjuy+kGeGhGnCBIuZdlBk7mAmIWttVnf8bMWuOEiZhnTYcM qaKb95s9SqTnF9s+KInEcLN0ASZTArGvtEQuQjETOutCVPYMdRyqB27FFAJtvXSL brWPVTFV5p9HOCTrQ73OK+ytffYVpJ/Kao6TYU68JOBxefguRC2i/I3qYKSXSIDD 6ixRSTu/Qyy82HMzkd6LoLf7XRc12ZlJzMO6ReduC5WZb7b1rILW59iNWCBOy+Xn ILKzagmS8/fe6RlWe8lrt5nxwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdbQoto a2s6MYp2EoMX1OfMswSYMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr5S7bMGq5R9fbfazuUhDsTpNaIFrg3xyJFiBEp7nTEVvDmK1vuGAmvRFDIcX GeUdfpJ9lGRu0z3LHYJbeEgX40Ws1TxNSQxePpr7ai/XQJQMcvvUpk9YTGeUqSVw PzuvZH4zsKLPGCW4oRarcwy8Fi5vSVdvUqT3xFNnZRKP/Hz2ODnv+SsHIlVGOcG6 43++3Pa1V4UwViDnt9ySpZ4N2K+qNtyIB9pt1lS7GrtGqNftXq5c0R7//0FLbkYg 47JGo33KBAY8sSz1D1tek2h5jeoAGmZjXl+BynAf3fQdQxJNhrjbtSp5cGAOuJ1h hcK0qA4VAD/YjjDMMHOfmQkcfA== -----END CERTIFICATE-----Generated at Fri Sep 4 22:50:21 2026 by rpki-client