$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: 09T9v02rK1EvP3Ie9zXm1kt+/0OPlAh/yhbgo3sJ+IA= Subject key identifier: 2B:E4:70:11:60:F9:01:56:2B:1B:3E:49:93:35:BD:BF:C5:F8:0C:96 Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 0486 Signing time: Wed 09 Sep 2026 00:04:02 +0000 Manifest this update: Wed 09 Sep 2026 00:04:02 +0000 Manifest next update: Wed 16 Sep 2026 00:04:02 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: IqIEmG4EsfsHP4NJUtjSlV7LNvhx8JiVKWNnLFYjUNw=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 00:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Sep 9 00:04:02 2026 GMT Not After : Sep 16 00:04:02 2026 GMT Subject: CN=6aa0a272-e59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:83:b8:6d:36:07:ac:64:50:f0:0e:a3:b1: c5:ba:86:74:1b:81:1c:43:bb:a0:b6:e3:c6:34:5c: c7:3d:58:8a:79:c1:c8:89:d3:18:5d:67:51:77:5c: d9:08:b9:e0:73:7c:60:7f:e6:90:a8:38:cd:87:85: 47:c2:2b:69:ac:39:5d:03:3e:a2:58:f7:eb:23:1e: 46:cd:bb:33:f0:90:05:a8:35:9e:f0:52:7c:a7:9a: cd:b2:d7:5f:c2:56:ac:40:4a:71:4c:fd:01:44:0b: af:73:7c:8e:e9:44:6d:33:f8:5a:c2:18:13:fe:cc: 89:e5:9a:b5:ae:3d:1c:c3:c1:20:80:93:7b:65:e4: c9:52:e6:a9:6b:6f:e7:10:16:3f:4f:04:26:f4:ee: 77:91:4b:4d:94:d0:27:00:23:46:62:e7:0a:8c:37: 15:91:bc:7f:03:26:3f:63:a9:08:e5:3e:b1:06:30: f9:78:73:9e:0b:ea:5e:07:a6:07:01:91:7d:63:84: ae:d3:84:b7:ad:1b:7a:7e:5f:56:81:b3:c1:7a:c0: 87:ac:4d:88:04:b0:18:b2:39:f4:0c:93:cb:9f:3e: 7d:58:fc:34:84:56:fa:42:e4:f8:54:80:70:26:6b: 46:d6:f7:8a:fd:67:9a:5d:a3:b4:e6:71:79:13:f9: 56:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E4:70:11:60:F9:01:56:2B:1B:3E:49:93:35:BD:BF:C5:F8:0C:96 X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a4:bd:6e:b1:e3:9c:bd:ed:26:38:fa:07:d8:41:91:1d:c9: a4:78:78:c5:6b:31:3c:ec:ff:ce:30:7b:d5:e6:88:f8:70:7b: 19:1f:06:86:fe:5e:98:cc:40:d7:c9:19:76:89:5c:0f:1e:7f: 43:da:ce:c3:38:91:74:bd:a1:f9:d7:98:5a:cb:ed:2a:0b:03: 66:05:08:4c:fd:a5:d2:d1:77:c5:3b:04:92:91:27:33:40:b5: a5:b6:ac:9a:c5:e1:d2:8e:e0:79:ca:1c:4e:df:36:0f:e7:9a: ea:9b:f6:21:fa:74:4a:e2:07:46:da:3d:9d:71:2a:9f:ce:cb: 24:12:70:06:fb:45:60:9b:ce:ef:20:9b:15:d4:11:ad:16:c3: ae:6e:cb:14:de:38:2c:43:5c:71:86:41:ae:45:3d:18:0a:8c: 93:2a:6d:af:08:22:8f:6c:14:ae:0f:78:3e:01:b4:be:1d:d7: 95:5c:36:d6:a8:80:00:13:84:d8:f9:87:82:0a:09:6a:11:4d: 45:d3:f7:ea:8b:4d:ad:99:42:5f:0c:6c:f7:41:07:3e:66:50: f8:43:90:90:b2:6e:b2:5e:c5:c8:ed:1b:ce:51:79:15:3d:cb: c8:14:68:10:b5:db:ef:74:51:6b:af:5a:77:ee:1a:d1:5b:c3: d1:76:9f:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjYwOTA5MDAwNDAyWhcNMjYwOTE2MDAwNDAyWjAYMRYwFAYD VQQDEw02YWEwYTI3Mi1lNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kODuG02B6xkUPAOo7HFuoZ0G4EcQ7ugtuPGNFzHPViKecHIidMYXWdRd1zZ CLngc3xgf+aQqDjNh4VHwitprDldAz6iWPfrIx5Gzbsz8JAFqDWe8FJ8p5rNstdf wlasQEpxTP0BRAuvc3yO6URtM/hawhgT/syJ5Zq1rj0cw8EggJN7ZeTJUuapa2/n EBY/TwQm9O53kUtNlNAnACNGYucKjDcVkbx/AyY/Y6kI5T6xBjD5eHOeC+peB6YH AZF9Y4Su04S3rRt6fl9WgbPBesCHrE2IBLAYsjn0DJPLnz59WPw0hFb6QuT4VIBw JmtG1veK/WeaXaO05nF5E/lWMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvkcBFg +QFWKxs+SZM1vb/F+AyWMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVaS9brHjnL3tJjj6B9hBkR3JpHh4xWsxPOz/zjB71eaI+HB7GR8Ghv5emMxA 18kZdolcDx5/Q9rOwziRdL2h+deYWsvtKgsDZgUITP2l0tF3xTsEkpEnM0C1pbas msXh0o7gecocTt82D+ea6pv2Ifp0SuIHRto9nXEqn87LJBJwBvtFYJvO7yCbFdQR rRbDrm7LFN44LENccYZBrkU9GAqMkyptrwgij2wUrg94PgG0vh3XlVw21qiAABOE 2PmHggoJahFNRdP36otNrZlCXwxs90EHPmZQ+EOQkLJusl7FyO0bzlF5FT3LyBRo ELXb73RRa69ad+4a0VvD0Xaf7A== -----END CERTIFICATE-----Generated at Thu Sep 10 11:22:52 2026 by rpki-client