$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: QD6YYvDHHumJR8f9ehdWq5oh/TsR8q7cDrmngxJdiyg= Subject key identifier: 0C:2F:C6:B1:39:58:8B:26:99:C4:08:76:76:FB:18:E8:08:A5:52:4A Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 05B1 Signing time: Fri 02 Oct 2026 23:26:53 +0000 Manifest this update: Fri 02 Oct 2026 23:26:53 +0000 Manifest next update: Fri 09 Oct 2026 23:26:53 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: R2/kDOxWF9ueMmaHkxHmETh6TPWehLM+qMYX/Qk0GEU=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: BFZnxkHcE47ahA4jvRp2c3yyUAqMRAN31//z+RrEA5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Oct 2 23:26:53 2026 GMT Not After : Oct 9 23:26:53 2026 GMT Subject: CN=6ac03dbd-effb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:94:7c:d7:5b:ad:6b:49:46:05:02:6b:ed:3d: c9:3f:28:80:9b:21:fa:1b:96:41:7c:ed:83:46:d9: 63:93:17:74:9b:f4:6b:c4:97:9e:9b:eb:61:b9:32: 21:94:98:22:2c:8f:7f:27:ad:b0:0a:4e:1d:04:a2: 95:f0:a0:82:3c:c7:a3:bc:a6:13:b3:3e:93:d0:65: 90:a2:0f:a6:af:52:a8:d3:e4:80:f9:be:91:cd:67: a8:42:f2:0a:d8:de:2d:83:45:8d:80:04:e6:76:50: 1e:da:39:f2:08:18:03:24:73:70:5e:41:a9:9a:31: 00:58:7a:73:75:9f:89:2a:f1:9a:c5:0a:fb:2a:e5: b1:99:ec:ab:6a:61:a7:67:a9:8f:64:9c:86:6a:4a: 78:65:72:e2:f4:e6:9b:3e:37:eb:1b:bd:db:d3:09: 03:a7:67:f8:22:59:96:48:e8:7b:41:bf:6f:43:31: 5c:66:6c:fa:c4:cb:85:1d:d7:b1:ca:7a:01:48:4d: ce:97:f6:72:82:93:2b:53:aa:0d:bf:ca:b8:8f:86: 56:a4:83:0e:28:72:0b:7e:a8:67:3f:7c:dc:19:35: 10:df:57:2c:2e:7f:54:20:6a:b4:34:21:4d:62:b9: 96:07:bc:ad:6c:65:61:0f:e7:7c:30:34:7a:11:49: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:C6:B1:39:58:8B:26:99:C4:08:76:76:FB:18:E8:08:A5:52:4A X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:93:c1:46:70:e1:07:c9:17:ba:dc:a4:a9:e9:16:fd:99:3f: f8:cc:ef:db:ad:84:9c:77:4a:76:0f:9f:c3:50:9f:0c:1e:c1: f2:22:d7:e5:92:2b:95:21:28:a0:ee:7a:07:22:60:b5:24:ac: 42:ec:ca:3a:c2:d6:09:c5:ed:1f:63:b5:6f:15:be:5e:4a:7f: 83:1e:a0:01:ec:2f:fa:11:94:08:31:0f:5e:ea:af:18:be:47: 47:8b:08:ce:01:2e:5f:de:eb:1d:43:ca:e5:2e:da:22:c0:b8: f3:5b:72:d7:35:f0:11:77:64:08:76:e8:5c:9b:44:ca:8f:c6: c3:d3:b4:11:9c:ba:9c:d5:02:2c:5e:70:15:c5:53:5f:8f:f6: a9:6c:ef:ee:cc:44:4e:b5:49:c5:48:00:be:12:b3:4b:4e:7b: 2f:8e:6e:3f:12:9f:34:b0:db:ad:c2:6f:86:ee:54:cd:f8:65: f4:fa:ec:11:dd:24:34:f3:75:84:9d:71:8f:e1:3d:9c:0e:39: 88:3c:d1:df:90:f2:5f:0f:ad:9b:52:71:fd:31:43:ca:ae:9b: cc:93:ad:89:37:cb:4e:0b:32:41:ba:d7:2b:8d:e5:ab:12:41: 75:dd:81:c2:ba:c3:be:78:dd:f1:a6:27:51:20:c1:c5:de:a5: 67:59:fa:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjYxMDAyMjMyNjUzWhcNMjYxMDA5MjMyNjUzWjAYMRYwFAYD VQQDEw02YWMwM2RiZC1lZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZR811uta0lGBQJr7T3JPyiAmyH6G5ZBfO2DRtljkxd0m/RrxJeem+thuTIh lJgiLI9/J62wCk4dBKKV8KCCPMejvKYTsz6T0GWQog+mr1Ko0+SA+b6RzWeoQvIK 2N4tg0WNgATmdlAe2jnyCBgDJHNwXkGpmjEAWHpzdZ+JKvGaxQr7KuWxmeyramGn Z6mPZJyGakp4ZXLi9OabPjfrG73b0wkDp2f4IlmWSOh7Qb9vQzFcZmz6xMuFHdex ynoBSE3Ol/ZygpMrU6oNv8q4j4ZWpIMOKHILfqhnP3zcGTUQ31csLn9UIGq0NCFN YrmWB7ytbGVhD+d8MDR6EUk5rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwvxrE5 WIsmmcQIdnb7GOgIpVJKMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR5PBRnDhB8kXutykqekW/Zk/+Mzv262EnHdKdg+fw1CfDB7B8iLX5ZIrlSEo oO56ByJgtSSsQuzKOsLWCcXtH2O1bxW+Xkp/gx6gAewv+hGUCDEPXuqvGL5HR4sI zgEuX97rHUPK5S7aIsC481ty1zXwEXdkCHboXJtEyo/Gw9O0EZy6nNUCLF5wFcVT X4/2qWzv7sxETrVJxUgAvhKzS057L45uPxKfNLDbrcJvhu5Uzfhl9PrsEd0kNPN1 hJ1xj+E9nA45iDzR35DyXw+tm1Jx/TFDyq6bzJOtiTfLTgsyQbrXK43lqxJBdd2B wrrDvnjd8aYnUSDBxd6lZ1n61Q== -----END CERTIFICATE-----Generated at Sun Oct 4 19:50:22 2026 by rpki-client