$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft File: FMswrC0LZ8dw-voAKFaG65_LaN4.mft (raw, json) Hash identifier: 5mI38LwB0dcCsQEzUszFIQe13nW2HdfvcSw5OxuSG/Q= Subject key identifier: AF:E4:B1:A1:81:65:06:48:04:A5:ED:92:E6:29:33:1E:6E:2B:BE:03 Authority key identifier: 14:CB:30:AC:2D:0B:67:C7:70:FA:FA:00:28:56:86:EB:9F:CB:68:DE Certificate issuer: /CN=A91F6697/serialNumber=14CB30AC2D0B67C770FAFA00285686EB9FCB68DE Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft Manifest number: 14 Signing time: Fri 09 Oct 2026 09:52:11 +0000 Manifest this update: Fri 09 Oct 2026 09:52:10 +0000 Manifest next update: Fri 16 Oct 2026 09:52:10 +0000 Files and hashes: 1: FMswrC0LZ8dw-voAKFaG65_LaN4.crl (hash: wT4IqYu4cH3FdpkXNsbTh3uqV0BQS8yKiuaydal+oFw=) 2: A0BCB8C6A7F111F1B0B339166211F970.roa (hash: L+gYNweejjVhVwFE5Shlv50HmWDXdkDIAWER8QTB8wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.crl rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6697, serialNumber=14CB30AC2D0B67C770FAFA00285686EB9FCB68DE Validity Not Before: Oct 9 09:52:10 2026 GMT Not After : Oct 16 09:52:10 2026 GMT Subject: CN=6ac8b94b-3aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:f0:43:f1:bf:f1:fb:d1:1e:ff:39:6a:3d: e4:d5:06:15:17:96:cf:6a:8f:44:38:86:61:f9:7d: 8e:56:78:91:cf:6d:4a:77:ae:8f:af:2f:ee:1b:37: 04:9e:2a:93:63:55:91:7d:99:bd:b0:09:20:46:67: cc:ff:27:38:79:46:12:95:a5:50:ad:f0:85:57:b4: af:dc:35:50:3e:d5:0a:d6:b8:4f:3c:39:63:1e:7d: 1a:07:2c:fe:7c:4e:f3:a7:f6:ef:98:9e:57:8f:cb: 93:8d:fd:98:48:a5:42:bd:d3:5f:95:8b:5f:41:ef: 89:e8:41:8b:a7:d9:65:99:b5:55:97:d6:f5:fd:e9: 38:b3:8f:56:f6:8c:c5:15:89:56:ad:3d:75:b6:10: aa:89:ce:29:7d:51:46:e3:88:4e:7b:23:b7:f1:2f: df:0d:19:72:1b:9f:0b:fb:82:c9:68:81:de:74:65: 5a:ec:63:73:66:a0:54:61:e9:99:0c:b4:b2:e5:26: 19:e7:d4:0e:b0:ce:6a:fc:b8:fe:76:28:40:02:62: e9:8a:b2:e4:28:52:fd:29:f5:e8:52:20:89:35:18: da:4b:25:2b:ff:84:bb:57:97:8b:5a:2f:f5:02:cc: 52:14:c6:4a:07:d4:f6:eb:9b:46:a4:c0:0e:51:11: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E4:B1:A1:81:65:06:48:04:A5:ED:92:E6:29:33:1E:6E:2B:BE:03 X509v3 Authority Key Identifier: keyid:14:CB:30:AC:2D:0B:67:C7:70:FA:FA:00:28:56:86:EB:9F:CB:68:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:50:38:c0:f7:74:0d:34:cd:1c:bd:19:b8:5a:31:ee:6f:97: fd:e3:c3:77:ef:96:05:aa:fa:0e:96:b4:0d:5b:37:09:6f:03: e2:3d:b5:4a:7a:23:f9:6d:45:e8:8e:0c:08:7c:37:43:e1:95: 7d:6d:f6:cf:5a:c8:99:bc:b0:f5:70:ff:b5:da:be:e3:0b:0a: fe:73:c4:39:b6:43:b9:12:8c:af:03:b2:6d:9e:29:6a:19:1c: 69:a4:72:ef:74:f5:ee:25:43:30:e9:4a:e5:13:d3:d9:b1:d9: 55:ae:3f:18:50:7e:7c:04:32:3c:f1:01:2a:a9:3f:19:48:41: 5d:f9:72:fc:74:9c:25:a2:22:b5:d3:b3:1f:34:c7:a1:f9:69: 99:b7:26:85:17:c7:41:25:be:07:d1:ea:a1:a2:d6:75:75:ea: 74:48:3e:7b:a0:76:88:8f:a4:c5:4c:99:96:77:dc:5d:63:6a: 07:c9:f8:28:fc:82:8b:56:1d:b0:51:24:32:4e:fe:b1:37:93: 76:76:b3:28:53:17:bf:aa:da:d6:9c:bb:72:0b:b6:79:7c:d8: 55:48:50:31:e1:69:44:14:fd:ad:55:d3:d2:63:b3:ba:6b:14: ef:d5:ad:bd:97:44:29:f4:ed:7c:0b:34:1e:63:39:03:db:1f: 31:9c:31:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NjY5NzExMC8GA1UEBRMoMTRDQjMwQUMyRDBCNjdDNzcwRkFGQTAwMjg1Njg2RUI5 RkNCNjhERTAeFw0yNjEwMDkwOTUyMTBaFw0yNjEwMTYwOTUyMTBaMBgxFjAUBgNV BAMTDTZhYzhiOTRiLTNhYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClv/BD8b/x+9Ee/zlqPeTVBhUXls9qj0Q4hmH5fY5WeJHPbUp3ro+vL+4bNwSe KpNjVZF9mb2wCSBGZ8z/Jzh5RhKVpVCt8IVXtK/cNVA+1QrWuE88OWMefRoHLP58 TvOn9u+YnlePy5ON/ZhIpUK901+Vi19B74noQYun2WWZtVWX1vX96Tizj1b2jMUV iVatPXW2EKqJzil9UUbjiE57I7fxL98NGXIbnwv7gslogd50ZVrsY3NmoFRh6ZkM tLLlJhnn1A6wzmr8uP52KEACYumKsuQoUv0p9ehSIIk1GNpLJSv/hLtXl4taL/UC zFIUxkoH1Pbrm0akwA5REbv7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUr+SxoYFl BkgEpe2S5ikzHm4rvgMwHwYDVR0jBBgwFoAUFMswrC0LZ8dw+voAKFaG65/LaN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2Njk3L0YyMjlGMDRFQTdG MDExRjFCN0ExOEREMDYxMTFGOTcwL0ZNc3dyQzBMWjhkdy12b0FLRmFHNjVfTGFO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRk1zd3JDMExaOGR3LXZvQUtGYUc2NV9MYU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 Njk3L0YyMjlGMDRFQTdGMDExRjFCN0ExOEREMDYxMTFGOTcwL0ZNc3dyQzBMWjhk dy12b0FLRmFHNjVfTGFONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAMUDjA93QNNM0cvRm4WjHub5f948N375YFqvoOlrQNWzcJbwPiPbVKeiP5bUXo jgwIfDdD4ZV9bfbPWsiZvLD1cP+12r7jCwr+c8Q5tkO5EoyvA7JtnilqGRxppHLv dPXuJUMw6UrlE9PZsdlVrj8YUH58BDI88QEqqT8ZSEFd+XL8dJwloiK107MfNMeh +WmZtyaFF8dBJb4H0eqhotZ1dep0SD57oHaIj6TFTJmWd9xdY2oHyfgo/IKLVh2w USQyTv6xN5N2drMoUxe/qtrWnLtyC7Z5fNhVSFAx4WlEFP2tVdPSY7O6axTv1a29 l0Qp9O18CzQeYzkD2x8xnDFw -----END CERTIFICATE-----Generated at Sat Oct 10 19:08:22 2026 by rpki-client