$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: vZ5WG2si9NQVtAImcOf8COVhugauk89ay/uRi2JqE3o= Subject key identifier: C3:CF:F5:FC:B9:34:E1:76:7D:FB:4B:7A:8A:AA:0D:D5:65:D2:0E:2F Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 024A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 023D Signing time: Wed 23 Sep 2026 02:25:59 +0000 Manifest this update: Wed 23 Sep 2026 02:25:58 +0000 Manifest next update: Wed 30 Sep 2026 02:25:58 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: CYoj55i0BnoNKO3D98p4VF8wX3ThWEWDLuRQqFEI43Q=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc=) 3: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Sep 23 02:25:58 2026 GMT Not After : Sep 30 02:25:58 2026 GMT Subject: CN=6ab338b7-aacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:09:c3:9d:0e:48:7b:0b:a8:cc:1f:13:0e: f2:67:7c:94:91:64:2e:6a:4e:a1:24:a9:54:f2:97: 25:7b:fa:88:e4:37:6b:66:0f:65:26:a7:35:68:2f: 2e:d3:c2:bc:3a:20:51:cf:eb:98:25:5e:f1:48:89: 6a:34:6e:7a:88:f7:e6:de:7d:f4:38:08:13:f0:74: 1e:54:55:e2:c1:e8:3d:bd:27:fd:85:b7:86:37:e6: 20:4a:79:dd:05:f1:b3:08:ef:4f:ac:3b:64:5d:d1: fa:5b:79:2f:79:30:95:53:3a:02:ad:bf:7f:2c:d3: 2d:10:b3:47:de:b6:0b:67:40:43:40:00:7e:c1:cd: b3:ac:bc:00:03:36:69:79:b3:a5:10:65:79:7a:7e: 9e:5d:6c:9c:dc:a0:39:cd:c6:b0:e4:1c:00:c3:b2: 22:6b:d9:44:e8:2b:db:4e:61:98:72:aa:04:b9:bc: 9b:75:a9:66:f8:21:d7:d0:e3:0b:c8:3e:d2:f4:ad: c9:6e:9c:4d:5c:13:83:e7:87:a5:4b:5e:14:81:1e: 8c:88:bb:ec:02:9a:31:83:39:d2:93:02:93:99:10: 1f:43:0a:32:04:f6:10:7d:02:02:c1:3e:0b:ae:68: e6:c4:9f:04:a7:ce:d6:ec:7f:a5:00:9d:15:36:bc: b2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CF:F5:FC:B9:34:E1:76:7D:FB:4B:7A:8A:AA:0D:D5:65:D2:0E:2F X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3f:c2:29:ec:28:c4:ad:a9:a2:dc:ec:8c:22:41:ed:57:eb: 6b:53:28:b3:40:bf:2b:1f:56:aa:68:0b:38:aa:4a:4b:6b:06: 4a:a6:ac:13:7c:af:3b:55:5e:6b:3c:c0:2e:02:4b:b6:41:8a: 37:21:73:a8:9b:70:d9:08:2b:2f:9b:e1:06:21:8c:55:23:ac: 50:a2:ae:75:c7:32:64:76:3b:a5:ca:b4:43:3c:2b:d8:8b:95: 9e:37:cc:d3:8c:c8:f7:f4:1b:4b:be:44:64:3b:60:f4:66:44: 22:9b:2e:d1:e7:e9:3d:e2:dd:fc:06:88:66:d5:e2:93:d5:78: 7a:3c:41:dc:08:d3:a2:1f:f7:fa:a7:5d:08:8f:41:9b:65:78: 66:65:f4:15:1c:53:14:15:21:e1:ae:c7:6c:5c:19:08:eb:02: b4:56:a5:4e:b6:46:95:3e:3f:aa:99:54:eb:cb:b1:23:0f:2d: bd:5e:e0:e2:b5:38:7f:81:95:92:aa:a7:9a:ec:35:00:2d:9e: 29:de:4b:2c:5c:ec:f1:44:ed:8a:d8:c6:47:8a:ef:12:f6:ca: dd:53:05:3a:23:38:f3:87:d4:00:96:09:c6:77:a0:f2:16:21: 57:df:27:8f:3f:db:7b:27:59:20:6d:e8:8f:26:53:24:64:18: 2e:02:ab:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjYwOTIzMDIyNTU4WhcNMjYwOTMwMDIyNTU4WjAYMRYwFAYD VQQDEw02YWIzMzhiNy1hYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnE8Jw50OSHsLqMwfEw7yZ3yUkWQuak6hJKlU8pcle/qI5DdrZg9lJqc1aC8u 08K8OiBRz+uYJV7xSIlqNG56iPfm3n30OAgT8HQeVFXiweg9vSf9hbeGN+YgSnnd BfGzCO9PrDtkXdH6W3kveTCVUzoCrb9/LNMtELNH3rYLZ0BDQAB+wc2zrLwAAzZp ebOlEGV5en6eXWyc3KA5zcaw5BwAw7Iia9lE6CvbTmGYcqoEubybdalm+CHX0OML yD7S9K3JbpxNXBOD54elS14UgR6MiLvsApoxgznSkwKTmRAfQwoyBPYQfQICwT4L rmjmxJ8Ep87W7H+lAJ0VNryyQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPP9fy5 NOF2fftLeoqqDdVl0g4vMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKz/CKewoxK2potzsjCJB7Vfra1Mos0C/Kx9WqmgLOKpKS2sGSqasE3yvO1Ve azzALgJLtkGKNyFzqJtw2QgrL5vhBiGMVSOsUKKudccyZHY7pcq0Qzwr2IuVnjfM 04zI9/QbS75EZDtg9GZEIpsu0efpPeLd/AaIZtXik9V4ejxB3AjToh/3+qddCI9B m2V4ZmX0FRxTFBUh4a7HbFwZCOsCtFalTrZGlT4/qplU68uxIw8tvV7g4rU4f4GV kqqnmuw1AC2eKd5LLFzs8UTtitjGR4rvEvbK3VMFOiM484fUAJYJxneg8hYhV98n jz/beydZIG3ojyZTJGQYLgKriw== -----END CERTIFICATE-----Generated at Fri Sep 25 04:16:46 2026 by rpki-client