$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: JE213NrxZoQ5pkTkq6XmL9LE9gjtRF0I6e15CBVF2E8= Subject key identifier: 76:4E:12:D0:CE:C5:F7:B0:30:54:95:21:EB:9F:AF:85:B7:B3:6A:87 Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 086F Signing time: Tue 22 Sep 2026 20:38:52 +0000 Manifest this update: Tue 22 Sep 2026 20:38:51 +0000 Manifest next update: Tue 29 Sep 2026 20:38:51 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: 8e/8qVOF1BRTJTFdlcl0eT+MxINGR8iKXw7yOmryrU0=) 2: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=) 3: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=) 4: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Sep 22 20:38:51 2026 GMT Not After : Sep 29 20:38:51 2026 GMT Subject: CN=6ab2e75b-ec60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:fd:07:57:53:be:5b:60:39:da:c1:3d:64: 49:54:98:a0:a9:46:33:e0:a1:17:0a:a4:3f:d9:11: 4a:c4:4c:ba:e3:87:80:7f:ac:a2:53:5b:96:17:9b: 5d:2e:5e:ca:9e:0a:7d:d1:16:91:af:08:0f:ed:eb: 1d:13:2a:b4:71:b9:df:ef:20:4e:23:4d:a5:75:f1: 7c:b9:5a:8e:c9:4e:ea:4b:d9:1d:57:d0:c6:eb:4d: fe:7d:94:1f:f2:ac:04:e3:37:4a:bc:9e:ca:72:8f: 2f:80:08:8f:6a:54:f2:25:0a:46:a7:96:f1:e3:81: 59:51:e4:06:68:58:ee:97:1f:27:e6:9e:18:b7:75: 2c:30:0d:d8:dc:4e:0e:83:16:fa:89:79:01:36:bc: 9c:8d:c3:bc:34:e3:c5:80:f7:48:35:08:27:aa:6f: 14:05:43:b4:6d:1d:91:2f:53:32:c7:85:0b:d1:aa: 41:62:91:dc:4d:9a:67:11:4f:32:f7:93:0e:e4:69: ae:54:e3:6e:04:e8:22:e7:5a:8e:8a:8d:6d:7b:be: f4:9a:7b:f6:6c:e5:12:68:2c:07:26:ed:ae:8c:3b: f3:a9:d7:dd:77:e3:74:f3:1a:e0:a8:52:aa:95:6c: 1f:2e:6f:ca:21:0e:75:27:e4:42:a1:16:68:cc:78: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4E:12:D0:CE:C5:F7:B0:30:54:95:21:EB:9F:AF:85:B7:B3:6A:87 X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4f:fe:1a:05:00:e5:d9:e0:e2:cc:8e:af:2d:80:61:3d:e4: 85:0b:dd:4b:0f:eb:b3:f6:09:aa:07:51:ac:74:de:81:36:35: ea:21:6a:67:fe:35:ef:c8:56:9f:d2:4a:95:3a:cd:b5:7f:c2: c5:5c:4a:eb:e2:25:d1:0e:56:a2:b1:21:f1:f3:3c:88:d4:46: 16:5d:7a:c2:74:bc:db:f6:7c:5b:43:5f:09:34:61:af:23:9d: 44:fe:eb:cd:72:45:d7:34:d4:d3:f3:a3:62:d4:b4:e1:96:53: 96:39:50:bf:9e:f8:b6:9c:19:3b:d1:78:07:b4:8a:59:ff:50: fc:57:8b:d8:48:5d:9a:ff:22:6d:f8:4d:8a:16:c1:ea:bb:b7: 4d:b4:60:42:ef:aa:b3:0f:58:d2:fc:c5:b4:93:f8:04:2e:e7: 46:a9:08:bd:4a:35:f4:4f:59:05:cc:4b:44:5c:b7:a6:9d:21: cd:e7:ea:64:14:24:ea:3e:13:71:f4:91:53:a3:77:9e:9e:52: 04:57:5f:87:0d:e7:e6:8a:01:9b:ea:11:5c:14:d2:90:78:09: f1:a4:ea:d9:b9:52:50:0b:d2:ca:cb:a2:ab:0c:59:2a:e3:8b: dd:dc:3c:2a:56:15:58:08:91:e9:5d:f5:f7:c5:e2:64:aa:d6: c6:80:49:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjYwOTIyMjAzODUxWhcNMjYwOTI5MjAzODUxWjAYMRYwFAYD VQQDEw02YWIyZTc1Yi1lYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b39B1dTvltgOdrBPWRJVJigqUYz4KEXCqQ/2RFKxEy644eAf6yiU1uWF5td Ll7Kngp90RaRrwgP7esdEyq0cbnf7yBOI02ldfF8uVqOyU7qS9kdV9DG603+fZQf 8qwE4zdKvJ7Kco8vgAiPalTyJQpGp5bx44FZUeQGaFjulx8n5p4Yt3UsMA3Y3E4O gxb6iXkBNrycjcO8NOPFgPdINQgnqm8UBUO0bR2RL1Myx4UL0apBYpHcTZpnEU8y 95MO5GmuVONuBOgi51qOio1te770mnv2bOUSaCwHJu2ujDvzqdfdd+N08xrgqFKq lWwfLm/KIQ51J+RCoRZozHi9MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZOEtDO xfewMFSVIeufr4W3s2qHMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE0/+GgUA5dng4syOry2AYT3khQvdSw/rs/YJqgdRrHTegTY16iFqZ/4178hW n9JKlTrNtX/CxVxK6+Il0Q5WorEh8fM8iNRGFl16wnS82/Z8W0NfCTRhryOdRP7r zXJF1zTU0/OjYtS04ZZTljlQv574tpwZO9F4B7SKWf9Q/FeL2Ehdmv8ibfhNihbB 6ru3TbRgQu+qsw9Y0vzFtJP4BC7nRqkIvUo19E9ZBcxLRFy3pp0hzefqZBQk6j4T cfSRU6N3np5SBFdfhw3n5ooBm+oRXBTSkHgJ8aTq2blSUAvSysuiqwxZKuOL3dw8 KlYVWAiR6V3198XiZKrWxoBJhw== -----END CERTIFICATE-----Generated at Thu Sep 24 14:45:39 2026 by rpki-client