$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: PWOOy/o1HuOHhFsE7qIeLEFit2qmsqYQ5FfIOxS7iMw= Subject key identifier: D5:1F:B0:D0:68:C3:41:E7:FD:B9:80:0D:DF:2F:E6:6F:C4:2D:65:90 Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 0114 Signing time: Sun 27 Sep 2026 06:30:56 +0000 Manifest this update: Sun 27 Sep 2026 06:30:56 +0000 Manifest next update: Sun 04 Oct 2026 06:30:56 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: 7jYCt+8EeALUjahPnM+vc1Q1TrbGg2Z77ye1FbstBN4=) 2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: B7TUQqjMN6J5HTrb5Q82pPSHkS4BZTA/aqHNn2n0sG4=) 3: 614772FE880B11F1AC7AC66A4111F970.roa (hash: o0rs+htqUFzwdtNtfMIUKKh0z/keHJddP4OX/SU46ho=) 4: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: WaqOAo3dFdCGInWkvGm2bGCvoG6Vqwx4Uv22RJ/L2OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Sep 27 06:30:56 2026 GMT Not After : Oct 4 06:30:56 2026 GMT Subject: CN=6ab8b820-e0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:89:63:55:bd:0f:af:9c:26:76:56:77:04: ce:e1:d1:95:e2:f2:eb:ca:ee:87:79:09:79:31:13: 11:2d:9b:1c:0b:7f:85:5a:4d:1a:b1:40:35:3e:db: 20:bb:97:5f:11:45:c0:94:85:7f:6a:f2:ae:50:8c: c1:f6:9a:71:f2:26:66:81:f4:df:09:34:05:0b:a1: dc:2a:b1:0f:77:ae:6d:49:39:ac:5b:9e:2e:7e:b6: a5:ad:b3:2c:7e:65:24:10:b3:31:40:f2:b4:32:55: a9:2a:13:d4:fe:d5:48:fb:40:20:f5:c6:d3:83:be: 58:a0:9a:a3:82:e3:4b:86:c2:02:b9:5a:c8:ce:b8: c6:90:31:55:05:f4:77:d9:99:0a:b8:74:f1:df:89: 8e:f8:39:b5:02:39:4f:63:20:e6:1a:50:42:61:f1: e9:b7:3c:91:57:87:e1:b4:5d:19:3d:79:27:ed:14: 9f:c3:09:01:27:a7:ea:38:73:47:d4:19:65:16:15: 5a:ff:4f:47:6e:31:ef:73:4d:8c:61:58:c0:1d:e7: 4c:6b:e3:ba:c9:04:e5:40:d9:dc:89:76:e4:2c:ca: 0c:20:31:f7:07:88:e4:c4:3b:e1:b9:74:cf:76:1c: 8e:8c:f0:d2:2d:cc:f5:d7:a6:d0:53:02:f8:99:4d: 87:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1F:B0:D0:68:C3:41:E7:FD:B9:80:0D:DF:2F:E6:6F:C4:2D:65:90 X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:07:a7:57:bb:9e:fd:a7:2b:69:73:67:77:0b:40:2e:fb:18: 3a:25:39:d2:b4:fe:25:22:00:4e:4b:8b:17:99:a4:cc:9d:0e: d3:f8:f0:08:17:e1:6d:13:53:4e:c7:5f:a0:f1:61:ef:dd:d9: 08:e4:72:2d:24:f5:18:54:1c:1d:92:68:7e:8f:37:c9:63:0d: 1a:1d:e5:3c:fe:a7:c3:f0:6b:12:cc:97:ef:8b:24:38:7b:11: a0:af:9f:44:90:be:a1:de:52:41:9b:6a:3b:a5:ad:e8:43:8f: 30:77:e3:32:b3:a0:0b:be:42:ff:ab:f9:97:1b:ae:4d:1e:fe: df:ef:42:79:28:5c:9a:e1:87:b8:ab:e3:b0:4a:6a:1e:33:2c: 7a:71:e5:f5:5c:fd:a3:66:2d:ae:f9:c3:f1:f1:d7:43:21:33: 02:70:0d:83:3e:fb:88:66:37:fd:0d:fb:c9:47:0a:ea:e8:b4: dc:24:11:47:1f:de:96:3c:bf:71:d9:23:1b:95:fc:0f:21:a2: e4:c3:6a:38:ba:b1:86:c4:7d:a1:7e:f1:35:5b:7d:ab:f3:b3: 0f:05:5f:35:9a:8d:ac:ba:81:86:3f:82:ea:63:40:bf:d5:d6: 11:5a:81:13:e5:c4:51:17:f3:d0:74:77:0c:7f:9d:68:c4:ce: 62:37:c0:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJBQ0IxMTAvBgNVBAUTKEYwMDkyMzNEOEQwODdGQzFEMEY2NDI1NzgwRTNBNEQ4 NDRBMzRGODEwHhcNMjYwOTI3MDYzMDU2WhcNMjYxMDA0MDYzMDU2WjAYMRYwFAYD VQQDEw02YWI4YjgyMC1lMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjCJY1W9D6+cJnZWdwTO4dGV4vLryu6HeQl5MRMRLZscC3+FWk0asUA1Ptsg u5dfEUXAlIV/avKuUIzB9ppx8iZmgfTfCTQFC6HcKrEPd65tSTmsW54ufralrbMs fmUkELMxQPK0MlWpKhPU/tVI+0Ag9cbTg75YoJqjguNLhsICuVrIzrjGkDFVBfR3 2ZkKuHTx34mO+Dm1AjlPYyDmGlBCYfHptzyRV4fhtF0ZPXkn7RSfwwkBJ6fqOHNH 1BllFhVa/09HbjHvc02MYVjAHedMa+O6yQTlQNnciXbkLMoMIDH3B4jkxDvhuXTP dhyOjPDSLcz116bQUwL4mU2H1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUfsNBo w0Hn/bmADd8v5m/ELWWQMB8GA1UdIwQYMBaAFPAJIz2NCH/B0PZCV4DjpNhEo0+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkFDQi83NEJEODU4QTFC M0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4SFE5a0pYZ09PazJFU2pU NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkFDQi83NEJEODU4QTFCM0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4 SFE5a0pYZ09PazJFU2pUNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYgenV7ue/acraXNndwtALvsYOiU50rT+JSIATkuLF5mkzJ0O0/jwCBfhbRNT TsdfoPFh793ZCORyLST1GFQcHZJofo83yWMNGh3lPP6nw/BrEsyX74skOHsRoK+f RJC+od5SQZtqO6Wt6EOPMHfjMrOgC75C/6v5lxuuTR7+3+9CeShcmuGHuKvjsEpq HjMsenHl9Vz9o2YtrvnD8fHXQyEzAnANgz77iGY3/Q37yUcK6ui03CQRRx/eljy/ cdkjG5X8DyGi5MNqOLqxhsR9oX7xNVt9q/OzDwVfNZqNrLqBhj+C6mNAv9XWEVqB E+XEURfz0HR3DH+daMTOYjfAKg== -----END CERTIFICATE-----Generated at Sun Sep 27 23:33:08 2026 by rpki-client