$ rpki-client -vvvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: BkR8NiR6mpIVXAztgOoKPu3OWwDjn+rFZ6Sz7m5ieeI= Subject key identifier: F6:B5:8C:4A:1F:F9:BF:A2:E5:2B:0E:58:43:8B:F4:C9:D3:6B:42:57 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: E8 Signing time: Wed 23 Sep 2026 06:15:34 +0000 Manifest this update: Wed 23 Sep 2026 06:15:34 +0000 Manifest next update: Wed 30 Sep 2026 06:15:34 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: Bmm8gnjXjeOKv5EHQkYZy6SjEEmH8O0QJwLLJYfXaOA=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Sep 23 06:15:34 2026 GMT Not After : Sep 30 06:15:34 2026 GMT Subject: CN=6ab36e86-a690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:93:08:c6:e9:64:27:14:ed:f2:e0:24:e4:c6: 25:dc:f6:4d:c2:8c:c4:30:29:11:99:95:fc:a0:ab: 01:b3:a0:93:3e:54:dd:33:8a:dc:06:43:9d:b3:c4: c5:22:61:5e:a9:d1:62:44:d9:27:d1:5e:c4:e3:ab: a6:26:ed:22:81:13:d8:4a:d6:c5:2b:3c:ec:e3:c3: a2:60:3f:7d:ae:61:e4:2c:b7:67:c1:35:cc:50:c5: e2:ed:74:42:44:00:71:70:dc:d7:2c:f9:88:19:31: 23:88:59:c7:cd:ef:03:17:a5:94:59:23:03:fe:94: 6b:f8:06:dd:73:1b:cd:40:56:6d:6f:d0:3d:9a:ce: 11:d6:40:fb:76:d8:f4:21:ee:50:8e:95:32:1e:89: d5:01:06:a3:27:f9:3f:09:cd:46:16:0b:06:d3:73: 9a:d1:48:e1:28:80:d9:e4:27:fe:75:b7:f6:54:fc: a5:66:f9:c9:d2:5c:cb:1b:f3:e5:bb:22:de:49:36: 1a:f4:4a:2b:21:45:b2:c7:4e:60:d1:de:3b:c3:47: 9c:2c:97:ab:40:e5:7c:78:7f:91:fd:91:2a:7d:56: 4e:57:b5:0b:29:7c:69:58:b1:85:ec:05:23:fa:31: 78:61:72:04:03:44:4d:d4:98:59:5b:32:c4:b6:b1: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B5:8C:4A:1F:F9:BF:A2:E5:2B:0E:58:43:8B:F4:C9:D3:6B:42:57 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:23:db:0f:40:92:2b:90:ae:c8:d8:1f:33:78:55:ca:dd:29: 42:d4:9a:60:df:bf:57:07:4d:da:86:58:a2:ca:84:12:eb:e5: 60:da:26:e4:55:23:49:e3:36:a5:19:3a:8e:58:9d:52:b4:52: e5:10:ca:78:01:02:f5:2a:9e:55:eb:94:5b:3a:15:f3:04:df: 1d:d9:70:5b:b7:74:1d:67:d1:3b:e3:b6:a0:31:8e:93:fb:96: 46:a8:79:db:4d:f1:3e:69:78:8c:32:93:62:98:f2:be:d8:4f: d7:54:52:75:40:0f:cb:f6:16:1a:53:3f:a5:ed:05:32:5d:10: e8:5f:59:0d:c4:4d:6b:06:ba:9a:b3:a1:d8:69:b1:3f:e2:5d: af:3c:fa:d9:5f:cc:19:40:1c:c3:a7:c7:76:a2:97:be:bd:ad: 0b:65:84:4c:9c:35:cb:7e:ca:40:1c:b6:92:34:51:52:13:0f: b6:33:c1:b6:64:db:b3:58:11:9b:48:a8:42:ec:2c:7a:9d:85: 16:0d:04:c8:f0:ae:9e:81:4b:0a:a5:cf:36:fa:74:f7:fe:e7: d9:6b:ab:12:9c:6d:c6:3c:5c:95:4f:37:f0:7a:2b:74:76:1e: 37:be:da:5c:90:e3:e0:8a:89:b2:b6:74:5f:d9:cb:6a:97:18: cb:ae:98:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzNEQxMTAvBgNVBAUTKDMwRDcxOUY5QzZEMzdFMkFDOUY0RDZENEIxRjdEOTc4 RUMyQTMyODkwHhcNMjYwOTIzMDYxNTM0WhcNMjYwOTMwMDYxNTM0WjAYMRYwFAYD VQQDEw02YWIzNmU4Ni1hNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5MIxulkJxTt8uAk5MYl3PZNwozEMCkRmZX8oKsBs6CTPlTdM4rcBkOds8TF ImFeqdFiRNkn0V7E46umJu0igRPYStbFKzzs48OiYD99rmHkLLdnwTXMUMXi7XRC RABxcNzXLPmIGTEjiFnHze8DF6WUWSMD/pRr+AbdcxvNQFZtb9A9ms4R1kD7dtj0 Ie5QjpUyHonVAQajJ/k/Cc1GFgsG03Oa0UjhKIDZ5Cf+dbf2VPylZvnJ0lzLG/Pl uyLeSTYa9EorIUWyx05g0d47w0ecLJerQOV8eH+R/ZEqfVZOV7ULKXxpWLGF7AUj +jF4YXIEA0RN1JhZWzLEtrHVkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPa1jEof +b+i5SsOWEOL9MnTa0JXMB8GA1UdIwQYMBaAFDDXGfnG034qyfTW1LH32XjsKjKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM0RC9GQzIwOTEzODU4 REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZpcko5TmJVc2ZmWmVPd3FN b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM0RC9GQzIwOTEzODU4REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZp cko5TmJVc2ZmWmVPd3FNb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANyPbD0CSK5CuyNgfM3hVyt0pQtSaYN+/VwdN2oZYosqEEuvlYNom5FUjSeM2 pRk6jlidUrRS5RDKeAEC9SqeVeuUWzoV8wTfHdlwW7d0HWfRO+O2oDGOk/uWRqh5 203xPml4jDKTYpjyvthP11RSdUAPy/YWGlM/pe0FMl0Q6F9ZDcRNawa6mrOh2Gmx P+Jdrzz62V/MGUAcw6fHdqKXvr2tC2WETJw1y37KQBy2kjRRUhMPtjPBtmTbs1gR m0ioQuwsep2FFg0EyPCunoFLCqXPNvp09/7n2WurEpxtxjxclU838HordHYeN77a XJDj4IqJsrZ0X9nLapcYy66Y8Q== -----END CERTIFICATE-----Generated at Wed Sep 23 12:30:20 2026 by rpki-client