$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: 4Vdnj/td7YlLRCwEfaeVdfAr1eTH8ANcn0LaWdOdsQA= Subject key identifier: 38:F8:2B:74:A5:2C:CC:DA:5B:F0:10:D4:E3:14:6E:FC:C5:63:95:F0 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 27C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 2739 Signing time: Sat 26 Sep 2026 15:42:58 +0000 Manifest this update: Sat 26 Sep 2026 15:42:58 +0000 Manifest next update: Sat 03 Oct 2026 15:42:58 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: yt73XYtMoS8duEqSFOiem+s0g6CXPJqTpRpaqxJHie8=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: vvlwkhzUvE0FKB5grEYGUNi8KcaEXKrEcNbY2LoLmZ8=) 3: 9qAcg6cCriNo_EL5rFif8L2qvyQ.asa (hash: GDoXzuebgCv+n7JB5o6wM41UcS8TK2ToFJTNzWZ7MQ4=) 4: 8ZyB5Nc2gIY5ylh7rhnl6Cy2gbw.asa (hash: +Pjl1MLAprkwiqwhT673Q9jFse4Elz7TYi7+ZiBgGbI=) 5: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 8bcJT2SUfJvBhjjxVcOLkV67/1UHWnWs/wyeZ8062Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10182 (0x27c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Sep 26 15:42:58 2026 GMT Not After : Oct 3 15:42:58 2026 GMT Subject: CN=6ab7e802-5519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:cc:fa:77:81:7d:6e:d9:06:c2:2d:f5:42: c9:63:04:c9:d4:84:89:06:b1:5f:d5:85:ed:34:4b: 4c:25:f7:8b:bf:c9:c3:06:e7:b8:2b:bc:75:4d:6c: a1:63:4a:e6:38:41:6c:62:3d:df:13:7b:c4:47:8d: a9:fb:21:0d:54:02:5e:1b:c0:11:c4:d0:02:10:3a: d4:9f:59:e9:46:80:59:3b:81:60:0e:53:19:1f:a8: b5:0f:c0:2a:8c:1a:62:c5:1e:0c:3f:d0:5d:3f:1d: 97:34:a0:11:c0:4b:a3:dd:52:f7:19:a0:ce:c5:4a: e8:c8:db:72:7c:d2:ef:00:92:ff:8f:44:4d:d4:98: af:25:ad:9e:23:0e:e7:db:85:ce:31:87:5d:bf:a2: 94:42:13:d8:1e:db:05:c8:1d:1a:4a:bf:4c:61:e3: 9d:37:3b:ae:09:2a:9c:70:bf:24:2f:18:06:23:95: ed:c3:f6:1f:9c:23:ce:26:c4:2e:36:f3:99:b8:00: 69:e5:ef:6e:79:a5:4c:86:fa:7e:58:2b:a4:c1:40: 74:c7:13:07:0f:99:11:46:60:aa:7d:62:b7:e7:15: fb:db:4b:ad:7c:90:b7:f1:f8:fa:4e:f3:32:c1:e4: 91:d7:d5:32:f9:d7:f9:46:86:1d:57:88:b3:a9:07: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F8:2B:74:A5:2C:CC:DA:5B:F0:10:D4:E3:14:6E:FC:C5:63:95:F0 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b4:27:56:72:6e:b9:b8:84:2c:88:df:c1:e6:27:51:85:28: 34:fd:85:9c:d7:cb:2f:23:85:20:3c:6d:8e:be:5e:d3:11:89: 88:4f:d1:a1:35:a4:4d:33:12:82:f3:37:3c:d0:25:38:ad:2f: 20:b3:10:bf:b9:bc:82:9a:a1:1e:6d:be:13:a0:02:d2:c3:93: 13:bd:ef:66:a7:be:fb:20:21:38:a6:89:b8:f4:64:9d:a1:03: 9c:17:80:44:05:e1:f4:43:be:f6:bc:d2:a5:cd:cc:65:9f:45: 81:5e:f4:d8:97:dd:f7:94:79:b9:f7:2f:67:dc:01:c5:b0:db: ab:6e:1c:39:20:73:04:1e:0b:83:9a:bb:d9:42:6c:e0:bc:24: 12:af:1f:ce:3d:9e:aa:2e:2f:98:aa:78:68:e6:6e:30:71:8a: dc:b6:a7:80:39:e2:82:06:ae:e9:42:d0:f7:ba:21:4a:50:14: f4:83:a9:2a:87:1b:26:57:5b:db:6f:78:0f:a3:7b:06:18:96: 2f:99:5d:23:76:f9:0d:71:78:f3:73:be:83:55:65:39:aa:c5: 8a:a3:f7:00:88:e8:86:b3:4a:18:79:c4:3f:ed:83:87:16:4a: 9d:df:5f:41:a9:9e:d5:43:de:b1:f6:66:83:90:61:38:b2:3c: 75:11:7a:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjYwOTI2MTU0MjU4WhcNMjYxMDAzMTU0MjU4WjAYMRYwFAYD VQQDEw02YWI3ZTgwMi01NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApozM+neBfW7ZBsIt9ULJYwTJ1ISJBrFf1YXtNEtMJfeLv8nDBue4K7x1TWyh Y0rmOEFsYj3fE3vER42p+yENVAJeG8ARxNACEDrUn1npRoBZO4FgDlMZH6i1D8Aq jBpixR4MP9BdPx2XNKARwEuj3VL3GaDOxUroyNtyfNLvAJL/j0RN1JivJa2eIw7n 24XOMYddv6KUQhPYHtsFyB0aSr9MYeOdNzuuCSqccL8kLxgGI5Xtw/YfnCPOJsQu NvOZuABp5e9ueaVMhvp+WCukwUB0xxMHD5kRRmCqfWK35xX720utfJC38fj6TvMy weSR19Uy+df5RoYdV4izqQe7GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDj4K3Sl LMzaW/AQ1OMUbvzFY5XwMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfrQnVnJuubiELIjfweYnUYUoNP2FnNfLLyOFIDxtjr5e0xGJiE/RoTWkTTMS gvM3PNAlOK0vILMQv7m8gpqhHm2+E6AC0sOTE73vZqe++yAhOKaJuPRknaEDnBeA RAXh9EO+9rzSpc3MZZ9FgV702Jfd95R5ufcvZ9wBxbDbq24cOSBzBB4Lg5q72UJs 4LwkEq8fzj2eqi4vmKp4aOZuMHGK3LangDniggau6ULQ97ohSlAU9IOpKocbJldb 2294D6N7BhiWL5ldI3b5DXF483O+g1VlOarFiqP3AIjohrNKGHnEP+2DhxZKnd9f Qame1UPesfZmg5BhOLI8dRF6+A== -----END CERTIFICATE-----Generated at Sat Sep 26 20:05:08 2026 by rpki-client