$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json) Hash identifier: NszqwLlC//gk96/l+MaBf0d0R6V79rdp/yKCgp6Ge58= Subject key identifier: FB:B4:AF:C5:BD:FC:34:BF:A2:54:F0:3C:F6:A1:AB:26:3E:F3:A0:1E Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft Manifest number: 048F Signing time: Tue 22 Sep 2026 23:37:42 +0000 Manifest this update: Tue 22 Sep 2026 23:37:42 +0000 Manifest next update: Tue 29 Sep 2026 23:37:42 +0000 Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: gS2OiXqqlygzgBRFj8mofWlTXMcX1M/B6050w2DOffs=) 2: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: 8IoFb/TuJGa8f+hLPDSGTarCT7mkVKZq9W7cRCzmXZc=) 3: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: X5PDT1MbgloBsVHEEErT26cO3WdhXztNkcjjEpdBJNM=) 4: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: wPvXbMRDdeZ16YQAsG5yxXC1oVke0Is094fp9Wnssro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Sep 22 23:37:42 2026 GMT Not After : Sep 29 23:37:42 2026 GMT Subject: CN=6ab31146-1c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:07:a4:c6:d5:01:20:16:bd:4e:98:56:b0: 97:06:02:04:5b:6a:8e:c6:08:6b:b3:76:02:ca:19: 4b:b5:f8:29:6d:1b:37:68:d5:70:9b:5a:3e:94:61: cb:a3:fa:57:7e:9b:e8:4a:cf:0b:1e:14:16:dc:1d: 38:fb:23:0b:32:8b:22:7d:4f:9d:d3:ee:cf:64:0e: 66:28:5c:d6:80:0e:7f:f4:d6:eb:66:41:09:a5:8a: 3e:25:08:69:4f:05:1c:da:5b:3e:47:12:41:8d:f0: 8d:cc:9e:84:7c:6a:6e:49:89:75:eb:82:dc:c2:df: ff:03:03:20:90:95:38:5b:ee:47:7f:66:d8:ea:5a: 61:6c:49:50:e4:cf:54:85:42:31:d2:1a:f9:f1:85: e0:7a:c5:81:16:d1:32:da:fe:aa:63:d1:e8:2b:e7: d8:70:ec:4f:bb:f4:f6:4a:56:de:40:2c:f8:ff:3e: 07:df:57:ce:1f:25:79:7b:70:e3:c7:cd:e1:79:fe: 16:62:17:dc:42:85:88:46:46:0b:09:16:c5:f0:6a: 4c:2d:1c:66:79:9d:78:19:d9:80:5c:f4:a4:5f:67: 45:a4:06:89:b5:b3:9e:14:de:ab:ee:96:40:11:15: da:b4:01:4c:2c:19:f4:3a:76:8f:44:9a:3b:86:e3: e7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B4:AF:C5:BD:FC:34:BF:A2:54:F0:3C:F6:A1:AB:26:3E:F3:A0:1E X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ec:cf:95:cc:29:51:8c:b6:7d:7d:b3:38:ca:ea:83:3a:1e: d5:9f:9b:b3:a8:0a:f9:78:82:41:32:9e:97:d8:bd:02:61:8f: 33:95:dd:41:d6:d5:03:90:62:0e:58:1d:71:7b:3d:ca:3f:dd: a2:12:86:48:a6:0c:b6:d1:27:d2:a3:54:24:51:6c:41:d0:ee: 3a:7f:06:2c:a5:fa:18:cf:7c:2a:f4:78:40:ef:a1:1c:64:b6: 67:24:01:6c:1e:43:35:5f:39:b1:36:a1:d0:8f:ba:e8:ec:a9: 64:bc:f2:8d:44:c4:04:71:a2:de:de:1e:fd:93:a6:06:e8:63: 5d:24:18:cc:9e:c2:e9:e6:b8:23:94:e1:80:07:5a:df:45:4c: c6:75:c7:56:27:68:96:75:ea:43:55:12:8a:eb:61:e5:f4:39: bd:f5:3b:1a:e9:5d:8b:bd:ad:44:5a:c7:f2:49:14:55:55:a4: f4:a6:9e:1e:7d:76:28:d2:d6:94:2a:0f:cb:64:ba:f5:60:22: c6:a9:4b:30:37:77:fc:6e:14:fd:ff:b9:28:3c:99:7c:5e:55: 55:c4:38:6c:1d:9b:99:61:60:4e:0e:6c:29:d7:c2:66:73:47: 85:4b:c3:51:87:d7:ad:f3:90:bf:f5:69:69:8b:f7:f2:1b:e5: e7:b0:e4:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjYwOTIyMjMzNzQyWhcNMjYwOTI5MjMzNzQyWjAYMRYwFAYD VQQDEw02YWIzMTE0Ni0xYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiFwHpMbVASAWvU6YVrCXBgIEW2qOxghrs3YCyhlLtfgpbRs3aNVwm1o+lGHL o/pXfpvoSs8LHhQW3B04+yMLMosifU+d0+7PZA5mKFzWgA5/9NbrZkEJpYo+JQhp TwUc2ls+RxJBjfCNzJ6EfGpuSYl164Lcwt//AwMgkJU4W+5Hf2bY6lphbElQ5M9U hUIx0hr58YXgesWBFtEy2v6qY9HoK+fYcOxPu/T2SlbeQCz4/z4H31fOHyV5e3Dj x83hef4WYhfcQoWIRkYLCRbF8GpMLRxmeZ14GdmAXPSkX2dFpAaJtbOeFN6r7pZA ERXatAFMLBn0OnaPRJo7huPnnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPu0r8W9 /DS/olTwPPahqyY+86AeMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFp Ymp4WVNuQ3JQbEo3TURnWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQOzPlcwpUYy2fX2zOMrqgzoe1Z+bs6gK+XiCQTKel9i9AmGPM5XdQdbVA5Bi DlgdcXs9yj/dohKGSKYMttEn0qNUJFFsQdDuOn8GLKX6GM98KvR4QO+hHGS2ZyQB bB5DNV85sTah0I+66OypZLzyjUTEBHGi3t4e/ZOmBuhjXSQYzJ7C6ea4I5ThgAda 30VMxnXHVidolnXqQ1USiuth5fQ5vfU7Guldi72tRFrH8kkUVVWk9KaeHn12KNLW lCoPy2S69WAixqlLMDd3/G4U/f+5KDyZfF5VVcQ4bB2bmWFgTg5sKdfCZnNHhUvD UYfXrfOQv/VpaYv38hvl57DksQ== -----END CERTIFICATE-----Generated at Wed Sep 23 02:07:38 2026 by rpki-client