$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: 7VGhBu3gtrBe6FCNbHvsnE6939MH1ogGsts2RM/04jg= Subject key identifier: FD:98:5B:65:8E:01:EA:E5:31:8D:F0:2E:89:EB:2F:83:01:2B:43:2D Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0622 Signing time: Tue 22 Sep 2026 22:32:07 +0000 Manifest this update: Tue 22 Sep 2026 22:32:06 +0000 Manifest next update: Tue 29 Sep 2026 22:32:06 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: 5MoLkpDBhHAQDvSkXzGLHhyAdxFSBf4KhM6xXSXo3uo=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: DfZlJoWPh+lI4zQ+0bbxX3WT7TX3vgysnssl+3x3hPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Sep 22 22:32:06 2026 GMT Not After : Sep 29 22:32:06 2026 GMT Subject: CN=6ab301e6-45da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7a:4e:74:dd:7d:d0:63:ad:ae:a3:04:ff:9d: a2:15:4d:bd:8b:92:f2:45:73:81:75:7d:29:57:ba: 85:92:3a:ca:52:8c:9e:34:22:7e:08:32:4d:ad:41: e0:17:3f:e2:51:cf:23:14:e7:11:84:1c:41:6f:47: e2:96:e5:2f:81:ab:9b:78:be:4a:97:10:62:95:77: 6d:f3:f5:cc:55:b1:ce:06:d0:f3:ec:7e:f9:70:6c: 71:ce:6c:ce:e7:2e:31:2e:6d:9c:70:5b:37:0d:ec: 7c:e5:dd:19:1c:4d:c1:b5:72:6b:39:af:f2:3d:3f: 60:ca:e4:88:0b:fa:80:0d:e4:ed:ac:d4:a5:e7:0f: 60:f0:bd:22:f5:a5:47:ac:96:aa:96:0d:17:d3:53: ab:4e:9e:3d:d9:24:e9:8a:48:6e:49:e5:e6:fc:fc: f4:d5:96:ce:c3:e3:ef:7c:57:32:a4:1a:ff:51:75: 04:60:01:ee:f3:be:80:66:e6:6b:22:36:34:19:1f: 06:a8:1e:08:1a:88:19:fd:73:7b:39:c5:3a:53:ca: 20:c4:4a:3f:be:87:6f:32:b4:a6:e1:4d:27:ee:bc: 68:94:5d:8e:eb:96:73:29:2c:a3:b9:80:62:ea:c3: 5f:09:ff:ad:d0:68:1f:ad:d2:de:cf:57:12:fe:45: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:98:5B:65:8E:01:EA:E5:31:8D:F0:2E:89:EB:2F:83:01:2B:43:2D X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:fa:b4:7e:f2:f3:40:17:76:14:c0:74:24:d3:a2:86:bf:be: a3:04:20:2c:39:ae:89:05:a6:84:33:00:68:8e:a1:be:0c:33: 18:91:77:01:1d:15:b3:d5:fc:4a:1a:0f:38:eb:47:f4:c1:c6: a9:f4:61:52:11:48:fa:65:c9:00:f9:ca:db:ea:09:47:6f:06: 2e:b6:42:16:9d:24:8b:8e:6a:6c:08:e0:81:db:67:31:09:d1: 5d:36:7c:45:ba:ef:3a:69:f4:71:27:4a:d3:ec:31:6d:0f:a1: ed:e1:a6:f4:d8:a7:a5:26:26:53:a6:78:56:c7:bc:6f:c0:2d: d6:fa:34:c1:c2:d2:31:33:20:5a:e5:7f:4d:4a:c9:e0:f5:c0: 78:a8:5c:0b:f7:ad:ee:ca:ac:ba:ad:c9:bb:bf:26:51:e9:5b: e9:d2:64:3f:85:e8:d5:54:b8:85:c9:87:5d:b4:61:10:11:8c: 4b:1f:a1:a0:92:73:32:e8:e6:0b:ec:2d:8b:1d:1c:33:b5:f7: 6c:f7:34:68:39:04:8c:22:57:d7:5b:fd:17:f2:15:72:42:17: 5e:8d:78:9e:4d:5c:b7:a9:e9:f7:9c:f3:08:c3:1b:6a:65:89: ec:36:55:31:84:a2:e6:9b:2d:1b:70:ef:40:01:ab:b2:55:fa: c0:a4:ec:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjYwOTIyMjIzMjA2WhcNMjYwOTI5MjIzMjA2WjAYMRYwFAYD VQQDEw02YWIzMDFlNi00NWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjXpOdN190GOtrqME/52iFU29i5LyRXOBdX0pV7qFkjrKUoyeNCJ+CDJNrUHg Fz/iUc8jFOcRhBxBb0filuUvgaubeL5KlxBilXdt8/XMVbHOBtDz7H75cGxxzmzO 5y4xLm2ccFs3Dex85d0ZHE3BtXJrOa/yPT9gyuSIC/qADeTtrNSl5w9g8L0i9aVH rJaqlg0X01OrTp492STpikhuSeXm/Pz01ZbOw+PvfFcypBr/UXUEYAHu876AZuZr IjY0GR8GqB4IGogZ/XN7OcU6U8ogxEo/vodvMrSm4U0n7rxolF2O65ZzKSyjuYBi 6sNfCf+t0GgfrdLez1cS/kWKawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2YW2WO AerlMY3wLonrL4MBK0MtMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArfq0fvLzQBd2FMB0JNOihr++owQgLDmuiQWmhDMAaI6hvgwzGJF3AR0Vs9X8 ShoPOOtH9MHGqfRhUhFI+mXJAPnK2+oJR28GLrZCFp0ki45qbAjggdtnMQnRXTZ8 RbrvOmn0cSdK0+wxbQ+h7eGm9NinpSYmU6Z4Vse8b8At1vo0wcLSMTMgWuV/TUrJ 4PXAeKhcC/et7sqsuq3Ju78mUelb6dJkP4Xo1VS4hcmHXbRhEBGMSx+hoJJzMujm C+wtix0cM7X3bPc0aDkEjCJX11v9F/IVckIXXo14nk1ct6np95zzCMMbamWJ7DZV MYSi5pstG3DvQAGrslX6wKTsKA== -----END CERTIFICATE-----Generated at Thu Sep 24 17:36:22 2026 by rpki-client