$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft File: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft (raw, json) Hash identifier: k8Ap+97yrYjy9D2bs2BjDuMdjUqWW1WD5wu3TL/g5UU= Subject key identifier: 20:B8:F4:5F:EE:81:D3:06:26:29:05:CE:73:F8:92:4A:33:A4:1A:54 Authority key identifier: 63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97 Certificate issuer: /CN=A916F57A/serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft Manifest number: 17 Signing time: Wed 23 Sep 2026 08:44:42 +0000 Manifest this update: Wed 23 Sep 2026 08:44:42 +0000 Manifest next update: Wed 30 Sep 2026 08:44:42 +0000 Files and hashes: 1: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl (hash: u/u/Qk23ATo50303dPTNRxUOfwBHpr32tHSpvrv2Dec=) 2: B2A83A1296C911F1ABBBAC335411F970.roa (hash: m9UsV7UjjMZ2WOx/GR0cXTiQls2vgjpyqNyxc4Qnugk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F57A, serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897 Validity Not Before: Sep 23 08:44:42 2026 GMT Not After : Sep 30 08:44:42 2026 GMT Subject: CN=6ab3917a-a9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:21:b2:8e:21:39:28:a8:69:0f:c0:bd:15: 7f:0f:9e:7a:ff:68:40:ea:ac:7b:79:d8:01:2a:ba: 10:5b:68:d3:43:f3:be:61:72:a2:c0:98:bd:90:91: fa:45:60:c8:ee:01:91:64:4e:2b:77:2d:e6:3f:34: 94:b4:eb:83:d4:be:e3:ff:66:a0:e7:8d:22:45:c9: fa:d1:1a:80:a8:cf:ed:24:0c:ac:1c:56:94:86:a7: 42:da:a8:9d:5b:20:5a:22:17:25:55:08:a5:8c:89: e0:11:3c:cc:cd:c9:48:8d:42:92:40:b5:64:98:c9: 0a:2c:31:83:ab:a9:9b:62:d8:26:17:52:4a:ed:d9: c3:0a:ae:63:0e:21:f4:66:93:d8:4b:35:f0:31:f5: 23:1e:dc:82:21:17:93:6e:1a:33:2f:fa:57:32:a1: 61:94:e9:3e:11:02:65:0d:03:6a:1b:21:59:4f:e8: 70:65:3a:7b:ed:e6:ac:45:eb:4b:81:0f:27:02:6e: 20:cc:26:16:78:da:e1:d5:56:b8:f6:61:a4:e9:62: 15:15:0e:d1:59:e2:97:93:3d:ad:b6:47:a4:91:d2: 1b:56:3f:3f:7a:36:ee:9a:b7:fb:9d:af:0e:92:ae: f3:59:38:0b:b3:b6:e2:81:db:68:5e:2b:34:05:f7: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B8:F4:5F:EE:81:D3:06:26:29:05:CE:73:F8:92:4A:33:A4:1A:54 X509v3 Authority Key Identifier: keyid:63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:83:6a:c1:b9:a0:2b:ca:76:23:d2:d2:c6:65:75:fe:ec:b2: 19:4b:6e:60:50:55:59:56:21:f6:22:46:92:64:58:7b:05:05: 98:e0:9e:58:40:fc:f9:ce:f1:27:31:4e:4f:59:57:b8:2e:a6: 1c:ab:ff:2b:41:2b:97:8b:f6:23:0a:d8:42:18:9e:b7:e4:7f: 31:86:c3:1a:7c:26:6b:ce:9d:a5:6a:47:16:44:82:ec:cd:07: 7d:20:25:4f:2c:9f:23:77:26:35:aa:c9:85:0d:2e:05:b8:56: cb:2d:b7:c5:c7:67:4e:cf:94:eb:05:20:7d:31:8e:45:4a:cb: 43:5c:96:26:f7:16:7c:b5:c8:7b:2d:68:c5:10:dc:40:31:25: 38:3f:70:1b:d1:2f:1c:4e:9a:b5:2c:6b:60:30:1d:79:c9:04: 9b:83:6d:2c:47:b3:52:cc:18:ac:a4:76:11:95:6f:1f:82:7c: 7a:c3:ea:17:9d:05:c0:85:d5:2b:54:4e:67:ff:a9:de:2c:bc: c7:27:36:d7:46:94:ae:52:3f:57:8f:a8:50:ed:ec:8d:90:15: a3:aa:ac:cf:55:a9:d6:db:4e:9d:89:77:28:b3:68:4d:d4:20: 63:96:fa:4f:92:41:62:1a:43:24:f1:97:bb:8e:2f:83:3f:be: cc:4a:4b:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjU3QTExMC8GA1UEBRMoNjNDNzFGRUIxMzkxRjYzMzQwQzhDRjBGRDExMUNGRUYy MkJBQzg5NzAeFw0yNjA5MjMwODQ0NDJaFw0yNjA5MzAwODQ0NDJaMBgxFjAUBgNV BAMTDTZhYjM5MTdhLWE5YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvHyGyjiE5KKhpD8C9FX8Pnnr/aEDqrHt52AEquhBbaNND875hcqLAmL2QkfpF YMjuAZFkTit3LeY/NJS064PUvuP/ZqDnjSJFyfrRGoCoz+0kDKwcVpSGp0LaqJ1b IFoiFyVVCKWMieARPMzNyUiNQpJAtWSYyQosMYOrqZti2CYXUkrt2cMKrmMOIfRm k9hLNfAx9SMe3IIhF5NuGjMv+lcyoWGU6T4RAmUNA2obIVlP6HBlOnvt5qxF60uB DycCbiDMJhZ42uHVVrj2YaTpYhUVDtFZ4peTPa22R6SR0htWPz96Nu6at/udrw6S rvNZOAuztuKB22heKzQF98l9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUILj0X+6B 0wYmKQXOc/iSSjOkGlQwHwYDVR0jBBgwFoAUY8cf6xOR9jNAyM8P0RHP7yK6yJcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGNTdBLzk5QUYyMTE2OTZD ODExRjFBNkMyQUMxMzU0MTFGOTcwL1k4Y2Y2eE9SOWpOQXlNOFAwUkhQN3lLNnlK Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWThjZjZ4T1I5ak5BeU04UDBSSFA3eUs2eUpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG NTdBLzk5QUYyMTE2OTZDODExRjFBNkMyQUMxMzU0MTFGOTcwL1k4Y2Y2eE9SOWpO QXlNOFAwUkhQN3lLNnlKYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7g2rBuaArynYj0tLGZXX+7LIZS25gUFVZViH2IkaSZFh7BQWY4J5YQPz5zvEn MU5PWVe4LqYcq/8rQSuXi/YjCthCGJ635H8xhsMafCZrzp2lakcWRILszQd9ICVP LJ8jdyY1qsmFDS4FuFbLLbfFx2dOz5TrBSB9MY5FSstDXJYm9xZ8tch7LWjFENxA MSU4P3Ab0S8cTpq1LGtgMB15yQSbg20sR7NSzBispHYRlW8fgnx6w+oXnQXAhdUr VE5n/6neLLzHJzbXRpSuUj9Xj6hQ7eyNkBWjqqzPVanW206diXcos2hN1CBjlvpP kkFiGkMk8Ze7ji+DP77MSkvl -----END CERTIFICATE-----Generated at Thu Sep 24 22:21:04 2026 by rpki-client