$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: GyGjujGpDTRNF5g51+yJbW/4TXC9/Mr5BKZMPRAsyLc= Subject key identifier: 3B:12:A4:DD:03:9C:6D:E6:C9:11:AF:77:DD:25:69:48:56:62:6B:68 Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: 0136 Signing time: Wed 23 Sep 2026 05:23:07 +0000 Manifest this update: Wed 23 Sep 2026 05:23:07 +0000 Manifest next update: Wed 30 Sep 2026 05:23:07 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: xAZz2dEIGwX5QRR/rj6yqk/5iDwzDTQgWxYAFgFagkk=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: OFV7TAeYTwMYk3v0VLj9doRdmglLiVsQ3XZ6eBJ4Cug=) 3: 06EBCBDE9C8811F1A918E08B5411F970.roa (hash: gH9uwAxPYcJXVioCTcBeU7x4aSFAnH8dyB82k/ZhDLc=) 4: 57356FFE9C8911F195E754C85411F970.roa (hash: iL6MIo27bsfkvnUNjGGVu5qt/lmrrJMdfM5dFIA4pwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Sep 23 05:23:07 2026 GMT Not After : Sep 30 05:23:07 2026 GMT Subject: CN=6ab3623b-a0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:1e:4f:3c:a0:7e:57:bf:c3:ce:21:e9:a6: e1:82:39:da:cb:17:75:18:80:39:6e:50:c6:4b:d1: 65:00:f5:ca:7a:c8:b0:52:7a:52:13:4c:ae:93:00: 28:10:86:8d:96:09:6a:7f:19:f4:ac:d6:c5:7d:30: 50:8f:47:53:b6:6c:0e:29:67:10:72:f9:5c:db:f5: a4:b3:e7:88:a0:5f:05:b4:83:26:5d:48:44:bc:d4: f8:e1:16:3f:b7:38:a3:e0:f4:da:9c:61:fd:35:bb: 14:71:0d:34:16:fd:4a:bc:2d:b0:53:9f:ec:3e:17: af:11:fa:ab:34:9d:5f:97:a9:99:1a:01:84:01:a3: f3:ee:69:03:f8:a2:3e:3d:44:f4:7d:b7:29:5e:02: f3:89:34:63:4a:b1:e2:bb:d4:37:01:ea:6b:b7:37: 15:3b:9b:e2:2a:a5:c4:98:fc:48:7e:76:5e:ff:62: 43:40:94:32:c5:1c:91:11:55:55:a6:4c:c6:75:41: 5d:19:36:41:82:d2:d5:af:6f:60:a4:49:a1:4c:9e: c5:6a:68:72:a0:30:6a:48:d2:fe:39:79:85:5c:1d: 7f:75:bc:25:43:0c:ef:ff:99:31:58:a1:2f:31:f8: 1d:b9:de:b7:5a:2b:21:a4:94:1a:9d:4d:8c:7d:58: ba:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:12:A4:DD:03:9C:6D:E6:C9:11:AF:77:DD:25:69:48:56:62:6B:68 X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e9:91:e0:bd:99:62:b8:9b:49:82:59:81:33:c5:bb:7d:c1: 75:0f:c5:96:56:e5:76:16:43:fa:33:44:6c:23:3c:46:9e:05: 78:7a:c7:d4:bb:28:8b:64:7b:76:bf:84:e1:51:92:03:ae:f0: c9:7d:55:f8:50:8c:fa:80:a8:ac:af:e7:38:c1:c8:6d:e7:20: 11:ed:e8:37:11:d6:81:cd:66:52:6e:2f:6a:1f:32:c4:53:39: 3d:1a:e3:61:3a:b8:6b:13:f1:3c:de:87:93:36:fb:8d:04:85: b2:11:b2:c4:eb:37:4a:70:4e:b4:74:61:ad:f2:83:33:a5:fc: ad:b4:49:d3:19:46:37:89:86:d7:94:20:4d:7d:d8:36:c2:60: 82:35:60:1e:21:f5:a1:32:4f:27:fd:a6:e5:d4:6c:ea:0e:6b: e7:21:8b:85:d7:cd:22:b6:98:7b:0d:61:79:47:69:79:b5:f9: 55:07:fc:f1:9b:0e:79:e8:cb:a1:ea:93:e3:a4:4c:b0:9c:1f: 35:64:c7:e2:47:9c:2a:f2:38:a0:86:c3:55:a6:5e:ec:c9:ae: 2d:38:3a:3f:fe:34:9e:6a:4d:2e:be:52:a6:72:67:0c:cb:74: 35:e5:46:8a:51:6e:35:a7:dd:1b:6d:77:54:6b:27:8c:fa:b7: a0:b4:90:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjYwOTIzMDUyMzA3WhcNMjYwOTMwMDUyMzA3WjAYMRYwFAYD VQQDEw02YWIzNjIzYi1hMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhMeTzygfle/w84h6abhgjnayxd1GIA5blDGS9FlAPXKesiwUnpSE0yukwAo EIaNlglqfxn0rNbFfTBQj0dTtmwOKWcQcvlc2/Wks+eIoF8FtIMmXUhEvNT44RY/ tzij4PTanGH9NbsUcQ00Fv1KvC2wU5/sPhevEfqrNJ1fl6mZGgGEAaPz7mkD+KI+ PUT0fbcpXgLziTRjSrHiu9Q3AeprtzcVO5viKqXEmPxIfnZe/2JDQJQyxRyREVVV pkzGdUFdGTZBgtLVr29gpEmhTJ7FamhyoDBqSNL+OXmFXB1/dbwlQwzv/5kxWKEv Mfgdud63WishpJQanU2MfVi63QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsSpN0D nG3myRGvd90laUhWYmtoMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALumR4L2ZYribSYJZgTPFu33BdQ/FllbldhZD+jNEbCM8Rp4FeHrH1Lsoi2R7 dr+E4VGSA67wyX1V+FCM+oCorK/nOMHIbecgEe3oNxHWgc1mUm4vah8yxFM5PRrj YTq4axPxPN6Hkzb7jQSFshGyxOs3SnBOtHRhrfKDM6X8rbRJ0xlGN4mG15QgTX3Y NsJggjVgHiH1oTJPJ/2m5dRs6g5r5yGLhdfNIraYew1heUdpebX5VQf88ZsOeejL oeqT46RMsJwfNWTH4kecKvI4oIbDVaZe7MmuLTg6P/40nmpNLr5SpnJnDMt0NeVG ilFuNafdG213VGsnjPq3oLSQSg== -----END CERTIFICATE-----Generated at Thu Sep 24 00:58:41 2026 by rpki-client