$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json) Hash identifier: 7HeZFR49h/S9HJpbgPC2TiOfgIpAKjEfkNsw5zL/IFo= Subject key identifier: 1F:F2:F7:D0:2D:08:35:16:6F:5E:6D:A7:D6:12:6B:2F:AB:54:1C:E6 Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft Manifest number: FB Signing time: Wed 23 Sep 2026 06:07:23 +0000 Manifest this update: Wed 23 Sep 2026 06:07:22 +0000 Manifest next update: Wed 30 Sep 2026 06:07:22 +0000 Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: fx//A/RpY0fYE7vn3hi1ZMQ8urjIiiYAysYTJ4p6COg=) 2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Validity Not Before: Sep 23 06:07:22 2026 GMT Not After : Sep 30 06:07:22 2026 GMT Subject: CN=6ab36c9b-7b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:c7:4d:35:22:14:43:25:70:92:dd:c9:b1: ed:a9:1d:05:73:b9:d3:e8:25:a0:dd:16:fd:be:ed: 55:45:4b:05:6f:7d:77:34:ac:95:61:b6:b4:33:e1: 11:59:96:ca:7d:c7:f7:98:ff:0b:0b:73:35:63:7b: 43:ec:21:31:68:c0:34:11:3d:a6:9f:43:03:90:94: 12:cb:83:a0:48:0f:3a:e4:b7:e8:34:70:f6:09:a8: 4c:b7:48:44:a6:5b:9c:da:70:18:65:1c:de:34:18: b8:12:c1:47:68:51:2e:46:50:55:3d:05:2f:60:56: 4e:f4:61:4f:b6:32:ec:24:1d:ff:99:85:57:ed:fd: f2:be:04:31:93:7f:fe:80:72:0f:73:6d:07:89:15: aa:e6:4a:ac:8e:09:88:d0:8e:60:23:f6:65:48:14: 4b:49:d3:a2:07:4f:56:61:cc:75:2d:a5:55:26:34: 8c:f8:35:da:21:a6:00:92:cd:02:62:cf:9b:c6:69: 9a:a5:fd:e2:cd:74:4e:82:f7:e8:b8:9b:8f:22:aa: 7b:3e:61:40:0e:e1:fa:ca:a0:9f:7c:c9:e0:39:7e: 41:2d:e2:1c:50:13:64:40:d1:92:bc:f0:19:0b:b5: b8:43:13:13:f9:10:f8:92:bb:08:25:78:89:73:2c: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F2:F7:D0:2D:08:35:16:6F:5E:6D:A7:D6:12:6B:2F:AB:54:1C:E6 X509v3 Authority Key Identifier: keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:11:9a:0e:4c:12:df:f8:5f:32:05:67:b3:57:a7:76:6d:d4: be:c6:5f:eb:94:7e:a8:1b:07:22:cd:49:4e:02:51:93:07:26: f7:cd:dc:8d:59:2e:f6:94:ac:ba:f3:99:68:34:ed:bd:19:c0: 40:32:d2:60:2f:d6:8f:04:d8:a5:6c:e0:e2:86:91:44:8d:95: 26:e2:28:16:99:f6:bb:bf:ba:fa:60:cd:27:3a:e6:87:ba:96: 6a:78:e5:c4:d9:83:34:2c:27:c6:2e:7b:cf:56:93:44:9b:bc: fe:a5:62:36:9c:38:5b:18:65:ff:64:a7:e2:f2:fe:bd:ca:87: 92:0c:56:6c:69:dc:d0:47:57:b5:94:56:b1:a8:a1:e1:75:a5: 2b:79:3d:b7:7e:ab:c7:86:a1:58:5d:e9:8e:05:5e:90:ef:9a: c1:ea:b3:5d:a8:2c:cd:88:f9:38:84:1c:80:77:b6:fc:09:f3: 90:2e:ee:e5:fd:9a:3a:cd:3d:7f:bf:ec:91:44:20:c3:12:ff: ff:d9:ee:d0:58:13:d0:fd:6f:4c:d5:23:6d:b8:57:8d:73:f2: d6:ac:f9:0d:36:3d:07:e7:f0:36:b1:0d:a4:06:6a:6f:a0:4c: 85:dd:9f:cf:1f:b8:42:f2:d2:a4:78:a4:90:72:94:83:2e:c5: 7b:3c:17:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkExMTAvBgNVBAUTKEYxNUM1QzVCQTUyMTQ1MzcwN0M4MUY1RkVDMDgxMUJG MjFDRkY0MEUwHhcNMjYwOTIzMDYwNzIyWhcNMjYwOTMwMDYwNzIyWjAYMRYwFAYD VQQDEw02YWIzNmM5Yi03YjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAounHTTUiFEMlcJLdybHtqR0Fc7nT6CWg3Rb9vu1VRUsFb313NKyVYba0M+ER WZbKfcf3mP8LC3M1Y3tD7CExaMA0ET2mn0MDkJQSy4OgSA865LfoNHD2CahMt0hE pluc2nAYZRzeNBi4EsFHaFEuRlBVPQUvYFZO9GFPtjLsJB3/mYVX7f3yvgQxk3/+ gHIPc20HiRWq5kqsjgmI0I5gI/ZlSBRLSdOiB09WYcx1LaVVJjSM+DXaIaYAks0C Ys+bxmmapf3izXROgvfouJuPIqp7PmFADuH6yqCffMngOX5BLeIcUBNkQNGSvPAZ C7W4QxMT+RD4krsIJXiJcyzB/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/y99At CDUWb15tp9YSay+rVBzmMB8GA1UdIwQYMBaAFPFcXFulIUU3B8gfX+wIEb8hz/QO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGQS85QTg3M0VCMDQ1 QTMxMUYwOTVFRkZENDhDNEY5QUUwMi84VnhjVzZVaFJUY0h5QjlmN0FnUnZ5SFA5 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFGQS85QTg3M0VCMDQ1QTMxMUYwOTVFRkZENDhDNEY5QUUwMi84VnhjVzZVaFJU Y0h5QjlmN0FnUnZ5SFA5QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQxGaDkwS3/hfMgVns1endm3UvsZf65R+qBsHIs1JTgJRkwcm983cjVku9pSs uvOZaDTtvRnAQDLSYC/WjwTYpWzg4oaRRI2VJuIoFpn2u7+6+mDNJzrmh7qWanjl xNmDNCwnxi57z1aTRJu8/qViNpw4Wxhl/2Sn4vL+vcqHkgxWbGnc0EdXtZRWsaih 4XWlK3k9t36rx4ahWF3pjgVekO+aweqzXagszYj5OIQcgHe2/AnzkC7u5f2aOs09 f7/skUQgwxL//9nu0FgT0P1vTNUjbbhXjXPy1qz5DTY9B+fwNrENpAZqb6BMhd2f zx+4QvLSpHikkHKUgy7FezwXGw== -----END CERTIFICATE-----Generated at Fri Sep 25 01:14:53 2026 by rpki-client