$ rpki-client -vvvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: OVgpvdRFqsScpAN8jcPlwjJxVT9uH6Y51cpcDpG52nE= Subject key identifier: 57:CA:D4:6A:8C:0E:0B:B2:A2:52:5C:C0:1C:1B:81:6C:E8:1D:55:4D Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0E10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0DF2 Signing time: Thu 24 Sep 2026 17:49:14 +0000 Manifest this update: Thu 24 Sep 2026 17:49:14 +0000 Manifest next update: Thu 01 Oct 2026 17:49:14 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: 5qD1SxzcGQdzeMmwFhyd4nUSDoK8Z2CO2d5m8gnwAJg=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: OCSQyHL40HhtFPxjiZ0aie03NCu9qKwOOGRctAZUKss=) 3: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=) 4: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: p0qRh9uijUrBuvk2zDLygs2mx5whlrqDAoU+cadOU2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3600 (0xe10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Sep 24 17:49:14 2026 GMT Not After : Oct 1 17:49:14 2026 GMT Subject: CN=6ab5629a-dc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:bf:cf:42:44:89:30:17:05:97:e8:ea:41: fd:aa:fa:20:8a:0c:6b:d5:82:33:43:6d:f7:de:81: b6:62:51:30:2b:6f:50:14:5e:17:1b:59:4e:33:56: f5:ce:97:40:d1:97:f9:6c:bc:21:50:cc:c7:ec:74: 33:b6:25:e9:5b:df:4c:9f:0b:85:c5:75:71:ac:c9: f5:74:2b:e6:d8:ed:fb:ba:f8:2c:f9:df:52:44:af: 8b:96:4f:e0:07:93:b4:2a:f1:ae:05:86:f5:a9:cb: 65:fa:2a:3e:2b:56:08:53:a0:60:6c:8d:82:3a:7c: 9a:cc:41:87:b8:45:73:fa:30:d0:de:72:f7:b6:76: b0:44:bc:e2:b3:9a:41:47:f2:98:c8:3b:5e:f3:ab: 6c:a7:55:91:d3:00:db:61:fb:7b:93:42:1b:25:f7: e3:1e:a0:c2:84:d9:94:9a:16:d8:b9:ac:85:75:93: bb:94:74:ff:d1:e6:43:c3:22:18:4e:f1:44:53:61: 78:5e:80:49:7e:3b:6f:05:e3:df:27:c1:e8:42:b4: d3:9c:7c:44:af:62:ba:ca:a0:4b:33:95:43:65:e9: 10:a2:a4:65:4a:a6:e4:b9:15:a5:7e:c4:74:29:2a: ff:88:49:d4:41:23:14:d8:41:3d:37:74:38:83:6d: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CA:D4:6A:8C:0E:0B:B2:A2:52:5C:C0:1C:1B:81:6C:E8:1D:55:4D X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d8:4f:b7:0f:b3:b4:3a:13:98:9f:05:e8:78:74:b5:c4:6f: 0a:cc:95:10:f0:06:9d:02:de:fa:a1:f6:a2:6b:97:1c:67:43: c1:94:e2:e8:ef:d8:fd:26:c9:3f:f1:fe:fa:8c:fd:4d:63:15: ee:16:b8:95:3b:00:7b:96:42:c9:b3:0b:42:d4:d4:d1:e1:eb: c8:df:c8:1e:08:5f:e1:59:d4:47:d6:84:fd:2a:32:36:7c:90: a8:7a:14:22:42:2c:38:fe:d3:24:24:b4:4b:0b:21:a9:e8:f1: 19:95:1a:e7:e9:d6:93:d9:c8:35:d4:d7:8e:83:be:6e:a2:db: 5d:f4:ae:3c:95:0e:a2:8b:7a:da:11:07:ef:88:08:c2:a6:4f: 0a:cb:a7:c1:23:93:32:b6:30:79:73:45:d2:78:8a:ac:b3:48: 67:22:21:33:1c:aa:0d:7b:95:17:6d:a6:1b:06:3e:c4:40:ce: fa:e3:c2:d4:6c:b6:f0:5b:a8:88:c7:5e:94:3c:30:7c:6e:eb: a3:cb:2e:92:8d:22:37:95:53:d6:cf:36:81:d9:d9:0b:94:27: 10:38:b1:6f:0d:dd:66:7c:03:2f:c8:a8:8c:8e:07:d3:20:b3: bb:2e:b4:1d:81:60:7b:b7:17:88:06:b3:d9:24:7b:dc:37:af: cd:a7:dd:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwOTI0MTc0OTE0WhcNMjYxMDAxMTc0OTE0WjAYMRYwFAYD VQQDEw02YWI1NjI5YS1kYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjG/z0JEiTAXBZfo6kH9qvogigxr1YIzQ2333oG2YlEwK29QFF4XG1lOM1b1 zpdA0Zf5bLwhUMzH7HQztiXpW99MnwuFxXVxrMn1dCvm2O37uvgs+d9SRK+Llk/g B5O0KvGuBYb1qctl+io+K1YIU6BgbI2COnyazEGHuEVz+jDQ3nL3tnawRLzis5pB R/KYyDte86tsp1WR0wDbYft7k0IbJffjHqDChNmUmhbYuayFdZO7lHT/0eZDwyIY TvFEU2F4XoBJfjtvBePfJ8HoQrTTnHxEr2K6yqBLM5VDZekQoqRlSqbkuRWlfsR0 KSr/iEnUQSMU2EE9N3Q4g21PZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfK1GqM DguyolJcwBwbgWzoHVVNMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUthPtw+ztDoTmJ8F6Hh0tcRvCsyVEPAGnQLe+qH2omuXHGdDwZTi6O/Y/SbJ P/H++oz9TWMV7ha4lTsAe5ZCybMLQtTU0eHryN/IHghf4VnUR9aE/SoyNnyQqHoU IkIsOP7TJCS0SwshqejxGZUa5+nWk9nINdTXjoO+bqLbXfSuPJUOoot62hEH74gI wqZPCsunwSOTMrYweXNF0niKrLNIZyIhMxyqDXuVF22mGwY+xEDO+uPC1Gy28Fuo iMdelDwwfG7ro8suko0iN5VT1s82gdnZC5QnEDixbw3dZnwDL8iojI4H0yCzuy60 HYFge7cXiAaz2SR73DevzafdwA== -----END CERTIFICATE-----Generated at Sat Sep 26 18:44:06 2026 by rpki-client