$ rpki-client -vvvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: Uf6dNE/NWxAAM9Mtj25NVk+DwoUUudIQegv1fBmaO58= Subject key identifier: F6:BC:1B:AF:80:00:FB:5C:97:89:B2:8E:1E:0A:01:69:E6:1E:6E:84 Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: 9C Signing time: Wed 23 Sep 2026 07:12:34 +0000 Manifest this update: Wed 23 Sep 2026 07:12:33 +0000 Manifest next update: Wed 30 Sep 2026 07:12:33 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: wB7RFb0suUPdnp0BMD90pGbTHNTcTWDFTfcfkN3fxEg=) 2: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: mz9UKWkuiJrFpRnaeaMg8OM3K+wuun2W3xdMzsv7kig=) 3: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: Jv5BJrTJeaBGXUeY94Ls0qo9A275bsyOi9VK8HD+iNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Sep 23 07:12:33 2026 GMT Not After : Sep 30 07:12:33 2026 GMT Subject: CN=6ab37be1-c2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:f6:d2:f6:29:cf:f0:67:51:fb:e5:7f:78: 0b:f9:29:0f:ae:c0:01:68:8b:50:65:34:bc:37:2c: 9f:a8:24:60:06:cf:3c:3f:e0:32:7e:9a:b6:57:3b: ad:03:0d:31:83:1e:8c:57:89:4b:d5:f3:eb:f7:27: 79:9c:7d:b7:fc:24:2f:f3:b7:b4:84:4c:df:f9:fe: 0a:df:e8:81:94:ed:63:d5:01:db:6a:9f:d4:bd:cf: 8c:1b:f0:8c:c2:2e:61:4f:5d:0c:f8:cc:d7:19:53: 89:a9:f2:c1:6e:81:f8:69:3a:fe:c5:e7:aa:40:5c: f0:3b:8c:5c:e8:f1:f0:61:31:b0:7e:a4:05:83:78: 18:26:ab:6d:74:5a:57:86:e3:98:e7:78:eb:7b:15: bc:f5:54:3c:8d:51:5c:15:7a:55:77:02:95:51:85: ab:f0:b0:97:c2:2c:df:f7:5d:d7:67:48:5b:25:35: ee:db:a9:92:0b:1c:5a:71:93:cf:52:53:92:e5:0b: 49:85:a1:20:3f:5e:85:e0:ea:7d:69:ba:2d:25:72: 53:9b:cd:d5:ff:5c:aa:54:4c:3e:e2:9f:39:85:95: 9a:4e:2f:bf:9a:f5:73:84:a1:65:02:01:83:68:10: 3f:03:21:e3:00:5e:af:8a:86:1d:60:e9:b2:78:ba: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:1B:AF:80:00:FB:5C:97:89:B2:8E:1E:0A:01:69:E6:1E:6E:84 X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d9:db:97:89:95:f1:3f:1b:51:3c:8a:b9:b0:82:6c:88:64: 57:0b:54:20:00:a6:14:c6:92:38:b4:ff:3e:20:3c:87:d5:65: c8:8a:02:7d:19:95:08:83:dd:05:65:4d:7f:b2:bf:12:97:ab: 73:7a:51:07:7c:d5:cf:99:33:b9:3d:23:05:30:65:34:66:63: bf:b4:a0:ef:cb:6c:46:40:eb:4c:62:bf:03:ec:a6:c9:7e:44: 27:2a:66:ad:47:aa:9b:ef:fa:b0:d0:11:97:68:1b:49:c6:59: d5:b3:fa:cc:15:59:fb:30:34:ea:53:91:ea:b5:ac:2d:16:f1: 92:cc:d5:f7:23:7e:aa:9b:17:7a:41:0a:f6:4d:9a:cb:05:70: 36:7b:ba:5d:c7:ee:4b:43:5d:57:b3:aa:ff:22:de:ec:c0:50: bf:74:cf:67:0d:c8:f4:ca:eb:d8:cb:7b:72:a4:2c:25:fb:43: 38:01:8b:ee:3a:09:4b:44:5e:d0:cc:cc:c1:b2:4e:c4:db:dd: 53:af:c9:38:85:d3:d3:9f:d3:f4:4f:44:43:bf:ee:d1:e6:2a: e1:af:ca:9c:41:d1:3b:a5:4c:48:e1:0f:0a:81:ef:b7:d7:d3: ae:7c:58:93:f1:fd:13:21:b3:23:70:d6:6d:ab:72:f4:cd:75: 15:31:2d:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4RkYxMTAvBgNVBAUTKEYyNEYxNDcxNzIzQTY0RTRENTcwREJCMEQ0NEM4MjQz MDU0MjYyNjYwHhcNMjYwOTIzMDcxMjMzWhcNMjYwOTMwMDcxMjMzWjAYMRYwFAYD VQQDEw02YWIzN2JlMS1jMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2b20vYpz/BnUfvlf3gL+SkPrsABaItQZTS8NyyfqCRgBs88P+Ayfpq2Vzut Aw0xgx6MV4lL1fPr9yd5nH23/CQv87e0hEzf+f4K3+iBlO1j1QHbap/Uvc+MG/CM wi5hT10M+MzXGVOJqfLBboH4aTr+xeeqQFzwO4xc6PHwYTGwfqQFg3gYJqttdFpX huOY53jrexW89VQ8jVFcFXpVdwKVUYWr8LCXwizf913XZ0hbJTXu26mSCxxacZPP UlOS5QtJhaEgP16F4Op9abotJXJTm83V/1yqVEw+4p85hZWaTi+/mvVzhKFlAgGD aBA/AyHjAF6vioYdYOmyeLo4dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPa8G6+A APtcl4myjh4KAWnmHm6EMB8GA1UdIwQYMBaAFPJPFHFyOmTk1XDbsNRMgkMFQmJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThGRi80RTNDQjZDMEQ3 MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJNlpPVFZjTnV3MUV5Q1F3VkNZ bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1ltWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThGRi80RTNDQjZDMEQ3MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJNlpP VFZjTnV3MUV5Q1F3VkNZbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAitnbl4mV8T8bUTyKubCCbIhkVwtUIACmFMaSOLT/PiA8h9VlyIoCfRmVCIPd BWVNf7K/Eperc3pRB3zVz5kzuT0jBTBlNGZjv7Sg78tsRkDrTGK/A+ymyX5EJypm rUeqm+/6sNARl2gbScZZ1bP6zBVZ+zA06lOR6rWsLRbxkszV9yN+qpsXekEK9k2a ywVwNnu6XcfuS0NdV7Oq/yLe7MBQv3TPZw3I9Mrr2Mt7cqQsJftDOAGL7joJS0Re 0MzMwbJOxNvdU6/JOIXT05/T9E9EQ7/u0eYq4a/KnEHRO6VMSOEPCoHvt9fTrnxY k/H9EyGzI3DWbaty9M11FTEtNQ== -----END CERTIFICATE-----Generated at Fri Sep 25 07:23:10 2026 by rpki-client