$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: OMun7aP+gF5nsgrwQE4fyJ8UQPDa0PPvblHHjDGZXNs= Subject key identifier: 01:4F:DD:07:02:8D:A4:6C:5F:7C:43:F2:2A:14:41:77:E0:E2:0A:99 Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 61F4 Signing time: Tue 22 Sep 2026 14:15:23 +0000 Manifest this update: Tue 22 Sep 2026 14:15:22 +0000 Manifest next update: Tue 29 Sep 2026 14:15:22 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: fFv4xuU13+sKO1J/F8fwghc1yxPxNpa4oqZUDvfSPEc=) 2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: YDV7BZcSxL/GS299L5qq5wTtV0pYOQjm37aNEWD8Hpo=) 3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: NApQDfsxt7jjKOoha5lUsKRVPKureaiiyrSOLJMc2s4=) 4: 813E372A946711F081C10711C4F9AE02.roa (hash: +aXUNX9qlvBiYmtIZkuO8Q0af6FFXfqW610bes/6qYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Sep 22 14:15:22 2026 GMT Not After : Sep 29 14:15:22 2026 GMT Subject: CN=6ab28d7b-3249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ac:12:94:57:fd:65:b0:2f:2d:58:4e:ad:57: 3f:9f:17:79:cc:6f:b1:ec:65:85:be:66:29:22:c5: 21:94:c4:75:fc:0c:22:06:77:ce:b5:b8:47:54:44: ca:3a:bc:20:c7:59:4c:fc:a4:57:54:27:12:c3:6b: a6:f9:39:09:fb:76:cc:1c:31:2e:9b:cc:20:85:0f: ad:0c:4a:11:d2:7d:9d:45:b7:e8:0a:4f:20:b8:08: 60:33:43:49:7b:23:be:1b:6e:d1:de:5e:3b:0b:99: bd:e1:5d:2a:01:0c:ec:6c:37:d2:f5:82:17:0d:f7: 0d:d9:eb:84:9b:b7:5b:b8:bb:f2:86:cf:76:9d:f9: ac:49:1d:6e:95:63:9b:fa:d6:c9:5a:5e:1b:c5:28: 42:d0:8c:aa:3a:78:47:0b:d6:78:1d:82:79:72:e3: 45:a4:fa:c2:b3:f0:0a:bc:52:be:75:b1:45:97:7f: f4:28:88:44:e3:25:3f:3c:63:1c:19:7d:49:b6:95: 51:fa:f1:fe:43:5e:ae:82:21:88:12:42:35:70:bf: 8c:82:d7:e6:00:f3:a4:61:47:96:77:cf:fa:09:6c: 6d:fc:b1:6e:ff:ad:8c:90:12:97:c1:3c:6d:a1:a5: 25:47:7a:0a:03:7c:e3:6d:74:65:15:f5:e9:01:89: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4F:DD:07:02:8D:A4:6C:5F:7C:43:F2:2A:14:41:77:E0:E2:0A:99 X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:78:53:97:67:59:6a:d2:48:28:83:97:4d:04:d4:e2:98:40: 18:9d:fc:8b:f5:37:08:f1:d5:09:e1:e7:dd:ad:9e:f5:bb:b0: 9e:7b:18:12:89:58:dc:d0:96:61:34:84:44:59:5b:0e:fb:e1: 5b:75:d1:4a:db:bd:ce:8b:c1:d0:91:a3:45:ff:b6:f0:f4:05: 4e:b1:33:8d:77:e3:3f:32:33:2d:3a:f8:14:2a:f8:26:ff:ca: 38:fe:80:92:56:11:55:70:9e:42:99:f3:c0:11:90:cf:d7:64: 6c:55:41:fd:48:fb:4a:aa:d2:50:26:33:62:84:13:db:82:63: 50:a4:aa:fd:5b:81:f7:93:52:71:7b:fe:f6:19:87:ce:33:ec: 4f:a1:4b:21:5e:ab:c0:80:43:7a:e2:ad:4e:7c:e8:4a:6b:ab: bb:82:98:b0:be:32:4b:bb:d1:43:01:57:2c:54:cd:dd:c3:07: ac:5b:f8:e2:9a:fa:ee:fb:d7:06:44:4d:91:01:c5:5a:3d:92: 85:e8:ef:90:f2:0a:8f:fe:bd:73:8d:a8:ce:c5:fe:e9:ee:81: a0:b5:6d:39:f7:41:53:3b:d1:ae:81:f8:d7:45:b8:0a:1f:fd: 8e:cb:65:a4:44:eb:c7:60:67:41:e4:f2:11:ee:da:60:d7:a7: b1:fa:2c:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjYwOTIyMTQxNTIyWhcNMjYwOTI5MTQxNTIyWjAYMRYwFAYD VQQDEw02YWIyOGQ3Yi0zMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlawSlFf9ZbAvLVhOrVc/nxd5zG+x7GWFvmYpIsUhlMR1/AwiBnfOtbhHVETK Orwgx1lM/KRXVCcSw2um+TkJ+3bMHDEum8wghQ+tDEoR0n2dRbfoCk8guAhgM0NJ eyO+G27R3l47C5m94V0qAQzsbDfS9YIXDfcN2euEm7dbuLvyhs92nfmsSR1ulWOb +tbJWl4bxShC0IyqOnhHC9Z4HYJ5cuNFpPrCs/AKvFK+dbFFl3/0KIhE4yU/PGMc GX1JtpVR+vH+Q16ugiGIEkI1cL+MgtfmAPOkYUeWd8/6CWxt/LFu/62MkBKXwTxt oaUlR3oKA3zjbXRlFfXpAYnmCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFP3QcC jaRsX3xD8ioUQXfg4gqZMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApXhTl2dZatJIKIOXTQTU4phAGJ38i/U3CPHVCeHn3a2e9buwnnsYEolY3NCW YTSERFlbDvvhW3XRStu9zovB0JGjRf+28PQFTrEzjXfjPzIzLTr4FCr4Jv/KOP6A klYRVXCeQpnzwBGQz9dkbFVB/Uj7SqrSUCYzYoQT24JjUKSq/VuB95NScXv+9hmH zjPsT6FLIV6rwIBDeuKtTnzoSmuru4KYsL4yS7vRQwFXLFTN3cMHrFv44pr67vvX BkRNkQHFWj2ShejvkPIKj/69c42ozsX+6e6BoLVtOfdBUzvRroH410W4Ch/9jstl pETrx2BnQeTyEe7aYNensfosyQ== -----END CERTIFICATE-----Generated at Wed Sep 23 17:24:24 2026 by rpki-client