$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft File: b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json) Hash identifier: J0NvU1bvnLPCygTingj3vSnFUwUdSm1w5VPsMlLlwBo= Subject key identifier: C7:EC:46:FC:02:94:2A:28:A0:FE:4E:6E:F0:FA:37:57:7E:A8:FE:D4 Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0E61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft Manifest number: 0E30 Signing time: Sat 26 Sep 2026 17:53:22 +0000 Manifest this update: Sat 26 Sep 2026 17:53:22 +0000 Manifest next update: Sat 03 Oct 2026 17:53:22 +0000 Files and hashes: 1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: Cikxs6GxcHwzR8iHY++jfrojz96g1mX6uqSJeSVDPF4=) 2: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (hash: meOmGfY3r0GblklalG+4OMMAMZcdYPQdKS2Ett97RO8=) 3: 11815E36135311EE94A8A114C4F9AE02.roa (hash: T5GAbC0yTN338KtcDTUO9gQz4ASEYtGI5aC6qczg2W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3681 (0xe61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Sep 26 17:53:22 2026 GMT Not After : Oct 3 17:53:22 2026 GMT Subject: CN=6ab80692-486f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:8e:5d:5d:53:7e:85:b1:78:e9:bb:78:d9: cd:20:66:ce:99:50:74:69:ff:87:bb:df:12:a8:45: 84:15:48:3f:82:51:af:dd:9d:2a:78:be:e4:2b:33: 6b:37:42:fd:8a:4d:06:f3:e1:99:1c:81:a5:ae:0a: 07:3b:91:b5:95:22:4c:93:ec:66:e2:1f:5f:89:fa: 0c:27:a8:7f:ba:b5:c4:c4:62:6e:c4:5b:e6:23:fe: 78:7b:63:ba:43:a3:29:db:75:00:4d:0c:ca:f1:43: ab:c5:11:79:5b:e2:30:af:6c:86:dd:32:16:a5:3e: a5:e9:80:4e:aa:2d:eb:4c:da:de:f1:6d:7d:f1:3d: 9b:55:c4:c9:25:87:80:ab:51:12:29:7a:a3:53:09: ed:8f:de:b7:6c:a6:c3:80:b5:6e:22:77:c0:48:1f: f6:1e:78:4d:68:54:ce:70:08:27:45:c3:31:6d:08: cb:a7:75:73:85:4f:44:c3:a9:2c:5c:01:44:a9:32: d5:88:12:3d:48:05:b4:77:11:d7:d6:87:da:f3:be: ce:1a:75:79:c1:b3:a7:59:63:cb:b8:c7:df:23:8e: 45:bf:91:2b:a5:25:2a:3a:72:1c:dc:0f:3f:24:7c: e5:d4:b5:cd:8a:bb:9b:88:32:36:8d:be:af:e0:09: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EC:46:FC:02:94:2A:28:A0:FE:4E:6E:F0:FA:37:57:7E:A8:FE:D4 X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:54:82:58:28:e4:3c:8a:e6:f0:e4:ea:f6:8b:b0:93:9b:d2: f8:36:55:da:ec:b6:cd:03:97:aa:39:5a:ba:4d:e0:7e:2f:ba: ca:a8:82:33:f0:c1:87:31:ba:4f:48:71:df:4d:70:9d:4b:58: 9f:44:80:6c:a8:12:5b:77:4d:8a:8e:6e:5f:a1:89:72:29:3b: df:a9:12:0c:77:7f:e6:a5:f0:de:ff:b5:c2:a1:86:12:2b:80: 0f:7f:30:f4:52:87:6c:6e:da:67:2a:13:91:16:cf:11:66:b3: bc:bb:ab:a1:5b:a8:81:ce:7c:77:e2:61:88:83:1b:8b:9a:1b: a5:02:0d:82:fc:f7:17:fc:5e:b5:d3:f1:7b:ba:36:14:b8:47: b9:41:c2:1e:c2:1f:19:9b:a0:b6:c9:ae:ab:48:13:93:9d:24: c8:5b:14:51:f2:47:b7:70:bd:24:5e:d3:ab:e1:e6:10:a3:83: 68:f6:25:1d:05:e3:f0:88:b1:f8:33:1a:dd:cf:af:a9:34:64: 89:28:f1:41:91:3f:fd:92:9a:44:9f:a3:48:28:de:14:da:42: 24:20:c9:13:c2:9a:b0:53:6a:a3:5f:cf:5f:07:09:0e:f3:f0: ac:b7:5f:32:79:32:49:05:87:39:8f:05:e0:eb:f0:a1:71:4f: e8:3b:13:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjYwOTI2MTc1MzIyWhcNMjYxMDAzMTc1MzIyWjAYMRYwFAYD VQQDEw02YWI4MDY5Mi00ODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLSOXV1TfoWxeOm7eNnNIGbOmVB0af+Hu98SqEWEFUg/glGv3Z0qeL7kKzNr N0L9ik0G8+GZHIGlrgoHO5G1lSJMk+xm4h9fifoMJ6h/urXExGJuxFvmI/54e2O6 Q6Mp23UATQzK8UOrxRF5W+Iwr2yG3TIWpT6l6YBOqi3rTNre8W198T2bVcTJJYeA q1ESKXqjUwntj963bKbDgLVuInfASB/2HnhNaFTOcAgnRcMxbQjLp3VzhU9Ew6ks XAFEqTLViBI9SAW0dxHX1ofa877OGnV5wbOnWWPLuMffI45Fv5ErpSUqOnIc3A8/ JHzl1LXNirubiDI2jb6v4AlU5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfsRvwC lCoooP5ObvD6N1d+qP7UMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx Ty13UlNhRzlzdTJ5azhuWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf1SCWCjkPIrm8OTq9ouwk5vS+DZV2uy2zQOXqjlauk3gfi+6yqiCM/DBhzG6 T0hx301wnUtYn0SAbKgSW3dNio5uX6GJcik736kSDHd/5qXw3v+1wqGGEiuAD38w 9FKHbG7aZyoTkRbPEWazvLuroVuogc58d+JhiIMbi5obpQINgvz3F/xetdPxe7o2 FLhHuUHCHsIfGZugtsmuq0gTk50kyFsUUfJHt3C9JF7Tq+HmEKODaPYlHQXj8Iix +DMa3c+vqTRkiSjxQZE//ZKaRJ+jSCjeFNpCJCDJE8KasFNqo1/PXwcJDvPwrLdf MnkySQWHOY8F4OvwoXFP6DsTIQ== -----END CERTIFICATE-----Generated at Mon Sep 28 20:44:37 2026 by rpki-client