$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json) Hash identifier: xDnDHdKSLyHMJTXW0IHW0fa3GgwKECeJdpUiKoWYbnI= Subject key identifier: 85:52:FA:81:F3:07:B7:28:80:E2:C4:CE:40:0F:9F:9C:34:14:F2:B0 Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft Manifest number: 0458 Signing time: Thu 01 Oct 2026 00:28:16 +0000 Manifest this update: Thu 01 Oct 2026 00:28:16 +0000 Manifest next update: Thu 08 Oct 2026 00:28:16 +0000 Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: XGIb/R7SmVKTvidGOtw6rrc+rAey14aWJym8MXaMuI0=) 2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: E0te7z7859at34MRFLNavnFyL+a8lv5dig7hn7bo8Ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 00:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Validity Not Before: Oct 1 00:28:16 2026 GMT Not After : Oct 8 00:28:16 2026 GMT Subject: CN=6abda920-289c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:80:21:cc:2d:2b:0f:a9:e2:16:3b:f7:5f: 8c:f2:19:aa:e6:56:40:2c:20:62:d9:7e:53:33:34: a4:2d:40:71:6b:1e:3e:ac:4e:23:98:35:2b:59:a2: a1:d8:02:5c:bf:01:0f:e8:b9:06:c7:54:cd:a7:32: f7:fc:a2:48:71:a3:c6:36:90:1f:67:0b:b1:7d:ab: 9c:d8:e4:c3:90:9c:35:95:7d:5f:fa:82:68:6f:da: 7a:ad:54:fb:c5:5a:d2:c0:33:44:6d:41:8e:44:f7: f4:09:d8:35:97:d3:9c:7f:a1:29:7c:a9:d6:7d:37: 3c:62:e6:df:4a:0c:39:37:3c:8c:e2:3b:81:47:e2: c7:85:92:f4:46:cb:d0:b8:7b:b0:eb:5b:60:a5:6a: cb:c4:c4:69:a3:57:32:eb:3f:72:a3:66:89:c6:b9: f0:7a:0a:0a:67:d3:17:8b:82:07:53:e2:1b:af:d8: ea:dc:4b:ce:e0:fe:f2:4c:15:2d:6a:35:cf:12:f2: b6:01:fe:bf:38:ce:8a:e0:f0:82:55:ff:b7:6b:a7: ec:8f:f3:e8:fc:df:d5:48:26:a5:97:0d:d0:e6:8c: 5a:78:cf:91:fa:bf:95:f3:37:ba:0b:d2:26:8a:9c: ef:e6:99:47:ef:9a:bd:68:d3:d2:a8:83:80:67:9d: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:52:FA:81:F3:07:B7:28:80:E2:C4:CE:40:0F:9F:9C:34:14:F2:B0 X509v3 Authority Key Identifier: keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:eb:6d:ea:e9:8b:2a:a8:2a:57:62:2d:37:27:d8:9f:fb:a3: a0:cd:b4:33:6d:55:a4:3a:50:3b:c2:4d:45:cd:9e:90:52:0a: 4d:1f:e6:7c:d4:0f:21:63:44:22:3f:50:33:4c:a5:e8:52:9e: a1:01:73:12:c4:8e:50:9b:cd:4f:f5:61:4a:f9:97:23:ec:09: 46:2a:38:7a:cf:14:8f:27:26:4d:0f:d9:ac:d9:7f:57:06:0a: e1:b1:20:2b:32:40:a3:45:9d:76:a8:99:be:99:a2:77:ae:35: eb:d7:5c:67:09:7d:f2:1e:13:88:aa:11:21:1b:9a:63:09:ba: 89:2b:76:ce:11:00:bb:2f:db:80:e6:18:4d:db:b0:5a:00:c9: 1d:e7:23:86:04:50:c1:03:c8:83:cf:eb:b2:75:7d:d2:77:df: b1:71:92:77:44:c2:3f:f0:4f:6a:5a:dd:09:df:fb:11:0b:7e: 14:76:7d:ed:80:7e:d1:77:c3:36:22:c1:a7:7a:39:1a:82:46: 24:b8:47:b8:dc:27:80:48:58:03:25:2e:cf:70:90:7f:5d:60: eb:59:4b:19:4e:55:49:77:01:35:50:c8:dd:aa:ef:b8:b7:c0: 7b:85:ca:98:3e:d0:7c:08:3d:75:d9:0f:d2:9f:45:91:47:3c: 41:6a:06:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3 QzFDQzM4RjEwHhcNMjYxMDAxMDAyODE2WhcNMjYxMDA4MDAyODE2WjAYMRYwFAYD VQQDEw02YWJkYTkyMC0yODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgyAIcwtKw+p4hY791+M8hmq5lZALCBi2X5TMzSkLUBxax4+rE4jmDUrWaKh 2AJcvwEP6LkGx1TNpzL3/KJIcaPGNpAfZwuxfauc2OTDkJw1lX1f+oJob9p6rVT7 xVrSwDNEbUGORPf0Cdg1l9Ocf6EpfKnWfTc8YubfSgw5NzyM4juBR+LHhZL0RsvQ uHuw61tgpWrLxMRpo1cy6z9yo2aJxrnwegoKZ9MXi4IHU+Ibr9jq3EvO4P7yTBUt ajXPEvK2Af6/OM6K4PCCVf+3a6fsj/Po/N/VSCallw3Q5oxaeM+R+r+V8ze6C9Im ipzv5plH75q9aNPSqIOAZ52FZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVS+oHz B7cogOLEzkAPn5w0FPKwMB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlDMC82Q0IzODM1OEIzNDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9u d25FRGtVbl9vb3A4SE1PUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiutt6umLKqgqV2ItNyfYn/ujoM20M21VpDpQO8JNRc2ekFIKTR/mfNQPIWNE Ij9QM0yl6FKeoQFzEsSOUJvNT/VhSvmXI+wJRio4es8UjycmTQ/ZrNl/VwYK4bEg KzJAo0WddqiZvpmid64169dcZwl98h4TiKoRIRuaYwm6iSt2zhEAuy/bgOYYTduw WgDJHecjhgRQwQPIg8/rsnV90nffsXGSd0TCP/BPalrdCd/7EQt+FHZ97YB+0XfD NiLBp3o5GoJGJLhHuNwngEhYAyUuz3CQf11g61lLGU5VSXcBNVDI3arvuLfAe4XK mD7QfAg9ddkP0p9FkUc8QWoGkA== -----END CERTIFICATE-----Generated at Sat Oct 3 06:27:47 2026 by rpki-client