$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json) Hash identifier: bWlaPIm0IdENwt/fIBNDtEiKhVHcoIM5RnOelJ1jy3I= Subject key identifier: 2F:B2:1F:D1:2E:A9:31:D8:73:A2:86:3D:56:90:2E:82:49:00:C5:EC Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft Manifest number: 0BF1 Signing time: Tue 22 Sep 2026 18:48:06 +0000 Manifest this update: Tue 22 Sep 2026 18:48:05 +0000 Manifest next update: Tue 29 Sep 2026 18:48:05 +0000 Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: Rgk+iF4bnNmxR1QOXTmeIxR4qYF3njNyUbGHp0pobNA=) 2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Validity Not Before: Sep 22 18:48:05 2026 GMT Not After : Sep 29 18:48:05 2026 GMT Subject: CN=6ab2cd65-851d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:5e:fe:4f:d1:e0:cf:15:12:01:63:63:22: 4f:50:67:b6:dd:9c:e9:d0:76:84:54:00:55:c1:d0: 9d:67:a0:10:11:36:7c:67:90:53:4c:1d:9a:55:60: f5:02:c3:da:26:92:bb:26:b5:bf:e4:0d:fe:f0:ca: c0:27:fc:75:13:a8:66:68:14:39:6e:0e:19:32:7e: 2e:c7:11:a7:f7:91:b3:52:87:e0:50:57:9a:db:48: 86:c0:1d:51:9d:22:05:aa:8e:9e:53:a3:19:f5:d8: 90:11:30:33:f3:f0:90:99:5e:e8:4c:8f:f5:a1:dd: a8:14:a3:5b:ac:5d:b8:49:65:68:66:42:18:49:e7: 0f:5c:7f:1b:b0:24:c9:0e:42:bb:53:b9:1c:83:c1: f8:85:f9:83:d6:45:80:43:43:01:ec:ba:0e:f1:81: 1a:8f:0a:05:d6:1f:d5:98:83:86:ff:25:20:c8:96: a1:da:a5:57:c4:71:9c:10:d1:8d:5d:3e:08:81:ec: 06:74:93:7e:2e:ff:bb:68:01:cd:5f:76:3b:a3:7b: 5d:51:c5:df:46:6f:cd:45:b0:c4:b6:ad:50:32:be: a3:44:f8:c8:e3:64:a8:71:d8:57:5d:85:12:12:87: b5:8f:24:45:f8:90:65:17:d1:a8:9e:84:3c:d7:54: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B2:1F:D1:2E:A9:31:D8:73:A2:86:3D:56:90:2E:82:49:00:C5:EC X509v3 Authority Key Identifier: keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:9f:48:6f:1d:94:4d:82:33:28:5b:45:5a:c4:9e:0e:35:a1: 22:82:e4:25:5c:9e:8c:00:ee:b0:b9:6b:fd:8a:f6:2b:45:9c: b9:a1:b0:ee:8d:28:d0:dc:68:c9:46:c2:97:de:74:d5:bd:d1: a0:71:6a:e7:c6:2b:cb:33:89:4b:ca:50:7e:ec:5b:50:73:73: 7c:4d:de:9a:08:0e:35:73:2f:e1:ad:ce:0a:c1:38:a2:88:79: d8:6a:13:12:15:28:de:94:57:b6:50:07:1c:ab:c2:15:da:a7: f3:15:dc:7a:e3:48:73:b8:c3:0d:95:2d:56:da:6b:cf:a4:75: 8b:89:0d:dc:64:15:44:0c:7e:8d:63:21:23:f0:c0:dd:66:e4: ad:14:be:04:a9:28:d0:77:cf:6a:0d:88:f9:45:7b:ef:6b:3a: 54:6e:d8:66:87:6f:0a:2a:02:65:b8:28:94:e0:a6:26:86:28: d8:ec:8e:5a:b6:6e:3a:9a:05:1c:f6:28:72:33:e0:22:c4:ab: db:90:a7:4c:3b:23:7c:43:03:a3:64:28:40:7c:fa:3b:69:e5: 75:fa:7b:4f:70:e5:3d:01:8c:08:ef:fc:47:1c:98:c0:5d:11: 62:f7:db:c3:92:87:16:72:cf:89:26:ae:2a:7c:4a:0e:12:87: aa:8a:22:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw RjcyODdDOUEwHhcNMjYwOTIyMTg0ODA1WhcNMjYwOTI5MTg0ODA1WjAYMRYwFAYD VQQDEw02YWIyY2Q2NS04NTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRle/k/R4M8VEgFjYyJPUGe23Zzp0HaEVABVwdCdZ6AQETZ8Z5BTTB2aVWD1 AsPaJpK7JrW/5A3+8MrAJ/x1E6hmaBQ5bg4ZMn4uxxGn95GzUofgUFea20iGwB1R nSIFqo6eU6MZ9diQETAz8/CQmV7oTI/1od2oFKNbrF24SWVoZkIYSecPXH8bsCTJ DkK7U7kcg8H4hfmD1kWAQ0MB7LoO8YEajwoF1h/VmIOG/yUgyJah2qVXxHGcENGN XT4IgewGdJN+Lv+7aAHNX3Y7o3tdUcXfRm/NRbDEtq1QMr6jRPjI42SocdhXXYUS Eoe1jyRF+JBlF9GonoQ811TdSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+yH9Eu qTHYc6KGPVaQLoJJAMXsMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1 QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH LXEzSkl6aUxtR1lQY29mSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJ9Ibx2UTYIzKFtFWsSeDjWhIoLkJVyejADusLlr/Yr2K0WcuaGw7o0o0Nxo yUbCl9501b3RoHFq58YryzOJS8pQfuxbUHNzfE3emggONXMv4a3OCsE4ooh52GoT EhUo3pRXtlAHHKvCFdqn8xXceuNIc7jDDZUtVtprz6R1i4kN3GQVRAx+jWMhI/DA 3WbkrRS+BKko0HfPag2I+UV772s6VG7YZodvCioCZbgolOCmJoYo2OyOWrZuOpoF HPYocjPgIsSr25CnTDsjfEMDo2QoQHz6O2nldfp7T3DlPQGMCO/8RxyYwF0RYvfb w5KHFnLPiSauKnxKDhKHqooizA== -----END CERTIFICATE-----Generated at Tue Sep 22 23:14:58 2026 by rpki-client