$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: 9Phq/SDOulVe9J4L+IwjjgfzmssSKoBMKAK//Ezomvo= Subject key identifier: 71:E1:1D:F5:56:B2:4E:D8:6C:3A:CA:3B:DE:46:FA:DE:C6:22:A6:45 Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 0895 Signing time: Sun 04 Oct 2026 20:46:48 +0000 Manifest this update: Sun 04 Oct 2026 20:46:48 +0000 Manifest next update: Sun 11 Oct 2026 20:46:48 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: /QhriyxiXnwQojVqpWzuaYIx/GP+U3tYPrL21JZRX9c=) 2: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: gt1Thn5b17IX5hac63qpkPqnhAnjtdM7GC00RfgXDCA=) 3: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: VGnt6v4dXILkocn8GEwn5t+Gd/2jbgIZ2L5lp88nLxY=) 4: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: Gj36dWubgKABqlkFIW8O6/4ONoiv/qzcPv5+4kWBHuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Oct 4 20:46:48 2026 GMT Not After : Oct 11 20:46:48 2026 GMT Subject: CN=6ac2bb38-2f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:75:68:c7:27:c2:d8:ec:59:7b:2c:8a:f1: ab:6e:46:e3:92:75:aa:3d:5a:3d:22:3b:d4:a5:53: a3:e0:11:29:93:8a:e8:9e:53:24:14:c9:85:2a:28: 9e:c7:1c:2d:f1:69:62:5d:ed:27:63:56:0a:18:1b: ad:2b:99:99:13:35:76:ff:bd:01:5e:ef:3d:f9:c5: ee:23:e6:3a:e8:b6:4e:d9:82:31:e2:f4:16:9d:b1: 32:e5:3a:30:7a:41:63:c8:f1:7a:d3:93:92:88:e2: 91:b4:70:ef:70:3f:57:b2:44:d1:08:d2:a3:f8:a5: 4c:50:1d:81:65:a3:26:37:f2:a9:81:92:c8:75:23: 4b:fb:bf:83:df:5a:b9:50:a1:ae:03:a2:5b:ba:c1: ec:ac:ca:71:f6:2e:56:ba:0c:17:b2:64:7b:4b:2f: aa:4f:69:e7:a1:18:b9:55:06:b1:9d:04:54:2f:69: 33:1c:86:09:83:ce:03:eb:91:6d:58:fe:fd:1e:ef: 6f:8d:33:ff:c4:59:42:ac:25:33:6b:a6:db:a7:25: cd:ce:84:bc:b3:73:cc:c5:f1:f6:9e:d1:3d:0d:b5: 95:4e:b1:e4:aa:d5:ad:64:1d:b6:44:a8:76:77:01: 8e:e6:53:e6:9e:8a:1f:89:a0:f3:35:9a:9c:bd:bd: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E1:1D:F5:56:B2:4E:D8:6C:3A:CA:3B:DE:46:FA:DE:C6:22:A6:45 X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9b:1d:3e:17:0c:39:a5:ea:28:9c:8c:8b:85:64:f1:df:ee: b6:12:3a:63:0a:ab:2b:b9:fd:48:fe:9a:2c:1b:ab:9a:fb:b8: 2e:23:2e:65:ea:3b:15:cd:a1:22:e6:73:e9:ba:58:99:9b:f7: a5:93:56:38:2f:54:fd:3e:24:43:f0:1f:dd:6f:e4:3c:0a:6a: 35:82:ba:41:01:1c:48:1a:09:5f:29:7a:9a:22:4a:75:a4:bd: 21:bb:56:a4:1e:18:ba:33:6a:58:e5:04:7b:8d:08:6c:e4:0a: 65:02:33:7e:4e:8c:6c:04:5f:ad:d4:bd:bc:66:02:a8:92:51: 4c:4e:ef:a9:71:d4:02:32:60:ae:1a:21:df:3c:7b:46:ac:91: ac:4e:d3:25:fa:eb:e5:a6:b9:d7:f0:21:cb:f4:f5:fd:e4:77: 2a:fd:d6:b0:28:65:f0:fe:d2:4a:99:52:9f:2c:4e:d1:6d:b4: 15:08:78:b3:de:4f:dd:b2:4c:d6:80:bf:9a:3b:2c:f7:11:b7: 2a:c6:d4:72:a0:b4:ed:c1:7b:eb:43:16:96:79:ba:43:99:7c: ec:2a:48:8b:86:eb:95:6d:b8:bb:42:8c:ce:91:ae:7a:e7:76: 51:07:c3:ec:a3:c3:22:0b:71:1d:3b:d7:dd:6a:a7:12:04:bf: e9:97:95:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjYxMDA0MjA0NjQ4WhcNMjYxMDExMjA0NjQ4WjAYMRYwFAYD VQQDEw02YWMyYmIzOC0yZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4V1aMcnwtjsWXssivGrbkbjknWqPVo9IjvUpVOj4BEpk4ronlMkFMmFKiie xxwt8WliXe0nY1YKGButK5mZEzV2/70BXu89+cXuI+Y66LZO2YIx4vQWnbEy5Tow ekFjyPF605OSiOKRtHDvcD9XskTRCNKj+KVMUB2BZaMmN/KpgZLIdSNL+7+D31q5 UKGuA6JbusHsrMpx9i5WugwXsmR7Sy+qT2nnoRi5VQaxnQRUL2kzHIYJg84D65Ft WP79Hu9vjTP/xFlCrCUza6bbpyXNzoS8s3PMxfH2ntE9DbWVTrHkqtWtZB22RKh2 dwGO5lPmnoofiaDzNZqcvb3gswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHhHfVW sk7YbDrKO95G+t7GIqZFMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWpsdPhcMOaXqKJyMi4Vk8d/uthI6YwqrK7n9SP6aLBurmvu4LiMuZeo7Fc2h IuZz6bpYmZv3pZNWOC9U/T4kQ/Af3W/kPApqNYK6QQEcSBoJXyl6miJKdaS9IbtW pB4YujNqWOUEe40IbOQKZQIzfk6MbARfrdS9vGYCqJJRTE7vqXHUAjJgrhoh3zx7 RqyRrE7TJfrr5aa51/Ahy/T1/eR3Kv3WsChl8P7SSplSnyxO0W20FQh4s95P3bJM 1oC/mjss9xG3KsbUcqC07cF760MWlnm6Q5l87CpIi4brlW24u0KMzpGueud2UQfD 7KPDIgtxHTvX3WqnEgS/6ZeVJg== -----END CERTIFICATE-----Generated at Tue Oct 6 11:44:42 2026 by rpki-client