$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: AxDu63NRpN2mkXiehxjNA9SOMDCh6UYZfzVUMYymsDo= Subject key identifier: 72:58:CD:4B:D7:4F:89:9A:23:3C:49:E0:8C:ED:24:DE:55:1F:2F:97 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 02D9 Signing time: Fri 25 Sep 2026 01:13:36 +0000 Manifest this update: Fri 25 Sep 2026 01:13:36 +0000 Manifest next update: Fri 02 Oct 2026 01:13:36 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: sEB9MINfDvWQoq3SszmJVwWw3ZYLRGAL8VRj9pNFTcM=) 2: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=) 3: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=) 4: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Sep 25 01:13:36 2026 GMT Not After : Oct 2 01:13:36 2026 GMT Subject: CN=6ab5cac0-0994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0c:ea:db:2f:12:ce:a9:6d:94:0e:db:67:56: a4:7b:4f:8d:22:71:01:5d:46:f3:0b:29:d7:55:4b: dc:b2:f0:86:51:ca:f2:a9:4b:50:56:03:aa:9c:e1: bd:f4:07:41:d2:85:58:26:65:43:ea:b8:2f:c6:da: f1:a6:ef:53:d5:ea:92:07:1f:61:ad:3a:7b:36:92: bc:ef:b2:e4:26:38:0b:64:f1:99:a0:16:94:48:fc: 2e:4e:ad:0e:9a:07:76:76:f3:a3:6e:f4:66:c1:4b: b0:08:63:4f:4b:90:c3:a4:b7:33:3a:de:55:4c:99: e7:a7:07:49:73:0a:1b:b7:67:4e:3c:b0:cd:93:2f: 69:5d:98:07:fd:d9:54:a1:03:2a:e7:fe:14:6f:53: 6d:69:65:3a:2c:08:1b:60:db:70:54:c1:2d:54:a4: 11:86:b1:16:22:d3:a3:1f:4b:ce:5e:fa:07:8f:01: d6:b7:c7:23:0d:f2:82:4d:ba:65:34:15:c7:ad:1f: b8:51:74:de:35:d5:2c:db:8b:0d:76:93:53:f4:f8: 7a:91:6e:1f:92:a9:ea:67:8f:d2:dd:c0:e7:7e:1e: d7:a0:d9:7c:d3:3f:7b:56:52:a2:85:fa:c6:75:8b: 91:ab:61:b1:1c:9b:ab:56:62:f9:af:4c:26:1d:5e: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:58:CD:4B:D7:4F:89:9A:23:3C:49:E0:8C:ED:24:DE:55:1F:2F:97 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:aa:6c:8a:b6:83:ad:8d:83:55:80:b7:84:57:92:3a:be:ec: ee:23:df:76:e7:02:2f:78:af:81:f4:07:27:f6:92:0d:a6:d4: 5c:a8:60:12:be:59:28:7a:89:77:db:0d:35:6f:12:8c:0b:63: d7:01:b3:b2:92:40:aa:0a:bf:58:af:da:05:a0:55:95:74:78: 31:46:84:c8:9a:dd:ac:38:a9:fa:d0:a1:dd:a6:7e:d0:1d:06: 7b:96:a1:1c:5d:a1:61:63:17:6d:11:29:e6:a8:15:b7:3d:e9: 9e:51:81:5d:6e:e0:cd:6b:ae:6f:d0:b9:00:71:a5:4c:28:c3: a3:a1:a5:0b:6f:d3:87:7c:ca:75:6d:00:ae:45:e2:6f:e0:cd: 37:4d:13:10:36:8a:0c:6d:63:0e:d8:b6:10:6a:a2:fe:75:b2: 51:66:3b:23:b4:ef:4e:37:10:08:c1:f0:05:8d:c7:ab:37:3c: 6c:3e:89:14:70:b9:69:d8:79:a1:21:2e:2a:37:e0:f9:ff:e1: 67:da:fa:c3:e1:d9:c1:f4:7e:45:34:fe:42:08:1d:61:43:b2: 89:cc:d6:8f:76:d9:b7:3c:72:e4:67:34:0c:f1:52:7d:a5:58: be:b5:5a:b6:05:02:aa:a3:d6:b3:12:fc:5a:cf:ef:c8:21:64: 9a:e2:45:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjYwOTI1MDExMzM2WhcNMjYxMDAyMDExMzM2WjAYMRYwFAYD VQQDEw02YWI1Y2FjMC0wOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wzq2y8SzqltlA7bZ1ake0+NInEBXUbzCynXVUvcsvCGUcryqUtQVgOqnOG9 9AdB0oVYJmVD6rgvxtrxpu9T1eqSBx9hrTp7NpK877LkJjgLZPGZoBaUSPwuTq0O mgd2dvOjbvRmwUuwCGNPS5DDpLczOt5VTJnnpwdJcwobt2dOPLDNky9pXZgH/dlU oQMq5/4Ub1NtaWU6LAgbYNtwVMEtVKQRhrEWItOjH0vOXvoHjwHWt8cjDfKCTbpl NBXHrR+4UXTeNdUs24sNdpNT9Ph6kW4fkqnqZ4/S3cDnfh7XoNl80z97VlKihfrG dYuRq2GxHJurVmL5r0wmHV45yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJYzUvX T4maIzxJ4IztJN5VHy+XMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqqpsiraDrY2DVYC3hFeSOr7s7iPfducCL3ivgfQHJ/aSDabUXKhgEr5ZKHqJ d9sNNW8SjAtj1wGzspJAqgq/WK/aBaBVlXR4MUaEyJrdrDip+tCh3aZ+0B0Ge5ah HF2hYWMXbREp5qgVtz3pnlGBXW7gzWuub9C5AHGlTCjDo6GlC2/Th3zKdW0ArkXi b+DNN00TEDaKDG1jDti2EGqi/nWyUWY7I7TvTjcQCMHwBY3Hqzc8bD6JFHC5adh5 oSEuKjfg+f/hZ9r6w+HZwfR+RTT+QggdYUOyiczWj3bZtzxy5Gc0DPFSfaVYvrVa tgUCqqPWsxL8Ws/vyCFkmuJFRA== -----END CERTIFICATE-----Generated at Fri Sep 25 10:45:29 2026 by rpki-client