$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json) Hash identifier: 5osauju6DXs4qn7OiQ117y+v3+LCwFtkweCo7cxj/x8= Subject key identifier: 1B:32:82:FA:D3:A5:AB:9B:97:91:20:4E:32:F6:BD:CC:DA:A9:CC:4E Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft Manifest number: 85 Signing time: Wed 23 Sep 2026 07:28:39 +0000 Manifest this update: Wed 23 Sep 2026 07:28:39 +0000 Manifest next update: Wed 30 Sep 2026 07:28:39 +0000 Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: SYeg6mN/cs1gS22R1bQsXry9gW7Xw+lgfpmK1vP2dhg=) 2: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=) 3: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Validity Not Before: Sep 23 07:28:39 2026 GMT Not After : Sep 30 07:28:39 2026 GMT Subject: CN=6ab37fa7-fd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:db:46:f4:b0:24:0e:e3:53:23:7f:82:cc: 8e:50:73:4e:36:ca:2d:12:47:9a:73:2d:bd:af:06: 38:c8:aa:89:d1:94:f4:11:cc:c6:bd:25:95:86:b4: 20:d0:9c:84:92:35:5f:72:66:b9:ce:6c:ae:62:88: 17:28:08:31:30:a7:ee:58:5f:14:89:48:66:00:ee: 55:0b:e1:d8:5e:7b:7f:63:75:c4:79:92:ce:b0:60: eb:db:f4:ce:16:21:ea:a8:31:e3:f9:90:e4:c7:4d: 59:e3:6e:e6:04:bd:df:06:3e:b3:1f:25:10:ae:fd: ee:7b:b4:31:12:51:eb:4e:6d:cc:bf:30:af:9c:5f: c6:b4:0c:61:57:db:fe:28:34:2b:d9:96:42:22:f0: a7:95:79:c9:22:4b:be:11:36:df:e4:94:e4:d4:eb: e6:d8:51:98:4c:7a:f7:4f:4a:47:e8:20:9e:f6:ee: 97:e4:16:93:2f:69:78:8d:ed:99:e2:81:d2:55:b4: 32:b4:31:71:06:c0:e1:92:26:62:33:09:a4:56:20: cf:57:3d:d5:7e:69:38:df:ef:e5:01:0a:e8:92:05: 37:d8:a0:6f:79:8f:5e:07:25:74:11:20:1f:8e:3f: 2a:3d:65:1d:70:f5:43:f2:19:31:8c:92:b6:46:29: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:32:82:FA:D3:A5:AB:9B:97:91:20:4E:32:F6:BD:CC:DA:A9:CC:4E X509v3 Authority Key Identifier: keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:51:1d:39:98:6f:9f:cf:e9:83:0e:d4:72:f0:93:7f:d7:37: 3a:46:59:cb:7b:0f:e9:84:34:39:85:10:eb:9d:62:63:61:39: bf:93:1e:be:ac:64:92:29:57:45:c5:b6:b2:d2:85:2f:a0:6c: e7:0e:46:7e:08:78:44:2d:1b:42:cf:ec:28:9c:e3:df:66:d9: 7c:2f:f6:95:ef:6c:6c:2d:b3:76:b1:4d:e9:57:b9:3f:af:3f: 9a:fe:80:a0:10:b1:e5:68:d3:48:5a:ef:e9:2d:cf:1d:74:93: 4d:3f:24:5b:31:05:29:02:31:51:85:a9:61:7d:c5:78:97:4f: a9:39:e9:4d:c3:80:6a:56:a7:14:f9:61:c2:fb:54:7e:34:27: b2:b9:92:45:8d:11:85:5f:d2:a2:7e:0a:0d:cc:c8:4a:42:7e: f0:f2:d1:6f:87:10:90:16:16:24:e2:a2:c5:27:ee:76:e4:49: d6:19:39:84:fd:b5:41:85:85:6b:6b:1e:53:7b:fd:c9:49:32: 8e:54:35:58:c6:b1:6b:ac:86:65:ad:e9:d1:a0:da:52:51:a4: 14:30:47:94:55:37:e4:01:af:c4:9f:af:2b:7b:0b:38:7e:14: 2a:5e:fc:57:4e:09:5a:58:ef:59:c7:60:af:25:35:5e:c2:a0: 81:d5:56:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NCODExMTAvBgNVBAUTKEYwRDcxMTIwQTkyQTg1OERCNzI5NDk2RkNDQkYxODI1 QzlGMDNDNjMwHhcNMjYwOTIzMDcyODM5WhcNMjYwOTMwMDcyODM5WjAYMRYwFAYD VQQDEw02YWIzN2ZhNy1mZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq7bRvSwJA7jUyN/gsyOUHNONsotEkeacy29rwY4yKqJ0ZT0EczGvSWVhrQg 0JyEkjVfcma5zmyuYogXKAgxMKfuWF8UiUhmAO5VC+HYXnt/Y3XEeZLOsGDr2/TO FiHqqDHj+ZDkx01Z427mBL3fBj6zHyUQrv3ue7QxElHrTm3MvzCvnF/GtAxhV9v+ KDQr2ZZCIvCnlXnJIku+ETbf5JTk1Ovm2FGYTHr3T0pH6CCe9u6X5BaTL2l4je2Z 4oHSVbQytDFxBsDhkiZiMwmkViDPVz3Vfmk43+/lAQrokgU32KBveY9eByV0ESAf jj8qPWUdcPVD8hkxjJK2Ril3BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsygvrT paubl5EgTjL2vczaqcxOMB8GA1UdIwQYMBaAFPDXESCpKoWNtylJb8y/GCXJ8Dxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0I4MS80MUZERDM4OEY4 NkExMUYwQjRCQkFGM0M0QTZGNTZCQy84TmNSSUtrcWhZMjNLVWx2ekw4WUpjbndQ R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzhOY1JJS2txaFkyM0tVbHZ6TDhZSmNud1BHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0I4MS80MUZERDM4OEY4NkExMUYwQjRCQkFGM0M0QTZGNTZCQy84TmNSSUtrcWhZ MjNLVWx2ekw4WUpjbndQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJFEdOZhvn8/pgw7UcvCTf9c3OkZZy3sP6YQ0OYUQ651iY2E5v5MevqxkkilX RcW2stKFL6Bs5w5Gfgh4RC0bQs/sKJzj32bZfC/2le9sbC2zdrFN6Ve5P68/mv6A oBCx5WjTSFrv6S3PHXSTTT8kWzEFKQIxUYWpYX3FeJdPqTnpTcOAalanFPlhwvtU fjQnsrmSRY0RhV/Son4KDczISkJ+8PLRb4cQkBYWJOKixSfuduRJ1hk5hP21QYWF a2seU3v9yUkyjlQ1WMaxa6yGZa3p0aDaUlGkFDBHlFU35AGvxJ+vK3sLOH4UKl78 V04JWljvWcdgryU1XsKggdVWxA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:27:49 2026 by rpki-client