$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft File: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft (raw, json) Hash identifier: C9wGB+YbPXEQbtUvw6a0jG4xacjFOrrf56BvyxnPd94= Subject key identifier: C8:C8:1F:D4:EC:AC:99:6B:B6:EF:F6:8E:41:52:E2:DD:4C:E9:26:92 Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79 Certificate issuer: /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579 Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft Manifest number: 08AE Signing time: Tue 22 Sep 2026 20:22:29 +0000 Manifest this update: Tue 22 Sep 2026 20:22:28 +0000 Manifest next update: Tue 29 Sep 2026 20:22:28 +0000 Files and hashes: 1: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl (hash: R8j9DdSY0PjGwySGgk7t5Jf/oGldpLyxnjunIDv5EHI=) 2: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (hash: LxDrlJvtyaRL2wVNUjApHj5FEy/mIjNevhV6EDdmD1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579 Validity Not Before: Sep 22 20:22:28 2026 GMT Not After : Sep 29 20:22:28 2026 GMT Subject: CN=6ab2e384-ea7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:1f:64:c9:47:91:d1:e4:16:ba:0b:e1:f3: 44:c1:dd:45:8a:b5:98:db:21:58:71:7a:0d:54:71: b2:8a:a4:f3:64:42:71:26:e2:ad:16:3a:e8:fb:0e: 0a:d7:41:de:78:e1:50:4b:9e:6e:37:7b:c6:3e:14: aa:8e:7b:e7:f8:d8:6d:00:03:b3:aa:5d:49:02:a4: 38:e0:79:ea:e3:99:01:9e:6e:4d:30:3e:e3:f6:25: 50:7e:5c:bd:b9:66:9c:38:11:83:61:3c:70:15:b3: f9:94:c4:ac:3f:ae:0a:49:8f:34:4f:ee:0f:30:8d: 90:7f:97:c0:d2:ab:9b:33:7b:13:8e:13:b7:48:22: 8d:6e:e7:f4:75:86:fa:c0:37:61:81:2a:df:83:72: de:80:25:c7:bd:13:94:8b:ff:4a:46:60:d7:e9:0d: b0:b2:6f:36:2e:23:f2:df:b2:4f:20:ce:c7:5b:6e: ef:5e:3f:bb:d2:aa:56:c6:0b:8d:a1:4b:d8:76:cd: 01:25:3f:67:77:fa:ac:5e:53:8b:13:22:60:96:9f: 5b:06:b4:a3:bd:28:d5:94:1e:6c:d6:00:61:f5:fb: 0f:03:43:6e:f9:5f:0a:5d:dd:ab:e7:2e:7d:7a:6f: 41:ba:fd:bd:6b:70:ad:9d:a7:1a:08:03:a2:4f:50: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C8:1F:D4:EC:AC:99:6B:B6:EF:F6:8E:41:52:E2:DD:4C:E9:26:92 X509v3 Authority Key Identifier: keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a3:2c:03:3b:67:98:d3:51:b4:8a:f5:87:c3:bc:ee:78:83: 9d:df:a6:11:39:34:33:0d:eb:70:c1:5b:a6:82:ef:79:81:9c: 33:c6:c3:9b:71:d9:c0:a9:1b:4f:24:c3:5f:98:34:aa:f3:76: ad:52:0c:9b:21:cf:63:67:57:76:e7:49:2e:4e:8a:b4:d8:be: a9:63:14:ac:0d:17:97:ec:ad:4d:47:1f:c9:99:61:8c:ef:17: 29:71:c2:cc:ba:ce:14:55:7e:ed:b8:0e:63:fc:22:4b:11:6c: ba:14:d6:d6:d0:cd:2e:e5:89:90:34:bb:16:a7:b8:3e:c0:54: bf:5b:1e:6c:77:60:47:d0:5c:94:a4:c5:b5:77:a1:ff:4b:64: 53:e1:d6:cc:78:72:af:25:96:01:26:f4:07:62:fc:f4:9f:1d: 81:61:69:90:6e:c1:b1:e9:fe:a6:f7:69:3b:ce:70:31:e6:b2: c2:00:33:96:5f:f7:7f:52:d6:93:65:c5:fe:40:e3:1a:71:35: f5:48:83:8e:97:7f:d5:3d:38:44:6a:0f:d7:a4:eb:57:31:bb: 07:13:cb:95:cd:e9:0d:82:0c:bc:a3:17:84:d1:41:dc:e1:14: df:99:ae:c3:ce:d1:41:17:f7:10:13:14:85:66:4c:92:8c:df: 44:20:61:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyMTYxMTAvBgNVBAUTKDY4QTRGQzgxMkQwMTkxMzYzRTFDNEExMzA5OUY1M0Iw MjczNzY1NzkwHhcNMjYwOTIyMjAyMjI4WhcNMjYwOTI5MjAyMjI4WjAYMRYwFAYD VQQDEw02YWIyZTM4NC1lYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLcfZMlHkdHkFroL4fNEwd1FirWY2yFYcXoNVHGyiqTzZEJxJuKtFjro+w4K 10HeeOFQS55uN3vGPhSqjnvn+NhtAAOzql1JAqQ44Hnq45kBnm5NMD7j9iVQfly9 uWacOBGDYTxwFbP5lMSsP64KSY80T+4PMI2Qf5fA0qubM3sTjhO3SCKNbuf0dYb6 wDdhgSrfg3LegCXHvROUi/9KRmDX6Q2wsm82LiPy37JPIM7HW27vXj+70qpWxguN oUvYds0BJT9nd/qsXlOLEyJglp9bBrSjvSjVlB5s1gBh9fsPA0Nu+V8KXd2r5y59 em9Buv29a3CtnacaCAOiT1BeTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjIH9Ts rJlrtu/2jkFS4t1M6SaSMB8GA1UdIwQYMBaAFGik/IEtAZE2PhxKEwmfU7AnN2V5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTIxNi9BRjU3QjZGQ0ZF MjgxMUVBQTczNTAxNThDNEY5QUUwMi9hS1Q4Z1MwQmtUWS1IRW9UQ1o5VHNDYzNa WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLVDhnUzBCa1RZLUhFb1RDWjlUc0NjM1pYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTIxNi9BRjU3QjZGQ0ZFMjgxMUVBQTczNTAxNThDNEY5QUUwMi9hS1Q4Z1MwQmtU WS1IRW9UQ1o5VHNDYzNaWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO6MsAztnmNNRtIr1h8O87niDnd+mETk0Mw3rcMFbpoLveYGcM8bDm3HZwKkb TyTDX5g0qvN2rVIMmyHPY2dXdudJLk6KtNi+qWMUrA0Xl+ytTUcfyZlhjO8XKXHC zLrOFFV+7bgOY/wiSxFsuhTW1tDNLuWJkDS7Fqe4PsBUv1sebHdgR9BclKTFtXeh /0tkU+HWzHhyryWWASb0B2L89J8dgWFpkG7Bsen+pvdpO85wMeaywgAzll/3f1LW k2XF/kDjGnE19UiDjpd/1T04RGoP16TrVzG7BxPLlc3pDYIMvKMXhNFB3OEU35mu w87RQRf3EBMUhWZMkozfRCBhzg== -----END CERTIFICATE-----Generated at Thu Sep 24 02:29:22 2026 by rpki-client