$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft File: f8xPf-awzDq4ikFPiUwnT6ebK4o.mft (raw, json) Hash identifier: BdzbxDqAvRkmnreE72zVqhkXMjlh+GgsSox2TtSpeEE= Subject key identifier: 81:D5:06:E2:3D:A4:70:56:DB:4D:0A:BE:31:C4:1B:D2:05:55:F1:B4 Authority key identifier: 7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A Certificate issuer: /CN=A91DB6F5/serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft Manifest number: 29 Signing time: Wed 23 Sep 2026 08:31:16 +0000 Manifest this update: Wed 23 Sep 2026 08:31:16 +0000 Manifest next update: Wed 30 Sep 2026 08:31:16 +0000 Files and hashes: 1: f8xPf-awzDq4ikFPiUwnT6ebK4o.crl (hash: iiGC3AbfbAaFOcSxhYi/H5yZgrgM9JjiB9iqi5IumpI=) 2: FB8302CC7B4311F1A6C72CC794A30FBC.roa (hash: O3P+wCLcSaZeVnz8hU5Gns4U/UBq9VDtYeZsJeUmjAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F5, serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A Validity Not Before: Sep 23 08:31:16 2026 GMT Not After : Sep 30 08:31:16 2026 GMT Subject: CN=6ab38e54-d9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:66:6a:96:85:03:a9:ab:c1:c3:60:57:46: ef:29:93:1e:15:29:87:6f:37:d7:57:31:50:d7:06: e4:1f:0c:5b:82:d0:05:62:99:1e:19:eb:9d:df:7b: c1:ea:de:55:f1:fd:47:c6:da:b2:40:1f:ed:58:bc: 1d:83:37:84:e3:82:b0:1a:89:63:7d:6f:71:52:d7: 3d:ba:ff:d2:05:9a:47:a3:a3:6a:e6:41:c0:dd:c8: 6e:00:33:35:a8:91:8c:d8:15:c1:03:61:57:10:f0: c3:b7:9c:50:f1:f6:21:3a:85:6a:50:d4:31:27:80: 85:12:9c:0d:48:ae:61:9b:71:e7:e5:88:2f:b3:0b: 09:82:99:37:0d:4f:6b:2f:2d:df:7e:eb:e4:4b:a7: a7:a8:e4:c6:ae:3f:6d:f7:56:7d:41:7f:1d:40:30: b3:c3:33:6d:2f:ac:47:46:22:ec:c4:ed:30:9f:53: 31:57:ca:21:17:15:83:10:1c:de:06:46:a1:20:ed: bf:94:9a:fd:1a:be:cd:3f:74:22:77:ac:7f:e8:b0: 49:af:f0:57:1e:d1:7e:5b:06:92:c3:74:69:22:b4: eb:3e:0b:90:b4:fb:00:b3:11:81:74:c2:51:df:f8: 9d:52:95:29:b9:d4:c2:60:45:c3:54:95:0b:c2:cd: 0b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:06:E2:3D:A4:70:56:DB:4D:0A:BE:31:C4:1B:D2:05:55:F1:B4 X509v3 Authority Key Identifier: keyid:7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:65:1b:69:13:3b:c7:05:1d:02:7b:27:43:cd:8c:86:70:e4: ce:f8:9a:42:58:15:d3:08:04:bf:be:5b:18:15:b0:0d:8b:7f: 38:b9:74:ee:b8:52:bf:34:82:4f:70:24:c2:93:e2:c8:47:64: 30:1e:9c:5c:2e:24:e9:77:be:d1:0f:d9:9b:0e:07:09:4e:0c: 68:2b:d6:de:56:f3:25:f2:bd:0a:8d:be:46:e2:0f:33:00:a0: 7b:20:77:b9:13:be:5e:ec:8a:9d:d5:02:67:88:8d:02:4a:56: e3:9e:5a:c0:82:4a:a9:09:74:0e:d2:4c:f2:9d:15:60:98:de: 99:c1:ac:59:8a:a8:7d:8a:84:ae:98:52:e9:09:6a:ac:51:91: 4a:35:53:52:1f:a2:d2:76:47:13:bd:5b:a8:e5:5f:30:fb:f7: 44:0d:87:fa:8a:6c:91:3d:33:78:98:bb:e7:83:62:4d:24:42: bc:58:8a:f1:ca:91:b8:27:9b:c3:c7:45:b2:5c:4e:b1:41:39: 80:ca:67:46:f8:3a:76:ee:8b:e1:7b:40:bb:0f:b2:20:8e:a2: b9:d6:d5:1e:2d:15:94:f3:0f:c7:f4:58:ba:76:50:4d:63:56: 14:85:bf:10:41:dc:b4:00:57:e4:81:ae:e5:69:7c:e5:66:87: d2:94:7e:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjZGNTExMC8GA1UEBRMoN0ZDQzRGN0ZFNkIwQ0MzQUI4OEE0MTRGODk0QzI3NEZB NzlCMkI4QTAeFw0yNjA5MjMwODMxMTZaFw0yNjA5MzAwODMxMTZaMBgxFjAUBgNV BAMTDTZhYjM4ZTU0LWQ5YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLEWZqloUDqavBw2BXRu8pkx4VKYdvN9dXMVDXBuQfDFuC0AVimR4Z653fe8Hq 3lXx/UfG2rJAH+1YvB2DN4TjgrAaiWN9b3FS1z26/9IFmkejo2rmQcDdyG4AMzWo kYzYFcEDYVcQ8MO3nFDx9iE6hWpQ1DEngIUSnA1IrmGbcefliC+zCwmCmTcNT2sv Ld9+6+RLp6eo5MauP233Vn1Bfx1AMLPDM20vrEdGIuzE7TCfUzFXyiEXFYMQHN4G RqEg7b+Umv0avs0/dCJ3rH/osEmv8Fce0X5bBpLDdGkitOs+C5C0+wCzEYF0wlHf +J1SlSm51MJgRcNUlQvCzQulAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgdUG4j2k cFbbTQq+McQb0gVV8bQwHwYDVR0jBBgwFoAUf8xPf+awzDq4ikFPiUwnT6ebK4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNkY1LzdCMDZFM0EyN0I0 MzExRjE4NTMzNkUzMDk0QTMwRkJDL2Y4eFBmLWF3ekRxNGlrRlBpVXduVDZlYks0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZjh4UGYtYXd6RHE0aWtGUGlVd25UNmViSzRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NkY1LzdCMDZFM0EyN0I0MzExRjE4NTMzNkUzMDk0QTMwRkJDL2Y4eFBmLWF3ekRx NGlrRlBpVXduVDZlYks0by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQABZRtpEzvHBR0CeydDzYyGcOTO+JpCWBXTCAS/vlsYFbANi384uXTuuFK/NIJP cCTCk+LIR2QwHpxcLiTpd77RD9mbDgcJTgxoK9beVvMl8r0Kjb5G4g8zAKB7IHe5 E75e7Iqd1QJniI0CSlbjnlrAgkqpCXQO0kzynRVgmN6ZwaxZiqh9ioSumFLpCWqs UZFKNVNSH6LSdkcTvVuo5V8w+/dEDYf6imyRPTN4mLvng2JNJEK8WIrxypG4J5vD x0WyXE6xQTmAymdG+Dp27ovhe0C7D7IgjqK51tUeLRWU8w/H9Fi6dlBNY1YUhb8Q Qdy0AFfkga7laXzlZofSlH4W -----END CERTIFICATE-----Generated at Thu Sep 24 23:55:58 2026 by rpki-client