$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json) Hash identifier: 4HBIy/gLAS4uMkw/L0jkYI+ot79ZbjGOzu09e3uLvSA= Subject key identifier: 90:23:34:89:83:15:24:8A:38:67:7C:55:65:1D:E1:FB:F5:A0:35:21 Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft Manifest number: 8A Signing time: Sat 03 Oct 2026 08:15:22 +0000 Manifest this update: Sat 03 Oct 2026 08:15:22 +0000 Manifest next update: Sat 10 Oct 2026 08:15:22 +0000 Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: Mo+wIeleGWn4d6w0QpUfMDxD4ZfT+HmhoRgE9eH7wFo=) 2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: Oct 3 08:15:22 2026 GMT Not After : Oct 10 08:15:22 2026 GMT Subject: CN=6ac0b99a-0f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ec:aa:4e:2c:f2:2b:18:a3:12:e7:b8:4a:24: 30:15:44:08:9e:b7:f0:ba:e7:c5:36:e4:9e:7f:15: a4:0b:a7:32:29:48:96:1c:cf:4c:cc:17:94:c5:06: 2c:07:1c:1f:84:f4:81:23:ef:f4:a1:37:cb:00:91: 9e:bf:2b:83:3f:1e:0e:90:3f:6d:30:c3:1a:be:f5: d7:3c:17:1b:8f:98:e3:3b:41:5d:f2:39:09:1d:a5: f1:aa:24:cc:8c:67:01:63:0d:60:ec:34:ef:ae:57: 3e:5f:51:7b:d5:cd:a4:0f:06:90:52:12:e3:06:d9: 59:0f:1f:79:5a:5c:99:3e:c3:94:fe:50:3c:7a:05: 2d:c6:32:3f:13:05:d7:15:18:3a:a1:c4:a0:aa:0c: 0a:f5:1b:65:8d:59:27:08:56:c4:f1:18:66:46:74: 8c:e4:85:ba:95:1a:ed:c4:90:c2:d5:03:9b:5b:4a: ca:89:bc:72:92:03:f1:fe:3b:43:b7:1f:f3:63:d8: 50:0f:52:ee:74:10:95:4b:47:3b:c5:b1:6f:86:f2: 16:e9:64:8c:04:6c:52:db:68:2d:76:7e:f2:9e:b4: 15:3e:b1:f0:3f:8a:aa:df:c1:6c:2e:59:78:e4:7f: 7a:eb:dd:18:59:dc:11:e1:6e:c0:9c:32:46:b9:7d: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:23:34:89:83:15:24:8A:38:67:7C:55:65:1D:E1:FB:F5:A0:35:21 X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b1:73:db:f8:45:c8:ff:56:5a:a1:fb:39:96:31:ed:84:dc: f9:0c:f8:45:cc:cf:e1:12:1c:41:6a:a2:48:dc:fa:08:6f:68: b0:49:5c:cc:73:f7:5c:b6:4d:17:1d:ca:bd:87:42:33:f0:43: a2:62:56:0d:39:e0:c7:52:a0:0b:0e:8b:c1:5b:58:67:4b:8c: 7a:92:76:1f:61:87:57:cc:81:8b:ca:eb:b3:c9:87:6a:42:d1: 6a:2e:da:c8:05:1f:84:21:86:9f:4c:a4:3a:b9:25:61:4b:2e: 0f:2c:67:3d:3e:aa:a1:0c:fa:d3:03:82:9c:80:87:29:ac:68: 98:72:0e:64:6a:e3:40:09:1d:e4:96:aa:7c:d0:6f:db:c3:29: 01:b3:5b:7a:65:4e:b5:f8:17:97:59:80:0d:4f:db:5d:a1:c0: e7:50:39:2c:55:90:f0:f8:4d:fb:8c:0f:4e:03:ec:32:38:a6: 37:97:a3:00:d5:d1:d3:37:25:5f:1e:b8:22:fe:1f:d5:5d:77: f9:11:40:83:89:e6:32:02:b0:c7:ab:86:87:e1:ae:1b:d4:d9: f2:8d:e3:a0:72:7b:5d:12:53:6a:ad:ac:15:18:fa:4b:26:63: f6:57:97:b2:21:88:8d:00:62:a5:79:a0:ea:ed:09:ff:f5:de: 76:95:45:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0NDExMTAvBgNVBAUTKDMxNkQ4OTY0N0YwRDBDQjA2QjM3MzIwNzhBNDIzMEFG MTE1NjUzMzQwHhcNMjYxMDAzMDgxNTIyWhcNMjYxMDEwMDgxNTIyWjAYMRYwFAYD VQQDEw02YWMwYjk5YS0wZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7eyqTizyKxijEue4SiQwFUQInrfwuufFNuSefxWkC6cyKUiWHM9MzBeUxQYs BxwfhPSBI+/0oTfLAJGevyuDPx4OkD9tMMMavvXXPBcbj5jjO0Fd8jkJHaXxqiTM jGcBYw1g7DTvrlc+X1F71c2kDwaQUhLjBtlZDx95WlyZPsOU/lA8egUtxjI/EwXX FRg6ocSgqgwK9RtljVknCFbE8RhmRnSM5IW6lRrtxJDC1QObW0rKibxykgPx/jtD tx/zY9hQD1LudBCVS0c7xbFvhvIW6WSMBGxS22gtdn7ynrQVPrHwP4qq38FsLll4 5H96690YWdwR4W7AnDJGuX01DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAjNImD FSSKOGd8VWUd4fv1oDUhMB8GA1UdIwQYMBaAFDFtiWR/DQywazcyB4pCMK8RVlM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ0MS9FMDgxQTYwQUVF OUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy9NVzJKWkg4TkRMQnJOeklIaWtJd3J4RldV elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ0MS9FMDgxQTYwQUVFOUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy9NVzJKWkg4TkRM QnJOeklIaWtJd3J4RldVelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPrFz2/hFyP9WWqH7OZYx7YTc+Qz4RczP4RIcQWqiSNz6CG9osElczHP3XLZN Fx3KvYdCM/BDomJWDTngx1KgCw6LwVtYZ0uMepJ2H2GHV8yBi8rrs8mHakLRai7a yAUfhCGGn0ykOrklYUsuDyxnPT6qoQz60wOCnICHKaxomHIOZGrjQAkd5JaqfNBv 28MpAbNbemVOtfgXl1mADU/bXaHA51A5LFWQ8PhN+4wPTgPsMjimN5ejANXR0zcl Xx64Iv4f1V13+RFAg4nmMgKwx6uGh+GuG9TZ8o3joHJ7XRJTaq2sFRj6SyZj9leX siGIjQBipXmg6u0J//XedpVF2g== -----END CERTIFICATE-----Generated at Sun Oct 4 07:39:41 2026 by rpki-client