$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json) Hash identifier: 1wUYjLC4Ua16ostgVam8Kk1XggRWV5uT0353jdabYxA= Subject key identifier: B5:CC:A8:23:48:A9:66:0F:E9:04:FB:1A:31:91:12:99:80:78:D8:57 Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft Manifest number: 0124 Signing time: Sun 27 Sep 2026 06:18:38 +0000 Manifest this update: Sun 27 Sep 2026 06:18:37 +0000 Manifest next update: Sun 04 Oct 2026 06:18:37 +0000 Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: yJYHv5aIQPWKlsi4nFgeOBO7g002IBbcXds3JTa9E74=) 2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: C/EqTVzQc9TGSgbz1zqtfThaARKLdFMrXdUsVxNqTYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Validity Not Before: Sep 27 06:18:37 2026 GMT Not After : Oct 4 06:18:37 2026 GMT Subject: CN=6ab8b53e-8e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:8b:e9:7e:75:d8:15:4f:4f:a9:1f:a2:d6: 8d:12:ba:4e:1b:61:f5:fa:d0:51:aa:0b:78:a3:b1: 8d:0f:b1:a0:f4:7e:91:7f:ff:53:a2:3d:04:92:5d: be:16:13:59:0a:70:02:69:61:47:1d:f0:f8:f9:44: 14:0b:7e:88:2a:6e:2c:70:4a:27:05:e6:4e:0c:5a: 76:a6:f6:d1:0f:79:96:62:e5:2a:16:7e:1e:ab:f1: 53:da:90:da:42:d6:c6:65:0a:51:b6:26:f7:9f:86: 2b:6f:a5:85:ae:89:55:a0:ba:9b:d3:62:23:67:37: 88:c2:10:ad:15:95:08:88:a1:f3:6f:de:e7:8b:b1: a2:9e:aa:2d:60:ee:1d:7c:90:42:41:17:35:be:e5: aa:32:d6:f6:27:80:05:59:2a:bf:50:49:50:d6:1b: c7:32:9c:af:1b:1e:02:b2:e2:5c:f9:15:db:ac:02: c6:b9:f1:41:65:03:2b:d1:97:29:e0:a8:a9:70:1e: ca:71:f5:46:7f:18:c5:e1:d3:41:d7:45:4a:07:c5: 85:d2:db:13:31:9b:74:39:d0:e6:c4:75:16:c7:27: 8f:4b:d3:b8:36:68:59:6b:d8:b7:2d:43:95:f2:f7: a0:9f:e1:54:dc:11:90:8d:d1:f8:7a:52:c6:b9:62: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CC:A8:23:48:A9:66:0F:E9:04:FB:1A:31:91:12:99:80:78:D8:57 X509v3 Authority Key Identifier: keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ba:06:fd:66:5d:89:3a:20:64:56:a9:18:75:73:0a:56:cd: d2:ec:ed:04:d7:d2:fe:35:33:89:af:94:a7:76:bf:49:6a:77: 93:4f:11:4b:38:e7:53:58:71:b3:b6:86:a7:be:cb:4c:c0:8c: 56:c1:20:7f:b2:6a:e2:7d:1d:1c:6b:08:de:cd:e8:aa:d8:12: 6a:52:87:44:fa:f1:76:1b:a3:24:02:3f:ea:ff:69:29:08:17: 8e:fc:6d:bb:a4:a9:48:f4:c5:02:16:52:d9:5f:7e:65:9f:f0: 0e:3a:7b:ff:d7:ed:a2:22:93:05:00:b6:b0:74:b4:65:0a:da: 4f:58:4d:89:91:db:3a:44:f8:5c:07:18:f2:ba:ee:3c:c5:94: 5a:53:7c:a3:2f:ad:79:4e:3f:1c:59:a2:d2:34:71:99:df:22: bd:42:9f:d9:a4:38:11:71:90:df:76:cd:c5:e0:b1:7d:61:66: b0:4d:66:e7:67:1d:73:e6:bd:54:10:b0:c4:63:36:8c:ab:a2: 7a:a5:c4:7c:56:23:38:86:b3:7f:1b:63:0a:00:54:99:cd:ce: 3f:b6:a7:77:52:3a:45:e2:2e:08:f7:cf:c9:fd:85:ff:0b:50: 32:cd:68:20:23:2f:59:6c:69:a9:cc:45:3d:76:ec:3b:7d:89: 21:71:81:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2QzQxMTAvBgNVBAUTKEM3QzMyMzRCRDI2REFENjI5RTJEN0VGNDQ0NDg0RkU1 NDFEODE0OEUwHhcNMjYwOTI3MDYxODM3WhcNMjYxMDA0MDYxODM3WjAYMRYwFAYD VQQDEw02YWI4YjUzZS04ZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviOL6X512BVPT6kfotaNErpOG2H1+tBRqgt4o7GND7Gg9H6Rf/9Toj0Ekl2+ FhNZCnACaWFHHfD4+UQUC36IKm4scEonBeZODFp2pvbRD3mWYuUqFn4eq/FT2pDa QtbGZQpRtib3n4Yrb6WFrolVoLqb02IjZzeIwhCtFZUIiKHzb97ni7GinqotYO4d fJBCQRc1vuWqMtb2J4AFWSq/UElQ1hvHMpyvGx4CsuJc+RXbrALGufFBZQMr0Zcp 4KipcB7KcfVGfxjF4dNB10VKB8WF0tsTMZt0OdDmxHUWxyePS9O4NmhZa9i3LUOV 8vegn+FU3BGQjdH4elLGuWLk4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXMqCNI qWYP6QT7GjGREpmAeNhXMB8GA1UdIwQYMBaAFMfDI0vSba1ini1+9ERIT+VB2BSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzZDNC9DMTYwNTg1MkZF RUQxMUVGOUZGNkNFODBDNEY5QUUwMi94OE1qUzlKdHJXS2VMWDcwUkVoUDVVSFlG STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4TWpTOUp0cldLZUxYNzBSRWhQNVVIWUZJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzZDNC9DMTYwNTg1MkZFRUQxMUVGOUZGNkNFODBDNEY5QUUwMi94OE1qUzlKdHJX S2VMWDcwUkVoUDVVSFlGSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv7oG/WZdiTogZFapGHVzClbN0uztBNfS/jUzia+Up3a/SWp3k08RSzjnU1hx s7aGp77LTMCMVsEgf7Jq4n0dHGsI3s3oqtgSalKHRPrxdhujJAI/6v9pKQgXjvxt u6SpSPTFAhZS2V9+ZZ/wDjp7/9ftoiKTBQC2sHS0ZQraT1hNiZHbOkT4XAcY8rru PMWUWlN8oy+teU4/HFmi0jRxmd8ivUKf2aQ4EXGQ33bNxeCxfWFmsE1m52cdc+a9 VBCwxGM2jKuieqXEfFYjOIazfxtjCgBUmc3OP7and1I6ReIuCPfPyf2F/wtQMs1o ICMvWWxpqcxFPXbsO32JIXGBlg== -----END CERTIFICATE-----Generated at Sun Sep 27 10:47:47 2026 by rpki-client