$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft File: 8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft (raw, json) Hash identifier: /TBzsL26g7FC6ZVnc78SZ/pDEHAbH3Kx0Fo6KW5l5J0= Subject key identifier: 42:F8:57:37:8A:44:C5:4E:1C:EA:D7:A1:C1:07:3E:9B:01:7E:88:57 Authority key identifier: F0:D9:BD:A8:01:CA:27:10:D7:68:78:C9:DF:F3:58:64:95:71:6B:78 Certificate issuer: /CN=A91E4236/serialNumber=F0D9BDA801CA2710D76878C9DFF3586495716B78 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft Manifest number: 1D Signing time: Fri 09 Oct 2026 09:48:13 +0000 Manifest this update: Fri 09 Oct 2026 09:48:13 +0000 Manifest next update: Fri 16 Oct 2026 09:48:13 +0000 Files and hashes: 1: 8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.crl (hash: 4/Bo9CocRFYiFv7uFEM8m1jLlrScpoKaHVLKDEiK3Qo=) 2: 1B95F90EA0FE11F1825E2D663411F970.roa (hash: Z9HTTcD3yEzUQkVB9ymvctDdcUckm2RreowaVx1NXcE=) 3: zbVfqms8lphgcFU-7SmpqNLmGXg.asa (hash: q4O/FqGemUEctbPBKBd3Nkf9TBX7kHxXLKqWouxs38s=) 4: 1B05A0DEA0FE11F1825E2D663411F970.roa (hash: P6W/Hfpr93LemGxKRbVxgccWf1AF65o2VgS/fdnStBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.crl rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4236, serialNumber=F0D9BDA801CA2710D76878C9DFF3586495716B78 Validity Not Before: Oct 9 09:48:13 2026 GMT Not After : Oct 16 09:48:13 2026 GMT Subject: CN=6ac8b85d-c0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:9c:3a:47:92:e8:09:a2:0b:be:99:ab:0b: 52:91:a8:94:dd:a1:4e:ef:d7:5e:fd:cb:3b:27:b7: 42:1b:dd:58:bb:b1:56:f2:af:74:76:c2:01:6d:c7: c5:f2:3e:a9:ee:ab:23:ce:4a:ea:02:2c:07:7e:78: 27:58:ee:00:14:02:ab:f0:dd:b0:b1:45:75:65:8f: 84:7c:1e:3e:68:a4:16:ab:ed:da:41:8b:31:27:ab: 99:a9:55:ff:24:5a:51:30:26:9e:91:94:97:92:44: bf:58:ed:04:d6:9c:27:2e:fe:e1:23:d9:40:1e:10: 2b:f4:4f:dc:be:19:a0:2c:90:20:d0:9a:39:b7:f6: 6b:f6:f1:a3:7f:8c:58:e4:cf:e3:ce:32:b0:24:68: 6d:8e:1f:31:4d:6d:9b:2b:d6:5b:52:78:63:73:96: a6:2e:7e:4c:6a:1b:ad:56:2f:3a:a6:b3:7c:78:b7: 77:a7:d7:8d:0f:64:80:f5:57:7a:98:57:fa:26:e2: 26:0e:7c:c6:f3:47:29:14:70:bc:0d:a7:44:cd:60: 50:19:9c:d0:24:13:1c:b5:16:dc:26:4a:b9:92:1d: 26:0b:15:c1:a8:71:85:1b:d8:8f:26:74:3f:c1:ef: 01:98:a6:e5:73:75:d3:68:1f:d8:04:72:12:cd:a4: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F8:57:37:8A:44:C5:4E:1C:EA:D7:A1:C1:07:3E:9B:01:7E:88:57 X509v3 Authority Key Identifier: keyid:F0:D9:BD:A8:01:CA:27:10:D7:68:78:C9:DF:F3:58:64:95:71:6B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:04:9a:57:cc:5f:a2:92:a4:85:19:7b:a5:c4:98:99:00:5c: 1d:90:0f:4f:80:e0:5a:9a:e7:a0:91:57:dc:f8:6b:79:7d:14: bf:c0:f2:a7:33:82:19:e7:de:ff:14:e6:72:36:72:0d:6e:a7: 29:13:62:71:32:0c:19:bf:0a:43:51:9e:59:57:b1:a4:fe:d8: 48:d0:90:78:cd:69:03:3c:7a:0d:2a:15:11:90:c5:2b:08:4c: ed:c6:ee:3a:16:19:02:70:d6:b3:a4:26:64:29:f4:00:39:a3: 29:60:4c:d8:c6:a6:1c:aa:ee:f4:22:69:44:e5:03:01:e1:53: 5d:04:c8:d2:f4:7a:30:f5:7b:57:cb:53:8d:12:7a:f7:2e:0d: 08:95:c6:21:8a:77:3d:8c:a3:de:84:8e:22:e9:8b:d4:33:37: 69:fc:73:00:10:9b:80:7b:2b:b2:cf:04:ae:de:ef:95:25:47: 63:ee:fb:f6:c3:7e:cf:8d:fe:55:e4:1a:aa:e7:e0:45:00:c1: c0:aa:5e:d7:bb:91:46:cc:14:76:bc:ce:3e:3f:6d:c3:9f:b6: 02:57:ce:79:64:58:6b:79:c0:85:98:f3:89:d2:e5:da:d3:92: ec:57:9f:84:82:f4:3a:0a:24:93:46:40:ba:8e:e5:48:67:64: dc:2d:30:c2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDIzNjExMC8GA1UEBRMoRjBEOUJEQTgwMUNBMjcxMEQ3Njg3OEM5REZGMzU4NjQ5 NTcxNkI3ODAeFw0yNjEwMDkwOTQ4MTNaFw0yNjEwMTYwOTQ4MTNaMBgxFjAUBgNV BAMTDTZhYzhiODVkLWMwZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHoZw6R5LoCaILvpmrC1KRqJTdoU7v1179yzsnt0Ib3Vi7sVbyr3R2wgFtx8Xy PqnuqyPOSuoCLAd+eCdY7gAUAqvw3bCxRXVlj4R8Hj5opBar7dpBizEnq5mpVf8k WlEwJp6RlJeSRL9Y7QTWnCcu/uEj2UAeECv0T9y+GaAskCDQmjm39mv28aN/jFjk z+POMrAkaG2OHzFNbZsr1ltSeGNzlqYufkxqG61WLzqms3x4t3en140PZID1V3qY V/om4iYOfMbzRykUcLwNp0TNYFAZnNAkExy1FtwmSrmSHSYLFcGocYUb2I8mdD/B 7wGYpuVzddNoH9gEchLNpNJ/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQvhXN4pE xU4c6tehwQc+mwF+iFcwHwYDVR0jBBgwFoAU8Nm9qAHKJxDXaHjJ3/NYZJVxa3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MjM2LzlBMUEwMDdFQTBG QzExRjE5REU0NUU5MjMzMTFGOTcwLzhObTlxQUhLSnhEWGFIakozX05ZWkpWeGEz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOE5tOXFBSEtKeERYYUhqSjNfTllaSlZ4YTNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MjM2LzlBMUEwMDdFQTBGQzExRjE5REU0NUU5MjMzMTFGOTcwLzhObTlxQUhLSnhE WGFIakozX05ZWkpWeGEzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtBJpXzF+ikqSFGXulxJiZAFwdkA9PgOBamuegkVfc+Gt5fRS/wPKnM4IZ597/ FOZyNnINbqcpE2JxMgwZvwpDUZ5ZV7Gk/thI0JB4zWkDPHoNKhURkMUrCEztxu46 FhkCcNazpCZkKfQAOaMpYEzYxqYcqu70ImlE5QMB4VNdBMjS9How9XtXy1ONEnr3 Lg0IlcYhinc9jKPehI4i6YvUMzdp/HMAEJuAeyuyzwSu3u+VJUdj7vv2w37Pjf5V 5Bqq5+BFAMHAql7Xu5FGzBR2vM4+P23Dn7YCV855ZFhrecCFmPOJ0uXa05LsV5+E gvQ6CiSTRkC6juVIZ2TcLTDC -----END CERTIFICATE-----Generated at Sat Oct 10 16:56:57 2026 by rpki-client