$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft File: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft (raw, json) Hash identifier: tg2iUxMhrLDR37str5bRRwDDGNB5VGXCqn72r8miLMY= Subject key identifier: 9C:74:13:A4:69:64:20:BC:9B:7B:1C:CD:DE:5A:EF:05:7B:10:CE:4E Authority key identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50 Certificate issuer: /CN=A91E855B/serialNumber=F232408485CC1A4038BDB31BFAF3261540310950 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft Manifest number: 85 Signing time: Wed 23 Sep 2026 07:23:21 +0000 Manifest this update: Wed 23 Sep 2026 07:23:21 +0000 Manifest next update: Wed 30 Sep 2026 07:23:21 +0000 Files and hashes: 1: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl (hash: x85cXAucqSqwQvYEnf+vAhQxmpNOvJMMbcnK2k7R5eI=) 2: 2D933FE8EF6711F0AD461381586F56BC.roa (hash: WqJt9JtnWtmIMdrj3ZxaQ9KA33C7zxy15e8t9pWBnaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E855B, serialNumber=F232408485CC1A4038BDB31BFAF3261540310950 Validity Not Before: Sep 23 07:23:21 2026 GMT Not After : Sep 30 07:23:21 2026 GMT Subject: CN=6ab37e69-4040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:6e:c0:b7:18:48:51:a8:bd:09:5d:d7:44: 8b:50:6c:5c:45:47:5f:0a:6d:64:d2:a7:f4:c6:71: c8:c6:cf:f9:30:b4:a4:a2:0f:d8:fa:1f:fd:e4:b8: 13:c0:02:b0:a0:c0:36:ce:f9:cc:3f:1e:1d:48:d2: f8:09:ca:76:50:9f:59:5b:46:0c:3c:c4:63:04:52: 69:75:73:69:ba:fd:4d:e9:00:ff:ba:a4:d9:6d:7e: 61:29:ac:de:7c:63:93:05:30:b2:fe:3c:56:8e:69: e9:8c:fd:87:5c:8b:8b:d0:4e:41:2f:a3:d2:de:e8: 29:20:f1:ee:3c:9e:a7:0f:05:b0:7b:99:18:0d:fe: d9:d3:9d:18:f8:f8:1a:cd:b6:8f:1d:5a:bf:94:77: 81:92:17:76:29:0a:b2:73:3f:4f:9c:2e:49:b0:c7: 10:9a:4e:3f:3e:48:76:56:66:ae:0d:ef:60:f3:42: 46:04:31:08:90:bf:d0:45:5e:f9:11:cd:82:4a:39: 52:46:e1:c6:6c:22:27:6f:d3:0d:db:11:ec:37:7e: 9f:ea:81:fe:83:a0:3c:37:a4:89:04:eb:dd:d5:98: 3b:02:7a:1e:6b:6c:10:2d:25:ca:7d:63:c4:aa:d0: 27:b1:86:03:f3:be:34:a2:fe:86:68:c5:5e:ee:3d: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:74:13:A4:69:64:20:BC:9B:7B:1C:CD:DE:5A:EF:05:7B:10:CE:4E X509v3 Authority Key Identifier: keyid:F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:fe:5e:87:3e:82:90:14:3f:4b:af:45:2c:f5:c4:94:4c:71: f2:b1:29:7b:c1:3b:a4:be:a9:fa:20:2d:4e:da:05:fa:2b:c7: 81:5f:33:f0:d2:ca:ea:2c:f3:0a:d9:df:fe:de:a6:c1:a9:37: 3d:bd:ad:2e:81:a0:59:59:95:69:6e:fd:e8:47:73:29:44:46: 51:5a:4c:9b:93:ef:d1:42:5b:1c:4b:02:73:0d:c3:37:78:5c: 03:95:de:99:7f:fb:d5:07:13:cc:34:3b:fc:4e:a4:3a:96:41: cf:50:34:0b:b4:25:bb:6b:7e:9c:0d:e8:b5:71:88:50:a1:bf: 53:13:2f:fe:03:17:a7:dd:72:13:b0:a7:73:78:78:7d:33:c2: 71:de:b1:53:fb:5e:9d:57:6f:87:55:4b:2b:06:d0:80:18:be: 83:59:d3:80:c8:a3:58:13:3e:b1:d4:81:c5:bd:8a:b0:7e:ab: 34:ba:47:28:2f:b3:f9:7c:6d:21:5b:a8:e9:a8:89:2d:11:4f: a3:11:e3:c8:e4:91:f5:5c:84:95:05:24:40:ac:e4:19:07:83: a7:7b:3f:b3:9e:77:e3:50:e1:26:11:c6:f1:24:56:b3:68:88: bc:d1:84:0d:91:67:92:69:49:9c:ab:f0:59:09:78:2e:01:85: a3:83:7a:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1NUIxMTAvBgNVBAUTKEYyMzI0MDg0ODVDQzFBNDAzOEJEQjMxQkZBRjMyNjE1 NDAzMTA5NTAwHhcNMjYwOTIzMDcyMzIxWhcNMjYwOTMwMDcyMzIxWjAYMRYwFAYD VQQDEw02YWIzN2U2OS00MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooVuwLcYSFGovQld10SLUGxcRUdfCm1k0qf0xnHIxs/5MLSkog/Y+h/95LgT wAKwoMA2zvnMPx4dSNL4Ccp2UJ9ZW0YMPMRjBFJpdXNpuv1N6QD/uqTZbX5hKaze fGOTBTCy/jxWjmnpjP2HXIuL0E5BL6PS3ugpIPHuPJ6nDwWwe5kYDf7Z050Y+Pga zbaPHVq/lHeBkhd2KQqycz9PnC5JsMcQmk4/Pkh2VmauDe9g80JGBDEIkL/QRV75 Ec2CSjlSRuHGbCInb9MN2xHsN36f6oH+g6A8N6SJBOvd1Zg7Anoea2wQLSXKfWPE qtAnsYYD8740ov6GaMVe7j1fEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJx0E6Rp ZCC8m3sczd5a7wV7EM5OMB8GA1UdIwQYMBaAFPIyQISFzBpAOL2zG/rzJhVAMQlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODU1Qi82ODA1QzEyNEVG NjYxMUYwODMzRDdCMjY1ODZGNTZCQy84akpBaElYTUdrQTR2Yk1iLXZNbUZVQXhD VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhqSkFoSVhNR2tBNHZiTWItdk1tRlVBeENWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODU1Qi82ODA1QzEyNEVGNjYxMUYwODMzRDdCMjY1ODZGNTZCQy84akpBaElYTUdr QTR2Yk1iLXZNbUZVQXhDVkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhv5ehz6CkBQ/S69FLPXElExx8rEpe8E7pL6p+iAtTtoF+ivHgV8z8NLK6izz Ctnf/t6mwak3Pb2tLoGgWVmVaW796EdzKURGUVpMm5Pv0UJbHEsCcw3DN3hcA5Xe mX/71QcTzDQ7/E6kOpZBz1A0C7Qlu2t+nA3otXGIUKG/UxMv/gMXp91yE7Cnc3h4 fTPCcd6xU/tenVdvh1VLKwbQgBi+g1nTgMijWBM+sdSBxb2KsH6rNLpHKC+z+Xxt IVuo6aiJLRFPoxHjyOSR9VyElQUkQKzkGQeDp3s/s55341DhJhHG8SRWs2iIvNGE DZFnkmlJnKvwWQl4LgGFo4N6Zg== -----END CERTIFICATE-----Generated at Fri Sep 25 11:00:05 2026 by rpki-client