$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: J2Vwxvfheti/UvvBiQWCWD/bq1hMpIOvM5ZGLqnSGrg= Subject key identifier: 54:A2:09:1B:15:39:87:9E:AB:AF:EC:AD:20:FE:2A:06:32:45:7A:A2 Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: A3 Signing time: Wed 23 Sep 2026 07:00:52 +0000 Manifest this update: Wed 23 Sep 2026 07:00:52 +0000 Manifest next update: Wed 30 Sep 2026 07:00:52 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: R5exSQfvC+vozJonzc0+CM4Jc5m4aAJfTlrwW/I0rsI=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Sep 23 07:00:52 2026 GMT Not After : Sep 30 07:00:52 2026 GMT Subject: CN=6ab37924-75cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:c8:a5:66:bc:46:bc:a0:7e:c3:db:7a:60: f3:43:13:1b:cc:17:85:a2:9e:a2:77:20:38:2d:92: 85:bc:ae:b0:da:4e:8f:20:fa:96:22:f5:fc:68:e2: 9f:af:2e:76:4e:00:64:59:bc:c2:81:3c:14:d3:ad: e3:03:07:1a:59:78:2a:9f:03:30:c3:6d:76:5e:03: 96:17:1f:23:2f:86:82:a4:df:48:1e:09:f5:8d:1d: e1:a9:82:e8:58:f5:d6:f7:ac:0c:53:6d:a9:3e:c7: 89:05:72:04:c2:63:38:f9:f8:f4:9b:88:79:aa:ff: 6d:db:2d:8c:ba:cc:ec:cb:5c:c9:6b:83:39:81:a2: 08:7f:7a:0f:4f:93:3b:21:fd:0e:34:df:7e:1d:cc: ab:14:00:c3:99:fd:08:2e:17:e0:2a:f7:12:f4:27: 6a:90:1c:90:cb:99:31:20:03:c1:70:e8:4d:3b:00: d3:22:bc:8b:99:e4:f8:dc:d2:25:0d:38:ff:63:c8: 58:de:2a:63:a7:10:ae:96:b9:6a:1b:56:c3:87:ee: 79:eb:28:a6:22:6f:88:3a:58:71:f0:1b:5e:3d:81: b7:41:0e:c4:48:de:4e:d5:d2:57:78:1c:bd:1a:c0: b3:8e:9b:6b:f1:75:ba:70:81:d1:61:9a:da:e4:c9: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A2:09:1B:15:39:87:9E:AB:AF:EC:AD:20:FE:2A:06:32:45:7A:A2 X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ab:e4:7a:12:02:bd:0f:0f:b1:f4:18:92:19:c1:c6:d9:70: cb:ec:6c:4b:b0:c0:e4:6b:6f:cb:28:11:e9:8b:0c:0a:60:6f: 63:d4:1c:8f:9d:6b:ad:91:47:80:d8:b3:31:5d:7f:21:03:53: 64:ce:96:4f:89:ad:2c:2a:f5:e2:94:78:d3:ee:4b:d5:9e:12: d4:b6:b5:e3:ec:8e:27:a7:ea:fb:8e:5f:67:69:5c:86:f4:61: ef:40:74:2c:cc:8c:a9:5e:2b:f7:dc:00:0d:b3:cb:e5:ba:04: e5:e5:78:21:a1:a7:30:94:d6:71:57:f2:29:6a:b0:d2:18:7a: 12:cb:62:8d:ff:90:94:93:6e:a1:87:83:9c:78:4d:d1:39:95: ca:fe:86:e2:3c:a2:b9:77:9b:99:3d:c2:5b:e5:d4:4d:7e:d7: 8d:4c:55:9e:1d:38:07:e1:b1:54:d8:d5:78:65:6c:22:08:08: ae:de:47:e3:a4:21:34:9c:1d:9e:ca:1b:c3:73:0d:79:ea:48: 3e:0f:22:1e:fc:0b:ac:62:65:50:3e:92:79:95:8f:10:28:11: 96:72:52:2f:24:09:2d:06:f4:b4:ed:9a:8f:3a:59:23:c6:a2: d7:f9:af:40:31:d8:7a:d4:2f:e7:db:9b:d1:5e:bc:43:11:54: 61:0a:bb:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDODQxMTAvBgNVBAUTKEYwRkQ5RTVBNkRDOTQ1OUE4OEUwMTEzRjI0RjU2MUE2 RkRENzQwNUYwHhcNMjYwOTIzMDcwMDUyWhcNMjYwOTMwMDcwMDUyWjAYMRYwFAYD VQQDEw02YWIzNzkyNC03NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05XIpWa8RrygfsPbemDzQxMbzBeFop6idyA4LZKFvK6w2k6PIPqWIvX8aOKf ry52TgBkWbzCgTwU063jAwcaWXgqnwMww212XgOWFx8jL4aCpN9IHgn1jR3hqYLo WPXW96wMU22pPseJBXIEwmM4+fj0m4h5qv9t2y2Muszsy1zJa4M5gaIIf3oPT5M7 If0ONN9+HcyrFADDmf0ILhfgKvcS9CdqkByQy5kxIAPBcOhNOwDTIryLmeT43NIl DTj/Y8hY3ipjpxCulrlqG1bDh+556yimIm+IOlhx8BtePYG3QQ7ESN5O1dJXeBy9 GsCzjptr8XW6cIHRYZra5MkVnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSiCRsV OYeeq6/srSD+KgYyRXqiMB8GA1UdIwQYMBaAFPD9nlptyUWaiOARPyT1Yab910Bf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM4NC9ERkI0OUM0OEM1 MTAxMUYwOUQ4REI3NUZDNEY5QUUwMi84UDJlV20zSlJacUk0QkVfSlBWaHB2M1hR RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM4NC9ERkI0OUM0OEM1MTAxMUYwOUQ4REI3NUZDNEY5QUUwMi84UDJlV20zSlJa cUk0QkVfSlBWaHB2M1hRRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS6vkehICvQ8PsfQYkhnBxtlwy+xsS7DA5GtvyygR6YsMCmBvY9Qcj51rrZFH gNizMV1/IQNTZM6WT4mtLCr14pR40+5L1Z4S1La14+yOJ6fq+45fZ2lchvRh70B0 LMyMqV4r99wADbPL5boE5eV4IaGnMJTWcVfyKWqw0hh6Estijf+QlJNuoYeDnHhN 0TmVyv6G4jyiuXebmT3CW+XUTX7XjUxVnh04B+GxVNjVeGVsIggIrt5H46QhNJwd nsobw3MNeepIPg8iHvwLrGJlUD6SeZWPECgRlnJSLyQJLQb0tO2ajzpZI8ai1/mv QDHYetQv59ub0V68QxFUYQq7cg== -----END CERTIFICATE-----Generated at Thu Sep 24 02:30:11 2026 by rpki-client