$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: IyDc4UIW1thtEOE5nDzOHdlbgvF6BJvU1qmiqNuToyI= Subject key identifier: BB:A4:88:6E:43:9F:7D:67:1A:1B:CF:1B:75:6F:74:20:A8:3D:5E:A6 Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0EDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0ED5 Signing time: Tue 22 Sep 2026 17:34:50 +0000 Manifest this update: Tue 22 Sep 2026 17:34:49 +0000 Manifest next update: Tue 29 Sep 2026 17:34:49 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: 7LOnDVZisUd9CEZrdAZ4g66QuHdpSmq+Hdc4SY1Ou8U=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: nJme4FS5TjDqEzw/rX+GR8DJngobRbIcTTRzcDy5qYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3805 (0xedd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: Sep 22 17:34:49 2026 GMT Not After : Sep 29 17:34:49 2026 GMT Subject: CN=6ab2bc39-18d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:dd:fc:3a:8f:05:1f:ef:54:41:be:60:26: 92:ff:46:4a:79:0b:95:b1:ea:ea:e1:ad:f5:09:f9: 71:44:d3:8b:7e:fe:67:d8:04:d1:32:c7:5d:4f:f4: f6:a1:b7:00:8a:c9:0e:8e:af:29:db:9e:f7:9d:4b: 37:bb:b9:95:1f:37:5c:04:b4:71:55:a7:14:84:dd: 7b:ce:ee:91:c9:b9:d7:c3:19:4a:3e:7e:e3:45:bd: 6d:29:7e:da:a3:92:c1:e7:85:29:8d:dd:f1:da:2d: 56:9b:f7:93:39:0d:34:48:19:44:f6:f2:b7:94:bc: 9a:b8:30:45:f0:0d:f4:d0:45:a9:a6:91:11:c8:d9: 74:30:44:b6:8d:fc:28:30:3c:07:0e:94:4d:a9:09: 9f:a6:80:f8:dc:45:cf:1d:ae:a1:9d:03:25:bb:7f: ee:60:c5:94:e7:33:46:f3:e3:be:ff:4d:7d:c4:1e: 14:cc:cc:5a:1c:d1:3a:d2:d3:4a:d6:b6:f6:37:1d: 74:8b:10:d5:76:04:4d:53:a7:f6:d2:80:10:90:ad: ed:2e:00:01:b9:c8:04:40:2f:aa:b9:72:c6:b1:3c: 80:fb:c1:9c:2e:52:07:82:0c:11:fd:9b:64:e7:ca: f9:33:0d:c1:ec:aa:5a:b8:fe:fb:fe:94:fc:11:61: 16:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A4:88:6E:43:9F:7D:67:1A:1B:CF:1B:75:6F:74:20:A8:3D:5E:A6 X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:7f:bf:fd:23:bf:f8:fb:f9:92:d9:af:68:16:7e:5e:5b:94: 8f:39:3e:34:96:7c:c8:f4:85:f2:8e:02:b2:31:b2:9d:3f:fd: 4a:62:c4:0c:0a:11:fc:cb:a9:b6:f7:9d:67:5d:b1:72:79:0b: 94:ea:e1:b9:e6:1f:70:32:92:59:93:bd:58:c6:71:d6:d3:8e: ee:bd:68:99:4d:38:4e:42:83:df:f3:5a:ad:f5:49:77:5e:00: f9:49:53:87:65:db:31:80:42:c1:ac:ea:4a:5a:b9:c1:70:df: c0:24:93:69:a8:75:2f:21:49:b9:b1:a9:c7:51:90:ea:ab:51: c7:da:6b:ad:5d:c8:36:37:48:4f:b7:a7:3d:be:00:ec:27:58: d9:d4:d4:b7:53:e8:64:ca:1b:5a:01:28:5a:17:df:68:68:f0: 12:d4:35:3d:b0:df:00:6a:8d:74:a7:0a:a6:4c:37:1e:53:71: 1c:89:11:46:89:6d:5a:d3:a9:ce:e9:f8:a3:1d:1e:6b:07:d3: a4:8c:1c:10:3c:73:b0:0e:14:42:56:83:97:81:ed:4f:6a:ce: 64:8c:35:79:a9:21:a9:e9:64:b4:2a:0a:df:83:3f:8e:d1:06: 96:63:f8:2b:58:b4:62:19:84:e5:dc:78:86:4d:be:ea:3c:08: b2:07:7a:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjYwOTIyMTczNDQ5WhcNMjYwOTI5MTczNDQ5WjAYMRYwFAYD VQQDEw02YWIyYmMzOS0xOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+Td/DqPBR/vVEG+YCaS/0ZKeQuVserq4a31CflxRNOLfv5n2ATRMsddT/T2 obcAiskOjq8p2573nUs3u7mVHzdcBLRxVacUhN17zu6RybnXwxlKPn7jRb1tKX7a o5LB54Upjd3x2i1Wm/eTOQ00SBlE9vK3lLyauDBF8A300EWpppERyNl0MES2jfwo MDwHDpRNqQmfpoD43EXPHa6hnQMlu3/uYMWU5zNG8+O+/019xB4UzMxaHNE60tNK 1rb2Nx10ixDVdgRNU6f20oAQkK3tLgABucgEQC+quXLGsTyA+8GcLlIHggwR/Ztk 58r5Mw3B7KpauP77/pT8EWEW0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLukiG5D n31nGhvPG3VvdCCoPV6mMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAln+//SO/+Pv5ktmvaBZ+XluUjzk+NJZ8yPSF8o4CsjGynT/9SmLEDAoR/Mup tvedZ12xcnkLlOrhueYfcDKSWZO9WMZx1tOO7r1omU04TkKD3/NarfVJd14A+UlT h2XbMYBCwazqSlq5wXDfwCSTaah1LyFJubGpx1GQ6qtRx9prrV3INjdIT7enPb4A 7CdY2dTUt1PoZMobWgEoWhffaGjwEtQ1PbDfAGqNdKcKpkw3HlNxHIkRRoltWtOp zun4ox0eawfTpIwcEDxzsA4UQlaDl4HtT2rOZIw1eakhqelktCoK34M/jtEGlmP4 K1i0YhmE5dx4hk2+6jwIsgd6GQ== -----END CERTIFICATE-----Generated at Wed Sep 23 04:22:37 2026 by rpki-client