$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: 4r5nXxB12juDVL0n5sCon9S48kxegFUXwOa+mtsV+Zg= Subject key identifier: 8E:84:F7:A7:53:C2:6F:5F:3C:D3:E7:79:4D:58:57:01:C6:0F:1F:6D Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 0108 Signing time: Thu 03 Sep 2026 06:18:49 +0000 Manifest this update: Thu 03 Sep 2026 06:18:48 +0000 Manifest next update: Thu 10 Sep 2026 06:18:48 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: LB7CmR+rUQ3LwBDIVGg7JN8j2JlzQGsGts+Z/3pegJ4=) 2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: B7TUQqjMN6J5HTrb5Q82pPSHkS4BZTA/aqHNn2n0sG4=) 3: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: WaqOAo3dFdCGInWkvGm2bGCvoG6Vqwx4Uv22RJ/L2OM=) 4: 614772FE880B11F1AC7AC66A4111F970.roa (hash: o0rs+htqUFzwdtNtfMIUKKh0z/keHJddP4OX/SU46ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Sep 3 06:18:48 2026 GMT Not After : Sep 10 06:18:48 2026 GMT Subject: CN=6a991148-29d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f7:f8:2d:66:d3:c0:dd:4e:48:26:25:7d:14: 0e:af:7c:d7:63:48:e8:06:29:54:09:da:f4:45:c1: 4e:ea:66:1a:98:3c:13:3e:a5:77:be:fb:e9:fe:a5: ab:ef:72:0b:a0:a7:c1:03:b6:f4:f6:a1:e5:af:1f: 20:07:82:41:c6:e7:71:a4:b0:3b:1d:08:0a:7e:d7: b9:a4:d3:7d:05:89:89:c4:9a:63:e4:55:94:bf:62: 62:87:f5:c9:82:33:9b:6a:f5:73:44:0e:dc:26:13: 0c:4b:95:e6:a4:ea:3a:79:34:f1:71:47:8c:88:c6: fb:b4:07:cd:cc:af:69:3f:6b:45:0d:3d:78:72:41: ca:15:90:ce:52:3e:ef:14:f8:e2:ee:b1:18:e2:58: 0a:5f:6a:5c:d2:66:65:2e:21:d0:8f:03:ea:85:fb: 20:6d:4d:76:e4:fb:4f:ee:b8:60:9f:8a:85:45:fb: cc:8b:b2:53:0c:c5:a7:13:89:93:62:65:64:df:35: ce:15:87:3c:b7:f7:14:cc:8f:58:6e:3d:11:85:2e: fd:ee:b1:9a:8f:f9:08:26:ab:42:0c:48:99:84:32: 2f:d6:8d:5f:27:f8:22:f5:d1:dd:fa:ff:a3:8b:ee: cf:21:f5:93:be:0d:20:7a:d2:49:3d:d8:58:01:31: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:84:F7:A7:53:C2:6F:5F:3C:D3:E7:79:4D:58:57:01:C6:0F:1F:6D X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:81:a4:8f:9b:25:ca:c8:0a:d8:46:bf:bf:94:e5:46:95:1a: 85:9a:bc:37:03:ba:59:32:97:c5:0a:4b:5c:ea:88:d0:34:87: eb:88:7c:8e:16:c3:87:19:dd:ba:45:0d:17:94:b0:75:76:6e: 6a:03:4c:f3:29:b6:01:3e:e1:80:2f:92:76:7e:c9:b9:a9:68: 07:23:da:0a:40:95:c8:4f:44:07:50:64:ac:95:a9:89:97:e3: fd:bb:54:48:30:1f:03:06:0d:66:b6:21:63:f2:c7:4e:2f:1e: 66:20:96:29:01:7e:f9:33:b4:f5:91:86:ca:3c:aa:10:61:ae: e6:8c:a9:ad:61:58:e1:26:60:0c:b5:e3:76:63:ea:8e:78:e6: 17:7d:ad:cf:c9:60:fe:12:c1:f8:79:bb:4d:a1:17:62:24:4a: d5:98:ce:ce:ed:3f:21:32:c0:b2:8a:01:9a:a4:6f:0b:08:b4: 62:ee:e9:ae:a9:1d:21:8e:df:f4:25:7a:d8:60:a9:10:a2:77: 79:cd:a6:39:01:00:be:cd:93:fb:6c:a4:db:aa:9d:06:f5:a5: 0d:19:c0:f2:65:0e:92:13:1f:58:2a:2b:9b:f1:b9:63:f6:0c: c9:24:a1:87:3f:f7:d6:ba:9e:25:e5:c4:22:6c:52:00:6f:a9: fc:ed:7b:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJBQ0IxMTAvBgNVBAUTKEYwMDkyMzNEOEQwODdGQzFEMEY2NDI1NzgwRTNBNEQ4 NDRBMzRGODEwHhcNMjYwOTAzMDYxODQ4WhcNMjYwOTEwMDYxODQ4WjAYMRYwFAYD VQQDEw02YTk5MTE0OC0yOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/f4LWbTwN1OSCYlfRQOr3zXY0joBilUCdr0RcFO6mYamDwTPqV3vvvp/qWr 73ILoKfBA7b09qHlrx8gB4JBxudxpLA7HQgKfte5pNN9BYmJxJpj5FWUv2Jih/XJ gjObavVzRA7cJhMMS5XmpOo6eTTxcUeMiMb7tAfNzK9pP2tFDT14ckHKFZDOUj7v FPji7rEY4lgKX2pc0mZlLiHQjwPqhfsgbU125PtP7rhgn4qFRfvMi7JTDMWnE4mT YmVk3zXOFYc8t/cUzI9Ybj0RhS797rGaj/kIJqtCDEiZhDIv1o1fJ/gi9dHd+v+j i+7PIfWTvg0getJJPdhYATHxvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6E96dT wm9fPNPneU1YVwHGDx9tMB8GA1UdIwQYMBaAFPAJIz2NCH/B0PZCV4DjpNhEo0+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkFDQi83NEJEODU4QTFC M0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4SFE5a0pYZ09PazJFU2pU NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkFDQi83NEJEODU4QTFCM0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4 SFE5a0pYZ09PazJFU2pUNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvoGkj5slysgK2Ea/v5TlRpUahZq8NwO6WTKXxQpLXOqI0DSH64h8jhbDhxnd ukUNF5SwdXZuagNM8ym2AT7hgC+Sdn7JualoByPaCkCVyE9EB1BkrJWpiZfj/btU SDAfAwYNZrYhY/LHTi8eZiCWKQF++TO09ZGGyjyqEGGu5oyprWFY4SZgDLXjdmPq jnjmF32tz8lg/hLB+Hm7TaEXYiRK1ZjOzu0/ITLAsooBmqRvCwi0Yu7prqkdIY7f 9CV62GCpEKJ3ec2mOQEAvs2T+2yk26qdBvWlDRnA8mUOkhMfWCorm/G5Y/YMySSh hz/31rqeJeXEImxSAG+p/O17Ig== -----END CERTIFICATE-----Generated at Fri Sep 4 21:10:39 2026 by rpki-client