$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft File: k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft (raw, json) Hash identifier: h1ii+as1B/Eh/tpOxcAE8KFEVPM3plZ8XfAN7jonMGw= Subject key identifier: 02:27:FC:45:45:41:7C:DD:17:D7:97:49:28:E0:44:6C:B2:D2:23:13 Authority key identifier: 93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 Certificate issuer: /CN=A9178AFC/serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft Manifest number: 87 Signing time: Fri 23 Oct 2026 08:19:10 +0000 Manifest this update: Fri 23 Oct 2026 08:19:09 +0000 Manifest next update: Fri 30 Oct 2026 08:19:09 +0000 Files and hashes: 1: k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl (hash: DiiRpE8LjOq0BNkVmysLiNZCeelpPaKtLc0l+4FTcNw=) 2: 28E7910A1FC911F19CD315063A3D8C67.roa (hash: R2AlqbhHVnfmyAFdsG6D/MvPgbamdWxUkMT2LqjIQUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 08:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Validity Not Before: Oct 23 08:19:09 2026 GMT Not After : Oct 30 08:19:09 2026 GMT Subject: CN=6adb187e-bdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:a3:e3:0e:37:b1:b1:38:6d:52:50:13:67: 1e:71:31:c0:9c:90:b2:e4:5a:9f:b1:e9:97:53:a8: ad:e1:5a:e5:71:e3:48:20:ce:0a:e3:b6:0d:d2:56: 3e:5c:4f:27:04:8d:51:11:7a:30:bb:1f:6c:36:8b: cc:2f:c2:54:d7:82:85:d9:9f:08:d5:ce:0d:05:2c: 77:f0:2a:70:3c:72:66:17:b0:93:a8:46:c3:62:34: 8e:c7:9d:c2:84:68:7a:4f:b6:3b:5a:f4:2c:6d:7c: d5:5b:13:5c:32:ec:19:70:89:bb:25:7a:92:bf:98: c1:9e:da:bf:90:03:50:5a:b9:83:ce:a0:1c:5e:b6: ed:af:04:50:73:6b:9c:4f:d3:2b:76:85:74:5f:a5: 81:d1:bd:f7:9a:cb:6e:5f:10:de:66:49:b7:d9:e8: 9a:76:7d:d6:68:10:62:b5:9d:1f:6f:cd:e4:d2:ca: 0b:82:2c:f0:5c:56:96:42:6c:a2:eb:77:28:57:c9: 1a:ea:44:24:ff:98:9b:1e:e5:1b:b0:2b:6d:f7:ab: 61:e4:aa:33:4a:b0:a5:38:6d:bf:64:e5:c7:60:e9: 82:78:11:b4:af:b8:6a:d0:81:b3:3a:30:cd:b2:66: f9:d6:d9:63:72:bb:fb:25:b7:59:47:11:24:e2:02: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:FC:45:45:41:7C:DD:17:D7:97:49:28:E0:44:6C:B2:D2:23:13 X509v3 Authority Key Identifier: keyid:93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c7:21:43:a8:2c:91:e0:df:4c:33:fc:47:e1:5e:c8:98:f9: 7b:99:96:89:a5:84:39:c2:61:28:74:56:49:26:b9:13:11:16: c3:bd:ac:37:cf:9e:e5:a4:72:2e:a1:b5:f2:2e:16:a2:17:ee: 4b:9f:05:20:bd:43:c9:a7:79:65:74:46:f6:60:e9:d7:4d:26: 1e:f7:39:14:98:7a:39:d1:eb:64:d1:e1:44:fe:36:7a:f3:89: 71:07:10:b4:76:31:73:62:67:ec:8a:cd:83:a5:a4:4e:8e:ec: 82:c6:44:80:f2:5e:e9:28:b8:0f:f0:ce:b5:e1:4a:70:b3:ab: 91:24:3c:77:8f:ad:7a:6e:03:51:dc:b0:bf:f8:8b:57:e4:e0: 98:39:ab:99:24:12:80:4d:fd:ad:c4:ba:ad:19:05:5b:79:24: 1f:ba:cb:5d:88:75:35:2a:04:c3:99:a2:74:c4:fe:5d:f0:b2: 9a:0d:db:24:b2:a9:ff:c0:25:71:4e:02:b2:9e:e3:d0:b3:e8: ea:46:20:4d:9d:b9:a3:80:b9:7c:79:31:82:4e:f5:da:c4:ef: 2d:2d:89:6f:49:4d:26:bd:1f:60:34:67:68:c4:2b:04:da:f4: b9:57:d2:11:09:01:36:d2:a9:cd:16:01:13:87:ec:5f:0d:b4: 90:56:bf:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRkMxMTAvBgNVBAUTKDkzQzAxOUJGRDYwNzk5RDczNjIyQzExODVGNEEzOUJB NUY1RjkyMTcwHhcNMjYxMDIzMDgxOTA5WhcNMjYxMDMwMDgxOTA5WjAYMRYwFAYD VQQDEw02YWRiMTg3ZS1iZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Yyj4w43sbE4bVJQE2cecTHAnJCy5FqfsemXU6it4VrlceNIIM4K47YN0lY+ XE8nBI1REXowux9sNovML8JU14KF2Z8I1c4NBSx38CpwPHJmF7CTqEbDYjSOx53C hGh6T7Y7WvQsbXzVWxNcMuwZcIm7JXqSv5jBntq/kANQWrmDzqAcXrbtrwRQc2uc T9MrdoV0X6WB0b33mstuXxDeZkm32eiadn3WaBBitZ0fb83k0soLgizwXFaWQmyi 63coV8ka6kQk/5ibHuUbsCtt96th5KozSrClOG2/ZOXHYOmCeBG0r7hq0IGzOjDN smb51tljcrv7JbdZRxEk4gLpOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIn/EVF QXzdF9eXSSjgRGyy0iMTMB8GA1UdIwQYMBaAFJPAGb/WB5nXNiLBGF9KObpfX5IX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGQy80MTBCNjUzNDEw NDQxMUYxQUZEQjFGQUMxRjNEOEM2Ny9rOEFadjlZSG1kYzJJc0VZWDBvNXVsOWZr aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2s4QVp2OVlIbWRjMklzRVlYMG81dWw5ZmtoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGQy80MTBCNjUzNDEwNDQxMUYxQUZEQjFGQUMxRjNEOEM2Ny9rOEFadjlZSG1k YzJJc0VZWDBvNXVsOWZraGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZschQ6gskeDfTDP8R+FeyJj5e5mWiaWEOcJhKHRWSSa5ExEWw72sN8+e5aRy LqG18i4WohfuS58FIL1Dyad5ZXRG9mDp100mHvc5FJh6OdHrZNHhRP42evOJcQcQ tHYxc2Jn7IrNg6WkTo7sgsZEgPJe6Si4D/DOteFKcLOrkSQ8d4+tem4DUdywv/iL V+TgmDmrmSQSgE39rcS6rRkFW3kkH7rLXYh1NSoEw5midMT+XfCymg3bJLKp/8Al cU4Csp7j0LPo6kYgTZ25o4C5fHkxgk712sTvLS2Jb0lNJr0fYDRnaMQrBNr0uVfS EQkBNtKpzRYBE4fsXw20kFa/Fw== -----END CERTIFICATE-----Generated at Sat Oct 24 13:10:06 2026 by rpki-client