$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: f2Z+3hjIHoMvwgOeCWtq5BT6r3GP8IptC5HzD1hcjBM= Subject key identifier: 8D:1E:A9:51:27:6D:3D:5B:3F:B7:6A:07:8D:3E:A2:F0:60:CD:41:61 Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 011F Signing time: Mon 19 Oct 2026 06:32:59 +0000 Manifest this update: Mon 19 Oct 2026 06:32:59 +0000 Manifest next update: Mon 26 Oct 2026 06:32:59 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: xPHReHJza/jynTXg3j5RNp4yQ+3WangNvxfWzs9fYE8=) 2: 614772FE880B11F1AC7AC66A4111F970.roa (hash: o0rs+htqUFzwdtNtfMIUKKh0z/keHJddP4OX/SU46ho=) 3: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: B7TUQqjMN6J5HTrb5Q82pPSHkS4BZTA/aqHNn2n0sG4=) 4: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: WaqOAo3dFdCGInWkvGm2bGCvoG6Vqwx4Uv22RJ/L2OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Oct 19 06:32:59 2026 GMT Not After : Oct 26 06:32:59 2026 GMT Subject: CN=6ad5b99b-a3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a6:ca:e0:5c:bf:72:ea:51:da:2e:a8:d2:bb: 84:d3:3f:3e:62:73:3d:82:bd:81:5e:38:58:45:a0: bb:c2:37:af:bf:e3:08:42:df:1a:7f:b4:03:2a:b5: e6:5f:df:ab:ae:1d:4b:2a:2d:91:1a:a2:dd:aa:3f: 1b:40:d2:e6:4a:d6:18:f3:da:e5:ef:b5:6c:00:70: 47:f6:82:93:09:1d:c6:22:59:05:a7:20:bd:c9:61: 97:bc:f8:f8:ab:53:35:d8:08:b8:4b:75:a8:38:9f: bc:10:73:a3:17:7b:71:5e:38:eb:53:56:37:aa:a9: d9:61:6b:63:a5:bc:d0:74:8b:a8:0e:31:ff:1f:94: 0d:75:66:b7:58:c6:17:78:6e:15:6e:ae:92:62:5b: 1d:1b:2f:a2:57:c1:53:ff:b5:87:be:a9:df:97:ca: 15:df:9d:1e:b3:10:61:ba:ec:a6:53:4b:f1:35:c0: 2c:cb:e0:01:57:51:b9:24:31:60:70:92:dc:13:a7: b4:7e:a3:57:a3:df:90:8b:1b:f6:f9:e6:62:47:00: 37:ba:46:c4:d8:b4:4c:e8:51:94:2a:3c:fa:0f:0b: a2:43:ad:9a:ad:62:84:70:3c:c5:f7:cd:a5:79:77: cb:41:63:8d:24:b3:78:5a:3c:da:0e:c4:64:cf:ba: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1E:A9:51:27:6D:3D:5B:3F:B7:6A:07:8D:3E:A2:F0:60:CD:41:61 X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:06:fc:22:a7:50:b9:a0:a9:35:c4:d0:41:d6:2d:c9:c8:58: 7c:ad:04:ca:72:40:20:6f:5a:12:c7:81:57:14:57:fc:ef:a2: b8:50:ba:c3:21:52:dc:32:21:f6:f2:6b:69:43:e6:e0:67:0a: 0e:19:34:2b:42:19:cc:04:b1:5d:8e:92:7c:f9:c2:b6:cf:39: 8c:db:6b:60:39:ef:ba:f3:8f:cf:26:a8:47:20:72:cb:0c:6a: ec:ec:ac:a8:48:aa:af:07:57:2e:1e:4f:f4:6a:ed:ba:8f:33: 80:40:e5:ca:fd:12:13:aa:97:4f:e8:b4:58:c4:e6:e2:b6:41: 83:4a:5f:b1:9f:ff:74:d0:2f:3f:e8:02:ad:66:80:82:68:e1: 3e:73:7a:6a:00:21:57:5c:44:fd:92:00:0b:e1:92:20:75:80: 67:24:cb:43:6e:ce:01:17:4a:cb:00:7c:c3:da:ea:69:f7:2b: 26:f5:d9:f3:f5:15:0e:03:d4:aa:7a:2f:53:b6:a5:33:51:a8: 9f:75:6c:aa:1b:36:34:9e:c1:0c:a0:c6:c8:7e:6b:b4:f5:90: 36:34:35:fd:24:80:70:e1:c0:b1:17:7b:20:8f:c4:c1:a2:af: 86:7f:88:a9:5b:11:fd:94:c3:23:07:e7:b9:6f:3a:59:0b:dc: b7:ea:ec:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJBQ0IxMTAvBgNVBAUTKEYwMDkyMzNEOEQwODdGQzFEMEY2NDI1NzgwRTNBNEQ4 NDRBMzRGODEwHhcNMjYxMDE5MDYzMjU5WhcNMjYxMDI2MDYzMjU5WjAYMRYwFAYD VQQDEw02YWQ1Yjk5Yi1hM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiKbK4Fy/cupR2i6o0ruE0z8+YnM9gr2BXjhYRaC7wjevv+MIQt8af7QDKrXm X9+rrh1LKi2RGqLdqj8bQNLmStYY89rl77VsAHBH9oKTCR3GIlkFpyC9yWGXvPj4 q1M12Ai4S3WoOJ+8EHOjF3txXjjrU1Y3qqnZYWtjpbzQdIuoDjH/H5QNdWa3WMYX eG4Vbq6SYlsdGy+iV8FT/7WHvqnfl8oV350esxBhuuymU0vxNcAsy+ABV1G5JDFg cJLcE6e0fqNXo9+Qixv2+eZiRwA3ukbE2LRM6FGUKjz6DwuiQ62arWKEcDzF982l eXfLQWONJLN4WjzaDsRkz7rcjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0eqVEn bT1bP7dqB40+ovBgzUFhMB8GA1UdIwQYMBaAFPAJIz2NCH/B0PZCV4DjpNhEo0+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkFDQi83NEJEODU4QTFC M0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4SFE5a0pYZ09PazJFU2pU NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkFDQi83NEJEODU4QTFCM0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4 SFE5a0pYZ09PazJFU2pUNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUgb8IqdQuaCpNcTQQdYtychYfK0EynJAIG9aEseBVxRX/O+iuFC6wyFS3DIh 9vJraUPm4GcKDhk0K0IZzASxXY6SfPnCts85jNtrYDnvuvOPzyaoRyByywxq7Oys qEiqrwdXLh5P9Grtuo8zgEDlyv0SE6qXT+i0WMTm4rZBg0pfsZ//dNAvP+gCrWaA gmjhPnN6agAhV1xE/ZIAC+GSIHWAZyTLQ27OARdKywB8w9rqafcrJvXZ8/UVDgPU qnovU7alM1Gon3Vsqhs2NJ7BDKDGyH5rtPWQNjQ1/SSAcOHAsRd7II/EwaKvhn+I qVsR/ZTDIwfnuW86WQvct+rsxQ== -----END CERTIFICATE-----Generated at Tue Oct 20 04:27:12 2026 by rpki-client