$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft File: 8DK3RPyF-a5lo_pxREFvuj82STw.mft (raw, json) Hash identifier: LR/5dxGC60GwzARlnyYhFUmIdrAuAuSrD9cCdckylws= Subject key identifier: E1:9A:91:7C:7F:E4:63:1B:32:DA:04:18:DA:44:46:1E:9B:C6:32:E1 Authority key identifier: F0:32:B7:44:FC:85:F9:AE:65:A3:FA:71:44:41:6F:BA:3F:36:49:3C Certificate issuer: /CN=A9128327/serialNumber=F032B744FC85F9AE65A3FA7144416FBA3F36493C Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft Manifest number: 0D Signing time: Sun 25 Oct 2026 09:35:07 +0000 Manifest this update: Sun 25 Oct 2026 09:35:06 +0000 Manifest next update: Sun 01 Nov 2026 09:35:06 +0000 Files and hashes: 1: 8DK3RPyF-a5lo_pxREFvuj82STw.crl (hash: mUoH4gox9XmC2C9yG5qPRQVF1K4ko8XLdTG9z7DLNg0=) 2: F92F9180C6CE11F182E3BF3A4311F970.roa (hash: bDkf2tUhU80f+DWxFQUtN4omc21ua4W1RARNmibiLeQ=) 3: 5D3A59D4C64911F181684D305A11F970.roa (hash: JoQ2lpvbwAWxrmoonSUzNmLyW9l5eKzEo3/4QrwfA7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.crl rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128327, serialNumber=F032B744FC85F9AE65A3FA7144416FBA3F36493C Validity Not Before: Oct 25 09:35:06 2026 GMT Not After : Nov 1 09:35:06 2026 GMT Subject: CN=6addcd4b-5610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e2:cd:04:47:a6:14:f3:8c:67:ff:f3:23:80: 75:66:15:dc:cc:6e:85:67:df:5e:b3:dc:3a:35:2b: f5:ff:e7:9f:67:6f:2e:e5:3b:81:a9:ee:e9:a5:68: 3f:3d:b3:b9:bb:e5:41:d7:55:6d:ac:ea:e4:be:01: 7e:8a:be:69:1e:55:c7:5f:47:08:18:1c:4d:2c:9d: d1:85:a9:7f:09:83:bb:c1:ba:66:9e:1c:a7:54:24: dc:76:ea:0b:b2:2f:25:02:29:81:c1:93:7c:08:d1: 52:1d:46:25:4f:5a:2e:ed:98:44:99:11:3a:75:90: a5:08:29:3e:03:04:ad:a7:6f:56:44:c6:79:4f:af: 42:cc:69:29:ae:40:9f:be:cb:e4:93:16:ec:a6:07: dd:fc:d7:77:bc:b0:4e:16:21:27:8a:52:a8:f4:75: d6:f2:95:bf:6b:15:e3:4a:f1:88:a8:ad:1e:cd:d5: 90:3d:15:bb:75:f6:57:52:36:cf:5b:4b:d3:8f:60: 16:66:d6:38:55:d6:4e:8e:e5:ea:76:da:b1:38:23: 6e:10:08:06:66:b4:d8:04:d9:4a:3c:85:74:81:5b: 68:53:e2:89:fc:ad:1c:94:da:42:c3:c0:44:3c:26: 99:7e:13:e4:a7:03:db:2e:d3:99:4b:d3:c4:02:dc: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:91:7C:7F:E4:63:1B:32:DA:04:18:DA:44:46:1E:9B:C6:32:E1 X509v3 Authority Key Identifier: keyid:F0:32:B7:44:FC:85:F9:AE:65:A3:FA:71:44:41:6F:BA:3F:36:49:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:eb:96:19:c8:76:12:fd:84:68:da:71:8d:74:ed:b0:77:cf: 5a:90:b7:ba:20:00:7a:30:d7:50:8a:ef:c2:4e:f4:9e:a8:ec: 09:24:42:4f:9d:e8:7c:a3:54:5c:5c:f6:46:e3:dc:84:00:aa: 7c:54:c8:6f:62:33:28:f1:2f:21:c1:89:e5:9c:b7:f3:3a:73: 44:ce:68:08:af:3f:99:39:8e:26:83:ce:17:b3:0e:fb:92:c2: 8b:09:58:be:d8:92:3c:0c:87:bf:82:fb:1c:26:5e:c2:38:96: 58:20:13:04:35:f4:f5:9e:7c:f5:b8:56:ee:c1:9a:98:86:ab: c4:16:7c:8e:d6:cb:96:23:4c:15:8d:7b:70:95:3f:49:a9:0a: 49:ce:46:b2:db:e2:6c:d3:f7:6d:28:d4:69:29:4c:d7:c0:85: ec:da:f2:cb:a6:85:18:8f:d1:e0:2a:3b:5e:50:ad:98:c5:f2: 07:a0:14:25:9f:82:9c:38:7b:01:24:8c:cb:27:4e:65:28:87: a5:32:20:dc:87:5f:87:8f:f7:46:9f:d8:d7:f1:35:23:60:aa: fb:02:46:0d:45:03:aa:77:76:a9:c8:2b:89:78:d8:fd:ca:fe: b2:5c:65:01:a1:24:57:9d:ce:26:e4:d4:6f:f5:14:92:e8:1f: 0c:fd:76:32 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODMyNzExMC8GA1UEBRMoRjAzMkI3NDRGQzg1RjlBRTY1QTNGQTcxNDQ0MTZGQkEz RjM2NDkzQzAeFw0yNjEwMjUwOTM1MDZaFw0yNjExMDEwOTM1MDZaMBgxFjAUBgNV BAMTDTZhZGRjZDRiLTU2MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDt4s0ER6YU84xn//MjgHVmFdzMboVn316z3Do1K/X/559nby7lO4Gp7umlaD89 s7m75UHXVW2s6uS+AX6KvmkeVcdfRwgYHE0sndGFqX8Jg7vBumaeHKdUJNx26guy LyUCKYHBk3wI0VIdRiVPWi7tmESZETp1kKUIKT4DBK2nb1ZExnlPr0LMaSmuQJ++ y+STFuymB93813e8sE4WISeKUqj0ddbylb9rFeNK8YiorR7N1ZA9Fbt19ldSNs9b S9OPYBZm1jhV1k6O5ep22rE4I24QCAZmtNgE2Uo8hXSBW2hT4on8rRyU2kLDwEQ8 Jpl+E+SnA9su05lL08QC3N1JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4ZqRfH/k Yxsy2gQY2kRGHpvGMuEwHwYDVR0jBBgwFoAU8DK3RPyF+a5lo/pxREFvuj82STww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4MzI3L0EzOUExQUM4QzY0 ODExRjE5OUFCMDIxMzU5MTFGOTcwLzhESzNSUHlGLWE1bG9fcHhSRUZ2dWo4MlNU dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOERLM1JQeUYtYTVsb19weFJFRnZ1ajgyU1R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 MzI3L0EzOUExQUM4QzY0ODExRjE5OUFCMDIxMzU5MTFGOTcwLzhESzNSUHlGLWE1 bG9fcHhSRUZ2dWo4MlNUdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAG65YZyHYS/YRo2nGNdO2wd89akLe6IAB6MNdQiu/CTvSeqOwJJEJPneh8o1Rc XPZG49yEAKp8VMhvYjMo8S8hwYnlnLfzOnNEzmgIrz+ZOY4mg84Xsw77ksKLCVi+ 2JI8DIe/gvscJl7COJZYIBMENfT1nnz1uFbuwZqYhqvEFnyO1suWI0wVjXtwlT9J qQpJzkay2+Js0/dtKNRpKUzXwIXs2vLLpoUYj9HgKjteUK2YxfIHoBQln4KcOHsB JIzLJ05lKIelMiDch1+Hj/dGn9jX8TUjYKr7AkYNRQOqd3apyCuJeNj9yv6yXGUB oSRXnc4m5NRv9RSS6B8M/XYy -----END CERTIFICATE-----Generated at Sun Oct 25 14:20:51 2026 by rpki-client