$ rpki-client -vvvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json) Hash identifier: AMbwJyzWG8BJvCHjJP6PnkuTAgxovjFLO82ZJ1R8l6U= Subject key identifier: 57:55:43:00:23:5B:FF:6B:E1:5E:CE:A6:CD:59:D3:32:60:4F:81:3B Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft Manifest number: 0429 Signing time: Sat 05 Sep 2026 00:00:32 +0000 Manifest this update: Sat 05 Sep 2026 00:00:31 +0000 Manifest next update: Sat 12 Sep 2026 00:00:31 +0000 Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: BqaLCqiyEh1Og0CYI/ZXPLjIwtUafoBFk//VlZpoaUU=) 2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: XV4+6RexVCN6qV3gQG680PT5iGhrAgYP0jd0N7lfisU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: Sep 5 00:00:31 2026 GMT Not After : Sep 12 00:00:31 2026 GMT Subject: CN=6a9b5ba0-e62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:b0:4e:06:ef:b2:76:43:3c:b6:d9:86:7b: a5:80:f9:cc:17:0e:ec:5c:5d:45:29:ec:f9:c8:20: 1e:0f:99:97:fc:a3:2d:6d:b7:ee:ee:58:90:27:63: e4:34:6e:ef:d0:46:8d:6f:34:83:34:fe:c2:2f:90: a8:f3:31:45:4e:b5:be:95:2d:be:89:11:2e:15:1a: f8:bd:32:96:b1:fc:8c:50:93:c4:ce:ce:34:80:be: 01:b9:98:2c:53:d5:40:b9:76:58:30:48:75:4d:2a: 30:6e:8f:56:b8:6b:ac:3a:77:75:c7:90:5f:0e:0f: de:67:f2:9d:67:9d:27:22:9c:6e:18:f6:de:72:c5: c0:13:9d:e0:ee:19:b0:2b:57:db:1d:06:31:c5:73: 74:1d:87:15:59:43:58:10:eb:5e:1e:a6:a2:07:c3: ca:cb:52:d8:97:aa:e9:92:53:ee:8d:b1:6c:25:31: 44:fa:91:cb:3d:3c:7c:bb:90:3c:cc:a2:ab:04:64: 9e:c4:e4:e2:fd:8e:8e:6d:c4:0a:a5:27:fa:c6:1e: 69:17:03:8d:2b:77:a5:1b:73:3e:38:6b:c9:f9:eb: 29:fc:ac:4a:7f:84:c4:63:b4:bc:50:67:45:ac:c7: d4:53:e0:95:be:3d:59:8d:d2:39:39:b9:55:dd:af: 89:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:55:43:00:23:5B:FF:6B:E1:5E:CE:A6:CD:59:D3:32:60:4F:81:3B X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:25:49:e7:5f:28:8e:c3:75:6a:37:98:f5:92:c9:f0:9f:25: a7:c7:24:ea:4c:b5:e7:d4:66:17:8f:d7:55:7b:33:bf:0b:cb: 44:60:71:8a:17:91:bf:2f:40:a3:87:33:c4:f8:40:a9:0a:1d: 7c:34:c1:d6:da:8c:be:a3:44:26:65:70:f0:02:1b:7a:25:e3: 49:2c:de:25:6d:8f:ea:16:93:eb:fa:42:9c:81:de:50:34:6f: 6d:17:d5:19:bb:d3:f5:78:c4:fe:eb:55:05:55:13:93:7c:cf: 64:9a:24:ae:04:c3:b3:b5:ff:74:3d:c3:6f:16:1e:dd:eb:6d: 2a:90:da:23:0c:b5:93:fb:de:6b:1b:95:3f:ac:d1:96:fe:86: c2:0b:e3:94:87:98:37:75:cd:6f:74:eb:85:25:92:74:42:05: 80:dd:41:8b:ea:8b:a9:e7:a1:2e:c5:28:a9:bb:27:9f:af:0c: a0:e6:09:8d:0e:66:34:5e:f4:5a:d4:dd:9f:94:67:53:54:ce: e5:3f:86:b0:ab:e8:6d:7f:64:54:c3:a2:86:be:93:7b:33:20: 9a:ab:e1:25:c7:66:9f:7c:9d:b9:34:50:63:3a:9f:6b:0f:c2: 3e:76:f5:b3:c4:44:50:31:8d:53:44:66:f6:45:55:1e:05:ea: f3:72:4f:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjYwOTA1MDAwMDMxWhcNMjYwOTEyMDAwMDMxWjAYMRYwFAYD VQQDEw02YTliNWJhMC1lNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAawTgbvsnZDPLbZhnulgPnMFw7sXF1FKez5yCAeD5mX/KMtbbfu7liQJ2Pk NG7v0EaNbzSDNP7CL5Co8zFFTrW+lS2+iREuFRr4vTKWsfyMUJPEzs40gL4BuZgs U9VAuXZYMEh1TSowbo9WuGusOnd1x5BfDg/eZ/KdZ50nIpxuGPbecsXAE53g7hmw K1fbHQYxxXN0HYcVWUNYEOteHqaiB8PKy1LYl6rpklPujbFsJTFE+pHLPTx8u5A8 zKKrBGSexOTi/Y6ObcQKpSf6xh5pFwONK3elG3M+OGvJ+esp/KxKf4TEY7S8UGdF rMfUU+CVvj1ZjdI5OblV3a+JwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdVQwAj W/9r4V7Ops1Z0zJgT4E7MB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOyVJ518ojsN1ajeY9ZLJ8J8lp8ck6ky159RmF4/XVXszvwvLRGBxiheRvy9A o4czxPhAqQodfDTB1tqMvqNEJmVw8AIbeiXjSSzeJW2P6haT6/pCnIHeUDRvbRfV GbvT9XjE/utVBVUTk3zPZJokrgTDs7X/dD3DbxYe3ettKpDaIwy1k/veaxuVP6zR lv6GwgvjlIeYN3XNb3TrhSWSdEIFgN1Bi+qLqeehLsUoqbsnn68MoOYJjQ5mNF70 WtTdn5RnU1TO5T+GsKvobX9kVMOihr6TezMgmqvhJcdmn3yduTRQYzqfaw/CPnb1 s8REUDGNU0Rm9kVVHgXq83JPgg== -----END CERTIFICATE-----Generated at Sat Sep 5 08:54:09 2026 by rpki-client