$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: pL3K3C6YIZSJXA0qwjGZuCxoD2nVYbmM2mndLMQUMyU= Subject key identifier: FF:F7:E9:81:12:8B:40:1F:6C:0F:67:4D:B2:63:15:FA:AE:1E:79:BA Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 0353 Signing time: Sun 25 Oct 2026 00:56:20 +0000 Manifest this update: Sun 25 Oct 2026 00:56:20 +0000 Manifest next update: Sun 01 Nov 2026 00:56:20 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: Y53z/XIeMTF5kN1BqowyWeNw9S2bHuPyA1mGtLepCpM=) 2: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: ckAOC0/IOL3kNGLvnmVBPQc4V0nuJigOvgYNf+R33U8=) 3: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: WV1M6FkGnv/sxHExKccwfV1A/MgwwbQGkL6ycE4nVBg=) 4: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=) 5: C18149885E2611F1A1DDF13A3B7AAC22.roa (hash: xmI2UUP5i6tfROcqiQ2bcD37TknmyJnWrsAGSocm6p0=) 6: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: X+DgJqMDIkeIYQcuTeqkYkwwUM4razrHcSa0TN+mKaw=) 7: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: L96aJFiA4lCQaZPd6TZiqqtKaN7NNsIsLLdXFJDRkSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 00:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Oct 25 00:56:20 2026 GMT Not After : Nov 1 00:56:20 2026 GMT Subject: CN=6add53b4-2e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:33:b1:4c:24:71:fc:73:d3:29:9c:66:d8: 31:77:63:48:e1:b8:f8:23:34:57:f0:af:d6:88:94: 40:08:fc:a1:1b:99:5f:9b:bb:bc:e7:90:ef:10:a9: 59:9f:1b:13:9d:02:94:5d:ee:a9:ab:2a:59:59:a4: 2f:99:20:1f:07:dd:ca:4e:d2:07:8e:61:4d:d1:d4: ec:80:4e:aa:91:97:62:37:d6:47:bd:d7:ed:f6:c2: 26:a4:5e:43:ed:e8:10:09:bd:d2:7d:81:ec:67:32: 46:20:11:90:0f:8b:20:2b:84:af:42:8d:30:07:06: 44:39:d9:1c:07:37:80:a0:46:ef:48:a9:ca:0d:7e: 4b:7b:85:28:13:82:ca:b0:38:da:3a:d8:f8:64:8b: 3c:74:24:06:05:fd:11:e3:82:d8:ad:c8:31:d4:5f: 15:21:1c:83:07:2b:8d:a4:e2:31:ec:d6:a7:c0:2f: d0:4c:27:64:84:c1:f4:ab:5e:b2:12:9c:30:fd:aa: cf:73:bb:ce:90:e4:38:60:e8:95:87:ce:36:b1:ae: 5d:1e:b8:6f:5e:34:74:f7:8b:ec:35:28:ea:ac:b3: 28:ea:6a:ee:9c:87:3e:6c:22:ef:89:47:92:c7:0e: 68:a8:43:9b:7c:09:80:ae:02:f2:41:ea:63:e2:6e: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F7:E9:81:12:8B:40:1F:6C:0F:67:4D:B2:63:15:FA:AE:1E:79:BA X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e6:32:a6:46:e0:b9:27:89:01:94:09:2e:0f:20:0f:e6:75: 47:76:5d:d7:cf:93:5b:46:8a:74:d2:cb:97:ed:1d:b0:c9:af: 4c:e1:d4:72:de:51:f6:26:b7:57:26:20:d8:ee:75:ec:48:ca: 0a:70:c5:49:1d:83:61:fd:d4:34:eb:e5:d0:7d:05:95:41:a1: 4a:2e:77:99:1b:bc:c1:b8:ec:b2:a8:80:0f:c1:1a:4f:8c:65: c4:fc:31:26:df:bb:58:ed:19:d5:42:4a:c8:fd:94:7b:53:78: 5b:9a:5c:83:c6:27:dd:01:18:00:d9:79:71:58:90:fb:fd:ed: 9e:fb:1a:f5:d7:34:b8:bc:cd:c5:46:3e:bd:42:0a:3c:9f:63: 37:c2:c5:2a:07:f5:20:c4:12:05:8e:ad:e4:ce:ea:af:70:6d: 78:0c:df:48:9f:b8:ce:2d:a8:60:93:43:f7:55:34:bf:84:e4: df:5a:61:d4:e4:63:65:ca:e8:f9:48:fa:00:3d:e2:83:cb:22: 04:f7:98:c2:9e:2a:d4:3b:19:ab:2f:15:40:90:4f:77:5b:6a: 34:6a:a3:03:ec:db:55:32:52:a3:b7:89:08:4a:d1:30:83:ed: c5:ea:7d:6b:b3:3d:0e:54:ec:10:aa:bb:39:42:e9:38:3f:be: 3d:26:d6:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjYxMDI1MDA1NjIwWhcNMjYxMTAxMDA1NjIwWjAYMRYwFAYD VQQDEw02YWRkNTNiNC0yZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB4zsUwkcfxz0ymcZtgxd2NI4bj4IzRX8K/WiJRACPyhG5lfm7u855DvEKlZ nxsTnQKUXe6pqypZWaQvmSAfB93KTtIHjmFN0dTsgE6qkZdiN9ZHvdft9sImpF5D 7egQCb3SfYHsZzJGIBGQD4sgK4SvQo0wBwZEOdkcBzeAoEbvSKnKDX5Le4UoE4LK sDjaOtj4ZIs8dCQGBf0R44LYrcgx1F8VIRyDByuNpOIx7NanwC/QTCdkhMH0q16y Epww/arPc7vOkOQ4YOiVh842sa5dHrhvXjR094vsNSjqrLMo6mrunIc+bCLviUeS xw5oqEObfAmArgLyQepj4m6YPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/36YES i0AfbA9nTbJjFfquHnm6MB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALOYypkbguSeJAZQJLg8gD+Z1R3Zd18+TW0aKdNLLl+0dsMmvTOHUct5R9ia3 VyYg2O517EjKCnDFSR2DYf3UNOvl0H0FlUGhSi53mRu8wbjssqiAD8EaT4xlxPwx Jt+7WO0Z1UJKyP2Ue1N4W5pcg8Yn3QEYANl5cViQ+/3tnvsa9dc0uLzNxUY+vUIK PJ9jN8LFKgf1IMQSBY6t5M7qr3BteAzfSJ+4zi2oYJND91U0v4Tk31ph1ORjZcro +Uj6AD3ig8siBPeYwp4q1DsZqy8VQJBPd1tqNGqjA+zbVTJSo7eJCErRMIPtxep9 a7M9DlTsEKq7OULpOD++PSbWzA== -----END CERTIFICATE-----Generated at Mon Oct 26 11:13:57 2026 by rpki-client