$ rpki-client -vvvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: 1uJ0oP2z2SHpC727Avo4GOnDaPtS6iFvX1QVjbVcfyQ= Subject key identifier: 1E:71:45:90:0E:31:5F:2E:06:67:69:C7:B0:10:D9:24:91:A7:69:48 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 08E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 08CB Signing time: Thu 10 Sep 2026 20:23:11 +0000 Manifest this update: Thu 10 Sep 2026 20:23:10 +0000 Manifest next update: Thu 17 Sep 2026 20:23:10 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: 2Ff569naLG7B9Fc5n3UY287AFYht22aYh5dQMxCMUfg=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: h8w/oRabDFzHFUZZQz0f2z/FRWd7Jq2xtW0buGwOh1U=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: nPuGU4dIjV5NcDfw4+iA+iIUzRsqHity9f8+08+b7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Sep 10 20:23:10 2026 GMT Not After : Sep 17 20:23:10 2026 GMT Subject: CN=6aa311ae-d77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:e5:b7:8b:d2:b4:a9:66:30:02:b9:93:ca: 77:f1:4d:de:79:9b:f0:12:5d:3c:a9:20:0d:d6:19: 47:b3:5b:38:d3:de:6e:61:0c:d1:14:3d:41:cd:67: c3:63:71:a3:31:54:16:99:95:64:27:63:1f:5b:d0: b5:65:96:b0:91:97:98:69:4d:7b:9d:ea:de:90:39: 54:7c:b5:60:9f:ca:f1:78:43:77:9a:66:c9:c0:4c: e6:35:61:08:49:e5:2d:7c:4e:0c:df:63:a5:17:11: 01:59:ad:22:45:36:70:96:a2:c3:4b:30:fb:f0:e0: c5:b2:3b:0d:3a:5d:83:37:d7:c9:b3:87:0e:a4:03: 3e:88:64:f5:37:dd:84:51:62:0e:00:46:0b:a8:27: cb:a5:34:c1:ed:8f:70:a8:4a:ca:1f:63:31:d8:64: d1:d4:f7:69:20:09:1a:b7:0a:d1:c8:2b:28:c3:88: a3:a5:d8:7e:ba:d8:0f:86:03:e1:f4:d4:d3:04:99: 7f:e2:0b:f0:45:b2:1e:a6:e0:b6:49:ca:ce:aa:6d: 9a:f2:34:f4:f7:9c:f4:f7:24:31:5c:af:44:86:8c: bb:ed:64:57:3a:5d:af:34:6d:83:30:8d:ec:e5:a9: 29:ed:7f:64:ed:53:43:33:0f:5d:83:f8:11:2b:21: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:71:45:90:0E:31:5F:2E:06:67:69:C7:B0:10:D9:24:91:A7:69:48 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b6:32:48:7a:48:38:b7:8f:6e:a8:13:c8:66:2e:da:5b:76: b3:6c:c9:36:34:02:a5:de:2b:b3:e5:72:ba:e8:64:5b:3f:92: a1:ab:30:2e:8c:13:0e:d7:f1:69:82:b4:f1:e2:0d:d5:d7:72: 86:37:cc:2b:f5:22:1a:94:72:07:5c:d5:6a:ff:12:51:48:36: c2:a8:0b:ce:f4:ed:57:2c:41:ab:47:a6:62:af:1f:35:ca:62: 37:30:3f:15:ce:22:8a:d3:bd:70:e4:d3:6b:e3:fb:3a:ea:28: 1c:90:36:3c:2b:0d:60:06:94:ca:99:ef:6d:c0:89:05:6f:d0: af:c9:3f:6d:00:fa:1a:07:f5:ec:30:45:12:e1:5e:a4:ad:23: e8:81:89:fe:ec:ac:7a:47:47:7c:b4:1d:99:6e:b2:97:dc:13: d6:b5:1d:f2:97:f7:e1:ca:78:ff:8f:8d:68:77:da:3d:3a:f5: 7e:54:eb:c1:96:dd:ea:3c:e5:69:37:ef:18:95:81:48:36:d0: fb:50:f7:23:f8:be:4a:8a:cd:a2:0a:c3:9b:aa:f3:86:c4:dd: 96:76:3c:00:ab:e3:a4:45:f4:c4:da:02:12:cf:49:05:42:c7: 6d:5f:d3:3d:6d:e0:07:1a:4d:4d:24:41:d4:d5:3f:2f:b2:96: ef:71:c8:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjYwOTEwMjAyMzEwWhcNMjYwOTE3MjAyMzEwWjAYMRYwFAYD VQQDEw02YWEzMTFhZS1kNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl47lt4vStKlmMAK5k8p38U3eeZvwEl08qSAN1hlHs1s4095uYQzRFD1BzWfD Y3GjMVQWmZVkJ2MfW9C1ZZawkZeYaU17nerekDlUfLVgn8rxeEN3mmbJwEzmNWEI SeUtfE4M32OlFxEBWa0iRTZwlqLDSzD78ODFsjsNOl2DN9fJs4cOpAM+iGT1N92E UWIOAEYLqCfLpTTB7Y9wqErKH2Mx2GTR1PdpIAkatwrRyCsow4ijpdh+utgPhgPh 9NTTBJl/4gvwRbIepuC2ScrOqm2a8jT095z09yQxXK9Ehoy77WRXOl2vNG2DMI3s 5akp7X9k7VNDMw9dg/gRKyFLTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5xRZAO MV8uBmdpx7AQ2SSRp2lIMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYLYySHpIOLePbqgTyGYu2lt2s2zJNjQCpd4rs+VyuuhkWz+SoaswLowTDtfx aYK08eIN1ddyhjfMK/UiGpRyB1zVav8SUUg2wqgLzvTtVyxBq0emYq8fNcpiNzA/ Fc4iitO9cOTTa+P7OuooHJA2PCsNYAaUypnvbcCJBW/Qr8k/bQD6Ggf17DBFEuFe pK0j6IGJ/uysekdHfLQdmW6yl9wT1rUd8pf34cp4/4+NaHfaPTr1flTrwZbd6jzl aTfvGJWBSDbQ+1D3I/i+SorNogrDm6rzhsTdlnY8AKvjpEX0xNoCEs9JBULHbV/T PW3gBxpNTSRB1NU/L7KW73HIrg== -----END CERTIFICATE-----Generated at Fri Sep 11 12:31:38 2026 by rpki-client