$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: 6dFtv3TmBPv0+iXVow+FlmANjUpt2xjl+yBZk+2Bdeo= Subject key identifier: F3:CB:4E:22:CD:D9:6F:5C:61:6D:E9:57:4E:DD:09:96:60:C3:F4:83 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 0A81 Signing time: Fri 02 Oct 2026 19:49:37 +0000 Manifest this update: Fri 02 Oct 2026 19:49:37 +0000 Manifest next update: Fri 09 Oct 2026 19:49:37 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: 9T/2BhgNx0RUVf7zCczRtq2Tfn9PGDLNWJIPrYOaLUQ=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: jD3UgwA2bor96tJcVFApC8QOuQf4N9JYSHoKOI3FiYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Oct 2 19:49:37 2026 GMT Not After : Oct 9 19:49:37 2026 GMT Subject: CN=6ac00ad1-05be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:91:7a:3a:9f:fd:75:4e:be:7a:fc:4f:32: 15:fa:05:0d:99:59:ec:89:98:18:e7:cc:8d:0b:d7: c5:31:3c:c3:fa:7e:c0:d9:1a:1f:a9:4e:ae:b8:10: bd:1a:cc:a9:b7:e2:84:d6:87:85:bf:9d:e2:8a:f6: 1a:bd:e2:d9:57:12:f3:84:b4:e6:4e:49:47:ec:51: a9:79:76:04:0a:ef:4c:cb:59:b7:11:7e:df:32:a8: a9:6d:7f:f5:2a:69:56:c5:8f:9a:f6:70:11:4d:5c: 76:31:b4:36:35:37:bb:08:1d:4e:01:9a:b1:81:cf: 47:c0:ab:89:1c:64:cc:e4:4b:c0:00:65:3b:10:3d: cb:5e:a5:3c:01:1c:7d:a2:f3:dc:1a:f6:4f:6b:e3: 2b:c8:e3:03:b7:b3:bc:4a:95:0d:55:b2:5a:8f:67: 47:5f:b3:83:6a:1d:9d:57:02:cb:d6:c5:da:08:40: 3e:85:f2:97:70:20:90:f4:79:9f:23:5e:b0:5e:86: 9b:23:ca:7c:cf:27:aa:d9:0c:2a:f9:51:5f:63:25: a1:97:0b:f7:d5:c0:00:30:7e:b7:d6:40:dd:dd:76: 48:52:56:6a:de:92:0c:9c:3d:e6:92:69:17:de:3b: 51:9c:b0:9d:b9:7c:37:47:d4:84:b3:bf:5e:87:45: 2e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CB:4E:22:CD:D9:6F:5C:61:6D:E9:57:4E:DD:09:96:60:C3:F4:83 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f4:b5:79:c9:2f:72:f3:69:d5:d2:a1:ac:84:82:0b:3c:c7: 46:97:75:df:b0:74:cf:dd:5b:bd:b8:a2:cb:a3:21:5e:d2:03: 72:55:4f:fe:0f:87:1d:e5:f1:97:ba:3b:08:c8:e2:7d:68:5f: e1:8c:a2:e7:a7:49:c3:1c:f2:c9:95:26:e9:e2:cc:7d:69:9c: 14:06:ca:26:72:73:0e:f4:92:50:67:42:f2:5b:a0:a9:79:fa: db:c7:ec:cc:4d:2b:85:14:6d:d7:cd:c9:db:ee:35:6a:23:3f: 4e:4c:59:36:30:38:d2:de:6f:e1:cf:41:05:e3:26:a5:99:56: c9:a7:f7:c1:0e:bf:9a:17:ce:18:16:07:dd:78:f5:2d:6b:1c: db:57:f4:d7:3e:ad:06:55:c4:4a:99:51:6b:ef:d7:1a:63:92: f2:26:94:67:9d:97:6e:d7:81:b9:1f:c9:0c:61:a6:86:07:00: c0:62:60:12:ee:df:cd:60:7c:00:0c:dd:d7:d7:e7:67:3d:32: 47:17:41:2e:7c:6c:3c:b1:4d:fd:5f:de:ee:17:c8:cf:fe:ee: 5d:fd:f1:98:65:99:8b:09:22:cd:40:4f:b3:d4:45:35:3d:fe: 74:2a:e2:d6:e2:23:ff:54:d4:7a:d6:20:03:93:4f:35:a0:f1: 44:37:2b:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjYxMDAyMTk0OTM3WhcNMjYxMDA5MTk0OTM3WjAYMRYwFAYD VQQDEw02YWMwMGFkMS0wNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulORejqf/XVOvnr8TzIV+gUNmVnsiZgY58yNC9fFMTzD+n7A2RofqU6uuBC9 Gsypt+KE1oeFv53iivYaveLZVxLzhLTmTklH7FGpeXYECu9My1m3EX7fMqipbX/1 KmlWxY+a9nARTVx2MbQ2NTe7CB1OAZqxgc9HwKuJHGTM5EvAAGU7ED3LXqU8ARx9 ovPcGvZPa+MryOMDt7O8SpUNVbJaj2dHX7ODah2dVwLL1sXaCEA+hfKXcCCQ9Hmf I16wXoabI8p8zyeq2Qwq+VFfYyWhlwv31cAAMH631kDd3XZIUlZq3pIMnD3mkmkX 3jtRnLCduXw3R9SEs79eh0UuHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPLTiLN 2W9cYW3pV07dCZZgw/SDMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAovS1eckvcvNp1dKhrISCCzzHRpd137B0z91bvbiiy6MhXtIDclVP/g+HHeXx l7o7CMjifWhf4Yyi56dJwxzyyZUm6eLMfWmcFAbKJnJzDvSSUGdC8lugqXn628fs zE0rhRRt183J2+41aiM/TkxZNjA40t5v4c9BBeMmpZlWyaf3wQ6/mhfOGBYH3Xj1 LWsc21f01z6tBlXESplRa+/XGmOS8iaUZ52XbteBuR/JDGGmhgcAwGJgEu7fzWB8 AAzd19fnZz0yRxdBLnxsPLFN/V/e7hfIz/7uXf3xmGWZiwkizUBPs9RFNT3+dCri 1uIj/1TUetYgA5NPNaDxRDcrGw== -----END CERTIFICATE-----Generated at Sat Oct 3 10:14:44 2026 by rpki-client