$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json) Hash identifier: jZLdJFrrf2O0Qm8aT2aZcKbnimd1e9IquHmQCVRkYIg= Subject key identifier: 15:73:76:57:F6:DF:B7:D6:47:3C:CE:81:35:43:4D:C4:D0:12:D2:37 Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft Manifest number: 0496 Signing time: Wed 07 Oct 2026 00:05:44 +0000 Manifest this update: Wed 07 Oct 2026 00:05:43 +0000 Manifest next update: Wed 14 Oct 2026 00:05:43 +0000 Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: lp2ts4ANmi1fmmBB/lI2vAxTcah2wA7CYJfuw2L2218=) 2: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: wPvXbMRDdeZ16YQAsG5yxXC1oVke0Is094fp9Wnssro=) 3: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: X5PDT1MbgloBsVHEEErT26cO3WdhXztNkcjjEpdBJNM=) 4: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: 8IoFb/TuJGa8f+hLPDSGTarCT7mkVKZq9W7cRCzmXZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Oct 7 00:05:43 2026 GMT Not After : Oct 14 00:05:43 2026 GMT Subject: CN=6ac58cd8-0a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:62:71:94:4b:58:94:c5:30:d5:75:ab:b8: 60:a9:cf:2d:e4:46:29:26:78:ba:2b:0c:da:8b:ca: b1:e8:72:39:76:ff:4c:ad:6c:93:87:45:ef:62:4d: b8:c7:a2:b6:a5:10:af:d6:09:04:6b:11:aa:81:d2: ec:d3:26:ec:01:bf:67:ba:6d:d1:c3:1d:c7:8a:47: 4c:08:fe:52:91:54:b7:69:76:28:de:8e:c1:47:c4: 9a:fe:4c:2c:41:94:30:af:a6:1d:90:01:c1:c9:96: 90:15:ed:5d:b4:0f:13:3c:7a:32:e0:00:b3:3e:f6: b1:7a:23:da:b8:c5:46:a1:71:df:e5:e6:19:31:cd: 5d:9e:2f:a6:90:cf:b0:9e:b7:f8:6f:13:66:2f:a3: f0:3a:97:e9:40:43:15:2f:8b:16:e1:6e:65:07:83: 84:90:60:cb:85:9f:cf:20:0e:41:6e:9e:91:f4:a1: 86:56:07:72:af:03:ba:54:05:e5:8a:45:fc:b5:31: 25:c9:7a:1d:b7:69:62:74:89:1b:24:6a:ed:b4:6b: 78:b7:97:d8:e3:42:90:61:93:c3:1a:62:fb:08:1a: 4d:55:ba:e7:aa:2a:71:c4:f2:f0:af:c8:2f:cc:d5: 75:2a:1f:99:76:94:a8:4e:8f:d6:60:29:9f:ae:de: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:73:76:57:F6:DF:B7:D6:47:3C:CE:81:35:43:4D:C4:D0:12:D2:37 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f6:f0:e7:7c:71:eb:73:76:2e:d9:89:c5:b7:ee:97:a3:29: d8:c5:c2:e6:1e:c4:6c:7c:c2:86:10:52:0e:5d:33:9e:ab:41: dc:c9:5d:73:9b:a2:eb:29:ab:33:7e:db:18:bc:19:e3:3c:92: 71:c0:88:be:83:d7:3c:47:84:c1:bf:4f:bb:d4:f7:5c:ac:64: 55:4e:49:91:7d:8b:af:c6:27:e1:3b:ff:0e:d8:4f:53:33:93: 8c:f2:fa:63:d0:92:16:75:4d:6c:69:0e:39:44:72:f6:f8:01: 88:da:08:bd:ce:9c:37:6c:b2:b6:87:7d:cb:e2:74:bc:24:59: ff:37:d1:12:c5:d9:c4:76:c6:b2:6e:0d:87:63:09:6f:ff:ee: 46:3b:6e:a6:7a:5e:5f:16:4d:c2:d9:8e:06:04:4d:89:7e:cb: 1c:24:b2:b6:b8:22:8b:08:87:17:60:34:df:6f:27:25:98:f2: 31:b4:92:f5:e9:bd:a4:6e:9e:1b:97:32:0a:69:8f:99:cb:60: 28:e6:71:10:03:7e:a7:8a:ed:c7:aa:42:f1:8e:69:9b:b0:85: 4e:25:d0:4d:3f:b3:ec:df:ff:4d:a6:d9:e9:da:6f:c4:1d:e1: 08:66:d9:b0:f2:73:c5:27:ba:29:44:6c:c4:c4:65:f1:b2:fb: a8:c3:ba:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjYxMDA3MDAwNTQzWhcNMjYxMDE0MDAwNTQzWjAYMRYwFAYD VQQDEw02YWM1OGNkOC0wYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0f1icZRLWJTFMNV1q7hgqc8t5EYpJni6Kwzai8qx6HI5dv9MrWyTh0XvYk24 x6K2pRCv1gkEaxGqgdLs0ybsAb9num3Rwx3HikdMCP5SkVS3aXYo3o7BR8Sa/kws QZQwr6YdkAHByZaQFe1dtA8TPHoy4ACzPvaxeiPauMVGoXHf5eYZMc1dni+mkM+w nrf4bxNmL6PwOpfpQEMVL4sW4W5lB4OEkGDLhZ/PIA5Bbp6R9KGGVgdyrwO6VAXl ikX8tTElyXodt2lidIkbJGrttGt4t5fY40KQYZPDGmL7CBpNVbrnqipxxPLwr8gv zNV1Kh+ZdpSoTo/WYCmfrt5XxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVzdlf2 37fWRzzOgTVDTcTQEtI3MB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFp Ymp4WVNuQ3JQbEo3TURnWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAPbw53xx63N2LtmJxbful6Mp2MXC5h7EbHzChhBSDl0znqtB3Mldc5ui6ymr M37bGLwZ4zySccCIvoPXPEeEwb9Pu9T3XKxkVU5JkX2Lr8Yn4Tv/DthPUzOTjPL6 Y9CSFnVNbGkOOURy9vgBiNoIvc6cN2yytod9y+J0vCRZ/zfREsXZxHbGsm4Nh2MJ b//uRjtupnpeXxZNwtmOBgRNiX7LHCSytrgiiwiHF2A0328nJZjyMbSS9em9pG6e G5cyCmmPmctgKOZxEAN+p4rtx6pC8Y5pm7CFTiXQTT+z7N//TabZ6dpvxB3hCGbZ sPJzxSe6KURsxMRl8bL7qMO6VQ== -----END CERTIFICATE-----Generated at Wed Oct 7 11:19:26 2026 by rpki-client