$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: d3Wdlkvh6SMiFgYNk6xDOhTfNjeHy4wlpn6MRZFY414= Subject key identifier: 02:EA:0B:B0:AC:99:6B:23:6B:B5:B9:37:D9:D5:DC:C4:F5:7C:5F:7B Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0636 Signing time: Sat 31 Oct 2026 23:16:42 +0000 Manifest this update: Sat 31 Oct 2026 23:16:41 +0000 Manifest next update: Sat 07 Nov 2026 23:16:41 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: gHrICuVNKFwL3Tb/yOt7/4lwTtSmL40RBskLxDNv70w=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: DfZlJoWPh+lI4zQ+0bbxX3WT7TX3vgysnssl+3x3hPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 23:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Oct 31 23:16:41 2026 GMT Not After : Nov 7 23:16:41 2026 GMT Subject: CN=6ae676da-10f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:7a:2b:11:ad:c5:1b:cb:b8:d3:30:b2:4c: f8:80:e3:87:17:f3:12:87:27:33:d2:78:59:76:00: 04:af:24:44:5f:d3:34:21:c0:cf:51:39:67:d0:88: 8e:73:e0:21:c1:97:d9:4d:a2:aa:7d:94:7e:3b:1d: 6d:84:d1:af:49:f1:a7:f1:41:f4:79:02:5b:3a:de: 76:bc:30:13:21:d5:52:26:98:a5:a4:d9:f0:64:13: dd:6c:d5:45:3b:42:53:ca:3b:d7:e2:d4:87:01:f3: 6c:c2:88:4e:8f:96:4e:4d:21:c2:2f:9a:84:50:9a: dc:a5:ef:00:1d:51:82:de:b3:d4:ea:16:8e:b1:12: 72:0d:18:6c:25:0b:c1:9a:20:96:4b:b7:fc:0f:9e: 58:3a:b0:87:2c:d3:1b:94:f2:e8:5f:75:d2:23:c4: ff:78:3e:14:6f:7a:d2:89:04:2a:12:2b:1f:70:e7: d2:3b:01:ef:bb:64:d9:bd:dc:ce:e2:30:db:0c:59: ff:e8:32:de:26:c3:78:85:60:8e:90:8c:f1:ad:f9: 7c:0e:3f:7c:58:29:2a:17:f2:72:c8:fe:55:17:70: 37:48:90:c1:fb:dc:1a:58:53:5a:3a:9a:f2:26:e4: 90:d0:79:f8:6b:d3:43:5e:40:98:97:7a:06:48:f1: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:0B:B0:AC:99:6B:23:6B:B5:B9:37:D9:D5:DC:C4:F5:7C:5F:7B X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:44:41:c1:a4:c1:de:8c:dd:c5:d0:22:b9:1d:ac:97:0c:a4: 7e:80:ca:8e:cb:01:ca:37:65:0a:7e:7d:55:ec:f2:b6:4f:2b: e2:bb:fb:72:40:e5:a9:ed:87:42:99:5d:35:b4:67:f8:31:f0: a1:19:6d:b3:2d:37:db:fa:e5:29:41:c9:59:98:fb:96:7d:80: 18:c3:83:43:2b:e1:16:1e:21:f7:53:b8:ff:aa:c8:a8:61:64: b4:18:35:ad:7f:5c:36:6a:f6:9b:e1:01:1e:b7:c1:21:c5:75: 14:26:76:66:c2:2c:1f:12:34:e1:1c:fb:aa:08:be:eb:78:0b: f4:2f:75:56:2d:01:b8:db:60:b7:5e:dd:6b:2b:ca:23:af:50: 8a:40:6c:90:fa:95:43:23:44:ab:72:3c:69:72:ac:a1:0e:16: 2c:3e:47:67:b7:c5:51:97:0c:4f:eb:34:3a:d4:20:c0:68:d6: 45:5c:cb:66:15:c5:92:28:b8:a3:2e:c9:42:12:9a:11:af:29: 9f:9c:ce:b8:b4:38:2b:88:9f:35:af:45:f3:0e:ab:55:f2:dc: 8a:2d:77:b7:0a:77:1b:4f:99:a0:f7:52:b7:c7:78:2b:ba:03: 1b:95:d2:bc:b0:c9:62:cb:06:7c:e6:aa:07:b2:2d:83:7e:db: f3:40:cd:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjYxMDMxMjMxNjQxWhcNMjYxMTA3MjMxNjQxWjAYMRYwFAYD VQQDEw02YWU2NzZkYS0xMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlZ6KxGtxRvLuNMwskz4gOOHF/MShycz0nhZdgAEryREX9M0IcDPUTln0IiO c+AhwZfZTaKqfZR+Ox1thNGvSfGn8UH0eQJbOt52vDATIdVSJpilpNnwZBPdbNVF O0JTyjvX4tSHAfNswohOj5ZOTSHCL5qEUJrcpe8AHVGC3rPU6haOsRJyDRhsJQvB miCWS7f8D55YOrCHLNMblPLoX3XSI8T/eD4Ub3rSiQQqEisfcOfSOwHvu2TZvdzO 4jDbDFn/6DLeJsN4hWCOkIzxrfl8Dj98WCkqF/JyyP5VF3A3SJDB+9waWFNaOpry JuSQ0Hn4a9NDXkCYl3oGSPHyoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALqC7Cs mWsja7W5N9nV3MT1fF97MB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS0RBwaTB3ozdxdAiuR2slwykfoDKjssByjdlCn59Vezytk8r4rv7ckDlqe2H QpldNbRn+DHwoRltsy032/rlKUHJWZj7ln2AGMODQyvhFh4h91O4/6rIqGFktBg1 rX9cNmr2m+EBHrfBIcV1FCZ2ZsIsHxI04Rz7qgi+63gL9C91Vi0BuNtgt17dayvK I69QikBskPqVQyNEq3I8aXKsoQ4WLD5HZ7fFUZcMT+s0OtQgwGjWRVzLZhXFkii4 oy7JQhKaEa8pn5zOuLQ4K4ifNa9F8w6rVfLcii13twp3G0+ZoPdSt8d4K7oDG5XS vLDJYssGfOaqB7Itg37b80DNfA== -----END CERTIFICATE-----Generated at Tue Nov 3 01:25:46 2026 by rpki-client