$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: vk6SZ4N0d5xFIOEZ2ho9DTtMFD4ECw/KGl/qVbIZzxI= Subject key identifier: D9:6C:66:88:14:3A:95:30:58:28:52:D8:0E:F5:08:7F:74:74:CB:5C Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 016A Signing time: Tue 25 Aug 2026 04:51:34 +0000 Manifest this update: Tue 25 Aug 2026 04:51:34 +0000 Manifest next update: Tue 01 Sep 2026 04:51:34 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: y2abPKQEV/93pldksKGz39xfpXiZHOa3FdiO4tAYZYk=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: oAjj91kJNdl6x4fcpwdxCt9rZpIKF2EG4dXbvx2fHlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 04:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Aug 25 04:51:34 2026 GMT Not After : Sep 1 04:51:34 2026 GMT Subject: CN=6a8d1f56-52ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:d3:51:ce:33:0f:14:87:01:74:23:68:7d: 4a:e8:a8:b3:eb:09:59:95:70:3c:5c:8a:28:d1:f0: 3d:c6:40:db:71:92:c5:46:9c:ff:d4:2b:8a:87:04: 1e:c1:51:1d:6e:2a:bc:8e:1a:3d:94:f9:90:cf:70: 0d:23:58:5a:7f:b1:7e:2f:2a:fb:10:6b:d6:9b:99: 4b:8d:2d:c3:cc:18:13:0f:af:30:da:6f:77:2d:bc: 12:26:ef:ef:16:96:d1:a7:12:b1:d8:63:11:69:5c: 01:3c:8b:2c:13:d8:64:58:fd:69:55:82:bd:8b:f7: 57:78:40:a3:12:cd:3d:8c:30:80:7c:47:08:99:2f: 91:5a:b1:f5:5d:e3:65:7c:1f:f0:3f:0e:1b:95:fd: bd:a4:97:ff:32:39:07:b0:b9:7c:fc:f3:8e:98:f9: 5d:1f:13:74:18:7d:69:56:bb:a7:75:57:e8:c4:96: 35:12:89:68:df:f0:fe:7b:81:5d:e4:8a:e4:23:fa: c4:c5:55:be:e5:c2:19:51:c0:e2:2c:19:a9:25:1b: 5d:5e:5f:5d:74:4d:61:f3:aa:6b:40:bd:ba:9d:a0: c4:2c:7f:9c:ae:9d:4e:a6:f4:77:38:fa:13:b0:e4: d2:24:9f:8d:8e:58:23:ed:c3:a5:62:f4:ab:69:88: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:66:88:14:3A:95:30:58:28:52:D8:0E:F5:08:7F:74:74:CB:5C X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a6:82:05:2e:e1:09:bf:f0:4a:07:c7:cf:e5:38:15:18:7e: 7a:5a:c8:fb:c6:d3:cd:31:15:6a:d9:8b:00:b5:96:54:ba:9c: 1e:6e:04:8a:6e:01:f8:49:80:d4:b9:f6:c5:f0:7c:16:58:e3: 9d:39:a2:6e:da:14:60:af:f9:c8:7d:30:a1:f1:e2:e6:4d:7a: 25:ee:e4:6e:b7:17:7d:28:60:2e:66:18:c6:eb:80:56:cd:e9: 1c:e5:44:e2:77:f5:71:05:08:66:0c:16:24:40:0d:c0:44:2e: 8a:1c:d5:ce:f5:ae:e7:87:87:fe:db:70:3d:9b:51:8c:fa:71: 16:0c:4a:80:c9:9b:93:17:c1:61:7d:31:97:a7:09:d4:c7:80: 26:a2:99:70:53:76:42:e7:06:a1:cf:36:d5:b9:91:1a:b8:fe: 32:16:e3:ca:84:3b:f8:8c:b4:6d:5e:bc:c0:49:bc:d2:60:9e: e2:c8:36:5f:f7:64:db:b4:4b:eb:24:e9:4f:61:28:00:d5:62: 9e:3b:8a:20:08:e1:2c:ec:ab:96:5b:d6:4c:5a:4a:a4:c4:37: 50:a8:50:f2:e2:4d:6c:2b:46:01:b3:68:28:55:54:e1:64:36: 38:db:f0:9b:e2:e4:e7:5a:2d:2c:ce:fd:22:02:ec:15:51:3a: eb:41:29:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjYwODI1MDQ1MTM0WhcNMjYwOTAxMDQ1MTM0WjAYMRYwFAYD VQQDEw02YThkMWY1Ni01MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlPTUc4zDxSHAXQjaH1K6Kiz6wlZlXA8XIoo0fA9xkDbcZLFRpz/1CuKhwQe wVEdbiq8jho9lPmQz3ANI1haf7F+Lyr7EGvWm5lLjS3DzBgTD68w2m93LbwSJu/v FpbRpxKx2GMRaVwBPIssE9hkWP1pVYK9i/dXeECjEs09jDCAfEcImS+RWrH1XeNl fB/wPw4blf29pJf/MjkHsLl8/POOmPldHxN0GH1pVrundVfoxJY1Eolo3/D+e4Fd 5IrkI/rExVW+5cIZUcDiLBmpJRtdXl9ddE1h86prQL26naDELH+crp1OpvR3OPoT sOTSJJ+Njlgj7cOlYvSraYhoWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlsZogU OpUwWChS2A71CH90dMtcMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPaaCBS7hCb/wSgfHz+U4FRh+elrI+8bTzTEVatmLALWWVLqcHm4Eim4B+EmA 1Ln2xfB8FljjnTmibtoUYK/5yH0wofHi5k16Je7kbrcXfShgLmYYxuuAVs3pHOVE 4nf1cQUIZgwWJEANwEQuihzVzvWu54eH/ttwPZtRjPpxFgxKgMmbkxfBYX0xl6cJ 1MeAJqKZcFN2QucGoc821bmRGrj+MhbjyoQ7+Iy0bV68wEm80mCe4sg2X/dk27RL 6yTpT2EoANVinjuKIAjhLOyrllvWTFpKpMQ3UKhQ8uJNbCtGAbNoKFVU4WQ2ONvw m+Lk51otLM79IgLsFVE660EpPQ== -----END CERTIFICATE-----Generated at Wed Aug 26 18:01:10 2026 by rpki-client