$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: fANYweqWQiaKMZPA+sVbonDCORlABKEdQpqNC+SN404= Subject key identifier: 8B:55:57:A5:60:AD:05:8B:8D:DF:B8:D0:ED:2A:0C:A6:44:A7:81:B5 Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 01B0 Signing time: Sat 17 Oct 2026 04:39:49 +0000 Manifest this update: Sat 17 Oct 2026 04:39:48 +0000 Manifest next update: Sat 24 Oct 2026 04:39:48 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: +vj7e5lxBWDMXnk8FJNsPhJNM3EK5iw/NEm8H68F5fk=) 2: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: OoFaMSSRiul6Qi62vK8HBSWETfbtSpuzZaFSM3QatEI=) 3: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: viM//8H5DSfhfHw8dOdgq6Dks9Sycd3bZEY4Fif7q2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 04:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Oct 17 04:39:48 2026 GMT Not After : Oct 24 04:39:48 2026 GMT Subject: CN=6ad2fc14-14a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:2a:df:11:0b:ac:dd:24:76:12:b6:b4:2a: 26:e8:6b:8f:90:87:df:db:9d:0d:fa:30:e9:32:bf: 5b:a0:c5:e0:58:6d:32:ab:4b:f5:d4:20:c3:66:da: b8:d3:c0:8d:e9:e5:3d:74:69:68:be:eb:1f:52:13: 04:59:94:1c:e5:9d:e6:23:6b:41:24:5c:9c:ed:ea: 45:2f:bf:64:e9:2b:6d:91:36:f8:b2:68:62:66:47: 06:8f:00:0b:f3:4a:7b:09:e3:cb:1c:3a:66:c9:b5: 6b:5c:77:30:29:27:16:0f:ae:aa:93:46:ee:89:c7: ce:84:5e:62:20:2e:0d:3d:99:45:f0:0a:bf:9c:f9: 73:c3:0b:d8:24:37:31:c5:88:ad:cd:20:78:9c:a3: 23:ad:94:d4:44:a1:77:5c:c2:9e:09:23:8a:c7:2e: cc:f3:e8:d3:77:ba:0c:fc:fe:f0:f2:3c:c6:2f:a5: 0b:87:48:75:27:95:70:2f:20:b4:55:b4:da:5c:20: 4f:40:5e:fc:3c:ff:ad:c6:c0:7d:c4:0e:2b:b0:62: 34:c3:e2:6c:1e:8b:4e:00:48:a7:d0:2e:0b:a6:de: 06:57:cb:61:4d:4d:a2:0f:85:fc:98:f8:3a:c5:06: eb:ac:cf:0c:84:29:84:84:7e:47:9b:93:00:41:51: af:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:55:57:A5:60:AD:05:8B:8D:DF:B8:D0:ED:2A:0C:A6:44:A7:81:B5 X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:37:cf:5d:d9:cc:ba:76:8d:7c:d2:80:26:51:a9:1b:70:66: 1e:e8:b5:6d:04:9b:49:fb:74:ca:3b:d7:3f:f4:cf:61:11:13: 13:f3:50:0b:24:42:ba:1e:aa:bb:25:8f:c7:e2:a4:ea:3e:54: 8b:90:d6:6d:ad:57:6d:7f:6e:58:9b:b4:7a:33:41:d7:23:5c: bf:7c:73:7a:02:29:4e:81:0b:57:67:26:3f:d1:88:d2:58:fb: da:b2:67:06:e8:00:f8:4d:74:67:c2:90:a5:6a:f3:42:e7:06: 17:01:03:5f:c9:b6:73:49:3d:53:19:a2:71:e6:93:88:9f:4a: 9d:d1:1f:54:35:df:3c:49:ed:bc:52:f8:12:e6:f9:2e:fc:3c: a7:b7:df:29:62:f5:55:6d:cd:7b:0b:5c:62:20:49:47:83:c0: 6f:97:ed:32:76:5a:c6:27:7b:f7:1c:d5:41:a4:12:3e:1a:9c: 4f:ac:65:c6:7c:35:55:d0:14:3d:fb:eb:68:a1:36:1e:8f:af: 7c:b0:ce:e8:1a:02:ae:ca:cf:2f:b6:d7:9a:9c:00:f9:50:cb: 7b:7a:03:0c:c7:e2:46:43:af:68:a5:1d:6d:9d:18:d6:a6:b8: a9:4b:b8:d7:44:a7:7a:63:05:ce:b1:33:16:7d:d1:bd:03:18: 0c:fb:b2:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjYxMDE3MDQzOTQ4WhcNMjYxMDI0MDQzOTQ4WjAYMRYwFAYD VQQDEw02YWQyZmMxNC0xNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxYq3xELrN0kdhK2tCom6GuPkIff250N+jDpMr9boMXgWG0yq0v11CDDZtq4 08CN6eU9dGlovusfUhMEWZQc5Z3mI2tBJFyc7epFL79k6SttkTb4smhiZkcGjwAL 80p7CePLHDpmybVrXHcwKScWD66qk0buicfOhF5iIC4NPZlF8Aq/nPlzwwvYJDcx xYitzSB4nKMjrZTURKF3XMKeCSOKxy7M8+jTd7oM/P7w8jzGL6ULh0h1J5VwLyC0 VbTaXCBPQF78PP+txsB9xA4rsGI0w+JsHotOAEin0C4Lpt4GV8thTU2iD4X8mPg6 xQbrrM8MhCmEhH5Hm5MAQVGvzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItVV6Vg rQWLjd+40O0qDKZEp4G1MB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvDfPXdnMunaNfNKAJlGpG3BmHui1bQSbSft0yjvXP/TPYRETE/NQCyRCuh6q uyWPx+Kk6j5Ui5DWba1XbX9uWJu0ejNB1yNcv3xzegIpToELV2cmP9GI0lj72rJn BugA+E10Z8KQpWrzQucGFwEDX8m2c0k9UxmiceaTiJ9KndEfVDXfPEntvFL4Eub5 Lvw8p7ffKWL1VW3NewtcYiBJR4PAb5ftMnZaxid79xzVQaQSPhqcT6xlxnw1VdAU PfvraKE2Ho+vfLDO6BoCrsrPL7bXmpwA+VDLe3oDDMfiRkOvaKUdbZ0Y1qa4qUu4 10SnemMFzrEzFn3RvQMYDPuyew== -----END CERTIFICATE-----Generated at Sat Oct 17 13:02:08 2026 by rpki-client