$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft File: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft (raw, json) Hash identifier: H9JrRhvK06j/rcmgHsTGe9DrvLxzxqK6RPq14GdY0Mc= Subject key identifier: 96:04:E6:93:3D:F0:3D:70:A9:9C:F1:A4:C3:B4:D8:7D:89:35:B6:4F Authority key identifier: 63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97 Certificate issuer: /CN=A916F57A/serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft Manifest number: 08 Signing time: Tue 25 Aug 2026 09:05:50 +0000 Manifest this update: Tue 25 Aug 2026 09:05:49 +0000 Manifest next update: Tue 01 Sep 2026 09:05:49 +0000 Files and hashes: 1: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl (hash: p2UlN8IqX8/MqWkdY68d6IcILJxwT9r9pXvLfgrCT+A=) 2: B2A83A1296C911F1ABBBAC335411F970.roa (hash: m9UsV7UjjMZ2WOx/GR0cXTiQls2vgjpyqNyxc4Qnugk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 09:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F57A, serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897 Validity Not Before: Aug 25 09:05:49 2026 GMT Not After : Sep 1 09:05:49 2026 GMT Subject: CN=6a8d5aee-d0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:32:de:fb:40:c8:40:15:e9:ac:53:02:5c: fc:72:f3:f7:bd:c9:c7:da:bb:ef:a9:3e:e0:99:4e: 95:3c:26:a3:ea:46:67:66:a9:7d:09:3c:78:b8:f6: 11:58:0f:7c:b6:f5:99:ce:4a:fb:08:87:36:50:b6: e3:c5:b8:1b:1d:f3:1e:a1:e5:0e:bc:60:aa:32:f1: d1:98:8a:14:7d:51:33:10:98:c8:56:20:c1:9a:45: df:89:d0:52:a2:1d:e0:a6:2a:e8:8b:0c:e0:fe:09: 56:87:34:bf:77:8d:d9:3a:b1:d1:15:49:b5:a1:93: 19:11:7f:e1:df:79:c7:2b:8e:92:5d:41:cf:db:bf: 5d:3b:39:3b:12:3f:11:dc:bf:fa:ed:e8:02:63:07: e0:25:5d:27:6a:7d:ea:40:e5:c4:05:b3:54:3f:30: e1:2b:e4:41:78:2e:ef:7a:fb:14:7f:0f:d0:ba:20: 91:20:7f:5b:df:68:c8:60:69:59:28:fc:fb:a1:76: a0:f7:e9:7f:9c:66:44:c2:5d:a0:19:a5:c3:c9:83: 35:dc:c9:5e:01:96:a9:8a:ba:8c:31:61:42:44:e9: 92:57:20:12:d4:42:9d:9c:0a:db:56:ac:34:f3:79: 2c:83:4e:07:c4:5c:93:7f:7c:64:a0:3b:b6:9f:e2: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:E6:93:3D:F0:3D:70:A9:9C:F1:A4:C3:B4:D8:7D:89:35:B6:4F X509v3 Authority Key Identifier: keyid:63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:95:7a:72:15:55:91:20:b4:d1:c4:f0:58:9c:d3:3e:c9:8c: 3c:24:f0:f4:b4:ef:6b:4c:a5:d8:42:c7:0a:f5:93:2a:79:e0: fa:db:d2:3d:e4:00:8b:f1:be:78:08:51:4a:91:ce:9d:e1:e3: a7:51:60:a9:55:52:55:80:14:78:e4:2b:80:2c:08:5f:fc:b5: 76:38:dc:41:55:82:05:62:0a:20:84:7b:85:93:38:ca:60:da: e6:bd:bc:26:ef:8b:22:d0:d7:b3:e2:67:ea:ce:c9:89:fe:cf: 64:4c:85:18:6b:85:98:29:65:25:0d:70:bb:01:0e:00:34:88: bd:b9:43:5b:78:e9:ec:74:69:55:ec:9d:da:1d:8e:12:92:1c: db:fd:0c:b1:b0:4e:da:50:69:d6:5e:99:68:f3:b1:49:e7:cb: 03:5e:9f:f7:cb:e2:df:5e:0e:93:17:04:df:d6:48:03:20:53: 71:91:72:81:ef:eb:11:8f:ff:c2:eb:d8:45:f5:18:2a:60:42: 02:0b:08:80:04:d7:25:09:fb:ea:e7:84:72:61:ec:4e:f6:8c: ba:d5:62:a3:5e:04:6c:0b:35:be:9d:87:cc:0e:db:bc:f3:00: ad:cb:71:c3:86:e4:ef:98:7a:ac:d2:1e:ca:64:7b:89:9f:af: cc:ae:48:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjU3QTExMC8GA1UEBRMoNjNDNzFGRUIxMzkxRjYzMzQwQzhDRjBGRDExMUNGRUYy MkJBQzg5NzAeFw0yNjA4MjUwOTA1NDlaFw0yNjA5MDEwOTA1NDlaMBgxFjAUBgNV BAMTDTZhOGQ1YWVlLWQwZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTzTLe+0DIQBXprFMCXPxy8/e9ycfau++pPuCZTpU8JqPqRmdmqX0JPHi49hFY D3y29ZnOSvsIhzZQtuPFuBsd8x6h5Q68YKoy8dGYihR9UTMQmMhWIMGaRd+J0FKi HeCmKuiLDOD+CVaHNL93jdk6sdEVSbWhkxkRf+HfeccrjpJdQc/bv107OTsSPxHc v/rt6AJjB+AlXSdqfepA5cQFs1Q/MOEr5EF4Lu96+xR/D9C6IJEgf1vfaMhgaVko /PuhdqD36X+cZkTCXaAZpcPJgzXcyV4BlqmKuowxYUJE6ZJXIBLUQp2cCttWrDTz eSyDTgfEXJN/fGSgO7af4iWpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlgTmkz3w PXCpnPGkw7TYfYk1tk8wHwYDVR0jBBgwFoAUY8cf6xOR9jNAyM8P0RHP7yK6yJcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGNTdBLzk5QUYyMTE2OTZD ODExRjFBNkMyQUMxMzU0MTFGOTcwL1k4Y2Y2eE9SOWpOQXlNOFAwUkhQN3lLNnlK Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWThjZjZ4T1I5ak5BeU04UDBSSFA3eUs2eUpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG NTdBLzk5QUYyMTE2OTZDODExRjFBNkMyQUMxMzU0MTFGOTcwL1k4Y2Y2eE9SOWpO QXlNOFAwUkhQN3lLNnlKYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBIlXpyFVWRILTRxPBYnNM+yYw8JPD0tO9rTKXYQscK9ZMqeeD629I95ACL8b54 CFFKkc6d4eOnUWCpVVJVgBR45CuALAhf/LV2ONxBVYIFYgoghHuFkzjKYNrmvbwm 74si0Nez4mfqzsmJ/s9kTIUYa4WYKWUlDXC7AQ4ANIi9uUNbeOnsdGlV7J3aHY4S khzb/QyxsE7aUGnWXplo87FJ58sDXp/3y+LfXg6TFwTf1kgDIFNxkXKB7+sRj//C 69hF9RgqYEICCwiABNclCfvq54RyYexO9oy61WKjXgRsCzW+nYfMDtu88wCty3HD huTvmHqs0h7KZHuJn6/Mrki1 -----END CERTIFICATE-----Generated at Wed Aug 26 17:25:13 2026 by rpki-client