$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: QuPF1FhhdkizQfm0/zAJ42SI/rxItorRRK4sChem6tA= Subject key identifier: C3:39:46:C4:B3:93:C9:1F:1E:6B:FF:E3:89:8A:4B:4D:F9:B3:C1:3E Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: 0130 Signing time: Fri 11 Sep 2026 05:42:13 +0000 Manifest this update: Fri 11 Sep 2026 05:42:12 +0000 Manifest next update: Fri 18 Sep 2026 05:42:12 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: 4Q7xlP8qmHXAvH7ra9A9eoIBH3kuaLfnJeb7CuuZ78U=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: OFV7TAeYTwMYk3v0VLj9doRdmglLiVsQ3XZ6eBJ4Cug=) 3: 57356FFE9C8911F195E754C85411F970.roa (hash: iL6MIo27bsfkvnUNjGGVu5qt/lmrrJMdfM5dFIA4pwA=) 4: 06EBCBDE9C8811F1A918E08B5411F970.roa (hash: gH9uwAxPYcJXVioCTcBeU7x4aSFAnH8dyB82k/ZhDLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Sep 11 05:42:12 2026 GMT Not After : Sep 18 05:42:12 2026 GMT Subject: CN=6aa394b5-5ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:fb:96:b8:32:20:9d:e1:09:db:b3:8a:62: be:3c:90:b3:c5:17:bb:69:59:cc:dd:9d:40:4f:4a: 56:27:80:a2:f2:d2:24:7f:5e:fa:8d:55:93:b5:26: f1:52:fb:02:d7:12:b9:5a:68:d5:a9:b9:b4:ac:4c: ee:57:ce:de:75:60:8b:70:80:04:6c:17:7a:02:6d: c8:34:12:73:e0:2e:14:7d:be:91:42:30:72:13:cd: fd:19:25:fd:85:75:f5:16:e2:42:ec:8d:91:b5:25: cc:42:c8:a3:80:51:63:49:3e:35:98:8e:f6:da:17: 6f:cd:f3:32:7f:de:f5:05:ea:11:cf:3e:f2:7c:6d: 28:40:47:82:51:c3:b5:03:ad:d2:8b:92:fb:82:3f: fd:cc:23:06:fa:6f:bf:f5:41:b9:f1:cd:2a:2d:21: 02:ce:bc:bd:eb:e8:b8:7c:7a:cf:a8:38:3e:8f:3c: 43:b0:a3:56:96:c2:07:9c:ca:31:b4:c5:e6:c2:eb: be:73:77:fd:60:fa:b2:d5:43:9c:1a:e7:21:d6:65: 9e:51:a7:3e:27:a2:ca:76:07:8a:5b:45:66:26:40: 13:33:da:2b:b8:7e:c9:34:58:2e:11:6f:dd:bf:13: d6:48:5c:4b:2c:b5:f5:1e:f9:f9:40:bc:1e:77:5d: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:39:46:C4:B3:93:C9:1F:1E:6B:FF:E3:89:8A:4B:4D:F9:B3:C1:3E X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b3:e5:7e:27:2a:1e:d2:35:82:0d:f7:b1:e8:5f:6c:ca:3d: 6a:80:cf:4a:cb:ab:9b:c7:c0:d8:2e:05:c0:c2:d9:bc:66:3d: 8f:48:a8:23:c7:40:fd:d3:23:b2:27:90:e5:e1:88:1a:c9:69: f8:a7:21:1b:82:3d:1c:1a:19:1e:23:6f:12:a1:42:45:b6:2f: 08:9f:39:07:c1:d7:e1:4c:b0:f0:d7:71:d8:e8:ac:70:19:07: 1a:c7:fb:22:39:96:bf:19:89:96:22:fe:ba:00:b1:4a:c8:52: ee:c9:8f:db:fb:8b:ac:3e:3a:7f:83:96:02:1e:71:0e:56:a2: 07:2d:c5:01:48:9c:83:8f:13:60:3a:91:b5:bd:02:c5:3f:eb: d7:87:5c:fd:3a:20:99:b5:b6:da:6a:82:15:ba:aa:c3:fa:dd: fd:a8:bf:a7:dc:69:6d:45:06:4d:8c:ae:2c:8d:ab:68:db:3f: da:79:07:89:54:ab:0f:42:c5:e0:0d:b4:f3:3e:e9:30:01:6b: 44:ca:0d:80:07:85:6e:27:26:ff:ce:05:a6:74:f3:2e:00:69: a0:20:f1:14:e3:7c:e2:77:60:e1:b3:00:38:24:6e:8c:84:ad: 91:c5:5a:32:d0:56:a3:eb:66:76:11:cd:d1:16:16:ab:48:67: ea:7b:d6:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjYwOTExMDU0MjEyWhcNMjYwOTE4MDU0MjEyWjAYMRYwFAYD VQQDEw02YWEzOTRiNS01YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLX7lrgyIJ3hCduzimK+PJCzxRe7aVnM3Z1AT0pWJ4Ci8tIkf176jVWTtSbx UvsC1xK5WmjVqbm0rEzuV87edWCLcIAEbBd6Am3INBJz4C4Ufb6RQjByE839GSX9 hXX1FuJC7I2RtSXMQsijgFFjST41mI722hdvzfMyf971BeoRzz7yfG0oQEeCUcO1 A63Si5L7gj/9zCMG+m+/9UG58c0qLSECzry96+i4fHrPqDg+jzxDsKNWlsIHnMox tMXmwuu+c3f9YPqy1UOcGuch1mWeUac+J6LKdgeKW0VmJkATM9oruH7JNFguEW/d vxPWSFxLLLX1Hvn5QLwed13jaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMM5RsSz k8kfHmv/44mKS035s8E+MB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI7PlficqHtI1gg33sehfbMo9aoDPSsurm8fA2C4FwMLZvGY9j0ioI8dA/dMj sieQ5eGIGslp+KchG4I9HBoZHiNvEqFCRbYvCJ85B8HX4Uyw8Ndx2OiscBkHGsf7 IjmWvxmJliL+ugCxSshS7smP2/uLrD46f4OWAh5xDlaiBy3FAUicg48TYDqRtb0C xT/r14dc/TogmbW22mqCFbqqw/rd/ai/p9xpbUUGTYyuLI2raNs/2nkHiVSrD0LF 4A208z7pMAFrRMoNgAeFbicm/84FpnTzLgBpoCDxFON84ndg4bMAOCRujIStkcVa MtBWo+tmdhHN0RYWq0hn6nvWLw== -----END CERTIFICATE-----Generated at Fri Sep 11 11:26:31 2026 by rpki-client