$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft File: CIaR8feL2c7-2A021lDWd2emvbA.mft (raw, json) Hash identifier: IoAPllELIqWdtuQPLMNvMSD6k2Men0bzQuVF0wJcmJI= Subject key identifier: 8B:F1:86:A4:DA:A4:D4:06:8D:2D:52:6B:BE:CC:25:4C:68:54:07:3D Authority key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 Certificate issuer: /CN=A917DA4A/serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft Manifest number: 0889 Signing time: Sun 04 Oct 2026 20:48:31 +0000 Manifest this update: Sun 04 Oct 2026 20:48:30 +0000 Manifest next update: Sun 11 Oct 2026 20:48:30 +0000 Files and hashes: 1: CIaR8feL2c7-2A021lDWd2emvbA.crl (hash: 9ZO1p1EGokMxIUWbo59Xk7nJ4J+p0aV3CckRE7nBZmM=) 2: F126F04A11A911EBB5A4DD83C4F9AE02.roa (hash: gKg5HfquJDWxf6FguB+IjVE9zWcFlZAOKarqs8xULuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DA4A, serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Validity Not Before: Oct 4 20:48:30 2026 GMT Not After : Oct 11 20:48:30 2026 GMT Subject: CN=6ac2bb9f-c74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:1c:9b:f1:fd:df:9b:a3:75:ae:81:fb:d9: 19:d7:cf:b3:5a:79:70:67:86:96:6a:f4:2a:38:8a: 9b:52:1b:28:71:d6:67:0d:61:98:d3:bf:ef:ac:2c: dc:25:1b:d1:fc:86:8b:da:70:bb:64:35:95:40:4a: c9:ff:07:dd:0d:3b:6d:40:56:4a:e1:a4:28:64:81: 4c:6e:06:f1:d7:e6:4d:82:c4:1d:a6:da:b8:70:87: 3c:56:32:13:59:8a:5a:b9:d6:52:9f:16:41:3f:83: 13:a2:01:b6:0c:e7:c5:4a:92:1d:51:c3:0f:08:be: e7:ec:3a:80:4f:7d:f3:7b:16:54:38:fe:cf:e0:f4: 23:88:1b:14:49:44:75:5f:70:6d:47:fc:45:dc:b4: 75:6a:76:5c:d5:b5:a5:ba:ee:7a:a6:2f:6a:8a:e3: c1:2b:3b:a5:d0:8e:d3:ca:19:bb:d3:d1:14:5f:1a: c9:b3:35:42:8b:e2:a5:6a:d7:ac:ce:a4:e0:a3:be: 3a:c2:74:ee:7a:be:be:c4:74:c6:4c:3a:40:35:10: 0b:99:5a:b7:af:7d:42:2a:a2:f5:c4:e4:88:49:ce: 74:81:98:2a:d9:c6:6c:e6:9b:f1:cc:cf:1b:ff:a5: 83:63:aa:a1:87:a0:7a:93:1c:20:32:83:2b:f8:ac: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F1:86:A4:DA:A4:D4:06:8D:2D:52:6B:BE:CC:25:4C:68:54:07:3D X509v3 Authority Key Identifier: keyid:08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:1e:10:e6:17:9f:1f:b7:cb:80:1e:f3:07:5a:19:a5:dc:7c: 3a:69:40:f6:5e:af:35:f6:46:6f:33:26:78:a3:2e:4b:f4:62: bc:8b:86:3e:2b:89:2e:bc:5b:b7:47:88:af:cc:10:6c:8b:1b: 1d:e1:96:b5:66:c7:19:2f:54:31:ce:37:5f:7e:ea:89:15:7a: 2f:17:b3:3f:72:63:bd:a2:07:d7:f0:22:7a:c7:5a:a7:42:ca: de:26:5c:2a:8b:35:20:a3:44:e7:00:1f:57:ec:8e:45:85:22: 13:27:5d:45:16:b1:30:a4:59:d0:80:c7:56:ac:19:e0:98:26: 38:8c:d7:5f:d7:6e:f0:6a:d1:37:55:2d:ce:9a:af:11:5a:99: 99:34:e3:c1:d1:dd:3c:67:74:cb:a2:8e:1c:ae:69:47:b5:95: c8:57:6e:a1:15:62:72:b0:99:4b:3f:ae:ac:15:f1:88:3a:77: 23:3b:58:f5:b4:84:8c:1f:5e:f5:c8:8c:b5:92:8e:94:56:28: f0:55:f2:57:47:ec:4f:17:07:91:b7:ca:5d:20:3a:99:9b:a2: d7:51:ea:9b:0f:c8:c8:8c:b2:1f:04:c4:b1:88:41:ea:cf:1e: f6:4a:36:f9:94:bf:f1:6a:f0:6d:10:a7:f0:86:dd:4e:1f:dd: d7:0e:ce:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RBNEExMTAvBgNVBAUTKDA4ODY5MUYxRjc4QkQ5Q0VGRUQ4MEQzNkQ2NTBENjc3 NjdBNkJEQjAwHhcNMjYxMDA0MjA0ODMwWhcNMjYxMDExMjA0ODMwWjAYMRYwFAYD VQQDEw02YWMyYmI5Zi1jNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aAcm/H935ujda6B+9kZ18+zWnlwZ4aWavQqOIqbUhsocdZnDWGY07/vrCzc JRvR/IaL2nC7ZDWVQErJ/wfdDTttQFZK4aQoZIFMbgbx1+ZNgsQdptq4cIc8VjIT WYpaudZSnxZBP4MTogG2DOfFSpIdUcMPCL7n7DqAT33zexZUOP7P4PQjiBsUSUR1 X3BtR/xF3LR1anZc1bWluu56pi9qiuPBKzul0I7Tyhm709EUXxrJszVCi+Klates zqTgo746wnTuer6+xHTGTDpANRALmVq3r31CKqL1xOSISc50gZgq2cZs5pvxzM8b /6WDY6qhh6B6kxwgMoMr+Ky2xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvxhqTa pNQGjS1Sa77MJUxoVAc9MB8GA1UdIwQYMBaAFAiGkfH3i9nO/tgNNtZQ1ndnpr2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REE0QS8wNTFEQUY1QTBE QzUxMUVCOUM2QkJEMUNDNEY5QUUwMi9DSWFSOGZlTDJjNy0yQTAyMWxEV2QyZW12 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NJYVI4ZmVMMmM3LTJBMDIxbERXZDJlbXZiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REE0QS8wNTFEQUY1QTBEQzUxMUVCOUM2QkJEMUNDNEY5QUUwMi9DSWFSOGZlTDJj Ny0yQTAyMWxEV2QyZW12YkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZB4Q5hefH7fLgB7zB1oZpdx8OmlA9l6vNfZGbzMmeKMuS/RivIuGPiuJLrxb t0eIr8wQbIsbHeGWtWbHGS9UMc43X37qiRV6LxezP3JjvaIH1/Aiesdap0LK3iZc Kos1IKNE5wAfV+yORYUiEyddRRaxMKRZ0IDHVqwZ4JgmOIzXX9du8GrRN1Utzpqv EVqZmTTjwdHdPGd0y6KOHK5pR7WVyFduoRVicrCZSz+urBXxiDp3IztY9bSEjB9e 9ciMtZKOlFYo8FXyV0fsTxcHkbfKXSA6mZui11Hqmw/IyIyyHwTEsYhB6s8e9ko2 +ZS/8WrwbRCn8IbdTh/d1w7OHQ== -----END CERTIFICATE-----Generated at Mon Oct 5 13:01:49 2026 by rpki-client