$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.mft File: 8ZEh-PsB2N4m82lKtvoPq8u5cE4.mft (raw, json) Hash identifier: dXLcbc9eTl7fRZjTG4PWcnzSAqG5fu0QnTCcZhXeAIc= Subject key identifier: 7B:26:20:39:EC:F3:EF:B8:8B:9D:95:62:D9:12:4B:15:71:CE:83:A2 Authority key identifier: F1:91:21:F8:FB:01:D8:DE:26:F3:69:4A:B6:FA:0F:AB:CB:B9:70:4E Certificate issuer: /CN=A918BD38/serialNumber=F19121F8FB01D8DE26F3694AB6FA0FABCBB9704E Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZEh-PsB2N4m82lKtvoPq8u5cE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.mft Manifest number: 0C Signing time: Sun 25 Oct 2026 09:36:07 +0000 Manifest this update: Sun 25 Oct 2026 09:36:06 +0000 Manifest next update: Sun 01 Nov 2026 09:36:06 +0000 Files and hashes: 1: 8ZEh-PsB2N4m82lKtvoPq8u5cE4.crl (hash: SYYOyB/+e/dmSZDroUoEUjwDF1MTCyBujCUh59dXTH4=) 2: C17C35C0C7CA11F1B1B97EA25411F970.roa (hash: qHb/9h1KEi0X+JdJ/BgLVEQUsHpZxE0i4jK0dZmSVJw=) 3: F811FEFEC7C911F18084475D5411F970.roa (hash: R3LYkyXVvlNDCKmaFgtNzg9jgvtmul93fSa/7ypDe+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.crl rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZEh-PsB2N4m82lKtvoPq8u5cE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD38, serialNumber=F19121F8FB01D8DE26F3694AB6FA0FABCBB9704E Validity Not Before: Oct 25 09:36:06 2026 GMT Not After : Nov 1 09:36:06 2026 GMT Subject: CN=6addcd86-b09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:09:7a:df:29:4d:3c:c2:f5:2b:0f:b2:3a: 4c:9d:2c:cd:82:d2:ca:61:2e:61:80:5e:39:98:3f: 40:c5:8a:54:cb:a1:b8:a7:b5:3c:d3:39:23:22:10: a0:16:35:e6:f4:ce:ba:5f:cb:01:6f:cc:23:8d:b8: d9:21:25:58:1c:19:44:73:22:4a:51:e1:ff:aa:2c: 37:9b:ce:de:e0:64:dd:bf:6c:01:7d:f7:a4:d3:e0: b8:0a:2d:76:8a:17:60:58:ff:f3:a9:ab:05:78:ae: 59:b7:22:5c:fe:4c:55:38:a9:84:ae:31:70:39:18: ae:f0:8d:56:73:d6:e5:55:f1:e0:7f:9e:9a:b2:cc: db:20:6b:f5:77:33:47:59:24:12:ce:4b:5a:ee:ea: b6:9d:bf:52:b4:08:a9:be:af:5e:60:55:31:de:6b: 85:71:99:2b:e1:36:e1:9e:d5:47:50:1a:77:84:2a: 7e:39:6e:2a:c0:1d:71:28:c6:50:91:7f:a7:b7:16: 4b:80:fd:39:9c:e7:a0:83:de:a0:28:91:eb:63:bf: ff:98:08:3e:e8:42:28:f2:fd:38:bf:06:3a:a5:a4: e7:63:24:45:e2:42:31:6c:81:79:a4:de:1f:79:f6: fe:96:02:77:ec:06:f9:cc:57:31:3c:0b:ab:0b:6a: bf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:26:20:39:EC:F3:EF:B8:8B:9D:95:62:D9:12:4B:15:71:CE:83:A2 X509v3 Authority Key Identifier: keyid:F1:91:21:F8:FB:01:D8:DE:26:F3:69:4A:B6:FA:0F:AB:CB:B9:70:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZEh-PsB2N4m82lKtvoPq8u5cE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:4c:33:db:e7:b5:29:24:32:78:fd:08:de:2a:0c:f6:9b:3e: e5:0e:9c:c8:8e:16:70:24:da:b9:ee:0d:2c:5b:8c:15:b8:bd: 18:c5:00:a3:98:84:b0:df:68:20:ec:59:80:3e:ef:e1:49:c9: 4f:7b:ca:d6:10:c9:f2:71:5f:b5:d7:7a:17:19:4f:ef:e5:c3: b1:60:8b:cc:96:71:23:e1:36:d1:fd:d1:fc:67:97:8f:3f:d8: 77:a5:ae:a1:e8:a9:07:a3:19:68:3d:f5:84:e5:b0:5c:7c:82: 3e:22:a8:ee:a3:53:74:40:ed:6a:61:b6:79:6f:02:82:15:94: 89:8b:fd:48:ea:90:18:2e:ae:23:a9:3d:48:0d:22:30:6d:68: 09:d7:2d:9e:3b:5e:23:1d:b6:b1:60:84:f1:39:c8:80:26:6e: ba:c6:b1:41:bb:ae:83:85:21:7e:26:e6:0f:f7:7e:3d:fa:61: 7f:f5:47:87:73:33:50:11:ef:b1:90:64:0a:9c:58:d4:15:7a: 07:1d:28:c4:f4:9f:a1:c2:ae:c7:8d:b0:0e:6c:09:5f:38:c2: db:74:46:20:cf:50:1d:02:a4:1a:eb:8d:bf:64:11:fb:bc:83: c7:af:83:9b:2c:5e:7f:31:cc:66:f5:db:36:9c:de:ce:96:c4: 3e:a9:c0:2b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QkQzODExMC8GA1UEBRMoRjE5MTIxRjhGQjAxRDhERTI2RjM2OTRBQjZGQTBGQUJD QkI5NzA0RTAeFw0yNjEwMjUwOTM2MDZaFw0yNjExMDEwOTM2MDZaMBgxFjAUBgNV BAMTDTZhZGRjZDg2LWIwOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC43Al63ylNPML1Kw+yOkydLM2C0sphLmGAXjmYP0DFilTLobintTzTOSMiEKAW Neb0zrpfywFvzCONuNkhJVgcGURzIkpR4f+qLDebzt7gZN2/bAF996TT4LgKLXaK F2BY//OpqwV4rlm3Ilz+TFU4qYSuMXA5GK7wjVZz1uVV8eB/npqyzNsga/V3M0dZ JBLOS1ru6radv1K0CKm+r15gVTHea4VxmSvhNuGe1UdQGneEKn45birAHXEoxlCR f6e3FkuA/Tmc56CD3qAoketjv/+YCD7oQijy/Ti/BjqlpOdjJEXiQjFsgXmk3h95 9v6WAnfsBvnMVzE8C6sLar/XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeyYgOezz 77iLnZVi2RJLFXHOg6IwHwYDVR0jBBgwFoAU8ZEh+PsB2N4m82lKtvoPq8u5cE4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCRDM4LzkxQjk3RTE2QzdD OTExRjE4MzVBRUJBRDUzMTFGOTcwLzhaRWgtUHNCMk40bTgybEt0dm9QcTh1NWNF NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFpFaC1Qc0IyTjRtODJsS3R2b1BxOHU1Y0U0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC RDM4LzkxQjk3RTE2QzdDOTExRjE4MzVBRUJBRDUzMTFGOTcwLzhaRWgtUHNCMk40 bTgybEt0dm9QcTh1NWNFNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBATDPb57UpJDJ4/QjeKgz2mz7lDpzIjhZwJNq57g0sW4wVuL0YxQCjmISw32gg 7FmAPu/hSclPe8rWEMnycV+113oXGU/v5cOxYIvMlnEj4TbR/dH8Z5ePP9h3pa6h 6KkHoxloPfWE5bBcfII+Iqjuo1N0QO1qYbZ5bwKCFZSJi/1I6pAYLq4jqT1IDSIw bWgJ1y2eO14jHbaxYITxOciAJm66xrFBu66DhSF+JuYP9349+mF/9UeHczNQEe+x kGQKnFjUFXoHHSjE9J+hwq7HjbAObAlfOMLbdEYgz1AdAqQa642/ZBH7vIPHr4Ob LF5/Mcxm9ds2nN7OlsQ+qcAr -----END CERTIFICATE-----Generated at Tue Oct 27 00:15:20 2026 by rpki-client