$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json) Hash identifier: 4+9M9/YJMU1rOsynFBbvQubsLsUPp+mTs2i4x2T5D3Y= Subject key identifier: CF:9A:81:E6:EF:D1:A3:57:04:2D:7A:29:E1:D3:D8:BF:0E:04:BF:C8 Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft Manifest number: CC Signing time: Thu 22 Oct 2026 23:04:23 +0000 Manifest this update: Thu 22 Oct 2026 23:04:22 +0000 Manifest next update: Thu 29 Oct 2026 23:04:22 +0000 Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: K+QRxCAoVx2fS0TdxO3wYaFiTEeFYRSwKpRLlq9gKnw=) 2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: WR/P6r1CyFK9YH3dwfKAH8Ku8LJSqPwj9IcgqOtPOhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 23:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Validity Not Before: Oct 22 23:04:22 2026 GMT Not After : Oct 29 23:04:22 2026 GMT Subject: CN=6ada9676-679b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:15:d4:fa:c5:b9:98:f0:f5:bd:77:d6:b7: f6:d1:c1:7a:64:c0:9c:aa:db:b2:a1:a7:7f:94:96: 30:bc:74:1f:15:51:fb:b2:cd:c1:51:e4:45:e5:ca: 81:3d:45:8b:6c:f3:e1:45:9e:40:45:5a:24:03:a3: c0:f7:a9:87:31:25:59:49:48:a7:94:0e:cc:b8:f2: 04:3b:db:c3:c4:10:dd:ed:47:d5:b5:cd:8b:61:4d: bc:fd:96:65:02:64:d4:57:f2:56:dc:fa:66:39:81: de:54:81:3e:ca:a9:b7:51:de:ef:95:ad:7d:2e:ae: 9a:f0:37:e7:41:10:8b:6d:74:56:78:2d:d6:c1:30: 33:9f:ba:a7:1e:e9:e3:36:05:1f:4a:cf:d6:af:8c: e1:9f:56:4f:0f:4d:7d:28:72:b5:ab:dc:6e:0f:ae: 5f:98:ba:59:42:11:d9:ce:08:6b:c8:20:de:07:b1: 69:15:ab:5c:7c:9f:e0:84:23:fa:62:10:53:f9:a2: 84:8d:db:fa:a2:ae:7d:b7:cb:e1:b2:d0:07:1f:88: 2d:ce:b9:e5:d4:56:fb:7e:c7:47:fc:92:fb:35:10: b4:2e:d2:80:1c:d7:2b:61:f1:2b:ed:21:eb:cb:f3: a2:a8:b9:61:78:21:b1:32:9e:95:a7:66:08:06:0d: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:81:E6:EF:D1:A3:57:04:2D:7A:29:E1:D3:D8:BF:0E:04:BF:C8 X509v3 Authority Key Identifier: keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:15:87:1a:3c:6c:df:e2:bf:4b:92:09:cf:5f:23:dd:80:e5: fc:cd:49:33:ae:46:f7:57:8e:b4:f5:a0:d9:00:67:22:43:8a: 3c:bc:b9:1e:19:6f:00:14:9a:35:51:c0:63:a8:21:6a:f7:9f: 11:47:f1:fe:bc:17:c1:c1:f0:c2:02:4f:4a:8e:0b:d1:45:57: 44:33:11:b5:d3:21:e0:36:b3:af:c7:8d:49:77:22:99:d6:4a: 46:32:11:8f:b5:dc:09:52:1f:39:c7:54:3f:4e:85:25:74:dc: e5:94:39:51:4c:73:f5:b2:4e:3f:27:78:39:5b:ff:83:52:f7: b8:1e:29:06:bf:46:f0:5b:db:bb:a1:39:46:59:11:79:84:5c: 82:ec:6a:e5:d9:02:6d:9c:ed:bd:a7:ab:1e:8b:98:0e:30:09: 80:83:3d:c3:a3:cf:22:ec:0f:7b:8c:e1:50:7a:95:32:56:e8: 15:f1:91:9e:2d:36:67:cb:f2:ca:61:f3:44:1d:3c:69:ad:9f: 3b:5a:40:33:2f:93:4f:16:8a:c8:92:7a:dc:02:17:c7:ef:d4: 9c:9d:66:c9:0e:76:b0:00:7e:1c:25:df:cd:11:fd:d0:a1:a9: 20:4d:7c:b5:06:93:73:7c:7d:38:24:a4:31:83:c5:eb:91:40: 38:11:73:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDk3Qzg1N0E3NUM5QTZFMjk4QjA5QTA2MUQ4RjdDRTEw N0JGOUQzMzMwHhcNMjYxMDIyMjMwNDIyWhcNMjYxMDI5MjMwNDIyWjAYMRYwFAYD VQQDEw02YWRhOTY3Ni02NzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKcV1PrFuZjw9b131rf20cF6ZMCcqtuyoad/lJYwvHQfFVH7ss3BUeRF5cqB PUWLbPPhRZ5ARVokA6PA96mHMSVZSUinlA7MuPIEO9vDxBDd7UfVtc2LYU28/ZZl AmTUV/JW3PpmOYHeVIE+yqm3Ud7vla19Lq6a8DfnQRCLbXRWeC3WwTAzn7qnHunj NgUfSs/Wr4zhn1ZPD019KHK1q9xuD65fmLpZQhHZzghryCDeB7FpFatcfJ/ghCP6 YhBT+aKEjdv6oq59t8vhstAHH4gtzrnl1Fb7fsdH/JL7NRC0LtKAHNcrYfEr7SHr y/OiqLlheCGxMp6Vp2YIBg0cMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+agebv 0aNXBC16KeHT2L8OBL/IMB8GA1UdIwQYMBaAFJfIV6dcmm4piwmgYdj3zhB7+dMz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9CRDhBRUQwOEE2 NDIxMUYwQUM5OTU4MzNDNEY5QUUwMi9sOGhYcDF5YWJpbUxDYUJoMlBmT0VIdjUw ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2w4aFhwMXlhYmltTENhQmgyUGZPRUh2NTB6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9CRDhBRUQwOEE2NDIxMUYwQUM5OTU4MzNDNEY5QUUwMi9sOGhYcDF5YWJp bUxDYUJoMlBmT0VIdjUwek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVBWHGjxs3+K/S5IJz18j3YDl/M1JM65G91eOtPWg2QBnIkOKPLy5HhlvABSa NVHAY6ghavefEUfx/rwXwcHwwgJPSo4L0UVXRDMRtdMh4Dazr8eNSXcimdZKRjIR j7XcCVIfOcdUP06FJXTc5ZQ5UUxz9bJOPyd4OVv/g1L3uB4pBr9G8Fvbu6E5RlkR eYRcguxq5dkCbZztvaerHouYDjAJgIM9w6PPIuwPe4zhUHqVMlboFfGRni02Z8vy ymHzRB08aa2fO1pAMy+TTxaKyJJ63AIXx+/UnJ1myQ52sAB+HCXfzRH90KGpIE18 tQaTc3x9OCSkMYPF65FAOBFzyw== -----END CERTIFICATE-----Generated at Sat Oct 24 10:17:13 2026 by rpki-client