$ rpki-client -vvvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: wWylSES1MhAN6JOCdhZd25ok/1C4MWv4AwOunkoGdQ4= Subject key identifier: 05:97:09:69:B2:A1:91:F9:48:9E:0F:E2:EE:1F:8C:09:47:1A:4F:68 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0E06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0DE8 Signing time: Fri 04 Sep 2026 17:48:54 +0000 Manifest this update: Fri 04 Sep 2026 17:48:53 +0000 Manifest next update: Fri 11 Sep 2026 17:48:53 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: qlzKmo2kX/SFAhOE/m6h8d6ycfuoyGwzieaoEBRxon0=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: OCSQyHL40HhtFPxjiZ0aie03NCu9qKwOOGRctAZUKss=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: p0qRh9uijUrBuvk2zDLygs2mx5whlrqDAoU+cadOU2w=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3590 (0xe06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Sep 4 17:48:53 2026 GMT Not After : Sep 11 17:48:53 2026 GMT Subject: CN=6a9b0486-c339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:f1:92:5c:0b:17:02:34:42:08:c8:88:a8: 81:51:64:7b:8c:c2:e4:1a:8a:a3:cd:9b:d8:f8:8f: 29:e0:9f:be:47:20:0b:55:10:77:ff:57:66:e1:cc: ca:6b:3e:bf:b3:c5:98:97:e0:02:7a:eb:42:6c:b1: 5c:14:27:72:68:44:5e:14:1e:d2:4a:06:84:b9:30: 5d:7a:ab:5a:e3:12:02:ef:ac:76:35:c6:26:aa:48: 54:6d:04:0b:83:52:de:ed:b6:79:31:00:00:13:a4: de:83:dc:aa:f5:8a:c5:01:d5:de:7b:be:08:c8:de: b2:77:a8:6c:d3:12:46:c3:ac:77:90:e3:00:f9:6d: 91:9e:7f:03:0f:67:bb:05:53:57:dc:f1:34:45:7a: 8b:f4:7b:58:4a:cd:7a:f8:19:c6:eb:c2:85:8f:b5: b2:da:e4:36:8e:f7:fc:61:a3:fc:ae:e1:1f:32:74: 78:52:a8:dd:0f:fc:a2:fb:5f:52:86:c3:9c:d7:cd: 76:d4:6b:a7:ae:16:d4:9b:b9:0d:a7:dd:cc:cc:71: a6:b2:9f:82:b0:89:97:90:ea:c5:1a:85:f8:ba:71: 18:78:a4:ae:55:db:ab:01:93:dd:29:20:da:7f:f8: 17:35:d3:4d:ee:f2:04:1f:f3:6f:5f:40:85:03:8c: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:97:09:69:B2:A1:91:F9:48:9E:0F:E2:EE:1F:8C:09:47:1A:4F:68 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c2:05:82:ac:e6:0c:ff:ad:ad:b9:37:44:d5:f3:93:0a:d7: 35:f0:5f:0e:f0:2b:72:c4:9f:a6:3f:3f:bb:e3:74:f8:74:fe: e1:91:bf:93:a0:71:e3:bb:99:1d:87:22:c6:b8:6a:4e:28:1c: 0a:bc:72:8a:d9:da:34:b4:74:94:2d:b0:9e:03:ac:63:eb:11: 7c:cc:ed:17:1c:85:06:00:06:f3:28:07:a3:ca:32:08:d1:58: 37:f9:ef:27:a4:c7:48:d7:9f:bc:56:a1:9d:21:02:76:09:78: af:d9:64:77:74:22:bf:3a:b5:fd:bc:3e:b9:85:2b:e4:72:59: 8b:aa:9c:db:f3:b1:9b:9f:5d:1d:c7:c7:3c:f5:4d:7a:3c:fc: d3:03:0e:f2:b3:8f:03:d6:31:e5:20:35:03:92:62:39:4b:82: e4:f0:11:28:68:8a:0a:63:bc:f7:dd:0c:f3:72:9c:1a:59:6c: 60:2b:ab:dd:18:96:7c:fa:e4:ce:34:46:f2:f5:c6:a8:72:74: 35:c5:26:39:e9:9a:dc:07:a6:f5:d1:d3:36:ff:70:ff:ce:84: 5e:12:52:8d:39:97:fc:36:b1:0d:ba:23:d8:a5:f6:b2:ac:d6: 3c:16:b2:70:5c:fd:f7:aa:1c:fa:9d:7f:33:03:36:dd:19:fe: d4:a7:b2:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwOTA0MTc0ODUzWhcNMjYwOTExMTc0ODUzWjAYMRYwFAYD VQQDEw02YTliMDQ4Ni1jMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuPxklwLFwI0QgjIiKiBUWR7jMLkGoqjzZvY+I8p4J++RyALVRB3/1dm4czK az6/s8WYl+ACeutCbLFcFCdyaEReFB7SSgaEuTBdeqta4xIC76x2NcYmqkhUbQQL g1Le7bZ5MQAAE6Teg9yq9YrFAdXee74IyN6yd6hs0xJGw6x3kOMA+W2Rnn8DD2e7 BVNX3PE0RXqL9HtYSs16+BnG68KFj7Wy2uQ2jvf8YaP8ruEfMnR4UqjdD/yi+19S hsOc18121GunrhbUm7kNp93MzHGmsp+CsImXkOrFGoX4unEYeKSuVdurAZPdKSDa f/gXNdNN7vIEH/NvX0CFA4zRDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWXCWmy oZH5SJ4P4u4fjAlHGk9oMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAMIFgqzmDP+trbk3RNXzkwrXNfBfDvArcsSfpj8/u+N0+HT+4ZG/k6Bx47uZ HYcixrhqTigcCrxyitnaNLR0lC2wngOsY+sRfMztFxyFBgAG8ygHo8oyCNFYN/nv J6THSNefvFahnSECdgl4r9lkd3Qivzq1/bw+uYUr5HJZi6qc2/Oxm59dHcfHPPVN ejz80wMO8rOPA9Yx5SA1A5JiOUuC5PARKGiKCmO8990M83KcGllsYCur3RiWfPrk zjRG8vXGqHJ0NcUmOema3Aem9dHTNv9w/86EXhJSjTmX/DaxDboj2KX2sqzWPBay cFz996oc+p1/MwM23Rn+1Keyqg== -----END CERTIFICATE-----Generated at Sat Sep 5 04:47:35 2026 by rpki-client