$ rpki-client -vvvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: eyE5RBbDo+JhKcSn5Hbcfd2DTQ17rUzNaFL674tB3FM= Subject key identifier: 31:33:01:44:69:3C:FF:A4:18:1C:C3:C8:C3:2C:93:B4:6B:3F:C5:18 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0E20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0E02 Signing time: Mon 26 Oct 2026 17:51:07 +0000 Manifest this update: Mon 26 Oct 2026 17:51:07 +0000 Manifest next update: Mon 02 Nov 2026 17:51:07 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: lpNKRUn+K3UBy1RPFdM1hw6JDgutyR8dqyaxMUlEK2Y=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: OCSQyHL40HhtFPxjiZ0aie03NCu9qKwOOGRctAZUKss=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: p0qRh9uijUrBuvk2zDLygs2mx5whlrqDAoU+cadOU2w=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3616 (0xe20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Oct 26 17:51:07 2026 GMT Not After : Nov 2 17:51:07 2026 GMT Subject: CN=6adf930b-6dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:d5:16:9d:94:c5:12:f3:b8:d9:6e:31:84: 8d:ff:b8:c4:b8:fc:20:c8:7b:67:3d:57:d2:8f:26: 4e:ba:2f:91:58:9e:2a:97:a1:ba:0f:46:6d:68:aa: 23:50:dc:df:3b:5a:5c:66:c2:33:e7:a2:57:5f:cf: aa:5b:fa:56:8d:85:5a:9d:27:dc:28:3c:78:15:88: 51:b7:1d:e8:7b:92:9a:be:56:32:a0:84:4c:a3:e9: b1:1d:bd:2c:3d:ce:2e:53:dd:fe:ca:28:7b:e4:c6: 6c:8c:fc:75:e5:40:33:fd:6e:44:fc:d5:33:d7:85: 0f:60:d6:3a:3f:ce:d6:f6:23:38:b7:f7:2d:1d:c5: c7:2a:01:58:29:8b:10:d9:6a:7d:c9:07:45:63:88: 49:41:60:56:ef:7c:3a:f8:fa:a3:4a:c7:3d:b1:5c: 67:5d:b9:ce:6e:70:f6:58:04:50:13:85:b3:d1:8d: f5:5c:7b:9d:21:80:22:97:2a:b6:c8:b8:41:18:74: 06:34:05:37:30:3c:78:72:7b:83:88:a9:80:73:8b: ca:ef:69:50:74:fc:55:1d:05:3c:90:26:0d:86:f6: 4b:07:98:6e:7f:ed:f3:3f:98:2f:0e:57:57:16:db: c3:aa:11:eb:7f:19:c1:89:8d:84:90:5d:b8:4b:2e: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:33:01:44:69:3C:FF:A4:18:1C:C3:C8:C3:2C:93:B4:6B:3F:C5:18 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:1c:47:b7:85:73:be:ee:91:72:51:ad:84:2c:73:97:9d:91: ab:ee:ae:d5:04:2c:19:c7:e9:7d:2e:3c:80:7b:44:a4:24:1a: 54:b8:6d:1b:97:36:92:73:06:47:9b:ba:ee:c5:55:4c:47:f0: 1d:6d:48:cd:af:71:7c:e6:5f:53:12:4c:28:7f:2a:a0:58:f5: 46:9d:90:a1:27:76:34:33:86:ac:ff:32:92:ca:df:ce:83:04: 55:06:6e:25:3d:a7:2b:f3:c6:fa:22:37:03:bb:e4:0c:fe:3c: 6f:b6:8d:c2:75:84:5f:0b:05:48:8f:56:4d:08:d2:41:88:61: 8b:0c:88:48:96:41:2e:a9:83:9d:0f:f3:29:0b:d0:dd:96:13: 9f:23:61:6d:b3:f9:31:1f:48:e8:ff:ed:8b:87:51:63:cf:e6: 1d:20:61:1d:f1:0e:92:b3:09:30:4a:01:51:32:9b:74:98:19: 8c:fd:70:00:69:82:08:46:9c:54:4b:f9:68:17:23:92:e0:09: a6:7a:57:3f:79:1c:1d:92:2f:cb:18:61:2a:30:55:28:b1:8a: 20:92:2b:8d:07:f9:bb:ac:38:5c:00:3b:77:1d:3f:a2:d0:5e: f9:95:e8:f2:2d:5d:31:e6:19:52:e6:cc:27:6a:85:e1:5f:36: 71:40:aa:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYxMDI2MTc1MTA3WhcNMjYxMTAyMTc1MTA3WjAYMRYwFAYD VQQDEw02YWRmOTMwYi02ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2fVFp2UxRLzuNluMYSN/7jEuPwgyHtnPVfSjyZOui+RWJ4ql6G6D0ZtaKoj UNzfO1pcZsIz56JXX8+qW/pWjYVanSfcKDx4FYhRtx3oe5KavlYyoIRMo+mxHb0s Pc4uU93+yih75MZsjPx15UAz/W5E/NUz14UPYNY6P87W9iM4t/ctHcXHKgFYKYsQ 2Wp9yQdFY4hJQWBW73w6+PqjSsc9sVxnXbnObnD2WARQE4Wz0Y31XHudIYAilyq2 yLhBGHQGNAU3MDx4cnuDiKmAc4vK72lQdPxVHQU8kCYNhvZLB5huf+3zP5gvDldX FtvDqhHrfxnBiY2EkF24Sy6WrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEzAURp PP+kGBzDyMMsk7RrP8UYMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEhxHt4Vzvu6RclGthCxzl52Rq+6u1QQsGcfpfS48gHtEpCQaVLhtG5c2knMG R5u67sVVTEfwHW1Iza9xfOZfUxJMKH8qoFj1Rp2QoSd2NDOGrP8yksrfzoMEVQZu JT2nK/PG+iI3A7vkDP48b7aNwnWEXwsFSI9WTQjSQYhhiwyISJZBLqmDnQ/zKQvQ 3ZYTnyNhbbP5MR9I6P/ti4dRY8/mHSBhHfEOkrMJMEoBUTKbdJgZjP1wAGmCCEac VEv5aBcjkuAJpnpXP3kcHZIvyxhhKjBVKLGKIJIrjQf5u6w4XAA7dx0/otBe+ZXo 8i1dMeYZUubMJ2qF4V82cUCqsw== -----END CERTIFICATE-----Generated at Tue Oct 27 12:53:32 2026 by rpki-client