$ rpki-client -vvvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: TkNYROIdIRUfutPO6PNTYI/erT1cqGaxlx1fXFnVoYg= Subject key identifier: E1:5B:AD:12:D1:89:5B:22:03:ED:F6:03:4E:52:B5:D3:84:AA:4F:2D Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: A1 Signing time: Sat 03 Oct 2026 08:05:00 +0000 Manifest this update: Sat 03 Oct 2026 08:04:59 +0000 Manifest next update: Sat 10 Oct 2026 08:04:59 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: tCGFuQUJEW4Yxe6LzBxRzsAe5KqOM8t4/gtXeWLgY1w=) 2: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: mz9UKWkuiJrFpRnaeaMg8OM3K+wuun2W3xdMzsv7kig=) 3: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: Jv5BJrTJeaBGXUeY94Ls0qo9A275bsyOi9VK8HD+iNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Oct 3 08:04:59 2026 GMT Not After : Oct 10 08:04:59 2026 GMT Subject: CN=6ac0b72c-c90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:00:3d:ef:35:e2:8d:21:2e:af:0b:3e:9f: e4:43:94:39:c2:b7:20:16:c9:4c:e2:f8:0a:9a:93: 61:07:7c:0b:11:fb:b8:8d:8f:85:8c:8e:af:a9:92: 8b:79:59:79:4a:f1:81:7b:74:90:14:04:e5:74:2b: 01:38:8f:87:3a:39:50:1a:c6:b8:b6:38:ce:45:8d: 3a:57:29:a5:a0:29:5c:2c:4c:56:89:16:d5:c0:a5: f5:be:37:15:08:8b:38:54:d1:82:20:87:3f:d8:21: 11:95:56:f5:f8:35:b5:48:61:45:10:3e:74:e1:96: ec:76:b1:3a:5d:a5:57:48:c7:08:cf:10:13:73:9e: c3:23:2a:9e:5a:76:cb:cc:ea:ff:83:97:6b:3a:b6: 5e:ef:f6:7d:d0:03:70:6f:f4:cb:1a:3f:cd:07:ce: d5:40:f8:f1:12:7d:f0:53:60:e1:9a:3c:34:ef:e4: fc:e9:17:9f:78:70:d7:70:1a:0e:d4:b4:74:46:97: 46:ee:36:c2:db:9a:7c:6e:0e:06:85:9f:e7:57:52: 0b:11:db:aa:74:db:af:52:02:44:90:dc:c3:f0:d0: bc:26:04:8b:df:37:17:79:c7:3f:76:9c:0d:87:a2: 9a:4d:45:53:c0:64:1c:42:18:05:72:eb:cf:f6:2d: ef:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5B:AD:12:D1:89:5B:22:03:ED:F6:03:4E:52:B5:D3:84:AA:4F:2D X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:80:a6:b4:f6:2a:b3:63:76:57:e2:d9:69:ef:96:4a:05:a9: 52:90:c1:49:a5:6a:fa:02:f6:1f:ab:0d:f2:65:4a:12:b8:f7: f8:b2:29:45:9f:42:a2:d2:f5:7a:10:fa:4a:94:c7:73:1d:5d: db:d6:44:b5:46:bb:ff:ab:cb:71:52:06:98:28:40:da:af:ad: 93:cd:72:7d:2e:a2:bd:ad:31:d2:2b:e5:8d:ff:24:a8:2a:b1: e3:0e:6d:6c:e1:a4:e3:32:44:87:0e:27:48:d1:78:2d:1c:d1: 7a:24:f1:96:35:e9:4b:90:b0:7a:91:42:11:c3:f3:6c:aa:9a: 1b:38:6c:25:a7:e3:99:ce:03:f5:e6:40:fc:43:34:54:d9:61: 83:b1:f7:1b:0c:07:c5:5e:c8:99:a8:90:8a:9d:15:32:e9:01: fa:d2:94:1b:50:2b:3d:05:47:bd:47:60:ae:0f:f6:1f:90:09: c7:4f:5b:28:97:f6:ec:03:a7:93:02:ee:8d:4e:c4:cc:93:cc: 55:16:22:4f:00:00:f4:5e:2e:7b:c1:72:e7:ca:ec:23:b3:75: 4c:b5:97:8b:cc:74:18:13:27:fe:24:2e:8c:b9:51:58:13:f5: 74:e3:0b:df:1c:ab:2a:2c:bd:6e:b3:6c:a6:ce:09:4c:cc:f8: 2b:07:25:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4RkYxMTAvBgNVBAUTKEYyNEYxNDcxNzIzQTY0RTRENTcwREJCMEQ0NEM4MjQz MDU0MjYyNjYwHhcNMjYxMDAzMDgwNDU5WhcNMjYxMDEwMDgwNDU5WjAYMRYwFAYD VQQDEw02YWMwYjcyYy1jOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA020APe814o0hLq8LPp/kQ5Q5wrcgFslM4vgKmpNhB3wLEfu4jY+FjI6vqZKL eVl5SvGBe3SQFATldCsBOI+HOjlQGsa4tjjORY06VymloClcLExWiRbVwKX1vjcV CIs4VNGCIIc/2CERlVb1+DW1SGFFED504ZbsdrE6XaVXSMcIzxATc57DIyqeWnbL zOr/g5drOrZe7/Z90ANwb/TLGj/NB87VQPjxEn3wU2Dhmjw07+T86RefeHDXcBoO 1LR0RpdG7jbC25p8bg4GhZ/nV1ILEduqdNuvUgJEkNzD8NC8JgSL3zcXecc/dpwN h6KaTUVTwGQcQhgFcuvP9i3vEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFbrRLR iVsiA+32A05StdOEqk8tMB8GA1UdIwQYMBaAFPJPFHFyOmTk1XDbsNRMgkMFQmJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThGRi80RTNDQjZDMEQ3 MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJNlpPVFZjTnV3MUV5Q1F3VkNZ bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1ltWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThGRi80RTNDQjZDMEQ3MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJNlpP VFZjTnV3MUV5Q1F3VkNZbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV4CmtPYqs2N2V+LZae+WSgWpUpDBSaVq+gL2H6sN8mVKErj3+LIpRZ9CotL1 ehD6SpTHcx1d29ZEtUa7/6vLcVIGmChA2q+tk81yfS6iva0x0ivljf8kqCqx4w5t bOGk4zJEhw4nSNF4LRzReiTxljXpS5CwepFCEcPzbKqaGzhsJafjmc4D9eZA/EM0 VNlhg7H3GwwHxV7ImaiQip0VMukB+tKUG1ArPQVHvUdgrg/2H5AJx09bKJf27AOn kwLujU7EzJPMVRYiTwAA9F4ue8Fy58rsI7N1TLWXi8x0GBMn/iQujLlRWBP1dOML 3xyrKiy9brNsps4JTMz4KwclXg== -----END CERTIFICATE-----Generated at Sun Oct 4 19:05:47 2026 by rpki-client