$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft File: b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json) Hash identifier: SvM3jDJXb7pwXeicUbgIdde7fNg8291LC4yWcO4KWX4= Subject key identifier: D0:D3:B9:D1:6F:ED:27:DF:9A:5F:2A:63:63:19:45:89:4F:F7:9D:4B Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0E64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft Manifest number: 0E33 Signing time: Fri 02 Oct 2026 18:01:52 +0000 Manifest this update: Fri 02 Oct 2026 18:01:51 +0000 Manifest next update: Fri 09 Oct 2026 18:01:51 +0000 Files and hashes: 1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: nJAzQ60gpm2qThLV/IgnJR+sGcaxjuL58tNvq973K4s=) 2: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (hash: meOmGfY3r0GblklalG+4OMMAMZcdYPQdKS2Ett97RO8=) 3: 11815E36135311EE94A8A114C4F9AE02.roa (hash: T5GAbC0yTN338KtcDTUO9gQz4ASEYtGI5aC6qczg2W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3684 (0xe64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Oct 2 18:01:51 2026 GMT Not After : Oct 9 18:01:51 2026 GMT Subject: CN=6abff190-505d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:84:db:2b:98:42:e7:1f:00:74:81:3b:e5: 86:6b:fb:3e:df:41:eb:a9:e4:37:8a:1f:f1:22:72: 75:ed:e1:ca:fd:ea:a2:12:c9:dd:de:cf:e6:8d:35: fd:6f:60:3f:a4:76:90:a4:47:32:25:21:a6:f3:33: 1b:74:7d:6a:c8:f1:fb:4a:d2:dd:f4:a0:ab:6a:d8: 60:39:a9:3b:c4:05:f7:fb:a3:f3:a1:73:3e:47:4f: cc:0a:b5:14:f7:ad:25:5f:b6:ee:5c:6a:99:4c:87: 3e:e0:ba:c6:13:44:0b:03:e2:c2:c5:b6:b0:c5:a7: bc:fd:9d:d8:38:9d:5d:f8:30:37:04:99:ed:12:5b: 5f:b4:78:1d:38:1b:63:a6:0b:16:c3:6b:5f:96:22: 76:10:5b:ef:d2:ca:fa:50:81:d2:4d:21:53:7e:0f: 81:25:12:5f:71:45:d3:6d:d8:6e:75:3a:cc:1d:37: 38:83:3c:41:cd:17:a3:50:29:90:db:e3:ea:a8:bd: 22:2f:0b:f9:45:ef:34:61:bb:e2:ba:38:8c:ec:f9: 1d:33:1c:ba:e6:e4:af:eb:94:03:49:65:34:8d:60: 87:db:56:33:cf:9e:2c:3a:f4:71:91:55:40:79:c6: 9b:e6:8f:05:38:2a:63:bc:ad:12:bd:15:96:66:e2: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D3:B9:D1:6F:ED:27:DF:9A:5F:2A:63:63:19:45:89:4F:F7:9D:4B X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c9:b0:81:8d:97:84:25:2c:c2:21:d4:21:fd:7d:a9:f3:07: 19:77:d8:74:13:c8:f7:91:ed:6c:65:93:42:f8:70:f2:ee:9c: a9:ea:4c:fb:4f:db:23:54:20:71:85:4b:83:f4:b7:8a:4a:e8: 0c:df:52:6b:a6:e1:bd:02:ad:29:48:d7:d8:cf:b5:b7:50:34: 81:f8:05:78:81:ff:0e:a1:2e:d7:da:20:68:2b:d5:f1:72:d8: a9:65:af:68:d9:94:f6:d6:8f:fa:5a:c7:32:8c:41:00:0c:1c: 16:f9:00:16:3f:37:8a:60:1c:8b:82:de:92:94:56:98:0e:4d: 5d:25:cc:1a:6a:15:5a:ae:69:f3:c0:de:2d:18:cb:99:71:40: 82:37:67:e9:0e:31:4f:4d:59:ea:4b:38:16:aa:a5:34:67:14: 62:de:d7:39:9c:4c:b2:5a:6a:71:4f:c9:88:e7:5b:aa:2a:0e: c5:6f:cc:b6:1f:28:f2:b2:67:4d:88:29:55:6d:bd:90:77:c8: 3f:4c:80:9d:b2:41:d4:7c:a2:54:44:98:e6:08:35:d1:6b:78: f0:d0:8a:88:1e:8d:3f:11:72:d9:20:34:61:42:f4:cc:bb:f0: 64:7f:4b:46:7c:7a:72:61:c0:eb:3b:c6:76:31:f6:83:d4:94: 0a:c1:d0:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjYxMDAyMTgwMTUxWhcNMjYxMDA5MTgwMTUxWjAYMRYwFAYD VQQDEw02YWJmZjE5MC01MDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk6E2yuYQucfAHSBO+WGa/s+30HrqeQ3ih/xInJ17eHK/eqiEsnd3s/mjTX9 b2A/pHaQpEcyJSGm8zMbdH1qyPH7StLd9KCrathgOak7xAX3+6PzoXM+R0/MCrUU 960lX7buXGqZTIc+4LrGE0QLA+LCxbawxae8/Z3YOJ1d+DA3BJntEltftHgdOBtj pgsWw2tfliJ2EFvv0sr6UIHSTSFTfg+BJRJfcUXTbdhudTrMHTc4gzxBzRejUCmQ 2+PqqL0iLwv5Re80YbviujiM7PkdMxy65uSv65QDSWU0jWCH21Yzz54sOvRxkVVA ecab5o8FOCpjvK0SvRWWZuKl0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDTudFv 7Sffml8qY2MZRYlP951LMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx Ty13UlNhRzlzdTJ5azhuWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeMmwgY2XhCUswiHUIf19qfMHGXfYdBPI95HtbGWTQvhw8u6cqepM+0/bI1Qg cYVLg/S3ikroDN9Sa6bhvQKtKUjX2M+1t1A0gfgFeIH/DqEu19ogaCvV8XLYqWWv aNmU9taP+lrHMoxBAAwcFvkAFj83imAci4LekpRWmA5NXSXMGmoVWq5p88DeLRjL mXFAgjdn6Q4xT01Z6ks4FqqlNGcUYt7XOZxMslpqcU/JiOdbqioOxW/Mth8o8rJn TYgpVW29kHfIP0yAnbJB1HyiVESY5gg10Wt48NCKiB6NPxFy2SA0YUL0zLvwZH9L Rnx6cmHA6zvGdjH2g9SUCsHQZg== -----END CERTIFICATE-----Generated at Sat Oct 3 18:51:21 2026 by rpki-client