$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: 5hsAtdAdx4ne3FywWIOFq68HZewhri1o9jw221llO1A= Subject key identifier: 84:C1:7C:42:B6:55:A4:10:37:B6:19:6E:1D:10:18:9A:BD:12:68:AC Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 0898 Signing time: Sat 10 Oct 2026 20:47:09 +0000 Manifest this update: Sat 10 Oct 2026 20:47:08 +0000 Manifest next update: Sat 17 Oct 2026 20:47:08 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: 2HKW5VNYssx2kl3jgev4hTd3jVJi3iJz8ttUEZmIS6M=) 2: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: VGnt6v4dXILkocn8GEwn5t+Gd/2jbgIZ2L5lp88nLxY=) 3: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: gt1Thn5b17IX5hac63qpkPqnhAnjtdM7GC00RfgXDCA=) 4: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: Gj36dWubgKABqlkFIW8O6/4ONoiv/qzcPv5+4kWBHuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Oct 10 20:47:08 2026 GMT Not After : Oct 17 20:47:08 2026 GMT Subject: CN=6acaa44d-89b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d0:38:42:d6:cb:06:da:4f:78:fc:0b:a0:7a: 52:f3:3b:2e:08:a1:fc:20:11:e9:e8:4f:16:90:d9: b8:b0:e1:62:ff:0c:a9:61:b6:3d:2f:3e:fa:e3:c3: 36:fb:5d:d6:58:e9:06:d2:68:68:06:45:95:57:7e: 53:76:93:cc:4c:e0:fb:5b:75:8d:d9:e7:7f:e3:14: 92:02:26:d9:27:85:81:9c:7d:bc:fa:65:f0:ea:cc: be:66:00:ca:48:f9:82:94:01:5c:43:95:5c:dd:b6: 1b:ab:eb:98:bb:63:ea:19:0d:cc:9a:ba:74:5a:4c: 46:92:c3:33:98:37:57:65:40:fd:12:24:7c:4d:ba: e5:1c:b9:2f:83:02:13:a1:b4:12:b9:3e:32:f3:ce: 2e:d9:ca:28:5c:91:8f:e7:35:77:a4:0c:3e:91:f6: f4:03:f6:6d:55:d0:8a:a7:52:8c:9f:07:73:1c:75: 73:71:5e:66:48:d8:83:01:f9:de:05:1b:f8:14:46: 50:a9:29:08:d7:9d:23:73:9e:05:c9:a3:1d:de:f2: f5:4d:d8:14:97:14:b5:48:84:09:f0:e2:e6:d2:ff: a4:1c:cb:81:f4:90:bb:fe:b1:ee:4d:64:3e:d8:90: 50:64:9a:3c:54:3c:ad:d4:e0:1c:4b:68:cb:bf:48: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C1:7C:42:B6:55:A4:10:37:B6:19:6E:1D:10:18:9A:BD:12:68:AC X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:12:23:d7:62:15:a3:f2:c5:18:92:d1:5a:96:c2:fb:ed:17: 3b:bb:73:62:63:e8:42:c7:5c:11:c7:01:3d:2c:23:86:70:6f: 35:a9:ac:60:a7:70:02:16:f4:5a:f1:82:a7:fe:ac:b5:77:34: a7:89:f9:93:ea:4a:d5:f7:a0:10:82:03:33:ee:e8:1a:f9:59: 4d:5b:3c:7b:d5:0f:87:44:bb:e7:97:53:68:66:98:23:a6:b2: 04:3e:d8:75:b9:95:e4:14:68:2c:01:64:fd:8b:ee:7f:bf:6e: e5:b2:46:fd:81:18:d7:f4:e1:04:a2:9a:57:d5:64:35:12:78: 4c:87:4d:47:92:12:45:b1:d0:78:07:a9:23:90:55:3c:82:be: 35:00:a6:c7:30:6f:37:ae:d4:66:d0:f9:23:1a:85:8b:6c:52: bb:dc:90:96:4d:fb:4d:ec:e8:e6:93:69:32:d9:90:6b:bd:a5: 80:26:80:73:8f:3b:23:53:71:9f:45:43:89:52:83:2d:17:8d: 17:1f:c7:49:c6:fa:6b:7f:0e:e4:60:e8:a1:f8:b2:e5:63:bb: 4f:57:fd:fb:61:1d:83:fb:a6:29:64:4f:e1:6a:b7:06:17:72: 5c:39:26:e0:eb:56:2c:7e:5a:d8:f6:f4:c1:8e:4c:7d:62:1e: 4e:67:03:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjYxMDEwMjA0NzA4WhcNMjYxMDE3MjA0NzA4WjAYMRYwFAYD VQQDEw02YWNhYTQ0ZC04OWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09A4QtbLBtpPePwLoHpS8zsuCKH8IBHp6E8WkNm4sOFi/wypYbY9Lz7648M2 +13WWOkG0mhoBkWVV35TdpPMTOD7W3WN2ed/4xSSAibZJ4WBnH28+mXw6sy+ZgDK SPmClAFcQ5Vc3bYbq+uYu2PqGQ3Mmrp0WkxGksMzmDdXZUD9EiR8TbrlHLkvgwIT obQSuT4y884u2cooXJGP5zV3pAw+kfb0A/ZtVdCKp1KMnwdzHHVzcV5mSNiDAfne BRv4FEZQqSkI150jc54FyaMd3vL1TdgUlxS1SIQJ8OLm0v+kHMuB9JC7/rHuTWQ+ 2JBQZJo8VDyt1OAcS2jLv0h9QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFITBfEK2 VaQQN7YZbh0QGJq9EmisMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVRIj12IVo/LFGJLRWpbC++0XO7tzYmPoQsdcEccBPSwjhnBvNamsYKdwAhb0 WvGCp/6stXc0p4n5k+pK1fegEIIDM+7oGvlZTVs8e9UPh0S755dTaGaYI6ayBD7Y dbmV5BRoLAFk/Yvuf79u5bJG/YEY1/ThBKKaV9VkNRJ4TIdNR5ISRbHQeAepI5BV PIK+NQCmxzBvN67UZtD5IxqFi2xSu9yQlk37Tezo5pNpMtmQa72lgCaAc487I1Nx n0VDiVKDLReNFx/HScb6a38O5GDoofiy5WO7T1f9+2Edg/umKWRP4Wq3BhdyXDkm 4OtWLH5a2Pb0wY5MfWIeTmcDHg== -----END CERTIFICATE-----Generated at Sun Oct 11 22:42:40 2026 by rpki-client