$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: /SW8+yXJ+upfNl/OPsl9LCD+GnNI8FBn5qLM9ronrLk= Subject key identifier: 4F:E5:DD:0D:08:D5:F3:C1:E6:3B:99:01:C3:F2:41:D3:72:B0:16:0D Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 0898 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 0880 Signing time: Mon 24 Aug 2026 20:43:03 +0000 Manifest this update: Mon 24 Aug 2026 20:43:03 +0000 Manifest next update: Mon 31 Aug 2026 20:43:03 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: AdLD/7f3uVFZklEg13uLWn71mSjWVwHhQh8nle9wDdQ=) 2: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: VGnt6v4dXILkocn8GEwn5t+Gd/2jbgIZ2L5lp88nLxY=) 3: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: Gj36dWubgKABqlkFIW8O6/4ONoiv/qzcPv5+4kWBHuk=) 4: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: gt1Thn5b17IX5hac63qpkPqnhAnjtdM7GC00RfgXDCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 20:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2200 (0x898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Aug 24 20:43:03 2026 GMT Not After : Aug 31 20:43:03 2026 GMT Subject: CN=6a8cacd7-0d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:70:7e:a9:20:69:47:2d:f6:69:4d:f2:80: 0a:04:00:57:32:d5:fd:9c:08:4f:3b:bd:d7:7b:b6: ec:2d:c6:aa:d1:57:85:67:e8:a9:23:8f:ec:dd:bd: 2d:a1:58:be:5b:99:98:ef:76:37:e2:65:81:41:e4: 73:8c:a0:88:fe:32:5c:6a:a3:eb:bd:23:69:70:09: da:92:b6:a8:02:99:f5:e6:56:38:a8:eb:a0:34:80: bc:39:61:42:b9:f9:a1:0d:47:5c:65:ef:e9:29:46: a9:0d:e4:80:4e:ec:88:d5:17:d6:df:0f:27:b7:9f: 74:e5:62:4c:6f:7f:2d:3a:91:87:12:f7:44:51:27: a1:f5:ed:4a:67:be:fa:38:5b:4c:0d:bf:50:01:9a: 42:bb:f9:9b:28:35:10:cc:01:ab:0f:15:62:fd:e3: 0f:6f:07:b0:0d:51:09:9e:20:bd:c0:17:c9:0e:60: 94:7b:05:af:1e:01:01:0e:dc:73:ff:82:a3:9d:41: 00:7b:6c:4b:4e:2a:dc:63:58:bb:45:ee:41:a6:2e: d0:32:78:61:3f:67:8c:e4:08:00:41:1a:8c:c2:bc: 58:3a:ad:93:b2:9d:62:b2:8a:f0:ae:fe:70:fa:4b: 9f:23:b1:1a:e8:b5:c7:4e:d7:83:a1:90:f5:c5:de: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E5:DD:0D:08:D5:F3:C1:E6:3B:99:01:C3:F2:41:D3:72:B0:16:0D X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:18:31:38:60:c8:ae:00:d1:7b:e9:0d:95:7f:bc:da:fd:9b: a8:84:d6:3c:91:76:8b:ba:b9:3a:0b:59:08:39:bc:3a:5b:42: 22:12:3f:6a:83:d8:f5:e0:d4:04:0e:fc:0f:49:26:cc:38:c4: cd:0d:76:11:54:85:ba:26:9d:f8:5f:23:ba:91:1a:63:82:e8: 99:f9:49:28:3b:be:22:57:c0:df:45:a2:aa:02:06:44:7e:fb: 1d:7c:30:3c:d9:72:10:cc:5b:fe:2a:3f:eb:f1:3e:1d:3c:d9: a8:37:0d:03:84:43:93:c9:ae:aa:94:f2:18:77:80:3b:a1:89: f4:71:2f:fc:c2:b3:00:ef:e1:e4:4c:b3:25:29:cd:b7:99:9f: 9e:bd:5a:4e:81:03:13:22:aa:30:54:25:9f:a6:cc:56:2e:b0: 3a:c1:ec:c0:34:29:4c:6b:bd:fe:cb:d1:c5:d1:93:43:16:a0: 57:b0:23:28:0a:98:70:13:e7:7f:54:ca:60:b5:66:6d:0f:10: 91:85:4f:f0:a2:0b:01:67:4d:8c:f2:d7:7c:b5:57:64:7e:55: 6f:67:c2:71:4f:1f:39:76:28:ab:6d:93:67:60:b8:9a:d0:3a: 1e:43:b6:bc:24:dc:ac:ec:9d:40:ed:8b:f3:c3:34:a3:ec:be: 80:f6:d2:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjYwODI0MjA0MzAzWhcNMjYwODMxMjA0MzAzWjAYMRYwFAYD VQQDEw02YThjYWNkNy0wZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFpwfqkgaUct9mlN8oAKBABXMtX9nAhPO73Xe7bsLcaq0VeFZ+ipI4/s3b0t oVi+W5mY73Y34mWBQeRzjKCI/jJcaqPrvSNpcAnakraoApn15lY4qOugNIC8OWFC ufmhDUdcZe/pKUapDeSATuyI1RfW3w8nt5905WJMb38tOpGHEvdEUSeh9e1KZ776 OFtMDb9QAZpCu/mbKDUQzAGrDxVi/eMPbwewDVEJniC9wBfJDmCUewWvHgEBDtxz /4KjnUEAe2xLTircY1i7Re5Bpi7QMnhhP2eM5AgAQRqMwrxYOq2Tsp1isorwrv5w +kufI7Ea6LXHTteDoZD1xd6CXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/l3Q0I 1fPB5juZAcPyQdNysBYNMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFBgxOGDIrgDRe+kNlX+82v2bqITWPJF2i7q5OgtZCDm8OltCIhI/aoPY9eDU BA78D0kmzDjEzQ12EVSFuiad+F8jupEaY4LomflJKDu+IlfA30WiqgIGRH77HXww PNlyEMxb/io/6/E+HTzZqDcNA4RDk8muqpTyGHeAO6GJ9HEv/MKzAO/h5EyzJSnN t5mfnr1aToEDEyKqMFQln6bMVi6wOsHswDQpTGu9/svRxdGTQxagV7AjKAqYcBPn f1TKYLVmbQ8QkYVP8KILAWdNjPLXfLVXZH5Vb2fCcU8fOXYoq22TZ2C4mtA6HkO2 vCTcrOydQO2L88M0o+y+gPbSwQ== -----END CERTIFICATE-----Generated at Wed Aug 26 16:13:49 2026 by rpki-client