$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: 9Z/hncTCgELkZiht6ysDfcQO6Q52bZ9RTtXhw8lwEDw= Subject key identifier: 9E:F7:C1:51:CD:83:5E:5B:13:E6:D4:60:C3:EA:52:8B:68:22:7E:B0 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 1548 Signing time: Sat 10 Oct 2026 16:49:53 +0000 Manifest this update: Sat 10 Oct 2026 16:49:53 +0000 Manifest next update: Sat 17 Oct 2026 16:49:53 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: 58yVQYMbULn7pXMmRNNfenO1mdHQRBzrzseLoEKGinA=) 2: 89567AD686F011F19E006003A7EE528E.roa (hash: dUSLzMUqDsxRAiIEeaK8+FCiCh/s3L2CzoYAjuY8X34=) 3: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: 8O8JY2NXJlU6iXynIm/TOWGZDFkAjSbZghW1iOqNz4A=) 4: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: bwrfuXri/6S2vLj8S0q4zXoQ8Drj4P8QgwFZbjgS9OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5493 (0x1575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Oct 10 16:49:53 2026 GMT Not After : Oct 17 16:49:53 2026 GMT Subject: CN=6aca6cb1-4abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:c0:6e:f0:83:34:b2:20:3e:cc:02:a5:0f: a0:88:1b:2a:98:d1:1e:89:52:9d:b0:f5:3e:e2:c4: 5f:20:4a:4b:fd:d3:a6:98:b4:fa:0f:57:82:27:cc: 0a:e4:1e:a7:94:ef:1d:7a:90:06:7c:e5:0a:54:47: 77:d5:62:da:97:a0:97:7d:93:62:26:31:cd:92:3f: ae:b9:c2:1b:e4:22:d8:fa:f3:a7:bc:14:82:48:f1: be:7e:15:c1:5e:19:5d:98:90:b8:22:ec:e5:7d:da: c5:55:23:a6:20:07:75:61:19:d9:98:d1:5f:93:55: 30:4e:aa:39:11:af:b2:e5:27:b0:5b:4f:31:81:92: d0:70:7c:69:aa:60:79:ab:03:d9:4d:b3:d3:06:86: 99:44:63:84:e4:de:6b:e9:fd:40:1c:5f:dd:14:f4: 00:f6:07:f2:79:5f:d0:6b:3c:eb:6a:c9:a0:21:1b: cc:e0:6b:03:4f:53:69:ca:ae:97:18:7e:76:06:f1: 84:07:bc:07:fe:d8:1c:10:84:f7:db:f5:4b:50:a4: a0:f5:a1:be:77:9d:b9:15:e7:ed:d5:0d:68:76:8f: 60:9f:49:b4:4a:31:1e:f8:fb:60:6a:a0:58:cd:a7: 1b:eb:60:06:32:c5:86:85:cf:23:9b:7f:bc:0b:21: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F7:C1:51:CD:83:5E:5B:13:E6:D4:60:C3:EA:52:8B:68:22:7E:B0 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fe:c8:4a:e3:96:bd:2e:ee:f3:5d:ea:26:0b:2a:8b:c0:d6: 5a:08:1b:9b:c3:13:bf:37:c9:00:5b:48:22:74:40:c2:1e:a6: bd:ff:24:ca:50:aa:55:85:28:81:54:21:a3:85:48:08:95:f9: 1a:43:7c:62:fa:df:bb:7b:a9:ce:7e:b7:91:6a:be:78:76:bf: 5e:b3:37:7d:c6:75:76:a6:e6:bb:5f:3e:54:c5:4c:e9:07:9c: 83:2f:08:2b:aa:c9:ae:80:c2:96:b0:f1:21:4a:65:87:2e:b8: a0:c6:90:ac:ee:08:5b:1f:1f:2e:15:35:c2:d8:e7:f7:40:87: a2:ef:ef:92:5b:7b:ea:c2:fd:41:78:b3:34:80:78:e6:54:84: b3:f3:4c:58:af:1d:84:4f:bf:64:e9:fc:66:41:40:96:ba:cf: 1f:3c:ad:60:0c:b4:8e:be:6d:24:89:d4:b9:0b:54:4c:8c:8d: fb:67:cc:59:60:10:ff:0d:bb:a9:94:20:ce:91:9a:b8:4b:80: 89:f7:2a:de:80:75:25:96:0f:66:e6:43:da:1e:5a:e2:94:79: 67:79:16:ec:ae:bd:e3:bd:cb:c2:87:de:83:e9:8b:41:52:4f: 55:33:08:c9:27:27:e2:c4:9c:b3:8c:d5:3e:12:7c:9f:6f:37: b6:27:04:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjYxMDEwMTY0OTUzWhcNMjYxMDE3MTY0OTUzWjAYMRYwFAYD VQQDEw02YWNhNmNiMS00YWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouzAbvCDNLIgPswCpQ+giBsqmNEeiVKdsPU+4sRfIEpL/dOmmLT6D1eCJ8wK 5B6nlO8depAGfOUKVEd31WLal6CXfZNiJjHNkj+uucIb5CLY+vOnvBSCSPG+fhXB XhldmJC4IuzlfdrFVSOmIAd1YRnZmNFfk1UwTqo5Ea+y5SewW08xgZLQcHxpqmB5 qwPZTbPTBoaZRGOE5N5r6f1AHF/dFPQA9gfyeV/QazzrasmgIRvM4GsDT1Npyq6X GH52BvGEB7wH/tgcEIT32/VLUKSg9aG+d525Feft1Q1odo9gn0m0SjEe+PtgaqBY zacb62AGMsWGhc8jm3+8CyEaqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ73wVHN g15bE+bUYMPqUotoIn6wMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAov7ISuOWvS7u813qJgsqi8DWWggbm8MTvzfJAFtIInRAwh6mvf8kylCqVYUo gVQho4VICJX5GkN8Yvrfu3upzn63kWq+eHa/XrM3fcZ1dqbmu18+VMVM6Qecgy8I K6rJroDClrDxIUplhy64oMaQrO4IWx8fLhU1wtjn90CHou/vklt76sL9QXizNIB4 5lSEs/NMWK8dhE+/ZOn8ZkFAlrrPHzytYAy0jr5tJInUuQtUTIyN+2fMWWAQ/w27 qZQgzpGauEuAifcq3oB1JZYPZuZD2h5a4pR5Z3kW7K69473Lwofeg+mLQVJPVTMI yScn4sScs4zVPhJ8n283ticEKQ== -----END CERTIFICATE-----Generated at Sun Oct 11 07:52:33 2026 by rpki-client