$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: dhqxadRcXz4d+GpVoPQSlV1AH4/ExUXOdeyADJI1o2s= Subject key identifier: 11:31:E2:28:9F:1A:15:B2:A7:AF:A7:B1:2A:1A:90:03:42:0B:BA:83 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 039F Signing time: Fri 11 Sep 2026 00:32:07 +0000 Manifest this update: Fri 11 Sep 2026 00:32:06 +0000 Manifest next update: Fri 18 Sep 2026 00:32:06 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: 2R8eQNDQaSDyPmTR4dB9kRUA+Fr5vaRUyPGLEPT1aXY=) 2: 93853096971D11F18F01422E6D11F970.roa (hash: 5yF1DXbnlSpTxNu8XT0SUNre3PW558XfVHldm3s72uM=) 3: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wfGSp7+JsmcD0oEs9KhJM3F6ykDJOKd65jRk6d+1FZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Sep 11 00:32:06 2026 GMT Not After : Sep 18 00:32:06 2026 GMT Subject: CN=6aa34c07-17aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:da:d2:0b:b2:b7:98:e3:15:14:81:27:f4: ef:6c:ef:ac:b7:b2:ac:6f:2d:7b:3e:1c:aa:dc:de: a4:c6:74:1e:11:27:7c:b5:b6:1a:ed:2e:9f:c5:46: 1f:c3:95:ed:2b:20:b9:f4:64:19:68:d4:a4:45:66: e7:26:aa:da:e3:57:22:64:e0:98:0d:f5:36:56:5b: 3f:34:79:49:50:3a:4c:5d:f4:14:ec:8a:8f:6c:d1: 22:b2:2f:f9:c5:68:ba:15:26:ec:ab:28:53:48:eb: 4a:58:7b:65:86:11:93:2b:1d:20:a9:48:0b:48:c2: fc:e9:34:b4:bf:86:f0:9a:83:80:7d:af:ac:89:11: 91:4e:43:86:ab:3a:b6:8b:1a:10:77:30:6b:a3:c6: cc:b1:75:24:15:6c:3d:85:7e:1f:74:72:e9:41:f9: 96:74:6b:83:ed:87:a5:fb:a7:27:cf:e4:ba:f6:42: b1:cf:8e:60:b9:7b:67:d2:62:66:2a:5c:4e:9b:14: 7c:49:07:3a:78:57:60:3f:8a:7e:4a:6e:e0:b1:83: 36:32:c5:1e:01:9f:b2:f6:48:f2:a7:80:8d:fb:47: a1:54:6a:8a:ef:3e:43:46:00:ee:6a:81:a7:71:54: 04:09:f1:56:1b:24:bb:c0:d9:87:2b:74:e7:af:a7: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:31:E2:28:9F:1A:15:B2:A7:AF:A7:B1:2A:1A:90:03:42:0B:BA:83 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:40:ad:a6:35:63:76:76:66:d1:07:be:aa:e1:a3:65:88:48: 49:5d:4c:66:29:6c:e7:dd:0a:e2:07:b9:7f:88:31:3a:ef:d1: 0d:58:a1:d9:c7:04:63:38:16:fd:49:06:3a:43:6a:81:ed:11: c9:03:c1:65:59:92:6a:21:ca:43:de:cd:ce:cd:20:79:61:fc: 6e:4d:72:a3:01:1c:b4:92:91:43:ea:c5:b4:93:3d:36:53:1b: 14:18:ca:18:f5:96:fe:fe:0c:01:35:60:b8:5a:b3:c9:3f:f9: 8b:15:4a:b1:fb:e8:70:26:55:40:38:61:2d:f2:c5:7b:db:4c: 87:c6:43:d1:ce:29:7f:8d:dd:01:22:a7:f8:83:5c:11:c3:29: 4b:e2:3d:71:80:a4:00:d9:d4:17:85:1d:10:88:86:fe:7d:8e: 63:2a:09:a0:3d:10:ed:00:06:1b:a6:a6:fd:71:46:af:7f:b9: 9a:57:a4:ab:79:1f:ca:8c:d8:b6:2e:df:80:9f:94:02:0a:85: 2c:a2:77:d6:0a:b7:9c:da:54:52:1c:9d:3e:3f:1f:fb:51:56: 92:db:c4:fc:8d:14:f1:06:bb:ef:51:37:7b:37:f1:22:41:b4: f2:32:93:c5:4c:16:9a:e3:30:3c:39:a7:64:df:6d:7f:c5:5d: c8:5d:c9:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjYwOTExMDAzMjA2WhcNMjYwOTE4MDAzMjA2WjAYMRYwFAYD VQQDEw02YWEzNGMwNy0xN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnK/a0guyt5jjFRSBJ/TvbO+st7Ksby17Phyq3N6kxnQeESd8tbYa7S6fxUYf w5XtKyC59GQZaNSkRWbnJqra41ciZOCYDfU2Vls/NHlJUDpMXfQU7IqPbNEisi/5 xWi6FSbsqyhTSOtKWHtlhhGTKx0gqUgLSML86TS0v4bwmoOAfa+siRGRTkOGqzq2 ixoQdzBro8bMsXUkFWw9hX4fdHLpQfmWdGuD7Yel+6cnz+S69kKxz45guXtn0mJm KlxOmxR8SQc6eFdgP4p+Sm7gsYM2MsUeAZ+y9kjyp4CN+0ehVGqK7z5DRgDuaoGn cVQECfFWGyS7wNmHK3Tnr6cR3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBEx4iif GhWyp6+nsSoakANCC7qDMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQUCtpjVjdnZm0Qe+quGjZYhISV1MZils590K4ge5f4gxOu/RDVih2ccEYzgW /UkGOkNqge0RyQPBZVmSaiHKQ97Nzs0geWH8bk1yowEctJKRQ+rFtJM9NlMbFBjK GPWW/v4MATVguFqzyT/5ixVKsfvocCZVQDhhLfLFe9tMh8ZD0c4pf43dASKn+INc EcMpS+I9cYCkANnUF4UdEIiG/n2OYyoJoD0Q7QAGG6am/XFGr3+5mlekq3kfyozY ti7fgJ+UAgqFLKJ31gq3nNpUUhydPj8f+1FWktvE/I0U8Qa771E3ezfxIkG08jKT xUwWmuMwPDmnZN9tf8VdyF3Jbg== -----END CERTIFICATE-----Generated at Fri Sep 11 09:25:46 2026 by rpki-client