$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json) Hash identifier: IPtnAFVRozH2VSKZ3hkmdXm02ZHABlybSg0NimukcCY= Subject key identifier: 61:B1:5C:D6:05:11:1E:E9:6E:61:46:19:AB:7D:29:8F:9C:23:5D:04 Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft Manifest number: 7F Signing time: Fri 11 Sep 2026 07:51:25 +0000 Manifest this update: Fri 11 Sep 2026 07:51:24 +0000 Manifest next update: Fri 18 Sep 2026 07:51:24 +0000 Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: oUoUzNJEpblpY4UYBuNo6EcaTHF2Td4N8wiGbsyo024=) 2: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=) 3: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Validity Not Before: Sep 11 07:51:24 2026 GMT Not After : Sep 18 07:51:24 2026 GMT Subject: CN=6aa3b2fd-db5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:e1:2b:e0:53:66:72:b4:f8:69:ea:94:b5: 7d:02:1b:40:88:6d:2d:12:36:1b:d1:c9:88:04:b9: 5e:cb:07:32:37:c1:7b:c0:0f:5b:ee:d8:93:cd:81: 59:59:f9:f8:af:9f:da:73:9d:90:bb:64:31:87:6a: e4:a9:d0:7e:18:0e:77:c2:2a:2c:08:26:de:1b:70: 24:c9:9f:8d:12:b3:c5:03:f0:5c:15:1c:35:36:0c: 45:69:9f:6a:8a:f1:0a:da:c1:56:52:ae:30:a6:c6: 17:33:c1:d0:10:ba:b2:5e:b8:e8:8b:7c:98:18:be: a4:6c:4a:b2:b9:3a:3a:69:b6:3a:54:2f:06:8d:4c: ac:ae:d0:97:79:7b:5a:d3:d1:1a:37:8d:2e:76:e7: ba:b6:10:7f:19:74:98:94:8f:0c:52:18:77:d6:b9: ac:08:d7:87:79:77:1c:12:2e:d3:19:be:f0:97:e7: b2:40:b6:f6:1a:e2:71:b4:81:cd:2a:2c:b0:8f:49: b2:61:c8:e9:9a:b9:1a:43:c6:a6:fe:41:94:79:bd: b5:aa:8f:9b:fe:c0:5c:3e:3c:68:88:1b:71:48:57: 7f:f3:98:97:77:5b:83:2e:84:72:98:95:22:ec:b2: 72:52:0d:1b:63:a9:80:75:59:45:aa:09:32:21:4b: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B1:5C:D6:05:11:1E:E9:6E:61:46:19:AB:7D:29:8F:9C:23:5D:04 X509v3 Authority Key Identifier: keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7d:7a:90:b4:2d:0f:c8:1c:59:62:c4:06:67:06:9f:00:78: d8:33:d7:a8:b8:a4:22:8b:64:d9:cb:cd:08:19:ec:d6:e8:3f: d2:8b:51:92:e2:d0:20:bb:a3:87:b2:95:ae:b1:fc:11:33:60: 50:d3:7a:59:8d:1c:da:35:f5:f2:36:e1:78:6b:40:b2:db:8d: 4f:bc:2c:54:bb:d4:d4:76:6c:3a:7b:2e:b2:3e:73:b6:28:68: fd:ff:df:b9:ae:21:56:6d:09:3f:74:9e:b4:37:17:b9:24:52: 33:22:8a:d2:29:95:73:97:72:7e:6e:89:d2:67:17:3d:90:16: f1:e4:34:e7:b6:49:2a:2e:49:07:3e:60:68:69:61:a1:08:14: 3a:fe:4f:83:37:aa:54:15:68:a6:02:07:64:f7:66:70:f7:92: 8f:ef:0b:68:65:ea:47:23:ac:67:a2:3f:32:f1:3c:1a:dd:28: e1:63:e5:a2:1e:ea:3d:ce:37:c3:2b:c1:b7:d8:91:a1:d7:5a: 55:e2:86:d7:b2:f2:64:fe:0b:a8:fd:92:bc:71:34:54:a6:f8: 4b:a1:fe:67:72:71:c9:7e:99:d9:2f:9e:11:82:81:ef:9d:62: 76:47:72:b6:a1:41:b8:28:47:59:5b:bb:89:d3:29:89:6e:1c: 69:a0:18:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NCODExMTAvBgNVBAUTKEYwRDcxMTIwQTkyQTg1OERCNzI5NDk2RkNDQkYxODI1 QzlGMDNDNjMwHhcNMjYwOTExMDc1MTI0WhcNMjYwOTE4MDc1MTI0WjAYMRYwFAYD VQQDEw02YWEzYjJmZC1kYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlPhK+BTZnK0+GnqlLV9AhtAiG0tEjYb0cmIBLleywcyN8F7wA9b7tiTzYFZ Wfn4r5/ac52Qu2Qxh2rkqdB+GA53wiosCCbeG3AkyZ+NErPFA/BcFRw1NgxFaZ9q ivEK2sFWUq4wpsYXM8HQELqyXrjoi3yYGL6kbEqyuTo6abY6VC8GjUysrtCXeXta 09EaN40udue6thB/GXSYlI8MUhh31rmsCNeHeXccEi7TGb7wl+eyQLb2GuJxtIHN Kiywj0myYcjpmrkaQ8am/kGUeb21qo+b/sBcPjxoiBtxSFd/85iXd1uDLoRymJUi 7LJyUg0bY6mAdVlFqgkyIUs3iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGxXNYF ER7pbmFGGat9KY+cI10EMB8GA1UdIwQYMBaAFPDXESCpKoWNtylJb8y/GCXJ8Dxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0I4MS80MUZERDM4OEY4 NkExMUYwQjRCQkFGM0M0QTZGNTZCQy84TmNSSUtrcWhZMjNLVWx2ekw4WUpjbndQ R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzhOY1JJS2txaFkyM0tVbHZ6TDhZSmNud1BHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0I4MS80MUZERDM4OEY4NkExMUYwQjRCQkFGM0M0QTZGNTZCQy84TmNSSUtrcWhZ MjNLVWx2ekw4WUpjbndQR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlX16kLQtD8gcWWLEBmcGnwB42DPXqLikIotk2cvNCBns1ug/0otRkuLQILuj h7KVrrH8ETNgUNN6WY0c2jX18jbheGtAstuNT7wsVLvU1HZsOnsusj5ztiho/f/f ua4hVm0JP3SetDcXuSRSMyKK0imVc5dyfm6J0mcXPZAW8eQ057ZJKi5JBz5gaGlh oQgUOv5PgzeqVBVopgIHZPdmcPeSj+8LaGXqRyOsZ6I/MvE8Gt0o4WPloh7qPc43 wyvBt9iRoddaVeKG17LyZP4LqP2SvHE0VKb4S6H+Z3JxyX6Z2S+eEYKB751idkdy tqFBuChHWVu7idMpiW4caaAYBw== -----END CERTIFICATE-----Generated at Fri Sep 11 14:59:23 2026 by rpki-client