$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: SSHfUJwrbmW3TiZpTg6J7D9lahIVsKZWBQgtA+K2sMw= Subject key identifier: 84:58:46:8C:86:F7:AB:12:75:27:5C:52:B1:67:0D:7E:FC:5C:CC:BA Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 083B Signing time: Sun 04 Oct 2026 21:09:41 +0000 Manifest this update: Sun 04 Oct 2026 21:09:41 +0000 Manifest next update: Sun 11 Oct 2026 21:09:41 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: AM0tkDZ6xKZomBrFnNHMcXEwcU5gxmcLWpgHbEQLhQM=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: /LeLgNBBApVoU9W0PiPoKX0e1+iJ16jhEcyi7pM1vXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Oct 4 21:09:41 2026 GMT Not After : Oct 11 21:09:41 2026 GMT Subject: CN=6ac2c095-f8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:56:29:4d:68:0a:b5:be:16:26:54:0f:ed: dd:fd:47:fb:a6:87:04:2a:8a:17:c3:0b:29:27:09: f8:9f:3d:e2:21:e3:46:84:30:ae:69:48:91:e2:79: 06:8d:8d:c4:3f:6e:69:b0:f9:41:37:71:75:e1:1e: 8c:9b:bd:4c:8c:88:1a:ab:37:1b:72:6c:a4:a9:c5: fa:df:24:38:ae:0f:95:d9:ef:59:8f:03:06:99:37: 08:9d:d6:0c:bc:0c:b6:50:0a:e6:60:f9:05:31:81: 79:bf:fe:95:6a:61:15:02:6f:2d:79:64:2d:5c:d4: 7e:91:f2:25:93:0f:83:3b:01:6d:97:42:69:08:6b: 45:dc:c5:cf:98:54:19:86:8f:1d:f3:17:14:8e:2d: b0:15:d3:b2:b7:78:0c:c9:2e:f1:63:e6:fa:bb:43: 86:f6:a9:e6:0e:64:90:5a:aa:eb:bd:4b:f4:56:f8: 08:7a:17:2e:ba:8b:4a:37:e6:bf:20:e3:a3:16:ec: f1:c2:c0:94:92:57:49:bd:db:d2:b0:3a:8e:b5:4f: df:21:ec:f5:81:24:9c:d0:cc:5e:cf:2b:98:67:13: d3:bc:df:f0:d3:49:df:65:c3:5c:ef:d0:67:25:8f: 73:9a:ee:6a:2c:23:ae:e0:eb:ce:ef:07:fb:46:a7: ca:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:58:46:8C:86:F7:AB:12:75:27:5C:52:B1:67:0D:7E:FC:5C:CC:BA X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a2:f0:96:f6:73:7c:84:59:fa:7c:63:5e:eb:8a:86:a8:5c: e4:4d:c2:11:e2:7b:c5:fa:46:d9:75:92:f3:58:0d:fb:73:02: ab:2f:3f:14:2c:53:b2:2c:3e:cf:08:17:ad:9e:bd:d8:28:eb: 44:30:67:14:b5:e2:30:f4:da:cb:dd:43:d6:1d:07:7d:7c:3c: b2:24:90:22:84:c5:7e:c9:4c:04:cd:fb:7e:0f:c9:80:be:fa: 86:bf:82:a5:e4:ef:aa:0b:e2:71:ed:08:f5:7b:02:a1:8c:c9: 12:93:ad:19:c2:9c:f0:7f:6f:20:d6:56:34:97:3f:96:67:5a: fe:e0:1e:56:1a:c1:b4:59:ec:ac:29:5e:e7:f1:91:e9:f1:92: 14:d9:11:7b:90:1c:8b:14:93:15:0f:57:48:63:f6:28:02:99: 20:11:b9:e7:a5:df:32:69:b1:3a:92:74:df:0a:07:97:2a:9a: b9:2b:a1:9e:bb:90:2f:e9:3c:fc:12:b4:6b:7d:11:2b:47:fe: 97:1c:b9:a2:d9:9d:2b:ed:c9:89:2b:75:ed:d7:db:5e:5a:bd: ab:55:20:ec:d5:26:44:62:89:10:48:84:9f:3f:47:19:50:f8: ac:1d:38:57:f7:8a:f9:c4:b0:c9:2b:bf:d2:c2:ae:e2:bc:f8: 94:67:b1:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjYxMDA0MjEwOTQxWhcNMjYxMDExMjEwOTQxWjAYMRYwFAYD VQQDEw02YWMyYzA5NS1mOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsxWKU1oCrW+FiZUD+3d/Uf7pocEKooXwwspJwn4nz3iIeNGhDCuaUiR4nkG jY3EP25psPlBN3F14R6Mm71MjIgaqzcbcmykqcX63yQ4rg+V2e9ZjwMGmTcIndYM vAy2UArmYPkFMYF5v/6VamEVAm8teWQtXNR+kfIlkw+DOwFtl0JpCGtF3MXPmFQZ ho8d8xcUji2wFdOyt3gMyS7xY+b6u0OG9qnmDmSQWqrrvUv0VvgIehcuuotKN+a/ IOOjFuzxwsCUkldJvdvSsDqOtU/fIez1gSSc0MxezyuYZxPTvN/w00nfZcNc79Bn JY9zmu5qLCOu4OvO7wf7RqfKXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRYRoyG 96sSdSdcUrFnDX78XMy6MB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgKLwlvZzfIRZ+nxjXuuKhqhc5E3CEeJ7xfpG2XWS81gN+3MCqy8/FCxTsiw+ zwgXrZ692CjrRDBnFLXiMPTay91D1h0HfXw8siSQIoTFfslMBM37fg/JgL76hr+C peTvqgvice0I9XsCoYzJEpOtGcKc8H9vINZWNJc/lmda/uAeVhrBtFnsrCle5/GR 6fGSFNkRe5AcixSTFQ9XSGP2KAKZIBG556XfMmmxOpJ03woHlyqauSuhnruQL+k8 /BK0a30RK0f+lxy5otmdK+3JiSt17dfbXlq9q1Ug7NUmRGKJEEiEnz9HGVD4rB04 V/eK+cSwySu/0sKu4rz4lGex6g== -----END CERTIFICATE-----Generated at Tue Oct 6 20:32:24 2026 by rpki-client