$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: FO2zZU9QO26LI9+fMy2rJ0GsSJdYLp3f1t0BfNAsR3s= Subject key identifier: 2B:08:7E:1D:70:7B:81:FF:D8:94:F2:F5:A2:14:45:F1:13:3B:CE:5F Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0D6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0D51 Signing time: Sun 04 Oct 2026 18:09:56 +0000 Manifest this update: Sun 04 Oct 2026 18:09:56 +0000 Manifest next update: Sun 11 Oct 2026 18:09:56 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: IW43blM52h+TM4MG/AchYXOZ0Ndm+o4XzCqNEvAryMo=) 2: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: zG4D1s2xrlJsIzyQLjKkrbBcFvkHI/PRTbX5mMwZqTk=) 3: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: DvZA6XJDkyHfkolYQVEDhxnUbcvdyFYpNYGE/Rx6mkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Oct 4 18:09:56 2026 GMT Not After : Oct 11 18:09:56 2026 GMT Subject: CN=6ac29674-e50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:68:73:a2:51:b8:6c:84:be:54:36:6f:86: 6d:55:8b:3b:41:b1:5e:a9:0f:a3:51:51:69:53:bd: 38:b5:36:a8:1d:5f:9d:34:85:3e:cb:da:26:a1:a4: 0f:6c:30:d2:da:e7:53:ce:02:a8:22:87:fe:97:39: e4:c5:8a:f6:46:d7:7b:18:49:75:45:29:97:1c:f8: 98:4f:d4:91:a0:77:b3:cb:fc:9c:f6:20:be:69:ea: 41:c3:95:5a:c1:36:33:88:4a:f9:c9:9e:03:b1:39: f0:bd:ad:76:09:ff:9c:6f:e5:56:8a:85:f8:6c:96: 1b:ab:70:ab:a7:fd:5a:b9:20:8f:13:aa:df:b1:16: 27:8f:6a:79:45:b0:c0:56:b2:2c:dc:c3:fa:10:85: 2c:2f:ca:c3:b3:a2:39:ea:0e:27:90:e6:f7:21:7d: 9e:d2:88:97:59:0f:f2:17:bb:09:99:7a:29:54:52: 47:69:3a:c7:08:d9:a9:73:ba:86:b9:42:71:fa:e4: c9:45:b0:8c:58:d2:40:81:5a:dc:8e:d0:7d:10:6a: fd:73:6f:f9:e9:c9:3b:e6:b6:aa:3b:cc:b3:fb:fc: 85:1b:2d:12:eb:66:73:1e:51:da:9c:2b:a2:92:8a: e6:8a:73:61:05:25:9a:64:d0:4f:ce:3f:aa:8d:e4: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:08:7E:1D:70:7B:81:FF:D8:94:F2:F5:A2:14:45:F1:13:3B:CE:5F X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4d:24:33:e3:02:61:2a:94:0f:de:9d:d5:e6:cd:14:57:3c: 6f:c7:9a:f2:51:1b:48:8a:c9:7d:bd:b6:3f:8a:cf:23:0d:b7: 32:bb:de:12:e3:85:db:e5:e7:7a:36:72:72:ac:af:6b:1e:2d: 3c:6a:60:02:a3:5d:6c:96:4e:b5:81:81:5e:e9:40:90:7e:44: 8d:11:fd:13:fe:1a:a1:87:95:18:58:64:dc:09:2a:79:2e:81: d4:04:5c:e7:51:78:a5:24:0c:e9:a3:df:75:84:25:95:68:18: 8d:f3:bf:e4:fc:55:aa:8e:6c:02:ac:9a:bf:5b:85:6d:48:65: 3c:25:5a:70:f0:ab:5c:32:a6:95:33:f3:8a:c6:a6:44:71:dc: a5:5b:2b:a1:9d:0c:52:75:21:8c:dc:20:03:c3:1d:bf:59:57: 41:90:04:ea:0e:c1:22:74:ee:8b:7b:a5:63:ce:da:f1:3d:22: d5:6e:73:e7:b1:e5:12:f7:50:b4:8a:bf:e8:83:a2:38:ae:40: b3:67:1b:53:ed:76:82:b8:7c:e6:2a:e9:61:72:95:16:ad:77: d5:44:59:38:22:4d:f0:3f:d5:4b:80:50:a3:24:67:a4:83:8e: 69:03:28:c5:5a:ce:4f:60:e3:5d:c0:05:e2:c6:28:91:ca:e5: eb:d7:d7:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjYxMDA0MTgwOTU2WhcNMjYxMDExMTgwOTU2WjAYMRYwFAYD VQQDEw02YWMyOTY3NC1lNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFNoc6JRuGyEvlQ2b4ZtVYs7QbFeqQ+jUVFpU704tTaoHV+dNIU+y9omoaQP bDDS2udTzgKoIof+lznkxYr2Rtd7GEl1RSmXHPiYT9SRoHezy/yc9iC+aepBw5Va wTYziEr5yZ4DsTnwva12Cf+cb+VWioX4bJYbq3Crp/1auSCPE6rfsRYnj2p5RbDA VrIs3MP6EIUsL8rDs6I56g4nkOb3IX2e0oiXWQ/yF7sJmXopVFJHaTrHCNmpc7qG uUJx+uTJRbCMWNJAgVrcjtB9EGr9c2/56ck75raqO8yz+/yFGy0S62ZzHlHanCui korminNhBSWaZNBPzj+qjeTamwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsIfh1w e4H/2JTy9aIURfETO85fMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT00kM+MCYSqUD96d1ebNFFc8b8ea8lEbSIrJfb22P4rPIw23MrveEuOF2+Xn ejZycqyvax4tPGpgAqNdbJZOtYGBXulAkH5EjRH9E/4aoYeVGFhk3AkqeS6B1ARc 51F4pSQM6aPfdYQllWgYjfO/5PxVqo5sAqyav1uFbUhlPCVacPCrXDKmlTPzisam RHHcpVsroZ0MUnUhjNwgA8Mdv1lXQZAE6g7BInTui3ulY87a8T0i1W5z57HlEvdQ tIq/6IOiOK5As2cbU+12grh85irpYXKVFq131URZOCJN8D/VS4BQoyRnpIOOaQMo xVrOT2DjXcAF4sYokcrl69fXpQ== -----END CERTIFICATE-----Generated at Tue Oct 6 18:09:33 2026 by rpki-client