$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: 9gTY9Y7rBGnDVADIRYfzpEC2HrDI7lsM22ub3JrxSNo= Subject key identifier: 1D:81:A6:B9:FB:6B:A2:F5:5F:3E:DF:A6:ED:33:64:CA:AB:7A:94:08 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 0679 Signing time: Tue 08 Sep 2026 22:39:08 +0000 Manifest this update: Tue 08 Sep 2026 22:39:07 +0000 Manifest next update: Tue 15 Sep 2026 22:39:07 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: t/uwM4dLcmA7myLMwfbM00E2E6dEkvTkDQBtYyWWPBM=) 2: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=) 3: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=) 4: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 22:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Sep 8 22:39:07 2026 GMT Not After : Sep 15 22:39:07 2026 GMT Subject: CN=6aa08e8c-b56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:b9:8d:fc:83:1f:1b:ed:bc:c6:f9:d3:9e: f4:ed:3c:ed:b2:e9:3b:75:09:0e:08:b6:bd:ba:ac: 86:73:9c:80:9c:f0:8f:38:27:8d:6b:3e:24:39:77: 6b:88:94:a7:55:06:98:6e:93:f0:cb:1f:5b:a7:b5: c2:40:a2:77:89:20:44:f8:63:bc:52:0d:46:91:06: 5e:42:ba:9d:fe:0e:5d:c3:af:ba:b3:9a:ba:f2:e2: ed:0a:84:75:29:80:d1:11:36:a7:d8:a9:2a:f8:cb: 0d:f1:fd:29:8c:21:b5:ff:5c:97:2b:83:19:ec:5b: b7:2c:db:65:58:4c:d0:5a:b1:c0:38:22:78:08:f5: 18:70:76:c2:67:76:65:f5:3a:b9:86:b6:5c:a0:0a: b3:34:25:4f:89:39:a1:83:37:49:3d:18:9f:43:89: 2c:51:ed:c9:34:3e:9b:ec:f5:a2:50:88:38:5a:b8: 65:ab:ae:bc:68:e4:58:f4:0c:3a:65:09:c6:a1:9b: 2a:57:7c:d7:3e:35:c9:03:05:39:87:56:f6:55:05: 32:06:3d:f1:01:5a:d5:e6:6f:39:30:cd:cd:5d:eb: f9:ed:fc:a9:11:e4:33:21:be:21:dd:f0:49:80:35: 0a:d0:21:02:cf:12:2f:c5:86:bf:a5:4d:17:eb:61: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:81:A6:B9:FB:6B:A2:F5:5F:3E:DF:A6:ED:33:64:CA:AB:7A:94:08 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:20:23:fb:2c:ce:52:67:4f:e5:a9:82:dc:68:64:6a:2a:ef: 24:e5:77:19:ba:e0:f3:4c:53:0a:d0:3f:de:d7:0d:d7:98:df: a8:b0:c5:3d:0e:80:51:b0:62:1d:5e:df:c1:bf:54:9c:32:fe: 2a:2d:31:47:2a:bd:7a:62:df:cb:d7:49:10:df:b3:3b:8f:37: 49:33:38:e6:8b:c1:fb:ff:c7:c7:89:3d:81:97:56:2b:0c:22: 7a:bc:bb:7e:c6:52:7b:0e:fd:7e:63:f5:8d:d4:8c:d2:f3:23: e2:d2:2b:c9:3e:13:32:d9:a6:17:a4:f3:e0:74:83:62:81:35: 33:b6:51:e2:9f:b7:44:10:7c:49:8d:7d:5e:59:32:f7:c3:4f: 88:a7:0d:b9:2f:ad:8c:02:9d:00:b7:cd:9a:b3:11:b2:12:0f: ea:4d:28:2e:d1:eb:23:6c:1c:b7:a6:6c:94:a3:b0:1f:a3:02: 6d:8e:0f:5a:d7:c5:f2:14:3d:d8:74:8a:8e:16:ef:a1:c4:7b: 07:38:fb:43:b5:2b:6f:8b:79:86:02:0f:18:c8:9e:07:04:19: 5f:29:72:98:99:72:9c:41:80:ad:20:19:a2:17:50:47:1e:8c: 9b:d7:84:29:75:e2:41:67:95:ef:39:e4:6a:bd:91:7e:0f:b8: 7e:71:f5:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYwOTA4MjIzOTA3WhcNMjYwOTE1MjIzOTA3WjAYMRYwFAYD VQQDEw02YWEwOGU4Yy1iNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySK5jfyDHxvtvMb505707Tztsuk7dQkOCLa9uqyGc5yAnPCPOCeNaz4kOXdr iJSnVQaYbpPwyx9bp7XCQKJ3iSBE+GO8Ug1GkQZeQrqd/g5dw6+6s5q68uLtCoR1 KYDRETan2Kkq+MsN8f0pjCG1/1yXK4MZ7Fu3LNtlWEzQWrHAOCJ4CPUYcHbCZ3Zl 9Tq5hrZcoAqzNCVPiTmhgzdJPRifQ4ksUe3JND6b7PWiUIg4Wrhlq668aORY9Aw6 ZQnGoZsqV3zXPjXJAwU5h1b2VQUyBj3xAVrV5m85MM3NXev57fypEeQzIb4h3fBJ gDUK0CECzxIvxYa/pU0X62EAOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2Bprn7 a6L1Xz7fpu0zZMqrepQIMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHyAj+yzOUmdP5amC3GhkairvJOV3Gbrg80xTCtA/3tcN15jfqLDFPQ6AUbBi HV7fwb9UnDL+Ki0xRyq9emLfy9dJEN+zO483STM45ovB+//Hx4k9gZdWKwwiery7 fsZSew79fmP1jdSM0vMj4tIryT4TMtmmF6Tz4HSDYoE1M7ZR4p+3RBB8SY19Xlky 98NPiKcNuS+tjAKdALfNmrMRshIP6k0oLtHrI2wct6ZslKOwH6MCbY4PWtfF8hQ9 2HSKjhbvocR7Bzj7Q7Urb4t5hgIPGMieBwQZXylymJlynEGArSAZohdQRx6Mm9eE KXXiQWeV7znkar2Rfg+4fnH1Wg== -----END CERTIFICATE-----Generated at Thu Sep 10 20:35:18 2026 by rpki-client