$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft File: 8O-KITM_UQdy8x7aMkGe3iQXrTk.mft (raw, json) Hash identifier: 0L5ZfACYP5Gu5EjJYF5hjO0Haq2OUaW3wH4Ws/jAcqI= Subject key identifier: F3:89:32:D2:EF:16:3B:EC:E8:B7:D9:37:1C:94:6A:B8:9F:CF:15:C9 Authority key identifier: F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39 Certificate issuer: /CN=A91F352B/serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft Manifest number: 32 Signing time: Sat 03 Oct 2026 09:23:48 +0000 Manifest this update: Sat 03 Oct 2026 09:23:48 +0000 Manifest next update: Sat 10 Oct 2026 09:23:48 +0000 Files and hashes: 1: 8O-KITM_UQdy8x7aMkGe3iQXrTk.crl (hash: WwUqFaYc+5l1zLhzC6yV29GZ/K0t/+GY4SFvUs9Fm4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.crl rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F352B, serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39 Validity Not Before: Oct 3 09:23:48 2026 GMT Not After : Oct 10 09:23:48 2026 GMT Subject: CN=6ac0c9a4-b3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:0d:51:c3:d4:73:e3:7d:10:bb:eb:54:db: 01:4e:99:ee:26:65:74:ad:6f:88:2e:8d:a2:31:63: c5:3e:18:f0:87:c8:06:80:df:30:73:f1:c6:6f:cd: 24:75:49:76:4c:73:81:ed:1d:1d:69:c8:b7:aa:d1: 36:80:02:e0:b1:30:fd:f3:09:d6:9a:1e:38:31:ad: 8f:23:1f:9d:2b:e9:cd:a8:6f:13:6b:a8:16:90:10: 60:f0:a5:d8:58:5c:4f:94:bd:71:54:f0:c1:92:a7: 48:08:77:98:48:e9:5d:45:0b:57:ef:24:ca:6b:36: 8c:29:a2:6d:f1:9c:41:0b:f7:2a:06:d8:b7:52:c6: a1:bb:85:2a:c9:3e:6a:6f:74:3c:6b:ec:70:01:17: c8:24:4d:78:24:04:35:89:79:6a:e1:db:0d:f0:b5: cd:ab:0a:5f:ac:a4:6f:56:23:3b:1e:41:ab:76:4a: 03:39:a0:7d:67:d9:53:c4:72:52:5c:30:c9:95:24: 7a:6a:e8:1c:86:20:c1:2e:d2:73:e7:16:13:94:a4: 7b:0a:a4:4b:66:58:a3:0e:6e:6f:06:59:fe:6d:09: 21:78:45:4d:8b:9e:94:f8:74:57:07:95:1e:fa:0b: c9:5e:03:cd:88:3f:09:26:c2:7d:88:b9:e1:88:40: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:89:32:D2:EF:16:3B:EC:E8:B7:D9:37:1C:94:6A:B8:9F:CF:15:C9 X509v3 Authority Key Identifier: keyid:F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:0d:e7:09:98:e1:56:1d:e9:8c:56:ab:fa:70:7a:97:e4:c1: 71:ab:0d:7e:0d:20:9b:6b:25:8d:91:76:a2:3a:3a:d0:87:76: 92:8a:44:b5:dd:7b:64:1b:1a:30:44:46:e8:f6:a1:b3:f1:8d: 57:b8:8f:29:cd:a0:9c:77:06:3e:48:bf:3a:37:20:3f:51:37: df:a6:01:17:4b:09:8e:d8:ca:74:0d:66:3d:32:15:43:3f:5f: ac:a6:ad:d9:ef:f4:ad:fb:f3:e4:ea:42:21:1e:7d:6f:82:25: ee:e1:16:02:17:52:e6:37:09:2b:53:10:1f:dc:87:e8:a9:2f: 1f:8a:79:5b:ed:ac:79:63:87:0e:39:6d:b4:29:d8:c4:21:2a: d3:f9:35:46:1c:16:f2:52:7c:2b:86:14:09:5a:e6:a0:9e:8e: 0b:04:f8:62:fc:9d:8b:46:d5:ad:87:5a:df:92:26:cb:1a:fd: d3:8a:46:4a:8e:cb:26:6f:8b:89:3b:e0:8c:f5:f8:b4:21:9f: 33:86:f8:c2:0b:b4:b3:a8:6e:63:ab:b7:4c:3c:8a:0d:58:e8: ef:1d:ba:4a:5d:ca:80:8d:9c:27:5a:dc:e3:f6:5b:a0:36:3a: 10:12:57:a7:2f:1f:40:9b:c3:14:6e:9f:a1:32:d9:ca:50:e0: b6:48:fe:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzUyQjExMC8GA1UEBRMoRjBFRjhBMjEzMzNGNTEwNzcyRjMxRURBMzI0MTlFREUy NDE3QUQzOTAeFw0yNjEwMDMwOTIzNDhaFw0yNjEwMTAwOTIzNDhaMBgxFjAUBgNV BAMTDTZhYzBjOWE0LWIzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCetA1Rw9Rz430Qu+tU2wFOme4mZXStb4gujaIxY8U+GPCHyAaA3zBz8cZvzSR1 SXZMc4HtHR1pyLeq0TaAAuCxMP3zCdaaHjgxrY8jH50r6c2obxNrqBaQEGDwpdhY XE+UvXFU8MGSp0gId5hI6V1FC1fvJMprNowpom3xnEEL9yoG2LdSxqG7hSrJPmpv dDxr7HABF8gkTXgkBDWJeWrh2w3wtc2rCl+spG9WIzseQat2SgM5oH1n2VPEclJc MMmVJHpq6ByGIMEu0nPnFhOUpHsKpEtmWKMObm8GWf5tCSF4RU2LnpT4dFcHlR76 C8leA82IPwkmwn2IueGIQGHHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU84ky0u8W O+zot9k3HJRquJ/PFckwHwYDVR0jBBgwFoAU8O+KITM/UQdy8x7aMkGe3iQXrTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNTJCLzE1MzU4RDk4NzM2 QTExRjFCNTc1NENERjY0QTMwRkJDLzhPLUtJVE1fVVFkeTh4N2FNa0dlM2lRWHJU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOE8tS0lUTV9VUWR5OHg3YU1rR2UzaVFYclRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz NTJCLzE1MzU4RDk4NzM2QTExRjFCNTc1NENERjY0QTMwRkJDLzhPLUtJVE1fVVFk eTh4N2FNa0dlM2lRWHJUay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAIDecJmOFWHemMVqv6cHqX5MFxqw1+DSCbayWNkXaiOjrQh3aSikS13XtkGxow REbo9qGz8Y1XuI8pzaCcdwY+SL86NyA/UTffpgEXSwmO2Mp0DWY9MhVDP1+spq3Z 7/St+/Pk6kIhHn1vgiXu4RYCF1LmNwkrUxAf3IfoqS8finlb7ax5Y4cOOW20KdjE ISrT+TVGHBbyUnwrhhQJWuagno4LBPhi/J2LRtWth1rfkibLGv3TikZKjssmb4uJ O+CM9fi0IZ8zhvjCC7SzqG5jq7dMPIoNWOjvHbpKXcqAjZwnWtzj9lugNjoQElen Lx9Am8MUbp+hMtnKUOC2SP7T -----END CERTIFICATE-----Generated at Sun Oct 4 09:42:01 2026 by rpki-client