$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: O2bhhzIEs5COt/GbRyXysPPWFOZ+3r3NAsrb1uHCSIU= Subject key identifier: E3:49:97:54:1F:59:EC:F5:D7:E8:9E:1B:CB:38:07:68:48:BD:06:40 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 0A34 Signing time: Fri 18 Sep 2026 19:43:14 +0000 Manifest this update: Fri 18 Sep 2026 19:43:13 +0000 Manifest next update: Fri 25 Sep 2026 19:43:13 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: WhZSE9gqDvD7ZQZ19NFhRiCUzgng16q40N1ZJ/7mH1Y=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: eFWl8WdXIj+kNofP4fkC+jZU3YrcYaXWPE7ujHlFJLY=) 3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: H6zmNj7R5OIy7VYT3Pr6iuA/7Vm6RdyVIJ8LHoqjAPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Sep 18 19:43:13 2026 GMT Not After : Sep 25 19:43:13 2026 GMT Subject: CN=6aad9451-2c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:91:b6:0b:da:e8:43:86:9e:ba:3d:52:d4:7a: 78:be:c6:9f:3a:bb:6d:19:05:41:cb:c5:0f:6b:d0: 89:71:e5:ad:b5:22:c4:1c:ee:fa:9b:8e:34:5e:d4: 46:3b:3b:12:2d:1b:4b:91:4c:5e:07:6a:69:af:c4: 38:6f:3d:6b:75:f3:0f:d1:d5:03:0b:48:49:dc:19: 2b:4b:01:f8:ee:69:80:4a:dc:2b:19:1c:e6:3a:9e: 29:73:98:f7:29:1b:ed:21:ef:37:18:56:e1:ec:9d: 17:0b:95:69:11:52:a2:46:dc:25:b6:70:96:4d:78: 1b:8d:b0:18:fa:88:ea:dd:c9:56:e6:21:2c:76:6e: 21:17:91:b5:fb:20:5a:94:38:ee:25:0b:f3:fa:15: a3:7e:21:fd:b4:76:53:9c:16:73:0e:e1:67:a2:74: 87:8f:ed:eb:8f:eb:e4:89:f8:b2:49:81:94:ce:9c: 72:8f:b2:d7:a0:f6:1f:2e:80:33:78:19:94:9a:68: 6a:69:94:f6:89:50:66:57:c7:62:48:b7:a3:97:81: 76:03:a5:5e:9a:ca:03:c5:05:2e:9c:1f:c7:cc:61: d2:93:f1:77:e7:e8:93:55:2a:61:c7:85:9b:33:e6: 46:f9:ec:c2:07:d5:7a:37:b7:aa:93:d1:28:de:80: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:49:97:54:1F:59:EC:F5:D7:E8:9E:1B:CB:38:07:68:48:BD:06:40 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e2:82:50:50:53:5a:a6:71:9d:34:cc:c8:ae:ac:71:a9:19: c7:4a:91:06:ad:a1:f9:65:f7:49:8d:b0:4b:62:73:5d:36:05: 44:d0:67:a2:b8:4f:4f:73:3a:1e:b7:46:0f:9a:58:f1:bc:af: bc:b2:f8:a3:e2:8c:a9:ed:9b:cc:df:c4:3c:54:67:36:eb:1c: e2:a7:20:af:c6:c9:0a:b2:1b:c7:e5:7b:08:74:92:3f:d8:f7: 45:96:44:a0:89:85:b3:81:19:b7:42:07:0a:b3:2d:df:44:9f: 7e:76:be:95:31:24:66:8b:2e:9c:d2:6f:54:f8:ff:23:1d:4d: d5:52:46:65:75:9b:84:53:0b:cc:85:21:7d:09:6d:c2:3f:11: 1d:f6:a4:13:d8:94:6a:dc:30:93:a2:dc:78:ae:0d:ce:20:8a: 26:35:09:2b:8e:5d:c0:f6:1a:9c:2e:f4:bc:8b:e8:85:67:55: 14:f9:6f:6a:3f:33:78:a1:3d:38:5d:e1:43:b8:56:aa:89:b4: 4c:d6:43:75:54:cc:0e:aa:29:2d:ee:a9:24:6e:46:e6:f4:12: 9c:50:8e:d0:72:d9:50:fe:b0:ed:2a:a3:5f:33:d2:04:95:9d: 74:a5:03:ae:f3:67:52:77:cd:c3:e7:97:9c:60:38:2b:14:88: 95:bb:85:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjYwOTE4MTk0MzEzWhcNMjYwOTI1MTk0MzEzWjAYMRYwFAYD VQQDEw02YWFkOTQ1MS0yYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiZG2C9roQ4aeuj1S1Hp4vsafOrttGQVBy8UPa9CJceWttSLEHO76m440XtRG OzsSLRtLkUxeB2ppr8Q4bz1rdfMP0dUDC0hJ3BkrSwH47mmAStwrGRzmOp4pc5j3 KRvtIe83GFbh7J0XC5VpEVKiRtwltnCWTXgbjbAY+ojq3clW5iEsdm4hF5G1+yBa lDjuJQvz+hWjfiH9tHZTnBZzDuFnonSHj+3rj+vkifiySYGUzpxyj7LXoPYfLoAz eBmUmmhqaZT2iVBmV8diSLejl4F2A6VemsoDxQUunB/HzGHSk/F35+iTVSphx4Wb M+ZG+ezCB9V6N7eqk9Eo3oB18wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONJl1Qf Wez11+ieG8s4B2hIvQZAMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO+KCUFBTWqZxnTTMyK6scakZx0qRBq2h+WX3SY2wS2JzXTYFRNBnorhPT3M6 HrdGD5pY8byvvLL4o+KMqe2bzN/EPFRnNusc4qcgr8bJCrIbx+V7CHSSP9j3RZZE oImFs4EZt0IHCrMt30Sffna+lTEkZosunNJvVPj/Ix1N1VJGZXWbhFMLzIUhfQlt wj8RHfakE9iUatwwk6LceK4NziCKJjUJK45dwPYanC70vIvohWdVFPlvaj8zeKE9 OF3hQ7hWqom0TNZDdVTMDqopLe6pJG5G5vQSnFCO0HLZUP6w7SqjXzPSBJWddKUD rvNnUnfNw+eXnGA4KxSIlbuFHQ== -----END CERTIFICATE-----Generated at Sun Sep 20 18:19:33 2026 by rpki-client