$ rpki-client -vvvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: 8ksqL9LyFZqPBVjNNdgLBTWm8Opril688GP3aVUYqSw= Subject key identifier: E2:9B:55:33:1F:25:31:18:0F:2C:07:CF:D1:FE:14:79:D7:AF:19:F6 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: 0188 Signing time: Mon 28 Sep 2026 14:23:59 +0000 Manifest this update: Mon 28 Sep 2026 14:23:58 +0000 Manifest next update: Mon 05 Oct 2026 14:23:58 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: 4wmzRil9WZf5lkmXnQ+2K0eVOTL/YMxyQkAdToo2W2Y=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: zGks7qHpLfdO3p16sWS5WDnYQ5Sg97quDi3f+bACE6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Sep 28 14:23:58 2026 GMT Not After : Oct 5 14:23:58 2026 GMT Subject: CN=6aba787f-6e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f5:cc:fe:73:c7:c2:4a:ae:93:fe:f6:28:9f: e6:4c:85:1d:36:39:45:99:b4:7b:4e:43:60:d7:84: bd:6a:2f:3e:15:65:1c:35:71:f3:7d:99:bc:3a:3e: 71:10:16:73:53:ff:2a:45:c8:e7:e1:0c:46:56:3d: c7:e8:5f:c2:37:9b:77:81:a0:d5:fe:9b:6d:88:c5: 83:50:20:7b:41:75:84:c5:49:47:f4:87:37:7b:eb: 5b:e7:ad:41:ff:0f:8d:99:d8:44:02:b4:95:ef:b3: 8c:c2:24:0e:6f:b1:8f:98:4b:08:25:45:d2:d8:ce: da:cf:6a:8b:ea:aa:30:04:d2:ac:7e:6a:10:95:7f: 20:a2:d5:04:50:54:68:48:e4:9e:89:87:4a:ea:3f: ed:af:84:1e:41:a2:5b:e8:6a:25:3c:89:2a:f0:d5: 19:3b:7d:a8:b8:fa:db:60:e0:af:1a:85:14:5c:4a: b8:b7:43:58:5f:58:9a:73:1b:43:5d:b5:59:a4:79: 6b:e8:6e:0e:17:c0:02:1b:e2:bf:b9:40:7f:4a:d4: 60:65:24:a4:62:50:27:91:f8:66:d9:d8:2b:57:a6: 60:bd:cc:06:28:52:cb:59:91:0a:80:9d:2f:14:9e: 3f:59:37:95:7c:d1:a3:a6:b8:20:62:cc:cc:72:53: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9B:55:33:1F:25:31:18:0F:2C:07:CF:D1:FE:14:79:D7:AF:19:F6 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3e:8b:91:fd:f0:bd:8b:ae:fa:13:89:17:bd:e9:c2:72:b2: e9:68:5c:49:b7:cb:86:3a:e0:c2:77:2e:3c:3f:c7:71:c4:95: ff:75:af:97:0c:b2:96:50:ba:71:42:35:b0:a7:e1:11:a5:d4: c8:a4:c1:10:6b:1f:73:0a:5f:58:05:53:c1:97:a5:b4:94:ff: 84:42:0a:76:1c:38:58:b6:21:da:2c:36:04:1f:12:0f:68:2a: 56:05:82:c0:94:2e:94:7f:44:21:de:8c:48:2c:74:ee:ab:bf: 3e:aa:ae:aa:1e:61:27:ba:f5:65:d6:e1:9e:ec:0c:19:b1:2a: 58:b7:78:7f:c5:bc:0e:39:8f:ce:de:ad:1b:54:1a:88:5f:a3: 92:3b:68:82:2d:e2:7e:0b:f7:74:5a:da:cb:63:52:7a:c2:da: 53:62:25:f7:e2:e5:91:b3:09:9a:5f:29:c2:1b:e7:76:de:42: f9:ae:e4:82:ea:28:63:5c:04:10:22:c5:b8:9f:f2:c0:18:cd: ef:1e:d8:6e:2f:45:e2:26:37:25:58:e4:be:5b:5f:a4:e2:b6: cd:4f:dd:5c:93:ac:2f:47:5d:b5:21:fd:65:7e:95:57:e0:5d: bc:62:6a:dd:0f:22:cf:5c:28:0c:0a:7f:39:7a:4e:24:4b:83: 3a:57:8d:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjYwOTI4MTQyMzU4WhcNMjYxMDA1MTQyMzU4WjAYMRYwFAYD VQQDEw02YWJhNzg3Zi02ZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fXM/nPHwkquk/72KJ/mTIUdNjlFmbR7TkNg14S9ai8+FWUcNXHzfZm8Oj5x EBZzU/8qRcjn4QxGVj3H6F/CN5t3gaDV/pttiMWDUCB7QXWExUlH9Ic3e+tb561B /w+NmdhEArSV77OMwiQOb7GPmEsIJUXS2M7az2qL6qowBNKsfmoQlX8gotUEUFRo SOSeiYdK6j/tr4QeQaJb6GolPIkq8NUZO32ouPrbYOCvGoUUXEq4t0NYX1iacxtD XbVZpHlr6G4OF8ACG+K/uUB/StRgZSSkYlAnkfhm2dgrV6ZgvcwGKFLLWZEKgJ0v FJ4/WTeVfNGjprggYszMclNx8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKbVTMf JTEYDywHz9H+FHnXrxn2MB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmj6Lkf3wvYuu+hOJF73pwnKy6WhcSbfLhjrgwncuPD/HccSV/3WvlwyyllC6 cUI1sKfhEaXUyKTBEGsfcwpfWAVTwZeltJT/hEIKdhw4WLYh2iw2BB8SD2gqVgWC wJQulH9EId6MSCx07qu/Pqquqh5hJ7r1ZdbhnuwMGbEqWLd4f8W8DjmPzt6tG1Qa iF+jkjtogi3ifgv3dFray2NSesLaU2Il9+LlkbMJml8pwhvndt5C+a7kguooY1wE ECLFuJ/ywBjN7x7Ybi9F4iY3JVjkvltfpOK2zU/dXJOsL0ddtSH9ZX6VV+BdvGJq 3Q8iz1woDAp/OXpOJEuDOleN7w== -----END CERTIFICATE-----Generated at Mon Sep 28 18:09:04 2026 by rpki-client