$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: Pc9Q0cafa00pSib7BtTsRv6gMU2xIzUCHtGr5D7gkiU= Subject key identifier: 0D:16:EB:0F:37:3E:0E:00:C4:A1:77:95:66:56:F5:36:6C:D3:D3:D6 Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 086E Signing time: Sun 20 Sep 2026 20:46:49 +0000 Manifest this update: Sun 20 Sep 2026 20:46:49 +0000 Manifest next update: Sun 27 Sep 2026 20:46:49 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: lzXbfQQg+FLqh1ptiGFD2c847zjbf9n0o3t9oUYpUcE=) 2: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=) 3: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=) 4: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Sep 20 20:46:49 2026 GMT Not After : Sep 27 20:46:49 2026 GMT Subject: CN=6ab04639-d3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:2b:7c:88:21:77:59:7b:69:26:49:6a:b1: b9:7f:5a:59:f8:14:22:b7:c2:59:80:e5:0a:42:8c: 3e:d2:9f:2b:f8:24:59:29:db:95:03:3c:de:20:99: 68:27:59:aa:e1:a6:b9:53:d1:c2:b0:8c:70:68:4c: 0c:52:6b:1d:88:9f:38:97:fc:6e:2e:9e:91:f6:3b: c0:a6:27:a7:4f:d1:16:8e:e9:7c:bc:7b:fb:63:4d: f0:8f:e9:51:c7:30:e9:67:73:1b:30:a1:b8:f1:c4: 61:46:8d:94:cd:66:1a:11:84:9b:12:38:f7:1e:b8: 48:65:b4:ef:a2:6e:3a:21:65:d3:64:ba:86:0d:56: 68:f9:73:1d:80:b3:38:df:0c:aa:e6:48:6a:2d:6b: 27:51:ac:f2:21:3e:12:d9:e7:32:77:42:e6:cc:8a: 33:45:ae:72:b3:a7:49:4f:98:91:ea:cd:c6:43:e4: a9:90:dd:73:8f:ff:79:e3:22:56:cf:ac:2c:3c:23: 44:85:0c:ac:5e:62:32:3d:70:79:0a:84:9d:da:8a: 22:2e:3f:c9:e1:7a:7e:4a:f5:cd:27:67:29:28:c5: c8:fa:b5:a0:59:27:d4:a9:42:be:25:25:19:51:b6: 19:6a:f7:94:12:e3:19:83:79:e0:5a:6a:8b:d4:91: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:16:EB:0F:37:3E:0E:00:C4:A1:77:95:66:56:F5:36:6C:D3:D3:D6 X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:2d:28:af:86:4a:61:d7:25:0b:0a:35:2a:a2:0a:81:fa:69: e1:ba:9a:a0:57:a7:ad:ac:69:c6:c2:84:93:5d:e8:81:aa:c2: ca:ba:9b:24:9c:9b:7e:ac:17:1b:60:ab:8f:e6:38:de:cd:30: cd:9c:51:ec:66:72:0d:09:f1:c8:3e:3f:94:da:91:03:96:64: 41:69:c2:80:78:92:c4:d2:0c:27:d1:bc:9f:49:97:ba:5c:4d: 08:fa:35:5c:d1:2a:19:ff:bd:a7:23:18:be:a3:fc:5a:9c:84: 7b:49:ef:17:0b:c5:06:e9:ce:fe:7e:18:13:91:46:2d:17:95: 13:d8:7f:5e:d5:cd:5e:2d:82:72:91:d7:25:a4:79:34:d1:f0: 75:95:7d:2b:f6:13:d0:53:82:de:68:36:37:40:6d:c0:26:51: 98:99:12:81:ad:ab:53:85:13:71:a2:27:27:bf:d9:43:2d:1a: c5:6f:e5:f0:71:e3:eb:b0:12:50:01:c1:12:85:c0:5e:6d:aa: 49:ba:7c:ae:03:9d:0c:9f:4e:84:42:e1:43:87:5c:63:d6:41: 08:76:97:b3:86:dc:e6:53:d0:3b:34:72:76:dd:85:ec:75:2a: 02:9a:e1:b3:ff:2c:ea:8e:68:a2:45:8d:b2:d6:65:c7:74:e8: 61:9c:69:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjYwOTIwMjA0NjQ5WhcNMjYwOTI3MjA0NjQ5WjAYMRYwFAYD VQQDEw02YWIwNDYzOS1kM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxe8rfIghd1l7aSZJarG5f1pZ+BQit8JZgOUKQow+0p8r+CRZKduVAzzeIJlo J1mq4aa5U9HCsIxwaEwMUmsdiJ84l/xuLp6R9jvApienT9EWjul8vHv7Y03wj+lR xzDpZ3MbMKG48cRhRo2UzWYaEYSbEjj3HrhIZbTvom46IWXTZLqGDVZo+XMdgLM4 3wyq5khqLWsnUazyIT4S2ecyd0LmzIozRa5ys6dJT5iR6s3GQ+SpkN1zj/954yJW z6wsPCNEhQysXmIyPXB5CoSd2ooiLj/J4Xp+SvXNJ2cpKMXI+rWgWSfUqUK+JSUZ UbYZaveUEuMZg3ngWmqL1JFQSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0W6w83 Pg4AxKF3lWZW9TZs09PWMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAli0or4ZKYdclCwo1KqIKgfpp4bqaoFenraxpxsKEk13ogarCyrqbJJybfqwX G2Crj+Y43s0wzZxR7GZyDQnxyD4/lNqRA5ZkQWnCgHiSxNIMJ9G8n0mXulxNCPo1 XNEqGf+9pyMYvqP8WpyEe0nvFwvFBunO/n4YE5FGLReVE9h/XtXNXi2CcpHXJaR5 NNHwdZV9K/YT0FOC3mg2N0BtwCZRmJkSga2rU4UTcaInJ7/ZQy0axW/l8HHj67AS UAHBEoXAXm2qSbp8rgOdDJ9OhELhQ4dcY9ZBCHaXs4bc5lPQOzRydt2F7HUqAprh s/8s6o5ookWNstZlx3ToYZxp/w== -----END CERTIFICATE-----Generated at Mon Sep 21 19:52:24 2026 by rpki-client