$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: L37CbNHBS+v+YMgf1w2mAlf/rrDhb8cju1w/Zn/ZaHA= Subject key identifier: 08:29:99:D0:D7:F8:8D:EE:95:BC:C0:CF:F9:49:0B:87:66:D4:2A:42 Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 0113 Signing time: Fri 25 Sep 2026 06:05:29 +0000 Manifest this update: Fri 25 Sep 2026 06:05:28 +0000 Manifest next update: Fri 02 Oct 2026 06:05:28 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: f1/OYtcsSfMm6dB6JeDtQ+j0L+vzOfxZ4fv1Q4mrUpU=) 2: 614772FE880B11F1AC7AC66A4111F970.roa (hash: o0rs+htqUFzwdtNtfMIUKKh0z/keHJddP4OX/SU46ho=) 3: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: B7TUQqjMN6J5HTrb5Q82pPSHkS4BZTA/aqHNn2n0sG4=) 4: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: WaqOAo3dFdCGInWkvGm2bGCvoG6Vqwx4Uv22RJ/L2OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Sep 25 06:05:28 2026 GMT Not After : Oct 2 06:05:28 2026 GMT Subject: CN=6ab60f29-3792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:60:dc:06:df:d8:92:41:9f:1c:aa:aa:ad: 6d:59:fe:49:be:97:15:82:89:24:40:f7:8e:cd:c1: 7f:5d:11:30:13:b4:f6:19:ca:1f:47:8d:77:35:aa: 21:b3:fa:d6:d6:65:28:48:e5:b6:8b:f8:50:ba:a1: 29:ac:03:03:1a:7f:10:14:d9:af:c8:0e:7e:2c:e8: b3:d6:54:44:88:e0:7b:7a:74:1a:0d:9e:0a:7b:1d: b5:2e:d5:06:74:41:92:3f:59:65:cb:ee:e4:5f:7b: 9c:12:89:1f:79:9d:4f:75:0d:80:90:44:8c:7f:1b: 2e:f7:0e:dd:8e:ca:84:ec:9d:92:d9:f7:84:40:c7: 15:9d:91:6b:87:89:bb:a2:9c:42:af:03:15:51:35: 68:88:9f:01:f0:87:16:f8:59:96:27:03:79:7c:7d: 5e:ed:07:d4:f1:4d:72:68:55:df:ca:b9:5b:c3:37: 7e:7d:3d:8d:1f:3e:92:30:dd:be:33:7d:55:7d:bb: ac:15:4f:ec:c7:14:d4:1a:90:62:07:c9:30:95:9b: b1:85:25:91:65:57:20:13:39:f1:d2:c1:02:be:5e: 95:39:52:2f:1c:b0:b7:86:2f:26:25:53:46:16:d5: 42:94:c6:55:e8:c2:44:1b:bb:09:f2:d9:82:1f:20: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:29:99:D0:D7:F8:8D:EE:95:BC:C0:CF:F9:49:0B:87:66:D4:2A:42 X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:6c:61:d7:26:92:ed:ad:5f:18:79:6c:1f:ff:05:9f:22:b7: 05:5f:59:35:a8:59:3f:52:e0:41:9c:66:fa:7f:a2:39:7c:d3: 62:20:7f:61:68:b8:ef:ba:9d:a6:73:c5:26:b2:ca:ea:e9:d6: 1a:95:a6:67:df:01:29:e2:a5:6d:9e:f6:dc:19:19:2e:10:6d: 10:6b:f7:ec:42:f3:9d:16:9d:59:23:fd:c8:a6:ce:c1:c4:74: 17:51:47:9c:10:9e:37:d2:f9:ec:bd:d7:9d:91:19:69:b2:42: 56:60:b5:06:26:24:5b:79:bd:b5:6d:a9:49:43:c9:0b:95:1b: 4c:9c:e6:e8:79:c1:66:e3:fc:e4:52:28:34:95:75:05:3a:fe: 5f:16:a3:ea:f0:20:1c:14:94:91:53:27:51:41:4a:97:e7:04: 1d:57:6f:71:54:75:6a:39:5e:03:d7:e6:28:ac:cf:57:78:8d: 0c:fb:e5:24:09:c5:21:64:f9:c6:a4:3d:eb:62:87:50:36:63: f1:61:6d:b6:79:63:a4:86:4f:81:c1:01:70:ef:31:f7:a1:8b: b2:4c:25:41:6d:30:6b:88:89:60:bd:b5:a6:bc:36:c7:78:79: 8b:79:fb:56:e9:88:98:24:54:f4:ce:a2:df:fa:31:22:4e:a2: 5f:4e:4f:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJBQ0IxMTAvBgNVBAUTKEYwMDkyMzNEOEQwODdGQzFEMEY2NDI1NzgwRTNBNEQ4 NDRBMzRGODEwHhcNMjYwOTI1MDYwNTI4WhcNMjYxMDAyMDYwNTI4WjAYMRYwFAYD VQQDEw02YWI2MGYyOS0zNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ttg3Abf2JJBnxyqqq1tWf5JvpcVgokkQPeOzcF/XREwE7T2GcofR413Naoh s/rW1mUoSOW2i/hQuqEprAMDGn8QFNmvyA5+LOiz1lREiOB7enQaDZ4Kex21LtUG dEGSP1lly+7kX3ucEokfeZ1PdQ2AkESMfxsu9w7djsqE7J2S2feEQMcVnZFrh4m7 opxCrwMVUTVoiJ8B8IcW+FmWJwN5fH1e7QfU8U1yaFXfyrlbwzd+fT2NHz6SMN2+ M31VfbusFU/sxxTUGpBiB8kwlZuxhSWRZVcgEznx0sECvl6VOVIvHLC3hi8mJVNG FtVClMZV6MJEG7sJ8tmCHyCCqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgpmdDX +I3ulbzAz/lJC4dm1CpCMB8GA1UdIwQYMBaAFPAJIz2NCH/B0PZCV4DjpNhEo0+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkFDQi83NEJEODU4QTFC M0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4SFE5a0pYZ09PazJFU2pU NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkFDQi83NEJEODU4QTFCM0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4 SFE5a0pYZ09PazJFU2pUNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiGxh1yaS7a1fGHlsH/8FnyK3BV9ZNahZP1LgQZxm+n+iOXzTYiB/YWi477qd pnPFJrLK6unWGpWmZ98BKeKlbZ723BkZLhBtEGv37ELznRadWSP9yKbOwcR0F1FH nBCeN9L57L3XnZEZabJCVmC1BiYkW3m9tW2pSUPJC5UbTJzm6HnBZuP85FIoNJV1 BTr+Xxaj6vAgHBSUkVMnUUFKl+cEHVdvcVR1ajleA9fmKKzPV3iNDPvlJAnFIWT5 xqQ962KHUDZj8WFttnljpIZPgcEBcO8x96GLskwlQW0wa4iJYL21prw2x3h5i3n7 VumImCRU9M6i3/oxIk6iX05Pxg== -----END CERTIFICATE-----Generated at Sun Sep 27 06:44:48 2026 by rpki-client