$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft File: 8DK3RPyF-a5lo_pxREFvuj82STw.mft (raw, json) Hash identifier: +rNXMkrETGseSYk5hkdakG+KJIoAFDVzz9aflKNyykI= Subject key identifier: 71:C4:31:77:C0:04:8E:3B:DE:94:3A:45:57:A3:2E:FC:0C:BE:2A:C8 Authority key identifier: F0:32:B7:44:FC:85:F9:AE:65:A3:FA:71:44:41:6F:BA:3F:36:49:3C Certificate issuer: /CN=A9128327/serialNumber=F032B744FC85F9AE65A3FA7144416FBA3F36493C Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft Manifest number: 12 Signing time: Tue 03 Nov 2026 10:14:53 +0000 Manifest this update: Tue 03 Nov 2026 10:14:53 +0000 Manifest next update: Tue 10 Nov 2026 10:14:53 +0000 Files and hashes: 1: 8DK3RPyF-a5lo_pxREFvuj82STw.crl (hash: Kz5/pyjDkGON7KHeeA+PfmA7cNiqalP018dHC1lg1Wk=) 2: 5D3A59D4C64911F181684D305A11F970.roa (hash: JoQ2lpvbwAWxrmoonSUzNmLyW9l5eKzEo3/4QrwfA7g=) 3: F92F9180C6CE11F182E3BF3A4311F970.roa (hash: bDkf2tUhU80f+DWxFQUtN4omc21ua4W1RARNmibiLeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.crl rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 10:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128327, serialNumber=F032B744FC85F9AE65A3FA7144416FBA3F36493C Validity Not Before: Nov 3 10:14:53 2026 GMT Not After : Nov 10 10:14:53 2026 GMT Subject: CN=6ae9b41d-dbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:13:63:ce:15:2a:59:0e:c5:0d:ad:7a:ed: e0:4f:7b:a1:a0:db:e5:30:bf:c6:86:d1:40:b1:d1: 2f:0d:d0:dc:ad:8e:47:9e:40:d2:e7:04:38:0a:4a: 09:a9:44:05:6c:2d:01:be:37:3c:25:6e:5d:a2:25: 7c:bb:e3:60:15:16:08:f5:3c:41:2e:d7:56:f2:f5: 9d:ad:c7:be:17:cc:0c:ff:09:50:c4:7e:af:74:7c: 2e:b7:39:1f:0c:e7:fb:c5:fe:42:c9:d7:44:55:43: de:06:7b:6e:1c:45:25:2a:61:96:78:b5:e2:75:41: 82:df:33:e5:f9:86:65:14:6a:ae:4d:3f:22:d4:4b: 4c:fb:42:f8:c6:46:2c:72:aa:c9:72:24:d9:da:a0: d9:0f:74:66:4b:c1:70:5b:29:d4:a9:f9:68:e3:ca: 4e:d8:6d:61:e5:a1:8e:39:9c:7b:b5:21:b1:31:bd: a4:40:94:63:b7:0a:d9:85:39:f4:b6:d4:00:d1:52: e4:e3:f3:7e:dc:81:ff:b8:42:ec:38:27:97:ed:96: 7d:d2:b4:2d:c7:2d:14:16:ad:41:9f:2e:b1:2b:72: a6:21:65:b9:15:ab:28:b6:99:f1:46:53:9d:5d:cb: c2:2d:f1:ce:93:31:98:59:b9:af:97:24:02:2d:79: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C4:31:77:C0:04:8E:3B:DE:94:3A:45:57:A3:2E:FC:0C:BE:2A:C8 X509v3 Authority Key Identifier: keyid:F0:32:B7:44:FC:85:F9:AE:65:A3:FA:71:44:41:6F:BA:3F:36:49:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ab:53:57:00:87:02:16:bb:99:37:e9:fd:fd:2d:95:32:5d: 73:5c:14:c3:99:42:20:79:dd:d2:35:5c:93:47:d4:3c:6b:1c: fd:db:4d:e7:ab:ec:1b:a7:36:70:69:ea:6c:f7:b9:2b:8e:35: 16:fb:2a:b8:5c:3c:50:c5:06:05:79:04:97:25:fd:38:91:98: 6b:93:04:86:9c:44:93:5f:03:6c:66:31:81:b7:38:fb:cc:9e: 34:3b:7c:5d:e2:d6:c0:4f:bd:36:38:b7:d6:be:81:d1:60:3b: 7e:34:32:77:8b:30:07:63:1d:49:e0:aa:79:f8:c2:a7:52:07: c7:72:bd:62:44:3c:89:88:b6:8c:7f:cf:9c:db:78:79:99:82: 37:9b:33:2e:d1:18:7c:7b:4e:8a:01:85:7b:dd:21:fb:5e:96: 93:bc:be:38:58:c8:30:24:59:34:5a:13:4f:64:01:02:70:1e: a9:02:f4:27:af:0b:05:41:24:47:d4:6e:2d:ba:84:6f:c0:18: ed:df:3c:9a:46:44:7b:f2:88:28:a4:e6:5b:d9:13:8c:e4:0c: dc:44:6f:18:7c:ef:73:c4:e0:39:22:51:f4:e9:ac:ff:a8:48: 12:33:fb:24:22:8b:83:c7:4c:c3:38:c8:b6:56:b6:aa:96:70: dd:32:03:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODMyNzExMC8GA1UEBRMoRjAzMkI3NDRGQzg1RjlBRTY1QTNGQTcxNDQ0MTZGQkEz RjM2NDkzQzAeFw0yNjExMDMxMDE0NTNaFw0yNjExMTAxMDE0NTNaMBgxFjAUBgNV BAMTDTZhZTliNDFkLWRiZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYEBNjzhUqWQ7FDa167eBPe6Gg2+Uwv8aG0UCx0S8N0NytjkeeQNLnBDgKSgmp RAVsLQG+Nzwlbl2iJXy742AVFgj1PEEu11by9Z2tx74XzAz/CVDEfq90fC63OR8M 5/vF/kLJ10RVQ94Ge24cRSUqYZZ4teJ1QYLfM+X5hmUUaq5NPyLUS0z7QvjGRixy qslyJNnaoNkPdGZLwXBbKdSp+Wjjyk7YbWHloY45nHu1IbExvaRAlGO3CtmFOfS2 1ADRUuTj837cgf+4Quw4J5ftln3StC3HLRQWrUGfLrErcqYhZbkVqyi2mfFGU51d y8It8c6TMZhZua+XJAIteeAzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUccQxd8AE jjvelDpFV6Mu/Ay+KsgwHwYDVR0jBBgwFoAU8DK3RPyF+a5lo/pxREFvuj82STww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4MzI3L0EzOUExQUM4QzY0 ODExRjE5OUFCMDIxMzU5MTFGOTcwLzhESzNSUHlGLWE1bG9fcHhSRUZ2dWo4MlNU dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOERLM1JQeUYtYTVsb19weFJFRnZ1ajgyU1R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 MzI3L0EzOUExQUM4QzY0ODExRjE5OUFCMDIxMzU5MTFGOTcwLzhESzNSUHlGLWE1 bG9fcHhSRUZ2dWo4MlNUdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCpq1NXAIcCFruZN+n9/S2VMl1zXBTDmUIged3SNVyTR9Q8axz9203nq+wbpzZw aeps97krjjUW+yq4XDxQxQYFeQSXJf04kZhrkwSGnESTXwNsZjGBtzj7zJ40O3xd 4tbAT702OLfWvoHRYDt+NDJ3izAHYx1J4Kp5+MKnUgfHcr1iRDyJiLaMf8+c23h5 mYI3mzMu0Rh8e06KAYV73SH7XpaTvL44WMgwJFk0WhNPZAECcB6pAvQnrwsFQSRH 1G4tuoRvwBjt3zyaRkR78ogopOZb2ROM5AzcRG8YfO9zxOA5IlH06az/qEgSM/sk IouDx0zDOMi2VraqlnDdMgM/ -----END CERTIFICATE-----Generated at Thu Nov 5 12:51:09 2026 by rpki-client