$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: kVwzUda/YfFUfM/d/bIhlHC89Rh1AbrOo1v+x+MQ7J4= Subject key identifier: 3F:46:F4:52:BD:C9:D2:DB:1B:42:F8:38:DA:BE:2A:9C:F5:53:B5:89 Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 0342 Signing time: Wed 23 Sep 2026 00:38:48 +0000 Manifest this update: Wed 23 Sep 2026 00:38:47 +0000 Manifest next update: Wed 30 Sep 2026 00:38:47 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: LOz4RmMpNCyqVDrFuRsho7703nuDCfbIyQdkpL+227s=) 2: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: L96aJFiA4lCQaZPd6TZiqqtKaN7NNsIsLLdXFJDRkSQ=) 3: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: WV1M6FkGnv/sxHExKccwfV1A/MgwwbQGkL6ycE4nVBg=) 4: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: X+DgJqMDIkeIYQcuTeqkYkwwUM4razrHcSa0TN+mKaw=) 5: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: ckAOC0/IOL3kNGLvnmVBPQc4V0nuJigOvgYNf+R33U8=) 6: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=) 7: C18149885E2611F1A1DDF13A3B7AAC22.roa (hash: xmI2UUP5i6tfROcqiQ2bcD37TknmyJnWrsAGSocm6p0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Sep 23 00:38:47 2026 GMT Not After : Sep 30 00:38:47 2026 GMT Subject: CN=6ab31f97-54cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:2d:72:bc:13:93:16:b5:ae:d5:91:61:c4: da:b6:1c:2d:33:4a:6e:52:65:63:98:a4:75:2f:50: a4:17:22:13:cf:3d:e7:ab:80:69:f5:17:b0:f6:ff: bf:ff:6c:5e:1a:da:bb:b5:09:8d:f1:05:d6:ea:93: 16:7a:60:6f:a1:ce:8e:50:23:d6:72:b8:7e:12:ba: 1e:54:86:2a:ee:fc:c6:56:cd:19:8d:2a:74:aa:75: b2:8a:2a:1a:0d:4b:b4:ba:13:60:9c:e0:7e:18:c0: 54:c5:c5:ed:0c:f9:e1:b2:da:49:ca:f7:24:a0:7b: cf:ca:50:b4:31:af:fa:de:64:c0:ee:55:01:95:1b: b9:9f:c8:df:ef:1c:0d:fd:4f:1f:40:e0:4b:ad:af: bd:d9:2e:fd:b1:c3:6a:53:a0:01:8f:d6:e6:54:3b: 46:e8:76:4f:ee:24:ad:29:47:db:3c:c1:95:94:01: fb:98:e7:b4:92:ac:84:18:34:d3:c6:84:80:72:d9: 51:87:83:b6:fa:27:7a:28:75:97:ba:1d:0f:04:6c: 64:94:e1:bd:5f:f7:f1:9d:3a:a5:e5:3d:18:90:ed: ac:4d:8b:d2:10:16:ad:3c:8c:dd:4e:67:a7:1f:3b: 8d:56:a6:1e:f6:d4:e5:cf:d1:6d:63:e7:9c:f0:ee: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:F4:52:BD:C9:D2:DB:1B:42:F8:38:DA:BE:2A:9C:F5:53:B5:89 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:67:89:e8:fa:96:a1:4a:17:4e:3f:d8:f3:ea:c3:a6:f4:dc: fb:fa:ea:e2:6d:2a:ee:78:df:69:82:73:96:9f:eb:1e:5f:66: ef:f9:55:b3:9b:82:9f:0e:b1:71:b9:bd:f4:89:6d:4c:1f:fe: 7a:83:42:76:26:c1:c8:b3:99:e7:88:9b:6f:07:db:33:7e:33: 60:59:9d:80:5a:db:9d:28:ea:42:b6:d1:e2:e5:07:a9:17:2c: fa:e3:98:fe:63:5f:5d:c5:76:b5:75:93:88:bf:a6:08:88:9f: f3:e0:8d:36:73:e5:85:fe:13:37:28:43:e2:1d:ab:16:df:05: cb:ac:bc:6d:a8:03:ec:2a:71:17:17:c2:14:25:1d:ea:d7:fa: 1e:68:87:c9:d5:b2:82:61:b1:df:72:ed:31:28:c9:b2:cf:12: 94:5a:9a:d2:5a:ac:8d:a4:43:61:84:34:bb:3d:30:1d:39:83: 5a:cc:41:7c:ab:17:50:fa:02:17:91:27:f2:af:48:01:30:85: 71:a9:68:dc:8e:24:7e:b9:47:72:a8:34:0c:09:16:81:bf:43: 77:e5:94:45:99:b9:46:f1:4d:12:8c:c6:34:d9:75:bc:d5:4d: eb:62:93:d8:9d:40:dc:b0:54:9a:c8:25:9e:af:e0:9b:42:7f: 55:3f:06:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjYwOTIzMDAzODQ3WhcNMjYwOTMwMDAzODQ3WjAYMRYwFAYD VQQDEw02YWIzMWY5Ny01NGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAor8tcrwTkxa1rtWRYcTathwtM0puUmVjmKR1L1CkFyITzz3nq4Bp9Rew9v+/ /2xeGtq7tQmN8QXW6pMWemBvoc6OUCPWcrh+EroeVIYq7vzGVs0ZjSp0qnWyiioa DUu0uhNgnOB+GMBUxcXtDPnhstpJyvckoHvPylC0Ma/63mTA7lUBlRu5n8jf7xwN /U8fQOBLra+92S79scNqU6ABj9bmVDtG6HZP7iStKUfbPMGVlAH7mOe0kqyEGDTT xoSActlRh4O2+id6KHWXuh0PBGxklOG9X/fxnTql5T0YkO2sTYvSEBatPIzdTmen HzuNVqYe9tTlz9FtY+ec8O5lTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9G9FK9 ydLbG0L4ONq+Kpz1U7WJMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARmeJ6PqWoUoXTj/Y8+rDpvTc+/rq4m0q7njfaYJzlp/rHl9m7/lVs5uCnw6x cbm99IltTB/+eoNCdibByLOZ54ibbwfbM34zYFmdgFrbnSjqQrbR4uUHqRcs+uOY /mNfXcV2tXWTiL+mCIif8+CNNnPlhf4TNyhD4h2rFt8Fy6y8bagD7CpxFxfCFCUd 6tf6HmiHydWygmGx33LtMSjJss8SlFqa0lqsjaRDYYQ0uz0wHTmDWsxBfKsXUPoC F5En8q9IATCFcalo3I4kfrlHcqg0DAkWgb9Dd+WURZm5RvFNEozGNNl1vNVN62KT 2J1A3LBUmsglnq/gm0J/VT8GTA== -----END CERTIFICATE-----Generated at Wed Sep 23 12:03:40 2026 by rpki-client