$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json) Hash identifier: 4wz0uiYqm16IwRPpkhhPd+xvLQWr64mceLAwKLEt7DE= Subject key identifier: 7A:F4:64:E8:D7:66:FE:9A:63:25:A5:97:4B:49:BD:C2:2F:25:10:DA Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft Manifest number: 048E Signing time: Sun 20 Sep 2026 23:48:02 +0000 Manifest this update: Sun 20 Sep 2026 23:48:02 +0000 Manifest next update: Sun 27 Sep 2026 23:48:02 +0000 Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: kUjBG2LAw44UV/n2ey+6hyoI4olPc0V2qyP+GSd1gNE=) 2: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: wPvXbMRDdeZ16YQAsG5yxXC1oVke0Is094fp9Wnssro=) 3: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: X5PDT1MbgloBsVHEEErT26cO3WdhXztNkcjjEpdBJNM=) 4: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: 8IoFb/TuJGa8f+hLPDSGTarCT7mkVKZq9W7cRCzmXZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Sep 20 23:48:02 2026 GMT Not After : Sep 27 23:48:02 2026 GMT Subject: CN=6ab070b2-ab74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ae:bd:cf:f9:82:30:36:cd:7c:2a:6b:8a:73: a8:95:a2:f6:6f:85:72:07:14:16:cc:bb:b2:f3:74: aa:6f:64:4e:f4:69:90:75:b0:20:f7:e4:3f:6c:22: ee:47:96:16:1d:8c:8c:1c:b6:eb:03:37:6b:f4:24: bd:c7:92:0a:b1:f3:21:df:f6:7c:bf:a9:bc:3a:b3: 34:14:a7:69:50:a7:7a:1d:6b:05:18:ea:45:51:90: dd:d1:2e:e9:5e:2f:94:c5:c3:7b:4a:0a:ad:98:3e: 55:d4:47:db:ba:ee:3e:61:69:cb:26:3d:09:69:34: 45:53:58:7b:bc:de:2e:66:79:3c:04:6f:8c:e4:be: d1:3b:8d:6f:f5:25:83:db:71:3b:5a:5d:4e:44:97: f0:8a:3f:66:db:06:2b:e8:15:ad:60:67:58:49:ad: a1:72:4f:b1:69:b2:cb:f0:a2:d7:d9:b1:62:0e:30: 49:32:bb:ed:a7:e0:65:8f:3b:0f:75:a9:91:d6:0d: f8:b4:3e:bc:66:95:9e:1a:84:d9:c5:3c:25:ed:d1: 18:3c:88:d1:35:19:19:83:41:1f:5c:dc:71:e8:a0: 1a:f3:c0:60:42:83:e1:3f:60:a4:9e:54:6b:04:77: 45:71:ef:b8:1d:6e:98:98:c8:a4:3f:7b:23:da:e5: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F4:64:E8:D7:66:FE:9A:63:25:A5:97:4B:49:BD:C2:2F:25:10:DA X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:6f:94:a8:59:10:73:e8:01:1c:74:5d:ab:98:27:4b:c5:12: a6:d6:cb:b2:14:61:b1:68:62:5d:8a:84:d4:37:1d:cc:bc:41: fd:46:55:13:6b:90:d1:9d:3a:dc:fe:75:5d:5a:f7:38:63:19: 7b:fd:8d:8c:1d:f2:f3:6e:14:8e:91:4b:2e:12:4c:1a:85:56: 6f:30:ef:1e:a4:21:11:d8:7e:80:0e:11:f3:e4:92:62:70:3f: e7:08:f1:10:2d:57:5a:56:b4:a4:3e:6d:9d:59:79:18:0b:8d: 5c:d4:f5:19:9a:0d:2f:4d:9c:0f:f3:fc:9a:84:40:87:91:09: 20:4c:0a:51:0e:29:cc:02:20:44:5f:39:6f:da:70:e1:42:35: 8b:f2:f2:07:8f:e3:37:af:f4:d4:23:44:e9:e7:0a:3f:3f:01: e3:2f:df:47:c8:b9:8c:96:fb:c1:e1:5f:eb:a7:74:d6:29:4f: b2:a8:6a:68:68:be:6c:68:3e:50:04:c0:5c:cb:dc:78:3e:27: 01:92:54:ca:1d:2b:b5:47:ea:6c:3e:89:7c:92:70:55:bc:11: 23:f3:2b:22:6b:d0:96:85:ed:5b:20:09:73:92:73:da:d4:d0: db:7c:e6:c4:ae:8d:5f:92:fb:a5:50:8e:2e:a0:0d:49:fa:12: 5f:dd:46:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjYwOTIwMjM0ODAyWhcNMjYwOTI3MjM0ODAyWjAYMRYwFAYD VQQDEw02YWIwNzBiMi1hYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmq69z/mCMDbNfCprinOolaL2b4VyBxQWzLuy83Sqb2RO9GmQdbAg9+Q/bCLu R5YWHYyMHLbrAzdr9CS9x5IKsfMh3/Z8v6m8OrM0FKdpUKd6HWsFGOpFUZDd0S7p Xi+UxcN7SgqtmD5V1Efbuu4+YWnLJj0JaTRFU1h7vN4uZnk8BG+M5L7RO41v9SWD 23E7Wl1ORJfwij9m2wYr6BWtYGdYSa2hck+xabLL8KLX2bFiDjBJMrvtp+BljzsP damR1g34tD68ZpWeGoTZxTwl7dEYPIjRNRkZg0EfXNxx6KAa88BgQoPhP2CknlRr BHdFce+4HW6YmMikP3sj2uVMWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHr0ZOjX Zv6aYyWll0tJvcIvJRDaMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFp Ymp4WVNuQ3JQbEo3TURnWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIW+UqFkQc+gBHHRdq5gnS8USptbLshRhsWhiXYqE1DcdzLxB/UZVE2uQ0Z06 3P51XVr3OGMZe/2NjB3y824UjpFLLhJMGoVWbzDvHqQhEdh+gA4R8+SSYnA/5wjx EC1XWla0pD5tnVl5GAuNXNT1GZoNL02cD/P8moRAh5EJIEwKUQ4pzAIgRF85b9pw 4UI1i/LyB4/jN6/01CNE6ecKPz8B4y/fR8i5jJb7weFf66d01ilPsqhqaGi+bGg+ UATAXMvceD4nAZJUyh0rtUfqbD6JfJJwVbwRI/MrImvQloXtWyAJc5Jz2tTQ23zm xK6NX5L7pVCOLqANSfoSX91GdA== -----END CERTIFICATE-----Generated at Tue Sep 22 12:56:03 2026 by rpki-client