$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: qiUbAwrBSXsRo8/Nz522Aukjz/g0yicTW5FKGdoqw80= Subject key identifier: DE:B2:1E:14:97:B3:B8:40:26:64:EF:CD:A5:0C:A7:72:B1:BB:3B:B3 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 017C Signing time: Fri 25 Sep 2026 04:46:59 +0000 Manifest this update: Fri 25 Sep 2026 04:46:59 +0000 Manifest next update: Fri 02 Oct 2026 04:46:59 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: nHt17mWxLNPSYro8J3lakot/fo4O/aFlb6Uu3zP/REk=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: QsghawO4aYI/tRCC8XaX48xeNh6NMLZfkXMfCLwX9S0=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: BNw54ourUE+j9qMXjxmgsD1rJcXCowGw6fh8YI3ahFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Sep 25 04:46:59 2026 GMT Not After : Oct 2 04:46:59 2026 GMT Subject: CN=6ab5fcc3-673e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:7f:ed:89:32:e0:58:96:3b:3f:80:4e:cf: b1:8b:1e:ef:a4:52:34:d0:61:f5:4c:ff:a7:33:e9: cf:3b:82:b7:9f:2b:30:b6:f4:cf:47:d5:d4:a3:6c: 07:da:bf:38:20:c1:11:14:bf:88:21:51:85:1c:5e: 7f:36:46:6c:26:ea:fd:76:88:10:63:81:24:cd:a7: fe:cb:7e:a0:5a:4a:bb:9a:c6:13:38:44:02:55:36: e5:bc:76:bf:f4:69:12:bd:cf:ca:88:1b:74:4f:ff: b5:39:6f:2f:92:cf:75:07:22:63:06:e9:f5:6b:8b: e7:b6:91:ba:72:30:8a:06:62:0d:73:f3:4d:74:85: ad:6f:96:3c:ce:90:c3:94:06:f9:65:56:1c:6e:32: 8a:aa:2e:f6:b7:ca:f3:17:34:fc:5b:b2:cc:d3:8f: e7:08:e3:01:1d:2c:84:dd:cf:8e:5d:ab:26:a0:2d: 46:18:b6:37:31:d2:2a:fc:fd:19:49:47:4b:bd:b5: ef:71:ed:bb:9c:c1:b1:42:83:ae:26:c9:c5:f3:b6: ff:d4:03:c5:d1:c2:bc:37:26:15:b4:ab:c3:ef:9a: de:36:bc:89:c5:cf:6d:a2:50:52:8f:03:2b:60:1e: 23:5d:33:52:19:8d:14:96:05:88:5d:ad:73:fd:35: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B2:1E:14:97:B3:B8:40:26:64:EF:CD:A5:0C:A7:72:B1:BB:3B:B3 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:76:88:07:05:21:b3:af:12:98:8d:77:00:2d:68:42:46:d5: f7:ec:3e:24:1a:20:db:9b:46:08:cb:cd:31:26:8c:5a:53:2b: 55:0b:d2:e1:31:95:de:b7:45:47:85:c0:7c:ee:18:81:df:4a: cd:dd:1f:af:d3:58:be:6e:e0:b2:4c:45:7f:ae:6c:85:b0:ed: 69:42:73:9b:a9:41:1f:23:fe:ef:cb:ee:7c:9d:22:59:4a:5a: 48:71:53:09:e1:d5:ee:71:1d:57:7a:51:e6:d9:97:97:21:aa: ea:63:12:de:13:2a:49:64:14:e8:17:d3:4c:41:99:5c:f5:43: ac:e6:98:93:04:b3:38:8a:b5:70:1d:57:da:e1:ef:a5:59:87: d2:f9:3b:a5:cc:6e:6d:2c:81:41:b4:bb:d6:ca:62:c3:1d:5c: 83:62:24:3c:b1:b9:36:f5:85:06:6d:47:dc:06:b0:60:c7:2c: d9:84:24:73:97:18:27:9a:fe:81:6c:41:b8:52:53:39:b7:76: 99:24:1f:7d:81:85:4b:df:e2:95:ce:e4:4e:b3:fd:72:8b:35: ba:36:d3:0a:eb:60:02:83:2a:7f:43:54:8c:a0:6f:8e:33:9b: 9e:03:91:2d:ce:65:32:e9:50:f2:c5:83:fe:3c:75:10:40:21: de:d3:0c:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjYwOTI1MDQ0NjU5WhcNMjYxMDAyMDQ0NjU5WjAYMRYwFAYD VQQDEw02YWI1ZmNjMy02NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9R/7Yky4FiWOz+ATs+xix7vpFI00GH1TP+nM+nPO4K3nyswtvTPR9XUo2wH 2r84IMERFL+IIVGFHF5/NkZsJur9dogQY4Ekzaf+y36gWkq7msYTOEQCVTblvHa/ 9GkSvc/KiBt0T/+1OW8vks91ByJjBun1a4vntpG6cjCKBmINc/NNdIWtb5Y8zpDD lAb5ZVYcbjKKqi72t8rzFzT8W7LM04/nCOMBHSyE3c+OXasmoC1GGLY3MdIq/P0Z SUdLvbXvce27nMGxQoOuJsnF87b/1APF0cK8NyYVtKvD75reNryJxc9tolBSjwMr YB4jXTNSGY0UlgWIXa1z/TVTmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6yHhSX s7hAJmTvzaUMp3KxuzuzMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP3aIBwUhs68SmI13AC1oQkbV9+w+JBog25tGCMvNMSaMWlMrVQvS4TGV3rdF R4XAfO4Ygd9Kzd0fr9NYvm7gskxFf65shbDtaUJzm6lBHyP+78vufJ0iWUpaSHFT CeHV7nEdV3pR5tmXlyGq6mMS3hMqSWQU6BfTTEGZXPVDrOaYkwSzOIq1cB1X2uHv pVmH0vk7pcxubSyBQbS71spiwx1cg2IkPLG5NvWFBm1H3AawYMcs2YQkc5cYJ5r+ gWxBuFJTObd2mSQffYGFS9/ilc7kTrP9cos1ujbTCutgAoMqf0NUjKBvjjObngOR Lc5lMulQ8sWD/jx1EEAh3tMMYg== -----END CERTIFICATE-----Generated at Sun Sep 27 05:32:32 2026 by rpki-client