$ rpki-client -vvvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: L8A8d6bjhQSZGS1nhbqzLSV5TIP/unSX+pOzBuXIqto= Subject key identifier: 70:A9:28:BD:0E:7F:17:43:57:F9:30:EE:0F:27:4F:1D:E5:ED:8D:5B Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 0A7F Signing time: Fri 18 Sep 2026 19:33:49 +0000 Manifest this update: Fri 18 Sep 2026 19:33:49 +0000 Manifest next update: Fri 25 Sep 2026 19:33:49 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: 8l7ws6O/rODwjIo8Ja9/Ok49OWfSnMH0ErVHD5dOLbk=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: doxkO4sksDjwokeIGgJqyU8qFI1WVtbLLGDEkNbQQGU=) 3: lpb9V5SAKODYnzxLQ07Lyxg0dQo.asa (hash: wOn1WJkC/oS8P9duSZ71Wb8R5+48OktZzNfTZcyWsmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Sep 18 19:33:49 2026 GMT Not After : Sep 25 19:33:49 2026 GMT Subject: CN=6aad921d-38fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:af:ee:54:fa:07:44:cd:b3:aa:ef:ff:20: 9a:ea:be:a3:b2:8d:db:56:82:cd:32:41:64:47:06: 6b:12:ed:c5:18:fa:32:9b:ab:ec:b3:e5:46:6d:a2: 89:69:12:3f:8c:ca:3b:2c:c2:24:e0:18:6d:4a:3b: 2f:a1:f3:fa:b4:e7:45:5a:ac:e1:67:b3:77:ff:0b: 4d:09:b5:e1:8c:67:30:81:58:da:dd:ab:88:bf:70: c6:a8:58:a6:ae:e0:67:0a:b8:60:76:e6:be:5e:83: 07:3d:80:cf:ff:34:02:46:49:84:8d:9e:68:e9:81: 6a:b3:5d:a0:72:0e:80:5d:3f:cd:20:0c:43:6b:7e: 1d:f8:ce:26:47:8d:a1:ba:f6:5c:d0:a5:cf:6b:27: ff:3b:85:9b:9f:fd:bd:5b:a5:95:33:ed:06:1c:33: 03:af:3c:61:6e:75:12:7d:22:39:cd:3c:53:6d:4b: c1:ca:f9:4e:0b:37:99:16:a5:02:65:89:72:91:d6: f2:7f:f0:2c:f2:ad:f5:46:fe:22:cb:58:da:67:c5: 5f:79:2b:20:e3:36:6e:34:4e:eb:82:d2:84:0b:3c: 34:fd:74:b2:a1:6b:f8:52:c1:f4:d4:45:5d:4a:df: ae:c3:e9:9b:9c:98:67:aa:47:71:d0:38:7a:db:2e: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A9:28:BD:0E:7F:17:43:57:F9:30:EE:0F:27:4F:1D:E5:ED:8D:5B X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:57:43:fb:93:ac:a0:e4:02:d9:b2:f1:ff:c2:22:32:8f:f8: d2:cd:4e:d6:53:7d:df:6f:f4:85:48:6c:a4:9c:88:73:15:0d: 28:b4:d0:17:e3:d0:0a:60:80:0b:ec:32:7c:76:bd:2a:b4:c8: 30:18:59:d3:0c:6e:5e:c6:d1:e1:4e:6e:73:e4:2c:03:82:d7: 10:b4:0b:9f:23:9f:0e:f3:48:5c:4b:50:72:1a:25:11:fa:34: 78:6d:37:89:39:4a:d2:29:99:16:7f:88:c1:d0:91:50:03:97: 94:88:e5:37:cd:93:6f:f8:40:95:cd:1d:d0:07:de:fd:8d:ff: 08:3b:bb:e5:d4:14:ee:c8:5b:2c:09:9d:73:84:bb:47:0b:43: d7:66:da:89:6b:2a:21:a8:fe:e1:b5:b8:73:63:4c:64:25:25: 1f:b5:6e:11:18:52:98:2e:24:32:d3:e9:aa:b1:23:f9:c1:c1: fc:83:f9:9e:f1:5d:97:bc:c4:df:73:9b:38:ba:7d:44:53:42: 12:8f:e2:05:dd:de:61:35:a3:22:bc:84:1f:0f:e1:0f:34:2b: 73:33:18:9e:db:d0:9a:91:7b:3f:92:d5:3c:14:c8:8a:69:1d: 57:e7:10:37:f9:04:b1:87:cd:d6:ec:f7:15:a4:57:59:2f:ab: 3c:ea:c4:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjYwOTE4MTkzMzQ5WhcNMjYwOTI1MTkzMzQ5WjAYMRYwFAYD VQQDEw02YWFkOTIxZC0zOGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3yv7lT6B0TNs6rv/yCa6r6jso3bVoLNMkFkRwZrEu3FGPoym6vss+VGbaKJ aRI/jMo7LMIk4BhtSjsvofP6tOdFWqzhZ7N3/wtNCbXhjGcwgVja3auIv3DGqFim ruBnCrhgdua+XoMHPYDP/zQCRkmEjZ5o6YFqs12gcg6AXT/NIAxDa34d+M4mR42h uvZc0KXPayf/O4Wbn/29W6WVM+0GHDMDrzxhbnUSfSI5zTxTbUvByvlOCzeZFqUC ZYlykdbyf/As8q31Rv4iy1jaZ8VfeSsg4zZuNE7rgtKECzw0/XSyoWv4UsH01EVd St+uw+mbnJhnqkdx0Dh62y6NZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCpKL0O fxdDV/kw7g8nTx3l7Y1bMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUVdD+5OsoOQC2bLx/8IiMo/40s1O1lN932/0hUhspJyIcxUNKLTQF+PQCmCA C+wyfHa9KrTIMBhZ0wxuXsbR4U5uc+QsA4LXELQLnyOfDvNIXEtQcholEfo0eG03 iTlK0imZFn+IwdCRUAOXlIjlN82Tb/hAlc0d0Afe/Y3/CDu75dQU7shbLAmdc4S7 RwtD12baiWsqIaj+4bW4c2NMZCUlH7VuERhSmC4kMtPpqrEj+cHB/IP5nvFdl7zE 33ObOLp9RFNCEo/iBd3eYTWjIryEHw/hDzQrczMYntvQmpF7P5LVPBTIimkdV+cQ N/kEsYfN1uz3FaRXWS+rPOrEMw== -----END CERTIFICATE-----Generated at Sun Sep 20 14:06:45 2026 by rpki-client