$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft File: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft (raw, json) Hash identifier: gQBvSTlInpV/Rgxc+UNNxlDcVs7k1pnpTojs3REFt38= Subject key identifier: 1F:B9:89:2B:A4:13:B3:6D:DD:EE:43:18:48:90:EF:91:63:DB:78:E2 Authority key identifier: 63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97 Certificate issuer: /CN=A916F57A/serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft Manifest number: 16 Signing time: Mon 21 Sep 2026 08:59:27 +0000 Manifest this update: Mon 21 Sep 2026 08:59:27 +0000 Manifest next update: Mon 28 Sep 2026 08:59:27 +0000 Files and hashes: 1: Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl (hash: cdWdrNQXK3hdS/cakAgWwJ1DrbsnZJ7SrHGjLL+VQmI=) 2: B2A83A1296C911F1ABBBAC335411F970.roa (hash: m9UsV7UjjMZ2WOx/GR0cXTiQls2vgjpyqNyxc4Qnugk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F57A, serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897 Validity Not Before: Sep 21 08:59:27 2026 GMT Not After : Sep 28 08:59:27 2026 GMT Subject: CN=6ab0f1ef-2ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bd:7e:1c:b0:57:e0:c7:4b:27:45:6b:23:be: a3:2f:f2:71:07:67:c4:81:ed:9b:9f:87:96:b5:74: 2c:73:e6:dc:30:0c:19:40:28:cc:da:cc:a1:33:b2: 08:06:3b:42:50:00:df:3c:5c:e4:54:11:d1:c5:b8: a2:b2:fb:22:1b:31:2b:49:34:b5:16:5c:f0:45:7c: 3e:5d:fa:a7:b1:5d:1a:b2:26:3f:4d:97:0c:15:4e: 38:f3:ae:5d:ce:aa:91:60:ec:7f:07:bd:5e:ea:64: 8c:37:b0:18:8a:c9:4e:27:ec:51:8a:3e:d2:cd:c8: 65:18:f3:93:eb:28:44:71:15:42:6c:2d:42:cf:52: 01:d5:83:90:e2:d6:10:ca:2c:53:b7:4f:34:66:1c: 82:c1:02:f9:2c:ca:1b:a1:64:e0:a5:fb:aa:17:0e: f6:c3:ec:01:96:c1:d7:9f:75:87:be:8f:5c:5b:86: f2:0e:b4:1a:54:7f:e4:7e:58:5b:82:9c:2f:ff:0e: 18:14:10:79:7b:12:04:b2:b7:fc:32:2c:e1:77:dc: 1b:8d:8b:9d:18:d4:4e:eb:00:ac:90:b4:82:e3:3f: 11:fc:4b:95:c5:23:ec:83:a9:70:09:ad:42:70:e5: e5:8c:cb:80:bd:ec:7a:7c:63:fd:b4:9c:d7:a0:25: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:89:2B:A4:13:B3:6D:DD:EE:43:18:48:90:EF:91:63:DB:78:E2 X509v3 Authority Key Identifier: keyid:63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:30:ba:52:90:ac:19:f1:26:14:5d:cc:c9:b8:66:2b:ef:11: 8b:b6:ba:20:20:6f:4d:c0:88:e1:df:4c:76:68:02:7a:89:63: 0d:3f:fa:79:7f:fa:40:28:ab:0d:cc:89:37:0a:7e:76:89:ee: c4:93:85:03:38:f0:57:8b:55:30:32:69:27:2f:d0:b5:63:84: 68:45:c7:6b:59:93:38:5c:8c:e2:9a:cc:49:0f:cb:8b:86:a7: 53:a7:59:ab:f1:28:37:18:47:90:e6:85:a1:03:56:0a:bc:6f: b6:15:b0:13:60:10:21:cb:a4:61:3e:5a:0c:31:d3:7f:d1:7d: b1:94:e2:95:28:5f:b5:1e:7e:67:16:90:fe:9f:cd:41:58:85: f9:0d:9b:82:2d:5c:c4:09:dc:61:72:f2:7f:40:bb:7e:d6:08: 67:10:5e:32:c9:73:54:77:9f:f8:b7:37:27:55:31:92:44:8c: 2f:da:42:1d:6b:78:35:a1:0c:80:8a:78:6f:53:5d:a0:14:dd: 91:65:29:25:4d:8c:df:59:1a:95:36:af:0b:31:85:e8:86:ca: 59:28:7f:29:88:ab:18:86:60:6d:67:20:f5:e2:5a:25:b8:e0: b8:21:f5:22:bb:f7:68:96:3e:fd:21:16:e6:0d:e2:96:e8:bf: 4a:0c:14:79 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjU3QTExMC8GA1UEBRMoNjNDNzFGRUIxMzkxRjYzMzQwQzhDRjBGRDExMUNGRUYy MkJBQzg5NzAeFw0yNjA5MjEwODU5MjdaFw0yNjA5MjgwODU5MjdaMBgxFjAUBgNV BAMTDTZhYjBmMWVmLTJlZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNvX4csFfgx0snRWsjvqMv8nEHZ8SB7Zufh5a1dCxz5twwDBlAKMzazKEzsggG O0JQAN88XORUEdHFuKKy+yIbMStJNLUWXPBFfD5d+qexXRqyJj9NlwwVTjjzrl3O qpFg7H8HvV7qZIw3sBiKyU4n7FGKPtLNyGUY85PrKERxFUJsLULPUgHVg5Di1hDK LFO3TzRmHILBAvksyhuhZOCl+6oXDvbD7AGWwdefdYe+j1xbhvIOtBpUf+R+WFuC nC//DhgUEHl7EgSyt/wyLOF33BuNi50Y1E7rAKyQtILjPxH8S5XFI+yDqXAJrUJw 5eWMy4C97Hp8Y/20nNegJVRnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUH7mJK6QT s23d7kMYSJDvkWPbeOIwHwYDVR0jBBgwFoAUY8cf6xOR9jNAyM8P0RHP7yK6yJcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGNTdBLzk5QUYyMTE2OTZD ODExRjFBNkMyQUMxMzU0MTFGOTcwL1k4Y2Y2eE9SOWpOQXlNOFAwUkhQN3lLNnlK Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWThjZjZ4T1I5ak5BeU04UDBSSFA3eUs2eUpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG NTdBLzk5QUYyMTE2OTZDODExRjFBNkMyQUMxMzU0MTFGOTcwL1k4Y2Y2eE9SOWpO QXlNOFAwUkhQN3lLNnlKYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVMLpSkKwZ8SYUXczJuGYr7xGLtrogIG9NwIjh30x2aAJ6iWMNP/p5f/pAKKsN zIk3Cn52ie7Ek4UDOPBXi1UwMmknL9C1Y4RoRcdrWZM4XIzimsxJD8uLhqdTp1mr 8Sg3GEeQ5oWhA1YKvG+2FbATYBAhy6RhPloMMdN/0X2xlOKVKF+1Hn5nFpD+n81B WIX5DZuCLVzECdxhcvJ/QLt+1ghnEF4yyXNUd5/4tzcnVTGSRIwv2kIda3g1oQyA inhvU12gFN2RZSklTYzfWRqVNq8LMYXohspZKH8piKsYhmBtZyD14loluOC4IfUi u/dolj79IRbmDeKW6L9KDBR5 -----END CERTIFICATE-----Generated at Mon Sep 21 19:14:10 2026 by rpki-client