$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: aA7j+rFbOwIiNKNmRjpo8AEOu+sUYQHqjZ64GGQs3J4= Subject key identifier: A8:03:04:CB:EB:34:8F:05:C5:7B:15:7A:D1:78:1E:B6:41:7D:7A:33 Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: 0137 Signing time: Fri 25 Sep 2026 05:38:05 +0000 Manifest this update: Fri 25 Sep 2026 05:38:04 +0000 Manifest next update: Fri 02 Oct 2026 05:38:04 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: R0vRT5j7qob//CI2rddGojTS3e9K1MiceGUqq3RJcAk=) 2: 57356FFE9C8911F195E754C85411F970.roa (hash: iL6MIo27bsfkvnUNjGGVu5qt/lmrrJMdfM5dFIA4pwA=) 3: 06EBCBDE9C8811F1A918E08B5411F970.roa (hash: gH9uwAxPYcJXVioCTcBeU7x4aSFAnH8dyB82k/ZhDLc=) 4: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: OFV7TAeYTwMYk3v0VLj9doRdmglLiVsQ3XZ6eBJ4Cug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Sep 25 05:38:04 2026 GMT Not After : Oct 2 05:38:04 2026 GMT Subject: CN=6ab608bc-bd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d6:10:b2:1b:27:92:b4:4d:71:38:84:8f:8a: 7f:10:69:fd:34:75:60:19:27:7b:df:cd:eb:cf:72: 5b:eb:a2:72:8f:95:83:09:70:f5:58:6b:4a:f0:b4: a5:a2:83:77:f2:2b:61:26:fd:1a:2b:23:58:40:86: b2:7c:0a:c5:14:69:30:c2:b7:68:9d:05:33:cf:85: 61:3a:2b:41:e8:d6:1a:39:5c:91:60:1f:6e:cd:24: 2d:b3:ef:a3:e9:ee:c5:c1:1b:a2:29:c9:4b:3d:05: cc:94:6f:c5:f9:9d:7b:a5:4e:90:37:13:7b:26:0a: 30:f6:ca:18:8d:3b:62:be:20:5f:12:c6:d5:a5:8b: 7d:83:aa:52:23:2b:39:1c:2a:b5:07:a7:1c:7a:4b: 7a:36:cb:43:81:b7:3f:49:8e:a0:f6:dc:2a:46:63: cb:c4:bc:8f:37:35:bc:84:ef:c1:6f:6f:ab:68:cc: 98:1f:da:45:f3:e8:ba:a8:4d:c1:1c:2c:7e:c9:10: ca:b6:bd:ff:65:d4:c0:cd:f7:b2:ce:4e:f3:e8:46: 76:3b:af:2b:b6:91:aa:65:31:44:62:ff:0d:0e:c0: 27:3f:ed:92:8a:61:d9:8f:91:6f:36:66:59:28:91: b2:a7:12:66:9d:a4:b1:a8:9a:8a:4b:a9:6a:93:dd: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:03:04:CB:EB:34:8F:05:C5:7B:15:7A:D1:78:1E:B6:41:7D:7A:33 X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:42:da:2d:6f:41:9c:5f:8c:a4:54:ce:d5:cb:6c:75:b9:5d: cb:6b:cd:0b:a0:f0:3a:95:35:88:92:01:c1:14:75:aa:15:1d: 2c:ca:7f:79:0c:37:02:9c:8c:d0:8e:f9:0f:9c:b5:3f:1c:df: c5:c1:1c:e9:63:75:ac:59:da:ec:29:b7:82:33:5c:4c:50:ef: 0f:00:0e:1e:de:6d:d3:9a:2b:df:b8:99:39:80:3c:97:ff:1b: 4e:e2:24:db:f0:7f:6e:1c:a7:e8:12:5c:63:27:a4:c2:ad:42: 8f:44:fc:17:68:48:6d:57:6b:50:79:ea:c6:c1:0c:02:a7:6a: 7b:71:c5:1f:13:83:82:4f:29:a5:8a:31:88:8b:ca:db:b9:27: 10:de:1c:e3:b1:2c:ce:ea:6d:9c:e4:85:9e:b1:a4:b2:90:a5: ed:95:d2:00:a0:7f:9a:a4:0d:86:c6:05:94:93:2b:2b:6a:23: 20:85:39:fd:08:e4:26:76:93:cc:36:25:a8:ea:11:4e:e2:a2: 3a:97:3d:c3:61:8f:d0:03:20:b0:75:82:21:63:0b:44:82:10: 38:3e:3f:68:da:38:49:79:1f:16:da:76:1b:15:69:1c:0a:e4: e3:62:6d:17:3c:e6:45:68:dd:21:a0:dd:fd:50:a0:f0:9d:f6: cc:75:26:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjYwOTI1MDUzODA0WhcNMjYxMDAyMDUzODA0WjAYMRYwFAYD VQQDEw02YWI2MDhiYy1iZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79YQshsnkrRNcTiEj4p/EGn9NHVgGSd7383rz3Jb66Jyj5WDCXD1WGtK8LSl ooN38ithJv0aKyNYQIayfArFFGkwwrdonQUzz4VhOitB6NYaOVyRYB9uzSQts++j 6e7FwRuiKclLPQXMlG/F+Z17pU6QNxN7Jgow9soYjTtiviBfEsbVpYt9g6pSIys5 HCq1B6ccekt6NstDgbc/SY6g9twqRmPLxLyPNzW8hO/Bb2+raMyYH9pF8+i6qE3B HCx+yRDKtr3/ZdTAzfeyzk7z6EZ2O68rtpGqZTFEYv8NDsAnP+2SimHZj5FvNmZZ KJGypxJmnaSxqJqKS6lqk93CvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKgDBMvr NI8FxXsVetF4HrZBfXozMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFULaLW9BnF+MpFTO1ctsdbldy2vNC6DwOpU1iJIBwRR1qhUdLMp/eQw3ApyM 0I75D5y1PxzfxcEc6WN1rFna7Cm3gjNcTFDvDwAOHt5t05or37iZOYA8l/8bTuIk 2/B/bhyn6BJcYyekwq1Cj0T8F2hIbVdrUHnqxsEMAqdqe3HFHxODgk8ppYoxiIvK 27knEN4c47EszuptnOSFnrGkspCl7ZXSAKB/mqQNhsYFlJMrK2ojIIU5/QjkJnaT zDYlqOoRTuKiOpc9w2GP0AMgsHWCIWMLRIIQOD4/aNo4SXkfFtp2GxVpHArk42Jt FzzmRWjdIaDd/VCg8J32zHUm7g== -----END CERTIFICATE-----Generated at Sat Sep 26 07:48:28 2026 by rpki-client