$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft File: 8aRhKgbhDvW9ljFz7CZTi31ANzY.mft (raw, json) Hash identifier: uzE2Ve7BW592sCS1BxLv0N1b2xDJZf1maputtd28BVU= Subject key identifier: BF:2E:E9:29:15:39:D1:56:67:62:95:C8:C9:30:17:44:6D:B1:68:DA Authority key identifier: F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 Certificate issuer: /CN=A917BEA1/serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft Manifest number: 4A Signing time: Fri 09 Oct 2026 09:10:37 +0000 Manifest this update: Fri 09 Oct 2026 09:10:37 +0000 Manifest next update: Fri 16 Oct 2026 09:10:37 +0000 Files and hashes: 1: 8aRhKgbhDvW9ljFz7CZTi31ANzY.crl (hash: lUNhaHppAzbxlJNFxIsv2B+Ygr43hJaaacrJg4iwqCI=) 2: 243C67FE55CD11F19CECB2B5A8833773.roa (hash: Gh2g+A+hy3CyM7ywchuFzI/qMxiOQm+zUJkUhcqgKUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA1, serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Validity Not Before: Oct 9 09:10:37 2026 GMT Not After : Oct 16 09:10:37 2026 GMT Subject: CN=6ac8af8d-5354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:06:ba:84:da:7a:0c:0f:b0:9a:bb:42:25: 22:f9:c1:a2:5b:01:26:28:d9:52:e7:9b:43:17:8a: 82:b8:fb:9a:ad:40:9d:83:16:19:0d:78:9b:ef:5a: 82:a3:5d:bc:37:76:44:b4:9b:dc:ae:25:c0:c5:4d: bd:4f:8d:8f:2d:d2:8e:bd:07:46:c3:ce:91:55:ad: 19:b1:df:ad:4c:04:3e:68:b5:83:38:18:f0:69:9d: 01:e5:d4:36:46:ea:f4:0a:62:29:d8:07:73:fe:d8: 2f:16:69:6f:55:04:03:a8:8f:38:d9:00:93:32:c5: c2:4f:73:3b:3d:55:bf:1e:b2:7e:52:50:47:bc:89: 0a:bd:6f:e3:22:35:62:a2:a7:4f:20:ba:e8:42:1b: 19:d9:71:95:ff:0b:f1:9c:8d:9b:9f:be:79:d5:fe: 51:c1:01:b4:18:5b:59:73:a4:0f:b6:00:e8:2c:cd: 7b:bc:79:e5:c4:e7:e1:27:ed:3b:9f:0b:43:f7:1a: e3:d3:97:96:bc:cb:62:cc:e8:c3:23:17:eb:96:4e: 41:a6:85:2b:ca:70:a5:82:94:67:16:50:c0:d5:bf: 01:39:c4:0a:8d:5b:1c:d6:01:55:d6:98:e5:e3:41: 92:dc:d0:ec:76:2e:7e:8c:14:f8:08:26:c9:d4:d3: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2E:E9:29:15:39:D1:56:67:62:95:C8:C9:30:17:44:6D:B1:68:DA X509v3 Authority Key Identifier: keyid:F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:38:cc:d0:17:80:83:9a:d4:6f:d1:32:fb:c5:06:39:2b:13: 6b:e0:18:0d:c1:f1:42:be:03:ed:a3:c6:79:f2:fa:0f:cf:10: 74:9b:03:8c:c7:9f:a5:37:2d:31:30:dc:63:17:29:4d:54:7a: 6f:64:73:2c:06:b4:cb:8c:b6:1f:ab:31:96:79:4f:4f:17:e7: 53:ca:f3:ab:52:62:2c:3b:a2:77:05:e7:15:a9:03:f1:93:d2: 4a:94:eb:50:1b:76:e3:71:92:b4:2b:fc:b7:f7:05:1f:d1:b6: 75:c7:22:12:51:e1:7f:bf:4b:4d:e3:a5:60:19:d9:6f:62:96: bc:ec:09:a1:23:04:1b:d1:61:97:66:9f:60:d1:fc:bb:c9:ed: 41:7c:44:ae:bc:bc:da:49:0c:f8:56:de:ea:9e:cd:c3:ce:eb: 7c:ef:41:c1:ad:81:37:03:03:7a:d6:77:f2:b2:bf:f1:49:28: 42:9a:05:33:b7:ed:52:06:59:27:d6:b3:08:f6:c2:3f:81:3f: 16:8d:cd:c7:42:86:a9:0a:54:5f:ee:84:90:85:f8:b2:eb:23: 93:c0:7a:a8:7e:25:73:41:ea:71:fe:34:85:e1:73:6c:1c:90: dd:20:e2:c5:a9:01:d7:3f:b9:8f:14:ec:55:72:07:9a:ec:08: d6:65:e0:f1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVBMTExMC8GA1UEBRMoRjFBNDYxMkEwNkUxMEVGNUJEOTYzMTczRUMyNjUzOEI3 RDQwMzczNjAeFw0yNjEwMDkwOTEwMzdaFw0yNjEwMTYwOTEwMzdaMBgxFjAUBgNV BAMTDTZhYzhhZjhkLTUzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYUga6hNp6DA+wmrtCJSL5waJbASYo2VLnm0MXioK4+5qtQJ2DFhkNeJvvWoKj Xbw3dkS0m9yuJcDFTb1PjY8t0o69B0bDzpFVrRmx361MBD5otYM4GPBpnQHl1DZG 6vQKYinYB3P+2C8WaW9VBAOojzjZAJMyxcJPczs9Vb8esn5SUEe8iQq9b+MiNWKi p08guuhCGxnZcZX/C/GcjZufvnnV/lHBAbQYW1lzpA+2AOgszXu8eeXE5+En7Tuf C0P3GuPTl5a8y2LM6MMjF+uWTkGmhSvKcKWClGcWUMDVvwE5xAqNWxzWAVXWmOXj QZLc0Ox2Ln6MFPgIJsnU07VXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvy7pKRU5 0VZnYpXIyTAXRG2xaNowHwYDVR0jBBgwFoAU8aRhKgbhDvW9ljFz7CZTi31ANzYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRUExL0U3MTM5OEM2NTRF NTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZXOWxqRno3Q1pUaTMxQU56 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGFSaEtnYmhEdlc5bGpGejdDWlRpMzFBTnpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RUExL0U3MTM5OEM2NTRFNTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZX OWxqRno3Q1pUaTMxQU56WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgOMzQF4CDmtRv0TL7xQY5KxNr4BgNwfFCvgPto8Z58voPzxB0mwOMx5+lNy0x MNxjFylNVHpvZHMsBrTLjLYfqzGWeU9PF+dTyvOrUmIsO6J3BecVqQPxk9JKlOtQ G3bjcZK0K/y39wUf0bZ1xyISUeF/v0tN46VgGdlvYpa87AmhIwQb0WGXZp9g0fy7 ye1BfESuvLzaSQz4Vt7qns3Dzut870HBrYE3AwN61nfysr/xSShCmgUzt+1SBlkn 1rMI9sI/gT8Wjc3HQoapClRf7oSQhfiy6yOTwHqofiVzQepx/jSF4XNsHJDdIOLF qQHXP7mPFOxVcgea7AjWZeDx -----END CERTIFICATE-----Generated at Sun Oct 11 08:50:14 2026 by rpki-client