$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft File: 8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json) Hash identifier: 34bzv84D1qBF1rzve/NGo6HuyW2AQt+BdyyhvZbL1Tw= Subject key identifier: 00:3F:F2:81:9D:C9:70:70:44:04:3D:AB:23:44:6F:F2:61:F4:18:8F Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 Certificate issuer: /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft Manifest number: A9 Signing time: Sat 19 Sep 2026 07:15:53 +0000 Manifest this update: Sat 19 Sep 2026 07:15:53 +0000 Manifest next update: Sat 26 Sep 2026 07:15:53 +0000 Files and hashes: 1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: W9fMN1uN58XDD1NUb4DjH+e7+vPnuIcOJkFmk4cAVzA=) 2: avcnNk0Svr4rdAVCP0aGwo0YLS0.asa (hash: m28mvr458ObPdJVayhq8d1ucBWQhP+gI69eSt6MlFKI=) 3: F8309360B31411F1836BA7DEA8EE528E.roa (hash: q2AuTnFNg9kXhKe7dFa23qHrCyJOuC7F1p8DiBKw7Gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Validity Not Before: Sep 19 07:15:53 2026 GMT Not After : Sep 26 07:15:53 2026 GMT Subject: CN=6aae36a9-4fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:f8:2f:a4:b7:a8:6d:45:78:01:cf:aa:8d: ee:3a:c6:dc:af:7b:9a:99:7a:0e:9a:52:da:d2:ea: c9:33:fe:1c:60:56:46:fc:b6:03:11:74:28:a0:d9: 98:f6:62:03:65:27:45:37:20:01:10:c7:83:17:f8: b2:3e:00:31:e1:92:0b:57:f2:f0:9f:db:2b:8a:08: 48:53:b7:ef:ac:68:fa:cc:ca:ee:50:3a:84:fe:37: 8f:f1:20:1b:b5:a0:93:2f:e2:3b:05:1d:74:9a:67: 38:61:00:de:a9:fb:64:3f:b1:6e:a4:fd:61:7e:27: a5:3c:c5:aa:f6:06:6d:4f:8b:8a:a8:1a:ec:d1:f8: fb:cd:03:b1:e5:6d:3a:0f:0d:bb:93:84:b3:9b:37: b3:10:cb:ba:18:fc:fa:a0:ec:b7:f3:9c:dd:d3:28: d5:d9:52:a1:8a:58:76:b4:7c:aa:49:7a:d6:eb:0b: 9a:5b:20:bc:c8:de:d8:3d:f9:82:28:4c:08:97:78: 39:e9:ec:96:6e:65:b9:3c:5b:ba:21:e6:57:69:f0: 00:25:a3:1e:02:58:38:5d:fb:f6:8c:45:cb:5e:4d: b4:05:a9:fa:9a:1a:4b:72:0c:63:9a:2b:fb:9a:75: 9a:bd:20:6f:32:80:d3:29:46:4d:56:51:fb:74:8b: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3F:F2:81:9D:C9:70:70:44:04:3D:AB:23:44:6F:F2:61:F4:18:8F X509v3 Authority Key Identifier: keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9a:0e:a8:ea:ff:46:cc:6a:4f:45:7f:8a:65:4c:9e:b3:13: 5d:69:9e:3e:dc:68:22:b3:1e:dd:ba:72:87:9b:41:25:1c:7f: 37:53:f0:1c:03:47:2b:b3:1b:8e:f0:31:ab:8b:6e:cd:dc:89: 70:30:c6:cf:2e:90:4c:17:5e:90:3b:f3:f8:d9:64:93:31:e0: 39:b0:0f:ff:5d:43:62:df:0e:3e:cc:1e:44:06:9e:76:35:d0: fa:1a:ed:e9:f4:9e:f2:7f:e1:58:7c:4d:0a:e5:8b:ac:d0:71: b8:57:ba:91:2d:c1:02:02:30:95:19:11:fc:e4:b6:47:76:e9: a4:82:f8:fd:ce:55:18:8c:81:75:10:9d:16:63:54:df:41:66: e2:4b:c7:cd:35:2d:7b:0c:da:e1:62:e2:80:70:ff:2f:42:c4: 81:14:d4:f7:4d:1f:14:5b:68:8d:8b:c0:67:05:d6:b3:df:78: 53:d1:56:91:6a:2c:cb:72:48:83:61:63:8c:56:b2:bc:55:07: f8:b5:fe:58:8b:17:0e:93:01:26:ff:cd:22:a8:e3:97:0b:ac: 83:65:32:f1:55:ed:0b:76:3f:f0:88:11:01:40:65:fe:cb:ee: 4b:d6:8a:c0:79:fd:9c:45:8b:3e:9b:23:6c:bf:79:2f:a3:f2: 98:d0:9d:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFFNkExMTAvBgNVBAUTKEYwNTIxQTVCNkRCMDRENzU2RkEyOTUyQTBGMjlBMzkx MjEyQzU4QjIwHhcNMjYwOTE5MDcxNTUzWhcNMjYwOTI2MDcxNTUzWjAYMRYwFAYD VQQDEw02YWFlMzZhOS00ZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviv4L6S3qG1FeAHPqo3uOsbcr3uamXoOmlLa0urJM/4cYFZG/LYDEXQooNmY 9mIDZSdFNyABEMeDF/iyPgAx4ZILV/Lwn9srighIU7fvrGj6zMruUDqE/jeP8SAb taCTL+I7BR10mmc4YQDeqftkP7FupP1hfielPMWq9gZtT4uKqBrs0fj7zQOx5W06 Dw27k4SzmzezEMu6GPz6oOy385zd0yjV2VKhilh2tHyqSXrW6wuaWyC8yN7YPfmC KEwIl3g56eyWbmW5PFu6IeZXafAAJaMeAlg4Xfv2jEXLXk20Ban6mhpLcgxjmiv7 mnWavSBvMoDTKUZNVlH7dIvJwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAA/8oGd yXBwRAQ9qyNEb/Jh9BiPMB8GA1UdIwQYMBaAFPBSGlttsE11b6KVKg8po5EhLFiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUU2QS8yMTlEN0Q4QUJD MTIxMUYwODU1RkQ4N0FDNEY5QUUwMi84RklhVzIyd1RYVnZvcFVxRHltamtTRXNX TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhGSWFXMjJ3VFhWdm9wVXFEeW1qa1NFc1dMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUU2QS8yMTlEN0Q4QUJDMTIxMUYwODU1RkQ4N0FDNEY5QUUwMi84RklhVzIyd1RY VnZvcFVxRHltamtTRXNXTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5oOqOr/RsxqT0V/imVMnrMTXWmePtxoIrMe3bpyh5tBJRx/N1PwHANHK7Mb jvAxq4tuzdyJcDDGzy6QTBdekDvz+NlkkzHgObAP/11DYt8OPsweRAaedjXQ+hrt 6fSe8n/hWHxNCuWLrNBxuFe6kS3BAgIwlRkR/OS2R3bppIL4/c5VGIyBdRCdFmNU 30Fm4kvHzTUtewza4WLigHD/L0LEgRTU900fFFtojYvAZwXWs994U9FWkWosy3JI g2FjjFayvFUH+LX+WIsXDpMBJv/NIqjjlwusg2Uy8VXtC3Y/8IgRAUBl/svuS9aK wHn9nEWLPpsjbL95L6PymNCdRg== -----END CERTIFICATE-----Generated at Sun Sep 20 18:28:50 2026 by rpki-client