$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: 2Wso5NgAi4JY6/JnwGPkfx0S+JrPIKpmR1jN3VjFloQ= Subject key identifier: 3B:0D:F3:46:4E:D6:C3:54:E2:C7:8F:29:9E:5F:0B:FC:1A:1E:28:99 Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 61F2 Signing time: Sun 20 Sep 2026 14:15:21 +0000 Manifest this update: Sun 20 Sep 2026 14:15:20 +0000 Manifest next update: Sun 27 Sep 2026 14:15:20 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: Si147hLu2+cg6R85Fmxh+n9r3k5/4C1wJDmus5pW/cM=) 2: 813E372A946711F081C10711C4F9AE02.roa (hash: +aXUNX9qlvBiYmtIZkuO8Q0af6FFXfqW610bes/6qYI=) 3: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: YDV7BZcSxL/GS299L5qq5wTtV0pYOQjm37aNEWD8Hpo=) 4: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: NApQDfsxt7jjKOoha5lUsKRVPKureaiiyrSOLJMc2s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Sep 20 14:15:20 2026 GMT Not After : Sep 27 14:15:20 2026 GMT Subject: CN=6aafea78-f16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:2b:af:df:ef:63:f8:82:b5:84:c0:ce:b2: b6:ce:7f:d3:58:6e:38:85:d4:f9:80:fa:b0:f3:2a: 75:eb:54:9f:23:3b:6c:55:df:7c:b3:b0:59:ba:86: ac:95:02:0e:32:88:0a:5f:8e:71:10:1d:84:49:6d: 0d:a3:49:2b:f6:e6:1d:6c:e4:fe:8a:45:a8:fa:88: e2:a9:c9:56:89:23:78:2a:ac:63:ac:a1:d9:84:c4: 93:20:3a:20:86:86:9b:93:4c:40:8f:2c:c7:2c:63: 3d:7d:44:a9:2a:33:30:cd:c4:3e:09:69:ed:60:b2: 93:df:c0:ca:59:9b:05:7a:23:18:0c:30:b7:6b:9b: 7f:48:f4:7c:93:1b:72:79:4f:ad:6f:e2:d7:ba:fc: c9:20:97:b0:db:0c:b5:08:dd:5b:5a:1e:bc:54:2e: a2:6c:70:19:1b:f0:9b:9f:89:01:d2:f5:98:c0:0f: f0:ec:de:38:5d:29:81:68:c0:71:67:9a:ff:81:43: b6:2a:78:ce:28:4d:aa:d3:69:b2:b4:5c:89:ac:c2: fc:59:df:85:db:c9:93:6a:2e:49:cb:b0:6e:cd:20: ff:d8:1b:61:04:9f:e3:e8:d2:9c:0d:04:48:a4:e4: 1b:6e:79:1f:de:c3:a2:c6:be:61:5d:e5:77:94:ab: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0D:F3:46:4E:D6:C3:54:E2:C7:8F:29:9E:5F:0B:FC:1A:1E:28:99 X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fb:27:f1:8a:8e:e3:7c:07:33:13:f4:45:c3:11:36:52:ae: 87:cb:43:be:e5:4d:b0:f1:87:9e:e6:86:fd:b8:05:bc:9e:74: 38:bc:9c:af:4b:92:56:86:15:cf:4a:9e:6c:c1:88:f4:e6:0d: 8f:85:8b:0c:6f:4f:7e:b3:d3:24:33:c3:10:32:7a:d1:3a:77: df:0e:70:d8:93:bb:2f:1e:98:d5:7f:ca:fc:09:a1:cd:22:0e: 7a:df:e9:b5:71:22:19:9b:94:a9:10:95:65:78:da:75:f3:62: d4:d0:64:ba:65:0c:a4:fb:2b:8d:d5:1e:cf:4c:98:29:a2:c8: 00:22:f5:f1:a0:05:2f:a6:02:70:26:ff:39:5f:bf:ab:62:fa: 88:b4:f2:56:63:e9:35:5a:fc:9d:85:f8:f7:c4:11:69:c9:f5: d8:72:98:3d:86:62:34:95:f7:a9:6c:f2:2f:de:c8:0f:f6:dd: 29:1c:6b:05:fb:9a:9e:16:f8:00:3e:1d:02:6d:ac:68:e9:6a: 0d:fc:f6:98:c0:af:79:5f:65:7b:62:ef:56:5a:76:1f:e7:ed: d6:f9:8c:b5:1e:d5:3c:af:00:b2:bd:99:e7:f1:a6:5b:f8:b2: 62:94:e6:8b:71:67:cb:5f:f5:07:5d:9c:ff:9d:49:01:4e:b4: dd:78:8b:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjYwOTIwMTQxNTIwWhcNMjYwOTI3MTQxNTIwWjAYMRYwFAYD VQQDEw02YWFmZWE3OC1mMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEorr9/vY/iCtYTAzrK2zn/TWG44hdT5gPqw8yp161SfIztsVd98s7BZuoas lQIOMogKX45xEB2ESW0No0kr9uYdbOT+ikWo+ojiqclWiSN4KqxjrKHZhMSTIDog hoabk0xAjyzHLGM9fUSpKjMwzcQ+CWntYLKT38DKWZsFeiMYDDC3a5t/SPR8kxty eU+tb+LXuvzJIJew2wy1CN1bWh68VC6ibHAZG/Cbn4kB0vWYwA/w7N44XSmBaMBx Z5r/gUO2KnjOKE2q02mytFyJrML8Wd+F28mTai5Jy7BuzSD/2BthBJ/j6NKcDQRI pOQbbnkf3sOixr5hXeV3lKt2ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsN80ZO 1sNU4sePKZ5fC/waHiiZMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL/sn8YqO43wHMxP0RcMRNlKuh8tDvuVNsPGHnuaG/bgFvJ50OLycr0uSVoYV z0qebMGI9OYNj4WLDG9PfrPTJDPDEDJ60Tp33w5w2JO7Lx6Y1X/K/AmhzSIOet/p tXEiGZuUqRCVZXjadfNi1NBkumUMpPsrjdUez0yYKaLIACL18aAFL6YCcCb/OV+/ q2L6iLTyVmPpNVr8nYX498QRacn12HKYPYZiNJX3qWzyL97ID/bdKRxrBfuanhb4 AD4dAm2saOlqDfz2mMCveV9le2LvVlp2H+ft1vmMtR7VPK8Asr2Z5/GmW/iyYpTm i3Fny1/1B12c/51JAU603XiL+A== -----END CERTIFICATE-----Generated at Mon Sep 21 14:27:45 2026 by rpki-client