$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: 9lJqSi0UScopggYFNMn67XKAQBLJE4QYpusuni6M1uM= Subject key identifier: 79:10:79:13:16:AF:FB:12:14:BF:6F:B3:47:B4:13:2A:C3:0B:59:23 Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 0896 Signing time: Tue 06 Oct 2026 20:50:45 +0000 Manifest this update: Tue 06 Oct 2026 20:50:44 +0000 Manifest next update: Tue 13 Oct 2026 20:50:44 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: ckV9OPv93Fch8UP+jXi/N9sOKeAW3JcxdxsTxplkUe4=) 2: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: gt1Thn5b17IX5hac63qpkPqnhAnjtdM7GC00RfgXDCA=) 3: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: VGnt6v4dXILkocn8GEwn5t+Gd/2jbgIZ2L5lp88nLxY=) 4: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: Gj36dWubgKABqlkFIW8O6/4ONoiv/qzcPv5+4kWBHuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Oct 6 20:50:44 2026 GMT Not After : Oct 13 20:50:44 2026 GMT Subject: CN=6ac55f25-99ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:6d:c1:4f:eb:b5:42:fd:d4:d8:c7:0b:a1: 32:c9:ca:f8:66:80:b3:d0:c1:4a:2b:a5:9d:6a:54: 16:2e:b0:f8:86:a7:02:78:d6:f9:c0:8e:21:4c:91: af:22:7c:87:5e:dc:2c:cb:cc:2f:a7:55:7a:7a:c4: 26:04:11:b5:6a:55:3f:b3:8c:5a:fc:36:71:07:76: 96:1a:44:71:11:4c:32:93:1d:b1:df:6f:80:52:99: 67:5b:3d:a4:61:54:4c:7c:fe:66:d1:50:12:06:3d: 60:55:06:84:0a:2e:4e:bb:bd:40:f8:ac:9c:00:17: 87:35:b4:41:52:d3:f2:a6:79:57:24:75:7c:85:04: d6:96:98:91:18:da:09:96:09:ef:89:a5:39:02:01: f3:1a:c1:3c:0d:be:f6:cb:3a:74:4b:e4:ab:ab:66: 85:69:18:c0:f6:bc:42:c4:ae:52:0f:c0:72:85:7c: 27:49:2b:92:a0:4a:89:67:8f:05:b5:7c:0f:fd:cf: 9d:f6:f6:4b:6d:7f:11:a4:81:7e:96:72:d9:23:0f: 6c:0c:f7:bf:ee:4a:db:2e:48:3b:e7:06:f6:83:f6: 95:02:90:7e:96:8b:53:df:d8:81:cf:81:cb:9d:0b: 58:61:5a:ae:9f:d5:7e:fe:07:02:be:55:d3:15:84: 7d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:10:79:13:16:AF:FB:12:14:BF:6F:B3:47:B4:13:2A:C3:0B:59:23 X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0d:a5:8a:97:15:64:00:f8:02:3b:2e:14:80:6d:3a:56:10: 6d:a5:29:8a:bc:31:81:7b:1c:89:00:b7:4a:9a:b5:69:34:e6: f6:04:0b:54:7b:91:3b:68:97:17:29:4e:91:a2:8c:84:8a:73: 69:00:a3:5b:e2:fe:ad:f6:6d:b8:d8:95:fd:0d:94:c5:97:6c: 31:e8:54:8e:37:28:73:7b:bb:93:1e:ce:a8:34:d4:7d:41:27: 30:b5:8c:cd:9a:49:34:11:c2:9d:30:65:5a:24:b4:0f:e1:08: 03:36:14:59:3d:18:3e:c6:63:14:d9:60:c2:c6:6f:b5:7b:fb: cd:f9:e1:1f:de:09:ee:f5:71:b3:b8:bd:eb:a4:d4:ed:4e:44: 40:2b:a9:ff:4a:91:65:83:04:c9:7d:d4:b8:e9:18:1a:2a:d5: 44:d7:2f:49:91:c5:32:f9:44:e4:bb:e7:82:dd:fb:27:d7:25: 6c:3f:2e:8d:02:4c:97:56:89:83:3f:6f:71:10:cb:c4:7f:be: d4:1e:8a:b5:5d:d5:f2:65:9a:dc:be:b8:ed:ec:07:37:9b:76: 5b:4a:07:16:95:dc:f9:a3:0f:56:75:7d:0c:69:a4:1c:bd:54: e1:78:31:28:1f:9c:bb:46:d1:f2:23:dd:50:99:89:f2:a6:f7: 5a:17:f1:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjYxMDA2MjA1MDQ0WhcNMjYxMDEzMjA1MDQ0WjAYMRYwFAYD VQQDEw02YWM1NWYyNS05OWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuNtwU/rtUL91NjHC6Eyycr4ZoCz0MFKK6WdalQWLrD4hqcCeNb5wI4hTJGv InyHXtwsy8wvp1V6esQmBBG1alU/s4xa/DZxB3aWGkRxEUwykx2x32+AUplnWz2k YVRMfP5m0VASBj1gVQaECi5Ou71A+KycABeHNbRBUtPypnlXJHV8hQTWlpiRGNoJ lgnviaU5AgHzGsE8Db72yzp0S+Srq2aFaRjA9rxCxK5SD8ByhXwnSSuSoEqJZ48F tXwP/c+d9vZLbX8RpIF+lnLZIw9sDPe/7krbLkg75wb2g/aVApB+lotT39iBz4HL nQtYYVqun9V+/gcCvlXTFYR99wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkQeRMW r/sSFL9vs0e0EyrDC1kjMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgA2lipcVZAD4AjsuFIBtOlYQbaUpirwxgXsciQC3Spq1aTTm9gQLVHuRO2iX FylOkaKMhIpzaQCjW+L+rfZtuNiV/Q2UxZdsMehUjjcoc3u7kx7OqDTUfUEnMLWM zZpJNBHCnTBlWiS0D+EIAzYUWT0YPsZjFNlgwsZvtXv7zfnhH94J7vVxs7i966TU 7U5EQCup/0qRZYMEyX3UuOkYGirVRNcvSZHFMvlE5Lvngt37J9clbD8ujQJMl1aJ gz9vcRDLxH++1B6KtV3V8mWa3L647ewHN5t2W0oHFpXc+aMPVnV9DGmkHL1U4Xgx KB+cu0bR8iPdUJmJ8qb3Whfx0w== -----END CERTIFICATE-----Generated at Thu Oct 8 16:27:39 2026 by rpki-client