$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: KJhb+yxMQoFAFKALiJygW6DT7YFJA5gJ46U8FOBGz9k= Subject key identifier: B1:8F:36:AB:14:EA:79:B6:0B:98:DE:D4:2E:89:77:0A:3C:90:F9:4D Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 022A Signing time: Mon 21 Sep 2026 02:45:11 +0000 Manifest this update: Mon 21 Sep 2026 02:45:10 +0000 Manifest next update: Mon 28 Sep 2026 02:45:10 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: MrX79ssLg2BpcIE7BegB7g6+UH0TMeQF5AzEAIxZUUY=) 2: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: WjgNxbDbrb74XmE1Jk0QE3DXYeIptytiMEIutAQrgFI=) 3: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: hUBkgyOeFfHyusrHl5Ul+wkZZtAL0ghWlOjjJyvQSKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Sep 21 02:45:10 2026 GMT Not After : Sep 28 02:45:10 2026 GMT Subject: CN=6ab09a37-baab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:ff:46:e9:cb:5f:19:0c:7f:92:8f:2c:93: 6f:92:8b:49:e6:ee:53:99:65:6c:bd:26:f7:62:73: 1b:1e:33:35:74:ea:f8:78:31:70:87:ab:11:28:ff: b2:0d:6b:20:5d:26:cb:df:98:5f:43:65:e8:ac:6b: 78:97:d5:b8:3a:bb:b4:54:c3:6b:98:97:4b:1c:bf: 3c:1d:30:95:45:2d:99:29:66:d5:67:c5:fa:74:03: 23:32:f8:58:0a:51:48:5f:db:eb:bc:5a:5e:ff:57: 23:94:12:bb:61:3d:76:f7:32:42:01:e8:04:77:8a: ca:10:dd:67:5e:d2:7d:b2:cd:d7:cc:12:b2:6c:fd: 10:bc:7b:dd:a7:12:49:60:62:5c:d6:3c:47:92:43: 23:88:96:22:f3:68:91:f3:5b:1a:eb:2d:a8:a8:e3: 5a:70:70:1d:66:84:02:60:6a:71:31:b5:df:75:dd: 87:e5:e6:e1:ce:5c:c9:97:c2:5a:01:b3:d9:3c:60: 8b:39:7b:d5:17:1c:6a:48:8d:33:f9:ff:4d:da:19: 78:fe:12:41:1c:68:fc:a8:61:59:77:c7:17:f1:b9: e9:d6:bb:f5:32:f8:2a:a4:62:44:1c:d0:bb:30:9f: d9:00:29:35:aa:d6:e6:67:c6:c7:e5:92:43:bb:72: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:36:AB:14:EA:79:B6:0B:98:DE:D4:2E:89:77:0A:3C:90:F9:4D X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:79:ce:ad:b3:9e:43:a0:e7:ed:49:de:73:53:1c:3c:12:0e: 6e:34:4c:a6:f2:d9:c2:86:69:37:3c:bd:21:8e:48:4a:fb:05: 0a:0c:cc:0f:16:86:52:21:ff:2a:0d:19:42:52:da:d8:69:93: 82:6c:2c:41:5f:f5:98:1e:b4:32:19:be:e5:5a:08:af:8d:af: 40:a0:77:59:73:d5:bc:6a:6a:6a:73:e7:c8:ba:68:9e:33:ea: 8e:9b:e4:f3:67:27:8f:ac:bc:f2:ba:87:e7:98:fb:60:9f:3f: 75:29:9d:bd:3d:9e:0e:0e:85:49:88:0c:cc:44:ce:b8:8f:ae: 40:a6:9b:32:73:a0:a8:49:30:31:28:4c:4c:3f:15:f1:5b:56: a0:ab:81:e2:e0:65:74:31:ad:e9:1e:1b:14:92:39:22:72:ce: fc:07:19:9d:74:f6:df:71:65:d4:ca:b4:7d:3e:bd:52:a8:89: 26:c4:d6:26:9a:1b:de:c6:63:6a:81:53:42:8d:2a:ee:4e:b2: cb:15:e9:62:81:e0:e6:84:81:28:73:cc:ea:3e:06:92:96:db: 30:b9:98:ba:af:b3:b6:89:d8:4d:86:83:22:53:29:61:26:a9: a5:68:23:d1:1a:25:2b:0e:6f:46:cb:c3:2c:ef:33:ea:2c:9f: a2:d7:63:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjYwOTIxMDI0NTEwWhcNMjYwOTI4MDI0NTEwWjAYMRYwFAYD VQQDEw02YWIwOWEzNy1iYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBX/RunLXxkMf5KPLJNvkotJ5u5TmWVsvSb3YnMbHjM1dOr4eDFwh6sRKP+y DWsgXSbL35hfQ2XorGt4l9W4Oru0VMNrmJdLHL88HTCVRS2ZKWbVZ8X6dAMjMvhY ClFIX9vrvFpe/1cjlBK7YT129zJCAegEd4rKEN1nXtJ9ss3XzBKybP0QvHvdpxJJ YGJc1jxHkkMjiJYi82iR81sa6y2oqONacHAdZoQCYGpxMbXfdd2H5ebhzlzJl8Ja AbPZPGCLOXvVFxxqSI0z+f9N2hl4/hJBHGj8qGFZd8cX8bnp1rv1MvgqpGJEHNC7 MJ/ZACk1qtbmZ8bH5ZJDu3KiLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGPNqsU 6nm2C5je1C6Jdwo8kPlNMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANnnOrbOeQ6Dn7Unec1McPBIObjRMpvLZwoZpNzy9IY5ISvsFCgzMDxaGUiH/ Kg0ZQlLa2GmTgmwsQV/1mB60Mhm+5VoIr42vQKB3WXPVvGpqanPnyLponjPqjpvk 82cnj6y88rqH55j7YJ8/dSmdvT2eDg6FSYgMzETOuI+uQKabMnOgqEkwMShMTD8V 8VtWoKuB4uBldDGt6R4bFJI5InLO/AcZnXT233Fl1Mq0fT69UqiJJsTWJpob3sZj aoFTQo0q7k6yyxXpYoHg5oSBKHPM6j4GkpbbMLmYuq+ztonYTYaDIlMpYSappWgj 0RolKw5vRsvDLO8z6iyfotdjqg== -----END CERTIFICATE-----Generated at Tue Sep 22 07:06:18 2026 by rpki-client