$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: aFu8Oz+Vb6tOyF4n3wuQukv39CE9OXmpr0ks5bSLQs8= Subject key identifier: FE:BB:5F:18:C7:54:9F:17:C5:DA:24:10:95:A2:42:5C:AE:0E:93:34 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 0213 Signing time: Fri 25 Sep 2026 03:00:51 +0000 Manifest this update: Fri 25 Sep 2026 03:00:50 +0000 Manifest next update: Fri 02 Oct 2026 03:00:50 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: 6YAmAgWjXwDPONuNKrL5nXYZQxR+qOeZNPAE38Y/GKM=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: yzwQF5BWuhV75DE3qzozKQNyER1bQqJr/dSB8bkYg7Q=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: p9m+Ky6KPaxoCxqhurBlkPRkCfywo+5r7qphI33Ipdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Sep 25 03:00:50 2026 GMT Not After : Oct 2 03:00:50 2026 GMT Subject: CN=6ab5e3e3-4bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fd:60:71:88:c6:a0:a2:9d:a1:b7:7a:49:ec: c3:1d:f8:68:61:a1:11:94:3a:7a:0b:54:9c:1a:24: 2b:4c:8b:6a:ba:6c:f4:1d:35:04:bf:01:f2:6a:60: 71:88:36:e1:5b:ec:5c:e9:68:3f:6a:f9:a9:eb:4e: 0e:cd:95:f8:f1:51:3a:65:01:34:fb:94:13:83:83: 12:6a:b6:76:12:0a:0c:c4:2d:ba:eb:d0:14:92:43: 86:ac:0d:de:b1:37:41:d7:6a:d5:ac:d2:9e:da:e7: 95:d6:fd:a6:70:73:ea:a6:5b:15:aa:e6:dc:fb:bb: f6:39:8d:c5:97:41:40:b2:5f:34:fb:a6:c6:1d:11: 81:aa:27:75:c1:b2:7d:8f:ef:c1:21:b3:5d:fa:71: 7d:5c:64:df:df:e1:99:63:37:2b:82:00:5f:e0:2a: 2b:20:dc:2e:c5:9e:be:fd:39:ce:62:0a:d0:7e:28: f1:73:a8:a6:e1:9b:ff:c2:b0:e7:69:b0:11:9f:9a: 60:4f:83:7e:d1:80:22:01:eb:66:4c:ba:92:f4:61: 11:50:bb:f6:75:be:5c:90:fe:1c:6c:ae:da:d0:c0: 51:1d:3f:79:04:97:78:d1:57:43:19:56:3b:0f:c6: c5:a8:6e:f0:53:f1:75:d2:ff:b8:c5:55:0b:0e:ab: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BB:5F:18:C7:54:9F:17:C5:DA:24:10:95:A2:42:5C:AE:0E:93:34 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ef:73:ec:c1:14:34:8b:3f:92:16:5c:0b:04:1f:f3:d8:b5: 83:43:94:75:ad:3a:d9:12:93:9c:fc:96:43:ab:c7:26:c4:ba: 2f:33:3d:8f:14:cf:48:33:90:d3:45:00:a1:fb:84:74:c5:ba: 5c:12:1c:8c:84:bf:33:b3:a6:d9:7c:04:5c:04:3e:dd:cf:d5: b2:79:c5:17:05:e8:bc:f2:de:0f:05:b4:5c:e6:0f:76:76:a1: 7a:d5:80:6a:74:12:f9:79:28:06:08:73:1e:e6:ba:8a:89:f3: 63:e6:e7:49:04:45:64:ea:28:9b:5c:a7:91:c9:4a:12:fb:7f: d4:2e:08:ef:a5:a7:68:2c:15:42:15:74:67:03:da:52:99:c3: 22:bb:5b:15:43:21:60:c7:fb:98:04:cc:29:c5:fe:2c:88:6d: 04:0c:24:6e:52:ac:82:b4:fa:66:ba:85:01:5f:d1:a7:b0:6a: e2:d8:20:d6:e4:fa:d7:62:f9:27:cb:04:76:d3:ee:f1:35:e4: b2:a7:e7:e6:05:2b:fd:fe:27:93:36:80:3d:cb:8f:96:c3:a3: 71:17:d9:d4:19:2c:46:4d:f6:ac:d3:9d:19:e8:fd:a7:80:19: 19:4b:5e:0d:d9:dc:24:eb:72:4a:73:98:48:9a:87:3c:7a:df: 05:74:2f:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjYwOTI1MDMwMDUwWhcNMjYxMDAyMDMwMDUwWjAYMRYwFAYD VQQDEw02YWI1ZTNlMy00YmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiP1gcYjGoKKdobd6SezDHfhoYaERlDp6C1ScGiQrTItqumz0HTUEvwHyamBx iDbhW+xc6Wg/avmp604OzZX48VE6ZQE0+5QTg4MSarZ2EgoMxC2669AUkkOGrA3e sTdB12rVrNKe2ueV1v2mcHPqplsVqubc+7v2OY3Fl0FAsl80+6bGHRGBqid1wbJ9 j+/BIbNd+nF9XGTf3+GZYzcrggBf4CorINwuxZ6+/TnOYgrQfijxc6im4Zv/wrDn abARn5pgT4N+0YAiAetmTLqS9GERULv2db5ckP4cbK7a0MBRHT95BJd40VdDGVY7 D8bFqG7wU/F10v+4xVULDqu/twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP67XxjH VJ8XxdokEJWiQlyuDpM0MB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoe9z7MEUNIs/khZcCwQf89i1g0OUda062RKTnPyWQ6vHJsS6LzM9jxTPSDOQ 00UAofuEdMW6XBIcjIS/M7Om2XwEXAQ+3c/VsnnFFwXovPLeDwW0XOYPdnahetWA anQS+XkoBghzHua6ionzY+bnSQRFZOoom1ynkclKEvt/1C4I76WnaCwVQhV0ZwPa UpnDIrtbFUMhYMf7mATMKcX+LIhtBAwkblKsgrT6ZrqFAV/Rp7Bq4tgg1uT612L5 J8sEdtPu8TXksqfn5gUr/f4nkzaAPcuPlsOjcRfZ1BksRk32rNOdGej9p4AZGUte DdncJOtySnOYSJqHPHrfBXQvOw== -----END CERTIFICATE-----Generated at Fri Sep 25 20:42:21 2026 by rpki-client