$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json) Hash identifier: kuwCQp5XRZekjkMkLXZ8OTWgSaCNo2mTBxbaOu7HOBE= Subject key identifier: E1:7D:28:02:05:F3:76:B0:67:4D:18:8D:3A:94:9B:0E:D8:C5:8F:7C Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F Certificate issuer: /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft Manifest number: 7D Signing time: Mon 21 Sep 2026 07:46:32 +0000 Manifest this update: Mon 21 Sep 2026 07:46:32 +0000 Manifest next update: Mon 28 Sep 2026 07:46:32 +0000 Files and hashes: 1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: 9YMleF5PVAZSIG4XQ7q216/NmKne63RSC/dQMQaviMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F Validity Not Before: Sep 21 07:46:32 2026 GMT Not After : Sep 28 07:46:32 2026 GMT Subject: CN=6ab0e0d8-85aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:4a:20:2a:3e:d7:77:7e:df:2d:94:52:4a: be:c8:4c:0d:4a:82:87:46:d4:7e:95:b5:02:24:65: 25:c3:44:4c:3e:a5:58:9c:37:25:72:c0:49:48:1a: 71:3c:77:ae:39:75:25:b1:69:78:b2:22:ef:74:07: d3:c4:95:19:13:c2:17:e5:d4:ac:b2:3f:eb:b9:29: 0c:ec:f5:cd:dc:5c:a5:8f:3d:2c:0d:b8:ef:b7:a4: fb:13:18:30:9e:f7:58:59:81:06:3d:6b:db:06:dd: c5:07:0a:f3:d3:97:5d:44:f0:ed:b3:ce:ea:93:21: d0:d1:e8:f4:e3:36:31:34:cf:42:4d:a2:64:fb:ad: ad:dc:95:53:19:ca:ec:5e:10:59:11:0f:1a:a2:fe: 2a:ac:9e:bd:aa:33:a6:e2:96:ba:eb:28:87:17:15: f1:32:a9:6b:37:90:57:9d:2c:37:3a:1e:17:0b:2a: 4e:c4:56:aa:aa:a2:83:cc:1c:5f:62:ca:1f:d7:8e: e7:77:8f:cc:09:40:38:fe:37:4b:1a:5c:cb:31:5b: c7:3d:42:2a:b0:42:cb:a7:db:48:96:70:44:d6:cf: e3:bf:dd:21:3c:11:44:5d:71:96:fb:11:c7:8d:c0: 8c:7b:3f:b4:3f:f8:10:9d:06:ff:f7:57:32:32:f0: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7D:28:02:05:F3:76:B0:67:4D:18:8D:3A:94:9B:0E:D8:C5:8F:7C X509v3 Authority Key Identifier: keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4e:06:67:9a:e9:92:47:ca:23:31:80:8e:ef:9d:ca:14:c1: 5e:fd:69:a1:d7:17:e7:99:a8:01:08:e8:1a:d4:33:e1:1b:8e: e5:e7:06:99:38:1e:54:3f:3d:fe:16:30:1e:67:38:62:54:b7: d4:23:f6:3d:71:02:02:6a:85:66:48:ef:c7:53:d8:a3:25:d5: 2a:58:b2:d9:b1:e0:d7:fd:82:64:e9:a3:64:2d:ee:2a:ea:5f: 3b:84:ce:83:80:bd:0d:5f:26:97:ff:56:b8:a3:6b:9d:96:ea: 36:f8:9b:50:cd:17:5f:cb:06:ca:57:24:ba:7d:95:34:33:3d: 0d:8c:ae:82:1c:c1:58:dc:37:2f:35:59:cc:8c:a5:0a:11:c1: a9:75:d0:a5:d9:ae:52:1f:a1:12:26:72:1d:09:6a:10:8e:37: 92:25:ac:83:30:b6:f3:ed:a3:d1:16:1b:cd:df:da:f2:50:f5: 96:7c:c5:9f:48:30:7f:c3:ab:13:f3:6a:33:93:7b:6e:ec:62: 4d:4a:0e:74:d1:3f:86:d5:3c:fe:32:f3:92:d2:e3:02:f4:24: c5:50:37:97:6f:17:bf:ac:b5:c5:4f:4b:69:85:0c:62:37:27: 6c:f9:7a:c8:a8:0a:db:8f:25:47:f8:c4:31:e9:4b:c8:98:6f: 44:c1:9d:1c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJDQjExMC8GA1UEBRMoRjIxNzA2MzBBMDE0RjgyMThGRjMwNzU2NDlGNDEyNDIw MDNENDQ2RjAeFw0yNjA5MjEwNzQ2MzJaFw0yNjA5MjgwNzQ2MzJaMBgxFjAUBgNV BAMTDTZhYjBlMGQ4LTg1YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDBUogKj7Xd37fLZRSSr7ITA1KgodG1H6VtQIkZSXDREw+pVicNyVywElIGnE8 d645dSWxaXiyIu90B9PElRkTwhfl1KyyP+u5KQzs9c3cXKWPPSwNuO+3pPsTGDCe 91hZgQY9a9sG3cUHCvPTl11E8O2zzuqTIdDR6PTjNjE0z0JNomT7ra3clVMZyuxe EFkRDxqi/iqsnr2qM6bilrrrKIcXFfEyqWs3kFedLDc6HhcLKk7EVqqqooPMHF9i yh/Xjud3j8wJQDj+N0saXMsxW8c9QiqwQsun20iWcETWz+O/3SE8EURdcZb7EceN wIx7P7Q/+BCdBv/3VzIy8PNdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4X0oAgXz drBnTRiNOpSbDtjFj3wwHwYDVR0jBBgwFoAU8hcGMKAU+CGP8wdWSfQSQgA9RG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0IyREZGNjU2RkRC QzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNHUDh3ZFdTZlFTUWdBOVJH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGhjR01LQVUtQ0dQOHdkV1NmUVNRZ0E5Ukc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNH UDh3ZFdTZlFTUWdBOVJHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeTgZnmumSR8ojMYCO753KFMFe/Wmh1xfnmagBCOga1DPhG47l5waZOB5UPz3+ FjAeZzhiVLfUI/Y9cQICaoVmSO/HU9ijJdUqWLLZseDX/YJk6aNkLe4q6l87hM6D gL0NXyaX/1a4o2udluo2+JtQzRdfywbKVyS6fZU0Mz0NjK6CHMFY3DcvNVnMjKUK EcGpddCl2a5SH6ESJnIdCWoQjjeSJayDMLbz7aPRFhvN39ryUPWWfMWfSDB/w6sT 82ozk3tu7GJNSg500T+G1Tz+MvOS0uMC9CTFUDeXbxe/rLXFT0tphQxiNyds+XrI qArbjyVH+MQx6UvImG9EwZ0c -----END CERTIFICATE-----Generated at Mon Sep 21 21:22:10 2026 by rpki-client