$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: YddDl0CbPcSC/oym6F5thN4Va8TzYMof68yDI97CsvQ= Subject key identifier: 66:CA:DD:41:37:6E:3D:14:80:45:EB:59:04:23:6F:78:E4:71:07:BB Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 0834 Signing time: Sun 20 Sep 2026 21:01:24 +0000 Manifest this update: Sun 20 Sep 2026 21:01:23 +0000 Manifest next update: Sun 27 Sep 2026 21:01:23 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: 8oqmqU43VWwv+ZTc8+W763zH49RS7A4Raw4oT+I53uo=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: /LeLgNBBApVoU9W0PiPoKX0e1+iJ16jhEcyi7pM1vXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Sep 20 21:01:23 2026 GMT Not After : Sep 27 21:01:23 2026 GMT Subject: CN=6ab049a4-ebbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:93:e8:f4:e9:17:6f:59:98:6a:54:05:c0: 89:71:b4:50:2e:fa:09:1e:46:59:c8:2e:19:ef:18: 03:dd:55:c3:cf:06:9c:c9:40:8f:ce:56:ec:24:e9: 6b:df:b4:62:e3:69:18:aa:11:a6:b0:74:63:8f:be: 13:02:ee:9a:0c:da:54:c8:61:4c:1e:02:b6:8e:82: a7:b1:36:cc:15:78:fb:9a:bc:6a:ba:4d:f6:90:10: 79:9a:35:1b:17:4d:0d:6b:43:f9:a9:fa:2e:9f:95: 37:c5:10:32:1f:50:3d:a5:04:62:ff:e3:43:3a:ca: 37:f4:58:10:ad:a3:14:01:8a:8f:c8:ca:f7:be:a8: 0b:d4:d7:dc:4d:aa:02:73:a6:5b:c2:d3:1a:a7:76: 63:e5:72:27:22:2f:b8:22:74:75:a1:3f:2a:53:32: c3:7c:d9:62:3d:d3:99:f6:fa:d9:42:06:2c:6d:dc: 46:9d:9d:b6:19:32:94:c1:1e:0e:d3:2f:2e:6d:0a: 06:ef:1c:62:2d:eb:ac:48:ca:0c:5a:99:01:67:8b: b6:15:ae:2a:8b:e0:5a:4c:6f:cd:62:26:fd:f7:55: f5:b6:0c:04:83:8a:33:b5:b5:59:2d:1a:c8:a1:49: 43:74:f6:02:1b:40:ab:95:c8:4c:a6:ab:99:1d:ce: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CA:DD:41:37:6E:3D:14:80:45:EB:59:04:23:6F:78:E4:71:07:BB X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:75:77:bb:e5:bd:5c:fe:8b:cf:41:6f:62:bb:5e:3b:81:bb: df:a7:84:a8:dd:83:88:fe:2b:28:60:e9:9c:6d:46:65:60:70: 1b:98:f9:3c:a5:71:a7:b8:0e:e1:c0:8f:9e:5c:ac:5e:0f:db: a4:e9:49:f3:3e:b2:0d:ca:9a:7d:df:4a:a2:8a:87:86:67:6a: a4:7c:72:83:9a:de:8a:0e:4a:79:d9:2c:c8:71:a8:e0:6f:91: 2c:4e:9b:76:4f:fd:db:a3:92:71:51:5b:09:83:78:1d:7e:16: 8f:63:44:9c:6f:bf:09:34:46:a0:01:e9:fd:27:ce:da:37:72: 73:0c:74:76:e6:50:b5:29:d8:fc:6e:2a:4f:9e:5a:07:71:2f: d6:7b:fd:ef:06:f1:87:68:ae:f1:07:f5:b2:56:d1:28:13:60: 18:0d:02:16:d8:91:2d:3c:be:5e:cd:a8:72:4f:97:07:54:67: 6e:62:15:88:74:d2:34:4d:87:3c:72:6f:73:62:97:da:9e:c1: b3:1b:82:a0:b3:73:37:bf:43:0a:ea:7c:d6:bb:19:ea:07:67: 08:ad:e7:ee:ed:d1:95:bd:91:51:2f:77:9e:0d:41:fd:9f:b4: a2:72:d5:78:b0:ca:0e:aa:77:4d:a1:b5:af:b2:0f:3f:61:57: 2c:ea:c6:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjYwOTIwMjEwMTIzWhcNMjYwOTI3MjEwMTIzWjAYMRYwFAYD VQQDEw02YWIwNDlhNC1lYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1GT6PTpF29ZmGpUBcCJcbRQLvoJHkZZyC4Z7xgD3VXDzwacyUCPzlbsJOlr 37Ri42kYqhGmsHRjj74TAu6aDNpUyGFMHgK2joKnsTbMFXj7mrxquk32kBB5mjUb F00Na0P5qfoun5U3xRAyH1A9pQRi/+NDOso39FgQraMUAYqPyMr3vqgL1NfcTaoC c6ZbwtMap3Zj5XInIi+4InR1oT8qUzLDfNliPdOZ9vrZQgYsbdxGnZ22GTKUwR4O 0y8ubQoG7xxiLeusSMoMWpkBZ4u2Fa4qi+BaTG/NYib991X1tgwEg4oztbVZLRrI oUlDdPYCG0CrlchMpquZHc6faQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbK3UE3 bj0UgEXrWQQjb3jkcQe7MB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO3V3u+W9XP6Lz0FvYrteO4G736eEqN2DiP4rKGDpnG1GZWBwG5j5PKVxp7gO 4cCPnlysXg/bpOlJ8z6yDcqafd9KooqHhmdqpHxyg5reig5KedksyHGo4G+RLE6b dk/926OScVFbCYN4HX4Wj2NEnG+/CTRGoAHp/SfO2jdycwx0duZQtSnY/G4qT55a B3Ev1nv97wbxh2iu8Qf1slbRKBNgGA0CFtiRLTy+Xs2ock+XB1RnbmIViHTSNE2H PHJvc2KX2p7BsxuCoLNzN79DCup81rsZ6gdnCK3n7u3Rlb2RUS93ng1B/Z+0onLV eLDKDqp3TaG1r7IPP2FXLOrGgQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:06:15 2026 by rpki-client