$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: 8Cm0ZsudN6SSAD9xpZXYYV1u1jzhKWPZ24TzZrjajPw= Subject key identifier: 69:B2:70:B3:70:29:FE:D7:05:BE:B6:6E:64:C6:5C:D5:BE:33:73:D7 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 0685 Signing time: Fri 02 Oct 2026 22:52:10 +0000 Manifest this update: Fri 02 Oct 2026 22:52:10 +0000 Manifest next update: Fri 09 Oct 2026 22:52:10 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: TX9tyQYgpVznM0cywrr4PG4Yy29XCYuBCy59LTu/aT4=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=) 3: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=) 4: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Oct 2 22:52:10 2026 GMT Not After : Oct 9 22:52:10 2026 GMT Subject: CN=6ac0359a-413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:8f:f4:c7:e8:9a:41:42:7c:4a:de:3f:81: 84:91:0f:8d:2f:5f:02:19:93:8f:24:c1:82:54:c9: f2:b8:09:d1:35:32:ae:40:1f:4c:13:31:19:5c:af: 4b:11:a0:d8:b8:67:49:5c:7e:3f:86:b7:88:04:48: a0:72:c8:de:62:c6:3e:39:6d:47:37:e0:47:44:d6: ac:db:f8:a3:2b:90:89:c1:26:be:82:57:0d:64:aa: 94:4f:27:8f:80:31:62:8e:cc:7a:25:1b:0a:c4:16: f9:6a:ee:2c:6a:8a:f1:7f:66:f1:22:a4:00:6e:7e: a3:e3:82:25:0d:e6:cf:be:12:2a:d2:cc:56:44:a4: ef:78:56:13:0f:1d:e6:76:41:c6:fa:7c:f3:75:2f: 2d:1d:4e:76:c9:39:32:77:67:3a:90:ad:a0:55:96: 01:eb:14:08:18:19:8c:61:fa:a3:81:5e:d3:ba:3c: 4f:28:87:fa:5e:19:98:20:e6:dd:f8:29:1c:6c:1b: fe:da:bf:9f:65:78:aa:aa:a1:5e:c9:cd:d0:3c:f9: 51:ad:c7:05:2b:7b:0b:eb:4e:7e:34:59:c0:9d:73: bf:9e:0a:d9:c9:42:d6:64:32:d7:29:8b:f6:1b:26: f0:e7:aa:08:ea:a0:e2:10:d6:b1:c1:a8:42:4a:8b: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B2:70:B3:70:29:FE:D7:05:BE:B6:6E:64:C6:5C:D5:BE:33:73:D7 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:93:c7:9f:b7:37:05:20:4f:33:c7:a1:37:80:87:cd:f9:62: a6:d6:76:f2:59:89:5d:a0:6f:09:71:fd:c1:1d:03:e5:d3:67: ad:87:4e:4f:30:15:71:7c:59:05:d5:3f:cb:9c:34:38:a1:fb: 06:9b:f9:c3:9c:1e:39:19:b5:e6:76:da:b8:57:d3:9e:36:d9: 4b:94:2e:13:75:bf:f9:72:41:f6:3f:1c:47:dd:16:c7:1a:ab: 16:f1:db:0e:4c:60:d8:92:4a:68:2f:3c:8b:21:99:b0:dd:11: 62:1d:74:ea:f0:ed:91:c4:f2:04:a2:51:b0:e4:0e:8d:1a:49: 51:5e:dd:ac:55:cb:ae:bb:3e:10:97:1c:63:e1:66:01:11:4a: 8c:13:1d:db:d8:12:3a:3c:44:b6:a6:ac:ff:c4:f5:40:19:9a: eb:b0:e9:db:f4:87:38:09:2c:6e:9d:02:a8:39:20:dd:db:07: 1a:91:8d:c6:a4:f6:20:ee:7e:88:db:b2:ca:40:7b:8f:39:e4: 71:8d:04:3d:3a:cd:f0:5d:a4:4f:6e:2d:1b:14:b0:c4:f4:09: f0:0c:b0:54:9d:ba:12:72:8d:4a:ce:dd:e9:0b:64:82:79:3e: ed:bf:61:4c:d5:3e:f5:cb:7d:8b:ec:61:1e:b4:90:d2:86:2b: e0:c8:90:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYxMDAyMjI1MjEwWhcNMjYxMDA5MjI1MjEwWjAYMRYwFAYD VQQDEw02YWMwMzU5YS00MTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQ6P9MfomkFCfEreP4GEkQ+NL18CGZOPJMGCVMnyuAnRNTKuQB9MEzEZXK9L EaDYuGdJXH4/hreIBEigcsjeYsY+OW1HN+BHRNas2/ijK5CJwSa+glcNZKqUTyeP gDFijsx6JRsKxBb5au4saorxf2bxIqQAbn6j44IlDebPvhIq0sxWRKTveFYTDx3m dkHG+nzzdS8tHU52yTkyd2c6kK2gVZYB6xQIGBmMYfqjgV7TujxPKIf6XhmYIObd +CkcbBv+2r+fZXiqqqFeyc3QPPlRrccFK3sL605+NFnAnXO/ngrZyULWZDLXKYv2 Gybw56oI6qDiENaxwahCSotKzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmycLNw Kf7XBb62bmTGXNW+M3PXMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh5PHn7c3BSBPM8ehN4CHzfliptZ28lmJXaBvCXH9wR0D5dNnrYdOTzAVcXxZ BdU/y5w0OKH7Bpv5w5weORm15nbauFfTnjbZS5QuE3W/+XJB9j8cR90WxxqrFvHb Dkxg2JJKaC88iyGZsN0RYh106vDtkcTyBKJRsOQOjRpJUV7drFXLrrs+EJccY+Fm ARFKjBMd29gSOjxEtqas/8T1QBma67Dp2/SHOAksbp0CqDkg3dsHGpGNxqT2IO5+ iNuyykB7jznkcY0EPTrN8F2kT24tGxSwxPQJ8AywVJ26EnKNSs7d6Qtkgnk+7b9h TNU+9ct9i+xhHrSQ0oYr4MiQEw== -----END CERTIFICATE-----Generated at Sun Oct 4 22:22:03 2026 by rpki-client