$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft File: 8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft (raw, json) Hash identifier: 2Da936yL160K2kzzH47sN/zZWtFjgv9fBQjzqMjJkIw= Subject key identifier: 63:0B:CE:F5:4D:F8:7F:1D:96:3F:0C:3D:9A:D7:6C:5A:F1:FC:05:41 Authority key identifier: F0:D9:BD:A8:01:CA:27:10:D7:68:78:C9:DF:F3:58:64:95:71:6B:78 Certificate issuer: /CN=A91E4236/serialNumber=F0D9BDA801CA2710D76878C9DFF3586495716B78 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft Manifest number: 1E Signing time: Sun 11 Oct 2026 09:39:39 +0000 Manifest this update: Sun 11 Oct 2026 09:39:39 +0000 Manifest next update: Sun 18 Oct 2026 09:39:39 +0000 Files and hashes: 1: 8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.crl (hash: x2R6BZt+mTQSCZk3WNNh/H2opEQnOMfOKfaATtMaY9c=) 2: zbVfqms8lphgcFU-7SmpqNLmGXg.asa (hash: q4O/FqGemUEctbPBKBd3Nkf9TBX7kHxXLKqWouxs38s=) 3: 1B95F90EA0FE11F1825E2D663411F970.roa (hash: Z9HTTcD3yEzUQkVB9ymvctDdcUckm2RreowaVx1NXcE=) 4: 1B05A0DEA0FE11F1825E2D663411F970.roa (hash: P6W/Hfpr93LemGxKRbVxgccWf1AF65o2VgS/fdnStBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.crl rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4236, serialNumber=F0D9BDA801CA2710D76878C9DFF3586495716B78 Validity Not Before: Oct 11 09:39:39 2026 GMT Not After : Oct 18 09:39:39 2026 GMT Subject: CN=6acb595b-656a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:19:00:6c:96:b5:a3:1d:68:8c:a5:7f:6a: 46:9d:25:c5:81:4b:b0:66:7a:0f:e4:93:af:76:d1: a6:ea:cb:c4:15:23:11:99:02:3c:1b:81:b5:71:8c: 4a:ad:b7:e8:d0:3f:26:14:58:be:6d:0c:53:41:a7: df:c4:c0:18:bc:ad:5c:12:10:4b:36:2e:f7:4e:54: 7e:45:f8:23:bd:82:79:b9:c0:a7:11:8f:ff:9b:ca: 1b:98:a2:ba:bf:be:42:ad:1a:63:c2:95:3c:65:6d: 3c:24:91:f6:84:22:51:cd:e8:88:cf:fe:a4:58:0e: 56:7d:0e:99:bc:80:92:81:d1:c0:8d:28:ab:33:1c: 3b:86:e3:76:b1:f6:17:86:3c:6c:ba:53:31:b0:1a: 21:f9:8d:5c:38:86:e7:38:5d:07:cf:2b:58:32:72: e8:7f:9b:02:eb:d7:20:c5:12:fe:64:8b:a5:ea:5d: c1:d7:76:ae:ad:f5:35:36:98:e6:e0:d8:0b:5b:aa: a7:f4:25:14:e4:fd:52:a7:1d:e8:fa:43:50:46:8f: 81:3e:4b:26:72:7a:5d:13:8e:3a:67:b0:71:a5:77: 5f:12:28:7b:07:7f:98:fe:ba:fc:8f:d1:2d:40:52: 5a:db:29:ca:62:60:30:37:69:c6:22:30:c8:55:03: ed:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0B:CE:F5:4D:F8:7F:1D:96:3F:0C:3D:9A:D7:6C:5A:F1:FC:05:41 X509v3 Authority Key Identifier: keyid:F0:D9:BD:A8:01:CA:27:10:D7:68:78:C9:DF:F3:58:64:95:71:6B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:77:2f:9d:fd:0b:c4:b9:74:48:37:44:3e:7c:d3:de:eb:3b: 41:00:06:f2:01:1b:a8:b6:a7:2a:65:68:df:ff:8d:cc:e8:b3: 57:19:6b:d9:93:3a:9d:b2:6c:36:22:30:42:22:6b:3b:c6:2e: 90:b3:78:b4:06:3b:58:28:70:20:7a:04:1f:73:4d:69:cb:74: f7:bc:6e:2d:af:d9:b1:fc:62:74:f1:61:ff:10:c7:2c:6d:a4: c7:d1:49:56:a7:dc:e8:ab:ce:c9:1a:5f:d8:d8:2a:26:e8:d4: f4:f8:c9:80:f6:31:25:fb:09:f3:f4:46:e1:6f:09:0c:8f:6b: 5b:13:d2:f1:2f:de:b4:5c:d9:e9:69:5a:a0:b5:a9:e6:b1:a2: 4f:e9:de:6a:ba:ca:19:29:05:70:2e:ba:e3:55:87:1b:9b:44: 5b:9c:b3:11:64:cd:93:5a:1b:48:4b:f0:f5:de:d7:62:d3:77: d8:ed:d0:37:38:16:9f:a0:1a:d2:44:ed:22:2a:28:86:08:f4: 78:49:fb:4e:13:c0:82:f7:f4:ae:81:3a:7c:6f:a6:b7:71:36: 51:31:81:53:62:82:46:4f:48:3f:30:f2:47:d1:0f:c6:5c:6d: 4c:ac:e8:45:ad:22:f9:9f:e5:98:4a:f6:85:10:11:dd:69:d9: 5b:cd:9a:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDIzNjExMC8GA1UEBRMoRjBEOUJEQTgwMUNBMjcxMEQ3Njg3OEM5REZGMzU4NjQ5 NTcxNkI3ODAeFw0yNjEwMTEwOTM5MzlaFw0yNjEwMTgwOTM5MzlaMBgxFjAUBgNV BAMTDTZhY2I1OTViLTY1NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+HhkAbJa1ox1ojKV/akadJcWBS7Bmeg/kk6920abqy8QVIxGZAjwbgbVxjEqt t+jQPyYUWL5tDFNBp9/EwBi8rVwSEEs2LvdOVH5F+CO9gnm5wKcRj/+byhuYorq/ vkKtGmPClTxlbTwkkfaEIlHN6IjP/qRYDlZ9Dpm8gJKB0cCNKKszHDuG43ax9heG PGy6UzGwGiH5jVw4huc4XQfPK1gycuh/mwLr1yDFEv5ki6XqXcHXdq6t9TU2mObg 2Atbqqf0JRTk/VKnHej6Q1BGj4E+SyZyel0TjjpnsHGld18SKHsHf5j+uvyP0S1A UlrbKcpiYDA3acYiMMhVA+3HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYwvO9U34 fx2WPww9mtdsWvH8BUEwHwYDVR0jBBgwFoAU8Nm9qAHKJxDXaHjJ3/NYZJVxa3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MjM2LzlBMUEwMDdFQTBG QzExRjE5REU0NUU5MjMzMTFGOTcwLzhObTlxQUhLSnhEWGFIakozX05ZWkpWeGEz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOE5tOXFBSEtKeERYYUhqSjNfTllaSlZ4YTNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MjM2LzlBMUEwMDdFQTBGQzExRjE5REU0NUU5MjMzMTFGOTcwLzhObTlxQUhLSnhE WGFIakozX05ZWkpWeGEzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsdy+d/QvEuXRIN0Q+fNPe6ztBAAbyARuotqcqZWjf/43M6LNXGWvZkzqdsmw2 IjBCIms7xi6Qs3i0BjtYKHAgegQfc01py3T3vG4tr9mx/GJ08WH/EMcsbaTH0UlW p9zoq87JGl/Y2Com6NT0+MmA9jEl+wnz9EbhbwkMj2tbE9LxL960XNnpaVqgtanm saJP6d5qusoZKQVwLrrjVYcbm0RbnLMRZM2TWhtIS/D13tdi03fY7dA3OBafoBrS RO0iKiiGCPR4SftOE8CC9/SugTp8b6a3cTZRMYFTYoJGT0g/MPJH0Q/GXG1MrOhF rSL5n+WYSvaFEBHdadlbzZqh -----END CERTIFICATE-----Generated at Mon Oct 12 23:20:25 2026 by rpki-client