$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json) Hash identifier: j2HEd7Sb0ZghMdxnhRNyBLwdikocrxV2wQkS4aT1MyY= Subject key identifier: C5:A1:47:CC:30:18:B0:3B:25:5A:B5:24:9E:55:9C:EC:74:06:07:86 Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft Manifest number: 64 Signing time: Mon 21 Sep 2026 08:03:30 +0000 Manifest this update: Mon 21 Sep 2026 08:03:30 +0000 Manifest next update: Mon 28 Sep 2026 08:03:30 +0000 Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: yJva9SMaYEc79kBtiH9Ip9zPVyjjKPsuUKkeYCWMwNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Validity Not Before: Sep 21 08:03:30 2026 GMT Not After : Sep 28 08:03:30 2026 GMT Subject: CN=6ab0e4d2-de6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:56:15:a0:74:84:15:92:b5:59:76:92:29:fc: 28:7f:15:4c:7b:15:89:f3:18:b7:45:9c:84:51:68: 1f:2a:9f:b4:1c:ec:e6:d2:18:85:8c:10:88:cd:da: 52:1a:ae:52:14:57:35:e0:f7:3e:70:72:19:4a:41: ae:28:a7:56:a5:8d:0f:c0:6a:f0:23:b1:a6:8e:2e: bb:f8:3b:5e:38:74:d3:97:e6:7e:3e:d3:e3:10:da: b1:e4:12:ec:50:07:17:cb:04:87:fe:89:de:85:b8: e5:24:db:f5:4b:9a:0d:17:32:6f:62:8b:0e:b1:72: 32:0c:9b:db:f5:ab:b0:44:b2:e1:1f:b7:04:5c:41: 53:6d:5f:e6:77:6a:f1:40:58:b3:fe:6f:b2:98:84: 0d:0d:08:e5:7d:a9:f3:11:33:c4:f4:9e:28:24:54: fc:4e:91:71:04:12:85:cc:75:c8:d1:9e:ac:fb:38: ee:39:45:a6:c8:9e:94:92:4f:5c:e8:bb:e7:da:e6: b8:79:e6:b0:f5:3c:08:9f:13:85:0e:20:82:6f:f1: 86:22:42:56:45:4a:41:5f:a4:17:af:66:02:8e:5d: e8:17:4f:a3:af:62:8b:5f:9f:54:8b:51:39:e0:12: 4d:3a:d4:2c:d7:52:a0:83:f6:e3:58:1f:66:d0:c5: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A1:47:CC:30:18:B0:3B:25:5A:B5:24:9E:55:9C:EC:74:06:07:86 X509v3 Authority Key Identifier: keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b1:34:e0:35:9e:c3:5d:a5:1e:5e:ff:2b:a5:a8:2a:c9:c6: d8:1f:07:9c:24:3a:2c:00:2d:8c:5f:3d:3c:58:3f:c0:59:75: b2:cb:57:55:12:cd:72:d3:ef:52:55:bc:6d:03:6d:9e:1a:d7: d9:57:11:bb:db:b9:73:50:3a:39:c0:97:bd:63:a5:ae:65:d2: 3d:93:32:9f:a0:17:b1:67:2d:9e:c7:9c:00:76:66:a2:10:8c: 7d:0d:0e:9c:98:9e:d6:8a:f2:92:e9:d8:9b:96:1c:6e:b3:c5: 82:f5:07:dc:08:98:d8:ed:c1:7b:ce:99:ea:91:50:32:b6:61: ec:5d:49:79:e7:c8:a1:28:44:01:6b:12:b2:2d:5d:11:a0:ed: be:aa:50:b9:f0:88:1c:1e:3e:ed:e2:e5:e4:be:cc:84:92:df: 37:2a:43:7c:76:9a:07:e0:61:d5:7c:94:a6:1d:5a:25:3b:14: b4:9a:23:d7:0a:ec:e4:4b:53:2e:7e:bd:79:95:f6:f2:4f:f3: 23:08:d5:57:fa:ad:54:e2:85:8d:1d:ec:d5:43:70:0d:01:ff: b7:f7:2d:3a:99:3b:6b:3c:c4:a4:d7:3f:11:58:b8:6c:b8:ba: 45:82:48:6d:8d:b7:3c:09:80:5c:d8:22:e8:51:a2:80:a7:32: bb:81:40:96 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy MURFNDE0QjAeFw0yNjA5MjEwODAzMzBaFw0yNjA5MjgwODAzMzBaMBgxFjAUBgNV BAMTDTZhYjBlNGQyLWRlNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtVhWgdIQVkrVZdpIp/Ch/FUx7FYnzGLdFnIRRaB8qn7Qc7ObSGIWMEIjN2lIa rlIUVzXg9z5wchlKQa4op1aljQ/AavAjsaaOLrv4O144dNOX5n4+0+MQ2rHkEuxQ BxfLBIf+id6FuOUk2/VLmg0XMm9iiw6xcjIMm9v1q7BEsuEftwRcQVNtX+Z3avFA WLP+b7KYhA0NCOV9qfMRM8T0nigkVPxOkXEEEoXMdcjRnqz7OO45RabInpSST1zo u+fa5rh55rD1PAifE4UOIIJv8YYiQlZFSkFfpBevZgKOXegXT6OvYotfn1SLUTng Ek061CzXUqCD9uNYH2bQxbVrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxaFHzDAY sDslWrUknlWc7HQGB4YwHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNsTTgNZ7DXaUeXv8rpagqycbYHwecJDosAC2MXz08WD/AWXWyy1dVEs1y0+9S VbxtA22eGtfZVxG727lzUDo5wJe9Y6WuZdI9kzKfoBexZy2ex5wAdmaiEIx9DQ6c mJ7WivKS6diblhxus8WC9QfcCJjY7cF7zpnqkVAytmHsXUl558ihKEQBaxKyLV0R oO2+qlC58IgcHj7t4uXkvsyEkt83KkN8dpoH4GHVfJSmHVolOxS0miPXCuzkS1Mu fr15lfbyT/MjCNVX+q1U4oWNHezVQ3ANAf+39y06mTtrPMSk1z8RWLhsuLpFgkht jbc8CYBc2CLoUaKApzK7gUCW -----END CERTIFICATE-----Generated at Tue Sep 22 07:15:14 2026 by rpki-client