$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: XzuGKVuYXsMNEyyFYv6gJzgPFQYuUHUNUGAAvuLjp7I= Subject key identifier: 36:54:25:09:0E:62:63:E1:99:68:59:CE:14:CD:D6:A7:AD:43:88:BB Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 026A Signing time: Mon 21 Sep 2026 02:18:37 +0000 Manifest this update: Mon 21 Sep 2026 02:18:37 +0000 Manifest next update: Mon 28 Sep 2026 02:18:37 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: xIz/HrTFHgy1DdviVnd03YFlmpRN0WNt822a4pb5lpg=) 2: A329BF2C582911F183AC6B14AB833773.roa (hash: WXakM99GRL0/13xcXDgDIa0rHbZ8Y6OhBPFlRQTMUZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Sep 21 02:18:37 2026 GMT Not After : Sep 28 02:18:37 2026 GMT Subject: CN=6ab093fd-5e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:44:5f:bd:22:09:33:ec:9b:7b:9e:10:24: 8a:f7:ac:fe:96:0d:02:d1:67:bd:16:64:08:53:24: 15:48:61:ee:ea:69:b3:96:05:95:9c:96:56:59:7e: fb:cd:40:ad:f1:c3:c4:c2:27:d8:24:11:82:8f:66: c1:6d:ab:d2:09:ed:33:e8:7e:b7:9e:15:b3:c7:f2: 26:c4:b5:c8:6f:a9:87:01:ea:49:e9:51:a2:ef:9d: 7f:4e:93:01:70:79:a9:ab:d4:4e:5b:85:fd:7e:92: 13:d9:e6:cd:46:50:87:20:36:46:a2:d3:d8:61:3e: b5:99:47:31:ed:00:d8:6b:5b:cb:34:3e:31:d6:51: cf:c1:cf:f1:12:6d:f0:ff:1e:09:e1:a5:30:b9:a0: e3:18:e5:85:14:c6:88:ad:45:9e:4c:b0:3c:a4:12: 91:be:bd:4e:b5:56:3b:da:03:59:ac:4c:78:4b:10: ea:31:04:f2:1d:46:6c:03:6d:c9:ce:61:7f:84:9e: d1:a4:e7:4a:88:00:5c:ed:6a:55:08:ba:fc:f8:d7: b5:65:fd:ca:cd:5e:38:3b:49:95:a9:dc:c8:e9:4b: f0:df:67:70:6d:25:a3:67:e3:38:f4:cf:fe:0b:88: 2a:fd:60:75:33:ce:20:38:c2:79:c4:5b:af:14:04: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:25:09:0E:62:63:E1:99:68:59:CE:14:CD:D6:A7:AD:43:88:BB X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c2:be:93:5a:c4:b9:0c:02:b7:a2:31:4e:ac:01:24:58:73: 3e:45:2b:20:7e:e3:b2:8b:7b:11:6b:89:a7:4e:ea:98:f3:34: ca:fe:09:4e:08:25:af:a2:3f:c3:90:b3:46:7e:c8:df:c0:50: 08:1c:e9:07:9d:11:27:4c:b0:33:7b:0d:89:ea:a8:81:8a:11: 0d:48:3d:e6:c8:aa:a3:8c:37:39:90:67:07:1d:39:d8:70:be: 17:6e:b3:dc:af:b5:16:91:59:c2:64:14:a7:46:88:7b:bd:ba: bd:0b:fe:02:dd:4a:38:ee:a5:f5:66:79:8f:02:f7:60:a0:cc: 1b:71:74:96:bd:0a:03:45:1b:0e:dc:bc:e0:60:1a:b0:c9:36: f3:75:a7:7e:c8:ea:ae:96:93:5f:f2:70:95:ed:09:a5:e3:20: f3:83:c6:21:b1:2a:2f:44:ef:bc:3a:f1:22:10:4c:1e:bd:fe: 91:17:eb:da:98:f3:bd:89:73:e0:46:e6:21:36:89:94:11:f5: 53:1a:49:f0:6e:dc:49:23:9f:7c:4d:49:41:28:62:3e:38:0a: 31:ec:a4:77:ac:1e:c5:fc:3b:da:3f:c9:bf:27:94:26:9a:ca: a6:eb:10:a0:ff:f0:f5:95:17:44:88:b7:91:61:db:22:ce:e7: 44:57:8e:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjYwOTIxMDIxODM3WhcNMjYwOTI4MDIxODM3WjAYMRYwFAYD VQQDEw02YWIwOTNmZC01ZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzZEX70iCTPsm3ueECSK96z+lg0C0We9FmQIUyQVSGHu6mmzlgWVnJZWWX77 zUCt8cPEwifYJBGCj2bBbavSCe0z6H63nhWzx/ImxLXIb6mHAepJ6VGi751/TpMB cHmpq9ROW4X9fpIT2ebNRlCHIDZGotPYYT61mUcx7QDYa1vLND4x1lHPwc/xEm3w /x4J4aUwuaDjGOWFFMaIrUWeTLA8pBKRvr1OtVY72gNZrEx4SxDqMQTyHUZsA23J zmF/hJ7RpOdKiABc7WpVCLr8+Ne1Zf3KzV44O0mVqdzI6Uvw32dwbSWjZ+M49M/+ C4gq/WB1M84gOMJ5xFuvFAQQaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZUJQkO YmPhmWhZzhTN1qetQ4i7MB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKsK+k1rEuQwCt6IxTqwBJFhzPkUrIH7jsot7EWuJp07qmPM0yv4JTgglr6I/ w5CzRn7I38BQCBzpB50RJ0ywM3sNieqogYoRDUg95siqo4w3OZBnBx052HC+F26z 3K+1FpFZwmQUp0aIe726vQv+At1KOO6l9WZ5jwL3YKDMG3F0lr0KA0UbDty84GAa sMk283WnfsjqrpaTX/Jwle0JpeMg84PGIbEqL0TvvDrxIhBMHr3+kRfr2pjzvYlz 4EbmITaJlBH1UxpJ8G7cSSOffE1JQShiPjgKMeykd6wexfw72j/JvyeUJprKpusQ oP/w9ZUXRIi3kWHbIs7nRFeOGQ== -----END CERTIFICATE-----Generated at Mon Sep 21 11:43:36 2026 by rpki-client