$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: UiTIthDiBl93wikjWV/IGsEKsIukyng1zYj9fZvCw+A= Subject key identifier: 72:FD:D6:9A:31:BE:7D:8F:A2:76:70:A4:AB:C9:4E:C9:3C:4D:30:85 Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 2577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 254E Signing time: Sun 20 Sep 2026 15:43:25 +0000 Manifest this update: Sun 20 Sep 2026 15:43:25 +0000 Manifest next update: Sun 27 Sep 2026 15:43:25 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: xlarV4keomOhbAtozfFUyR+0Qt/Pc9SMwsAP0P+WkLk=) 2: rvms7SMLwgO_3iqGevwVvKwKAMA.asa (hash: 03mIt6sx2N4kyRDmtrywhu7q0g8YM9WZvJByyOjFrj8=) 3: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: rycLk4UK+xxvgQxEjrUg94ft0J4vTpCCFPONGxFmmI0=) 4: 0F15CD3AAF4011F1A81565FF6911F970.roa (hash: Xz7eZ1SV8R4oYvn9Xlw6Pv4LszQ2ezhKLHykoR+8jxw=) 5: CE7B5902AF3F11F186796EF16911F970.roa (hash: IHWM6RFhPrMmsqVLsW0iVew5UfTXyAVb0zZ4b4QqZQU=) 6: GiZqVXDFkfTOw9KbgmpHw5SLUWY.asa (hash: vDu9havXbmwfHPU3SNHzDoX5rB2pHYEh/QKpZcZTGtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9591 (0x2577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Sep 20 15:43:25 2026 GMT Not After : Sep 27 15:43:25 2026 GMT Subject: CN=6aafff1d-fd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:b6:35:e3:3b:e6:e5:05:a2:4f:21:0e:26: 4e:9e:34:20:b1:f2:7c:1e:44:6d:b1:1d:c2:f8:15: 3c:cc:ad:cd:1f:3c:8b:81:8e:30:dd:7b:c8:b4:a1: 14:29:5c:5b:7d:76:11:2d:d5:e0:66:be:c9:d4:8e: c9:fb:bf:ea:0f:49:b2:b4:ba:7d:e3:84:c0:7d:08: fe:9a:b8:cd:a6:64:81:a2:f9:bf:df:df:3b:fe:9c: b9:94:79:01:a8:0d:da:b7:af:d1:aa:d3:ee:99:8a: 2b:c8:15:35:5d:0c:77:a5:27:99:7b:a1:d4:ed:23: c5:bc:3d:cf:f3:b3:d4:33:19:4d:22:1e:81:34:2f: 26:32:90:c3:55:a5:70:39:08:6a:15:92:36:62:77: f7:3e:08:eb:26:40:82:da:2c:2d:59:3e:8e:cf:b1: f4:ed:00:a5:4e:b1:0a:26:77:fc:76:96:d6:41:26: bd:fd:01:3f:59:8e:4e:91:5f:77:9e:76:e5:48:18: 66:e8:68:2a:c1:9e:f1:b1:56:a0:4d:ae:73:02:2c: d6:f1:eb:8b:68:e4:e7:da:db:16:e4:60:a3:63:2e: 6b:9d:53:f4:b2:99:36:48:9b:d0:5f:36:f4:4e:a2: 96:e4:49:cd:1e:58:ba:92:3e:cf:6b:bc:96:87:98: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FD:D6:9A:31:BE:7D:8F:A2:76:70:A4:AB:C9:4E:C9:3C:4D:30:85 X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1a:e7:61:36:4e:f7:bd:d5:5f:47:ef:24:54:a8:23:dc:23: 55:bb:1b:03:ad:fc:51:5e:99:02:3d:4c:99:8b:7f:fd:0c:9a: f4:9b:a3:63:2e:7c:95:db:d8:4d:f5:46:03:cd:07:f2:ef:b8: d1:99:79:4a:69:4a:89:e5:78:f5:6f:bc:43:b6:de:2d:44:ff: 4f:46:2a:5c:8c:75:42:ff:b7:e0:4c:ae:3a:1c:b7:4c:37:24: bc:14:1e:8b:be:2b:fc:5e:bf:1e:f6:13:8d:3a:91:bc:d9:a4: 6e:49:2f:51:2a:ac:1e:02:93:fd:5e:1b:a6:41:4a:16:22:b4: c7:36:dc:d3:94:fd:21:dc:82:45:51:82:09:07:dd:2d:11:63: f5:8f:63:76:b3:c5:62:5b:fc:bc:cf:69:33:b9:8d:7d:76:e0: 1c:8f:99:10:0b:24:10:55:90:a4:c2:6d:19:5f:c9:52:97:6d: 44:9d:c1:34:1b:90:32:d8:e0:28:d2:34:65:93:a8:b3:71:61: c3:05:58:c1:3d:cd:7d:05:c7:02:b3:5f:60:79:3a:97:a7:d2: 20:49:c1:47:08:1a:b8:5a:e8:51:7d:8a:b2:9c:2b:e3:55:a2: ef:8d:07:e2:c2:e7:7f:0a:1d:86:24:2e:0c:4d:fd:03:d8:6a: 8a:68:f1:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjYwOTIwMTU0MzI1WhcNMjYwOTI3MTU0MzI1WjAYMRYwFAYD VQQDEw02YWFmZmYxZC1mZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgO2NeM75uUFok8hDiZOnjQgsfJ8HkRtsR3C+BU8zK3NHzyLgY4w3XvItKEU KVxbfXYRLdXgZr7J1I7J+7/qD0mytLp944TAfQj+mrjNpmSBovm/3987/py5lHkB qA3at6/RqtPumYoryBU1XQx3pSeZe6HU7SPFvD3P87PUMxlNIh6BNC8mMpDDVaVw OQhqFZI2Ynf3PgjrJkCC2iwtWT6Oz7H07QClTrEKJnf8dpbWQSa9/QE/WY5OkV93 nnblSBhm6GgqwZ7xsVagTa5zAizW8euLaOTn2tsW5GCjYy5rnVP0spk2SJvQXzb0 TqKW5EnNHli6kj7Pa7yWh5isWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHL91pox vn2PonZwpKvJTsk8TTCFMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlxrnYTZO973VX0fvJFSoI9wjVbsbA638UV6ZAj1MmYt//Qya9JujYy58ldvY TfVGA80H8u+40Zl5SmlKieV49W+8Q7beLUT/T0YqXIx1Qv+34EyuOhy3TDckvBQe i74r/F6/HvYTjTqRvNmkbkkvUSqsHgKT/V4bpkFKFiK0xzbc05T9IdyCRVGCCQfd LRFj9Y9jdrPFYlv8vM9pM7mNfXbgHI+ZEAskEFWQpMJtGV/JUpdtRJ3BNBuQMtjg KNI0ZZOos3FhwwVYwT3NfQXHArNfYHk6l6fSIEnBRwgauFroUX2Kspwr41Wi740H 4sLnfwodhiQuDE39A9hqimjxZQ== -----END CERTIFICATE-----Generated at Tue Sep 22 00:53:33 2026 by rpki-client