$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: +64TTAruCc6kfve1Iy/rHeBTf1+yLS4ZtFFt9nPYfd4= Subject key identifier: A5:BC:95:60:9E:D1:7E:8C:5C:E2:D0:1E:4C:7D:BA:F5:FB:EC:D3:97 Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: A2 Signing time: Mon 21 Sep 2026 07:17:00 +0000 Manifest this update: Mon 21 Sep 2026 07:16:59 +0000 Manifest next update: Mon 28 Sep 2026 07:16:59 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: +z897SdxoUgFCjpA7daS/8h/N8TbiTVLeRjTdtP9f9A=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Sep 21 07:16:59 2026 GMT Not After : Sep 28 07:16:59 2026 GMT Subject: CN=6ab0d9eb-9e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a7:ea:80:a6:80:da:65:66:a6:62:de:75:f5: fa:4a:59:7a:83:89:c3:2b:dc:c6:e6:1a:0a:f1:bf: 4b:b6:5b:e6:a2:80:4e:8b:8d:cb:39:0b:33:71:d5: 4d:e9:b6:12:1e:fa:52:41:75:6b:d3:aa:17:82:1c: 19:b9:d5:96:b1:fa:04:b7:68:51:93:35:01:51:89: 4b:90:fb:95:51:ee:8b:2e:0e:45:77:42:e2:15:c9: f0:ec:fb:8c:05:26:e2:34:09:c5:b7:64:1f:b1:70: a8:a8:f0:cf:7b:33:7f:77:6a:4c:5a:1c:d2:b0:55: 99:21:04:83:af:e3:01:ed:1a:13:da:1e:f2:29:2d: 66:30:94:7b:ce:d8:e4:55:05:8d:9f:1c:31:b9:53: 8a:9c:d1:af:08:77:fe:f4:6a:49:42:b1:ba:fe:f2: 8f:42:29:64:fe:df:f5:1e:4c:e2:cf:d3:b0:6f:1a: b4:fd:4c:92:d0:b0:24:f7:86:31:aa:b4:dc:24:da: fe:a0:6c:71:9b:d8:df:7e:60:5a:1f:07:13:ad:83: eb:84:75:20:73:14:fb:37:7b:73:5b:bf:a4:10:37: 9e:4f:b6:8c:6b:f7:8c:96:be:b2:ae:36:35:c6:87: 16:5e:ac:83:e9:6a:ac:c0:86:33:5e:84:be:3b:31: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BC:95:60:9E:D1:7E:8C:5C:E2:D0:1E:4C:7D:BA:F5:FB:EC:D3:97 X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:62:d9:c6:a4:82:67:73:77:44:80:86:67:d7:c9:bd:48:10: d9:ba:25:cb:b2:e2:1b:0e:6c:99:24:9c:89:7f:10:d4:04:6d: 88:df:57:e6:3e:c4:c4:61:b1:c8:7b:bd:f9:20:6d:5e:0c:62: 97:33:3a:15:aa:cb:c3:43:dc:0d:37:66:ff:41:f2:7f:5f:83: ac:ec:3b:d6:0d:52:33:23:91:a8:87:96:c2:e1:ef:fb:a5:21: ad:be:cd:a9:89:5b:1b:aa:67:77:06:74:fb:c3:3b:6f:0b:5c: 56:9e:6d:30:0b:26:24:93:b2:ed:5e:ee:1c:b9:20:b4:78:2b: 0a:b2:67:fb:1e:54:a6:c7:78:6a:b4:8b:0d:c9:98:82:23:2d: 2c:92:d5:fd:6a:89:e5:ec:38:7b:e9:28:a1:0a:a3:e1:f3:f1: d9:09:62:c5:92:85:99:53:28:a1:cb:e6:f7:0e:fd:41:29:e1: e0:da:02:7e:1b:80:49:d5:c4:a5:ce:2e:f9:2a:1d:d9:fd:69: e8:c1:7b:03:2d:0e:fd:f2:04:70:27:d7:62:73:25:1a:09:bf: 87:ea:15:6a:a7:50:ba:7d:20:4c:e2:09:04:0c:f1:af:cb:dd: d1:54:85:40:8f:73:6d:82:6a:a7:c3:ad:e2:db:a5:f2:03:6e: 9e:26:9d:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDODQxMTAvBgNVBAUTKEYwRkQ5RTVBNkRDOTQ1OUE4OEUwMTEzRjI0RjU2MUE2 RkRENzQwNUYwHhcNMjYwOTIxMDcxNjU5WhcNMjYwOTI4MDcxNjU5WjAYMRYwFAYD VQQDEw02YWIwZDllYi05ZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16fqgKaA2mVmpmLedfX6Sll6g4nDK9zG5hoK8b9LtlvmooBOi43LOQszcdVN 6bYSHvpSQXVr06oXghwZudWWsfoEt2hRkzUBUYlLkPuVUe6LLg5Fd0LiFcnw7PuM BSbiNAnFt2QfsXCoqPDPezN/d2pMWhzSsFWZIQSDr+MB7RoT2h7yKS1mMJR7ztjk VQWNnxwxuVOKnNGvCHf+9GpJQrG6/vKPQilk/t/1Hkziz9Owbxq0/UyS0LAk94Yx qrTcJNr+oGxxm9jffmBaHwcTrYPrhHUgcxT7N3tzW7+kEDeeT7aMa/eMlr6yrjY1 xocWXqyD6WqswIYzXoS+OzEkpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKW8lWCe 0X6MXOLQHkx9uvX77NOXMB8GA1UdIwQYMBaAFPD9nlptyUWaiOARPyT1Yab910Bf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM4NC9ERkI0OUM0OEM1 MTAxMUYwOUQ4REI3NUZDNEY5QUUwMi84UDJlV20zSlJacUk0QkVfSlBWaHB2M1hR RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM4NC9ERkI0OUM0OEM1MTAxMUYwOUQ4REI3NUZDNEY5QUUwMi84UDJlV20zSlJa cUk0QkVfSlBWaHB2M1hRRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtWLZxqSCZ3N3RICGZ9fJvUgQ2boly7LiGw5smSSciX8Q1ARtiN9X5j7ExGGx yHu9+SBtXgxilzM6FarLw0PcDTdm/0Hyf1+DrOw71g1SMyORqIeWwuHv+6Uhrb7N qYlbG6pndwZ0+8M7bwtcVp5tMAsmJJOy7V7uHLkgtHgrCrJn+x5Upsd4arSLDcmY giMtLJLV/WqJ5ew4e+kooQqj4fPx2QlixZKFmVMoocvm9w79QSnh4NoCfhuASdXE pc4u+Sod2f1p6MF7Ay0O/fIEcCfXYnMlGgm/h+oVaqdQun0gTOIJBAzxr8vd0VSF QI9zbYJqp8Ot4tul8gNuniadEg== -----END CERTIFICATE-----Generated at Mon Sep 21 16:29:06 2026 by rpki-client