$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: XYLAZ/qMPTl9gJyFzRu6vHJpuan6IieeNAXzgxyXE4c= Subject key identifier: 02:28:29:39:58:F3:99:59:E2:7D:B9:74:E5:9C:37:27:6C:F7:12:6D Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0EDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0ED4 Signing time: Sun 20 Sep 2026 17:38:42 +0000 Manifest this update: Sun 20 Sep 2026 17:38:42 +0000 Manifest next update: Sun 27 Sep 2026 17:38:42 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: ylhSGgIfr+Xs0qTgUlGMxhBG2EIQbcMGojpm01xSvW8=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: nJme4FS5TjDqEzw/rX+GR8DJngobRbIcTTRzcDy5qYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3804 (0xedc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: Sep 20 17:38:42 2026 GMT Not After : Sep 27 17:38:42 2026 GMT Subject: CN=6ab01a22-53cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:8d:83:4a:42:3d:4b:ab:8c:3c:d9:42:5d: 83:7b:8a:0e:b8:57:18:c2:b8:a7:19:3a:81:9c:46: ac:74:94:b7:0e:e0:e4:53:20:f1:ce:03:e8:13:a8: 0e:b2:17:9e:ea:05:4c:89:99:c8:79:5a:92:46:8f: 0a:09:1f:66:67:35:d9:18:08:98:df:7c:aa:85:86: 0a:ce:05:c1:91:bf:02:4c:5b:d7:25:52:29:78:2c: 59:02:2e:31:fc:89:ed:8a:04:4a:09:cc:a5:77:75: f7:ef:86:85:dc:69:c9:40:63:ca:86:b2:aa:f8:25: b5:37:8a:ce:ff:19:f6:b1:db:55:88:d6:18:29:45: fb:ba:f5:9a:e0:53:97:14:9b:78:7f:49:ce:f2:67: 69:10:1a:80:cf:99:5f:18:27:24:60:bd:b7:5d:8f: b9:1d:9e:4a:f3:dc:4b:52:ec:27:6e:35:be:99:be: 2b:2f:b5:44:98:b5:76:ff:9e:99:1e:76:d7:ab:f9: 65:c3:ab:fe:c1:11:15:c6:d6:73:91:5a:6b:89:79: 10:d9:58:8d:38:6f:f9:5b:7d:c3:9a:53:d0:b6:c7: 9e:04:e7:f1:95:04:64:19:de:32:0e:76:2a:08:f2: 91:bf:81:1a:69:33:07:89:c3:9e:66:94:ad:e4:4a: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:28:29:39:58:F3:99:59:E2:7D:B9:74:E5:9C:37:27:6C:F7:12:6D X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:50:51:88:b0:46:1d:22:7f:c5:7f:3d:f8:b4:a9:d4:b0:c1: 51:9c:5a:92:b3:a9:74:e6:9c:2b:9a:ca:89:ae:ff:3a:4d:0b: 8f:57:63:2d:84:02:8b:2e:ba:34:7f:75:a0:46:9f:1d:12:f6: 15:86:e7:ef:63:ad:55:6e:06:04:5a:69:7d:e0:f1:f3:6b:f5: 33:c4:30:1b:91:8c:c4:ca:85:d2:7e:8a:45:89:44:94:06:46: f6:b8:ba:19:9b:fc:5e:cd:ca:27:de:14:a8:81:5c:5e:00:5d: 83:a3:c2:a1:48:27:9b:db:ec:3d:ec:80:f7:40:d6:0f:62:b0: f5:00:a6:a3:43:01:1f:55:13:1f:2d:31:fc:83:52:97:82:ee: c5:bf:89:20:c4:f7:0f:a8:7e:1e:bb:98:47:02:59:6c:e6:7f: 5e:f0:f9:69:50:31:b9:53:65:c6:ed:08:f4:53:28:c6:9d:a0: 51:00:a5:e7:b0:a3:f6:af:24:30:74:3f:67:76:b3:cf:ac:47: 51:2e:5c:b4:b7:e9:44:8c:d1:e5:53:55:c7:c2:07:3e:55:89: 8d:c9:a6:0e:b8:d6:4e:33:aa:39:3e:31:e9:7f:8d:7e:8c:b2: ae:d9:ad:1c:bf:db:ee:45:a9:89:9d:91:08:bf:3c:e7:82:02: a5:94:ea:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjYwOTIwMTczODQyWhcNMjYwOTI3MTczODQyWjAYMRYwFAYD VQQDEw02YWIwMWEyMi01M2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2aNg0pCPUurjDzZQl2De4oOuFcYwrinGTqBnEasdJS3DuDkUyDxzgPoE6gO shee6gVMiZnIeVqSRo8KCR9mZzXZGAiY33yqhYYKzgXBkb8CTFvXJVIpeCxZAi4x /IntigRKCcyld3X374aF3GnJQGPKhrKq+CW1N4rO/xn2sdtViNYYKUX7uvWa4FOX FJt4f0nO8mdpEBqAz5lfGCckYL23XY+5HZ5K89xLUuwnbjW+mb4rL7VEmLV2/56Z HnbXq/llw6v+wREVxtZzkVpriXkQ2ViNOG/5W33DmlPQtseeBOfxlQRkGd4yDnYq CPKRv4EaaTMHicOeZpSt5ErCuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIoKTlY 85lZ4n25dOWcNyds9xJtMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWlBRiLBGHSJ/xX89+LSp1LDBUZxakrOpdOacK5rKia7/Ok0Lj1djLYQCiy66 NH91oEafHRL2FYbn72OtVW4GBFppfeDx82v1M8QwG5GMxMqF0n6KRYlElAZG9ri6 GZv8Xs3KJ94UqIFcXgBdg6PCoUgnm9vsPeyA90DWD2Kw9QCmo0MBH1UTHy0x/INS l4Luxb+JIMT3D6h+HruYRwJZbOZ/XvD5aVAxuVNlxu0I9FMoxp2gUQCl57Cj9q8k MHQ/Z3azz6xHUS5ctLfpRIzR5VNVx8IHPlWJjcmmDrjWTjOqOT4x6X+Nfoyyrtmt HL/b7kWpiZ2RCL8854ICpZTqiw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:13:56 2026 by rpki-client