$ rpki-client -vvvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: 3Rl10T+trg7B6YpTALmMQSXi9Hdb0yuE/D/Sp344WXI= Subject key identifier: 04:48:FF:3F:A2:02:0B:F7:21:C7:0E:6F:6E:24:5B:CD:F7:39:76:36 Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 13DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 13BF Signing time: Thu 22 Oct 2026 16:58:24 +0000 Manifest this update: Thu 22 Oct 2026 16:58:23 +0000 Manifest next update: Thu 29 Oct 2026 16:58:23 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: ZQpp4R90S8WIGAiyv32Mr8SBM7RNnFs2p4JEqmd4m8A=) 2: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: LjoDddRIHfdyvbMdkYPATybnnKwBZMxY+IE0OlrkYcE=) 3: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: kTVtJf0sXNv/myeQcbWLzlKqwsk/htvDmO2Qa4BwMyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 16:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5082 (0x13da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Oct 22 16:58:23 2026 GMT Not After : Oct 29 16:58:23 2026 GMT Subject: CN=6ada40af-0c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:c9:75:7f:2a:72:26:0c:cd:7c:c9:d8:76: 9a:93:82:95:84:98:c0:31:90:96:ba:44:3c:1d:da: 56:9d:1d:0d:0e:7d:85:dc:b7:ba:61:0b:67:af:58: be:4e:d1:43:bf:8b:cd:3e:19:ab:2f:e0:d6:4f:b4: ba:b7:51:42:ad:44:53:56:0b:37:03:98:fb:a1:4a: 94:7f:5a:02:dc:50:c2:b7:2c:37:27:27:42:0b:a9: 62:c9:a2:87:2d:09:61:6a:e6:a6:fb:04:c6:87:ef: 74:68:ce:29:4c:c7:eb:88:df:9e:07:fa:dc:22:17: 6b:25:57:4b:9b:ed:b0:4f:f8:71:c3:77:da:8b:43: 93:72:a0:0a:d3:64:88:10:a7:bd:61:a2:ce:c2:b4: a1:a5:45:0c:ec:30:25:fd:2e:eb:89:15:ee:fe:2e: c0:45:ee:31:15:f2:93:b2:41:5c:89:ba:d7:53:c4: dc:79:45:a3:e4:a2:e6:51:11:26:cc:6b:93:c0:c1: 1e:a6:f3:60:d7:22:0e:fa:84:c2:6b:07:84:1b:50: 5a:be:c2:39:9c:09:5c:92:4a:25:83:05:92:9d:7f: 8b:92:be:ca:83:93:cf:7d:cf:b2:00:2b:46:60:0d: 90:ba:cf:4c:7f:7e:d7:9e:4d:de:04:0b:1f:59:bd: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:48:FF:3F:A2:02:0B:F7:21:C7:0E:6F:6E:24:5B:CD:F7:39:76:36 X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:95:9c:b6:fe:22:52:e6:fe:38:5e:ab:0d:85:74:49:af:b0: 31:43:66:6a:19:11:09:70:7a:73:dd:85:13:54:74:4d:4a:32: 85:d9:f7:9d:b3:73:1b:c0:39:3c:b4:bd:f7:0e:4f:54:de:84: c6:1d:4a:95:8e:58:8c:2d:47:03:ef:d6:80:ac:9b:9b:09:08: af:b9:bf:1f:31:7e:97:b5:cc:75:be:5d:34:ff:7c:fb:6c:9c: e3:33:f3:52:e6:1e:49:30:c4:dd:27:88:9b:34:b8:e1:b4:9c: 7e:d5:9e:4f:21:90:f8:1a:fe:2b:24:81:cf:df:a9:97:b4:7f: b3:61:40:7f:f4:46:bb:1e:0f:b6:a3:bb:5f:e3:cb:59:dd:ff: d1:63:59:ec:1d:ba:8e:36:6c:98:e0:8a:a4:3e:22:a8:db:ac: ec:6b:02:7e:26:e1:16:21:04:a1:7d:b3:d9:8c:8e:c5:1e:0f: a8:be:e5:85:33:90:bc:a4:fb:cc:c1:c8:6b:69:a7:2e:66:55: c2:67:31:9e:ca:27:91:7c:b0:44:34:98:91:4f:bc:5e:7b:9f: 4e:0b:e1:9c:0a:15:dd:8a:31:83:37:e0:2a:d8:67:6b:7e:f8: 27:d9:fd:bb:fc:5f:17:60:6c:c3:ec:b7:88:5c:cc:23:1f:61: 99:e2:d9:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjYxMDIyMTY1ODIzWhcNMjYxMDI5MTY1ODIzWjAYMRYwFAYD VQQDEw02YWRhNDBhZi0wYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1TJdX8qciYMzXzJ2Haak4KVhJjAMZCWukQ8HdpWnR0NDn2F3Le6YQtnr1i+ TtFDv4vNPhmrL+DWT7S6t1FCrURTVgs3A5j7oUqUf1oC3FDCtyw3JydCC6liyaKH LQlhauam+wTGh+90aM4pTMfriN+eB/rcIhdrJVdLm+2wT/hxw3fai0OTcqAK02SI EKe9YaLOwrShpUUM7DAl/S7riRXu/i7ARe4xFfKTskFcibrXU8TceUWj5KLmUREm zGuTwMEepvNg1yIO+oTCaweEG1BavsI5nAlckkolgwWSnX+Lkr7Kg5PPfc+yACtG YA2Qus9Mf37Xnk3eBAsfWb2JlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARI/z+i Agv3IccOb24kW833OXY2MB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZJWctv4iUub+OF6rDYV0Sa+wMUNmahkRCXB6c92FE1R0TUoyhdn3nbNzG8A5 PLS99w5PVN6Exh1KlY5YjC1HA+/WgKybmwkIr7m/HzF+l7XMdb5dNP98+2yc4zPz UuYeSTDE3SeImzS44bScftWeTyGQ+Br+KySBz9+pl7R/s2FAf/RGux4PtqO7X+PL Wd3/0WNZ7B26jjZsmOCKpD4iqNus7GsCfibhFiEEoX2z2YyOxR4PqL7lhTOQvKT7 zMHIa2mnLmZVwmcxnsonkXywRDSYkU+8XnufTgvhnAoV3YoxgzfgKthna374J9n9 u/xfF2Bsw+y3iFzMIx9hmeLZZg== -----END CERTIFICATE-----Generated at Fri Oct 23 15:49:07 2026 by rpki-client