$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json) Hash identifier: GbT77GI0edvGn74fkqBw4UQEwZ4HZPLRAt7ttFFS+7E= Subject key identifier: 6B:D9:6F:D2:6A:8B:FD:C6:A2:74:F9:4E:76:E7:5F:4C:57:17:66:72 Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft Manifest number: 02E7 Signing time: Wed 07 Oct 2026 01:24:23 +0000 Manifest this update: Wed 07 Oct 2026 01:24:22 +0000 Manifest next update: Wed 14 Oct 2026 01:24:22 +0000 Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: XwGhoFhpbHjsamz4rE+cG2q4iydhkC01bbDeaVsLBBY=) 2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Oct 7 01:24:22 2026 GMT Not After : Oct 14 01:24:22 2026 GMT Subject: CN=6ac59f47-acf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:95:59:5d:73:b5:5d:5f:b2:32:db:57:a9: 4d:2b:a9:9c:a9:68:bf:24:2c:60:15:f2:2b:ef:0c: b5:b0:c1:7e:75:24:f8:e0:c3:9c:95:13:ab:ee:1e: d9:8c:0d:a3:83:84:40:35:89:76:5a:14:c0:4f:fa: 8e:e4:4b:ec:c6:69:aa:37:88:e9:0f:35:d3:7e:80: 51:20:02:34:94:ac:dc:c9:18:31:9f:b5:6b:b9:7c: 45:24:68:90:82:ce:14:8d:3e:55:49:28:f8:79:d7: bc:cc:30:55:ee:c4:db:de:1d:3e:e9:2f:86:b8:7d: bd:9a:1f:78:76:5a:93:9d:ca:40:6b:40:1d:14:09: 53:33:71:ec:a7:44:8e:5b:a7:9b:13:48:31:a3:fa: 0d:9e:d0:f1:35:92:03:30:55:bd:53:fa:1b:12:29: 85:84:f5:0d:e6:52:dc:31:9f:c8:d5:40:ae:49:ac: 64:72:5d:a4:e0:4d:d1:2e:fb:a5:f0:7a:50:9a:64: 3a:a4:03:93:b3:c1:89:4f:d7:6a:1d:eb:9f:e3:f0: 71:ef:d5:ab:aa:1e:99:98:49:1d:69:48:c8:0f:04: 7c:bd:3e:90:f0:c0:9c:18:86:dc:4d:07:d7:e3:c6: e4:6a:99:eb:17:76:43:a3:f4:90:3e:f5:cd:ab:f6: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D9:6F:D2:6A:8B:FD:C6:A2:74:F9:4E:76:E7:5F:4C:57:17:66:72 X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:02:7b:28:60:90:ca:6e:f9:85:3e:3d:20:4b:6e:ed:be:f7: e1:2b:18:2d:6b:63:a6:5a:6c:73:ed:cd:75:4f:90:01:ea:11: 8f:56:de:e3:b4:57:4f:4e:74:f2:a7:ef:0b:f9:af:18:02:f4: 7e:6c:c6:12:e0:63:0c:85:f9:b6:35:55:d1:db:a0:14:8f:45: d5:67:96:ce:0a:15:4d:e3:c2:3c:8d:52:58:d7:65:23:9b:1f: 78:9a:1a:6a:19:67:08:65:d3:ee:ec:de:e0:3e:3f:8d:32:74: 0e:07:c7:11:41:9c:a4:40:8d:5e:d4:21:86:59:c6:43:38:a0: 46:29:a4:c3:8f:22:80:11:54:31:31:23:78:7b:81:23:2c:89: e3:16:18:03:91:bd:18:73:2a:35:a4:f3:6b:1d:a9:41:6d:cc: ad:d5:34:67:c2:11:c3:71:52:0d:2f:d8:12:54:c9:90:8b:b1: a5:57:36:76:9c:17:a0:92:e2:c4:4a:46:11:26:f8:d4:8e:47: c7:66:75:11:bf:0c:54:50:cb:a3:a4:17:89:d0:99:e5:2b:e9: 0d:f2:9e:76:21:91:55:33:81:5c:c4:8d:63:c2:90:c5:1c:03: c7:ad:73:a9:dc:7d:15:c7:7b:91:df:fc:7a:66:ce:57:9d:19: c7:dd:c4:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjYxMDA3MDEyNDIyWhcNMjYxMDE0MDEyNDIyWjAYMRYwFAYD VQQDEw02YWM1OWY0Ny1hY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT6VWV1ztV1fsjLbV6lNK6mcqWi/JCxgFfIr7wy1sMF+dST44MOclROr7h7Z jA2jg4RANYl2WhTAT/qO5EvsxmmqN4jpDzXTfoBRIAI0lKzcyRgxn7VruXxFJGiQ gs4UjT5VSSj4ede8zDBV7sTb3h0+6S+GuH29mh94dlqTncpAa0AdFAlTM3Hsp0SO W6ebE0gxo/oNntDxNZIDMFW9U/obEimFhPUN5lLcMZ/I1UCuSaxkcl2k4E3RLvul 8HpQmmQ6pAOTs8GJT9dqHeuf4/Bx79Wrqh6ZmEkdaUjIDwR8vT6Q8MCcGIbcTQfX 48bkapnrF3ZDo/SQPvXNq/Zz/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvZb9Jq i/3GonT5TnbnX0xXF2ZyMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCNy9CMUU1NEFCODU2QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5 UEtuRU9lMlBWVGlQYW1qT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASgJ7KGCQym75hT49IEtu7b734SsYLWtjplpsc+3NdU+QAeoRj1be47RXT050 8qfvC/mvGAL0fmzGEuBjDIX5tjVV0dugFI9F1WeWzgoVTePCPI1SWNdlI5sfeJoa ahlnCGXT7uze4D4/jTJ0DgfHEUGcpECNXtQhhlnGQzigRimkw48igBFUMTEjeHuB IyyJ4xYYA5G9GHMqNaTzax2pQW3MrdU0Z8IRw3FSDS/YElTJkIuxpVc2dpwXoJLi xEpGESb41I5Hx2Z1Eb8MVFDLo6QXidCZ5SvpDfKediGRVTOBXMSNY8KQxRwDx61z qdx9Fcd7kd/8embOV50Zx93EMg== -----END CERTIFICATE-----Generated at Wed Oct 7 17:16:08 2026 by rpki-client