$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft File: IYcWgl28-N8zl0SFeJ5HubEAyyk.mft (raw, json) Hash identifier: Ji3Hsc1DKtmQgCgX+I6Y5Gla7L9S4qCHa5RRfT6XYZs= Subject key identifier: 96:73:41:99:81:4D:29:76:42:28:EA:31:68:F1:55:B2:4D:24:8A:AF Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29 Certificate issuer: /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft Manifest number: 2A Signing time: Wed 21 Oct 2026 09:23:32 +0000 Manifest this update: Wed 21 Oct 2026 09:23:32 +0000 Manifest next update: Wed 28 Oct 2026 09:23:32 +0000 Files and hashes: 1: IYcWgl28-N8zl0SFeJ5HubEAyyk.crl (hash: XmbPAg374QA1f+rNG/pXqPqLH/+9WL7mjgI/MIs8Jds=) 2: 7913A610950711F18B35F6754C11F970.roa (hash: Q8JIey66nEoQJLkb6C5AMFi1AtY6XdaeX1xLRY7kKvs=) 3: AFADDB38960011F18583530F5711F970.roa (hash: bGe10TBYBAca5SNsLjK2aIGEmSAIakbZTdRvYFBgU0k=) 4: 9F7A4D22950711F196EC2BEB4C11F970.roa (hash: ii4enchmx/iTiouv3evG9RhEX3dHM7Ii6fGAmSdmsqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29 Validity Not Before: Oct 21 09:23:32 2026 GMT Not After : Oct 28 09:23:32 2026 GMT Subject: CN=6ad88494-fd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:b2:7b:f9:f8:82:8b:4d:4d:82:eb:24:5e: 4a:c7:d6:20:3e:56:4a:4a:f6:8b:de:dc:bf:97:39: c6:b3:7c:b9:47:a2:89:c9:6b:7f:af:37:9d:ad:35: c1:a4:e0:ea:ea:24:6c:9d:76:9a:04:29:c9:5a:6e: b0:67:99:4a:b8:8e:54:8a:e7:f3:82:a7:f0:87:37: f8:7e:84:eb:cb:60:c2:05:2c:95:f0:9d:6e:28:20: 45:99:07:0d:9a:5a:45:fc:50:62:db:38:8b:85:d8: 8c:7a:2a:b9:d3:d5:24:2a:31:20:f9:74:31:b1:3f: 97:a3:17:bd:11:fd:44:8f:30:0e:87:3c:ee:dc:f8: 76:45:02:7d:33:60:cc:41:ee:5c:9a:96:69:ea:a8: 7a:22:e1:14:50:97:85:04:6b:30:69:a5:4b:09:51: c7:bd:fe:06:e1:8a:f8:0d:85:61:e3:0c:fe:ea:c2: 2c:84:43:7c:e0:94:1d:d8:3b:91:a2:8e:1a:c0:a1: 65:51:a7:08:be:fc:0b:6e:8e:31:45:4c:12:6b:5a: d2:d9:48:e5:07:8a:2e:e1:01:30:f3:0d:6e:49:f8: a8:dc:af:c3:9d:07:b9:e9:3c:bb:70:1a:20:a7:08: 14:98:45:20:c5:35:88:8f:cf:3b:a4:fe:dc:e1:12: 6c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:73:41:99:81:4D:29:76:42:28:EA:31:68:F1:55:B2:4D:24:8A:AF X509v3 Authority Key Identifier: keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:02:8f:06:34:32:3b:3a:16:69:fb:ac:c0:38:f3:5e:7c:14: ef:df:0f:61:a1:fa:01:0c:72:6e:d7:aa:4f:62:f7:64:ee:ca: 46:de:4f:cd:9d:7b:00:5e:81:f5:63:8c:2b:ad:28:07:fb:db: 2f:8d:fd:d6:c2:b6:03:ff:91:c0:2b:74:41:55:9a:e4:57:98: d1:2f:a6:46:5d:d5:f3:0b:9c:f3:d4:3d:bb:dd:8d:5d:6b:ba: 66:49:9b:c6:6b:fb:59:da:af:6c:e0:ae:37:21:66:3a:5e:0f: 05:8f:81:87:f4:04:25:4f:fc:f2:69:8a:0a:1d:7f:1c:4b:7b: 50:54:58:14:cd:09:5e:54:69:ec:12:6b:f9:c5:be:af:94:f4: f9:dc:8c:6a:52:f7:0c:e5:4b:5a:8c:bc:2d:de:ad:1e:19:1f: 77:4c:85:c3:94:9c:fb:d4:f3:da:17:03:68:49:84:78:52:dc: a7:57:12:ed:b7:47:97:09:9b:3d:1c:3e:13:88:a2:ba:62:79: 1f:6c:b7:fe:fe:04:8c:a8:f1:59:18:d0:c8:0e:cd:ad:4a:a9: 3b:1b:18:5d:e4:2b:a8:ef:d2:94:53:29:69:7a:17:76:c9:eb: 83:7b:37:55:ff:65:30:1f:00:59:cb:a3:34:3c:87:71:d8:87: 94:d3:30:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTJEOTExMC8GA1UEBRMoMjE4NzE2ODI1REJDRjhERjMzOTc0NDg1Nzg5RTQ3QjlC MTAwQ0IyOTAeFw0yNjEwMjEwOTIzMzJaFw0yNjEwMjgwOTIzMzJaMBgxFjAUBgNV BAMTDTZhZDg4NDk0LWZkOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1yrJ7+fiCi01NguskXkrH1iA+VkpK9ove3L+XOcazfLlHoonJa3+vN52tNcGk 4OrqJGyddpoEKclabrBnmUq4jlSK5/OCp/CHN/h+hOvLYMIFLJXwnW4oIEWZBw2a WkX8UGLbOIuF2Ix6KrnT1SQqMSD5dDGxP5ejF70R/USPMA6HPO7c+HZFAn0zYMxB 7lyalmnqqHoi4RRQl4UEazBppUsJUce9/gbhivgNhWHjDP7qwiyEQ3zglB3YO5Gi jhrAoWVRpwi+/AtujjFFTBJrWtLZSOUHii7hATDzDW5J+Kjcr8OdB7npPLtwGiCn CBSYRSDFNYiPzzuk/tzhEmzBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlnNBmYFN KXZCKOoxaPFVsk0kiq8wHwYDVR0jBBgwFoAUIYcWgl28+N8zl0SFeJ5HubEAyykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMkQ5L0NEQjFBN0NDOTUw NjExRjFBNDZBQjczNjRDMTFGOTcwL0lZY1dnbDI4LU44emwwU0ZlSjVIdWJFQXl5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVljV2dsMjgtTjh6bDBTRmVKNUh1YkVBeXlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MkQ5L0NEQjFBN0NDOTUwNjExRjFBNDZBQjczNjRDMTFGOTcwL0lZY1dnbDI4LU44 emwwU0ZlSjVIdWJFQXl5ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpAo8GNDI7OhZp+6zAOPNefBTv3w9hofoBDHJu16pPYvdk7spG3k/NnXsAXoH1 Y4wrrSgH+9svjf3WwrYD/5HAK3RBVZrkV5jRL6ZGXdXzC5zz1D273Y1da7pmSZvG a/tZ2q9s4K43IWY6Xg8Fj4GH9AQlT/zyaYoKHX8cS3tQVFgUzQleVGnsEmv5xb6v lPT53IxqUvcM5UtajLwt3q0eGR93TIXDlJz71PPaFwNoSYR4UtynVxLtt0eXCZs9 HD4TiKK6YnkfbLf+/gSMqPFZGNDIDs2tSqk7Gxhd5Cuo79KUUylpehd2yeuDezdV /2UwHwBZy6M0PIdx2IeU0zAf -----END CERTIFICATE-----Generated at Thu Oct 22 03:02:18 2026 by rpki-client