$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft File: IKFf0591NMenolMf7YtaFwipP1I.mft (raw, json) Hash identifier: SKs6aOzuZtH1DUktoaIgV5vL+g917Umu3+JiIHo6fLA= Subject key identifier: C9:8A:8D:6C:05:4C:09:9F:41:4B:55:1D:2E:C9:B9:B3:EB:96:95:ED Authority key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52 Certificate issuer: /CN=A9191BBE/serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft Manifest number: 43 Signing time: Thu 17 Sep 2026 08:50:46 +0000 Manifest this update: Thu 17 Sep 2026 08:50:46 +0000 Manifest next update: Thu 24 Sep 2026 08:50:46 +0000 Files and hashes: 1: IKFf0591NMenolMf7YtaFwipP1I.crl (hash: L/Ex1TX8JAEfr2jMyKOeKrLvzjeFXnbRNiXRkdQnPD8=) 2: 01A09AD4529A11F1B2F4C97190833773.roa (hash: NfdzF777/UwYTCe/PzbVSLCJnNVSjxZR+DIbcSpMCqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52 Validity Not Before: Sep 17 08:50:46 2026 GMT Not After : Sep 24 08:50:46 2026 GMT Subject: CN=6aaba9e6-d4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:8b:87:36:6d:8e:eb:82:f8:2b:f4:72:3d: aa:53:39:3f:7d:8f:9e:4a:f7:9d:07:44:5c:d3:56: 0d:67:b7:5c:67:64:bb:d8:c9:cc:64:eb:c5:8b:a2: 2f:80:66:ec:53:c4:75:69:38:41:fa:15:68:0a:b8: 7f:9c:65:e1:9d:07:a5:5e:2f:2b:ce:a9:37:15:6d: c9:ca:fb:a4:0e:0e:df:76:77:86:26:e2:1b:da:b5: bd:cc:a7:b4:ff:2d:41:41:e8:71:cc:47:08:2a:84: 2f:23:48:e8:d7:67:e0:bf:21:54:79:64:bb:15:2c: 4a:e7:78:0c:22:05:7e:69:8e:2b:c5:88:bf:88:75: 91:04:dc:84:c9:fb:e1:3f:0e:77:d3:55:33:a7:2a: 52:3e:46:1e:fa:11:ff:b0:d5:94:8a:55:8d:0e:55: d0:65:df:04:6b:4a:a2:09:00:f8:75:79:9f:da:d8: d3:66:22:fd:ff:7d:b5:5c:f0:c5:93:3f:c9:39:72: 1b:70:d1:b6:63:c7:22:ea:3b:fc:94:18:3b:50:15: ff:1d:b6:ca:b7:8b:b3:ba:08:c9:1b:07:00:42:62: c3:74:fe:c9:ec:d1:2f:98:40:4b:72:8d:77:4f:fd: 07:b2:20:e2:17:28:6c:54:40:22:93:ba:e1:52:aa: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:8D:6C:05:4C:09:9F:41:4B:55:1D:2E:C9:B9:B3:EB:96:95:ED X509v3 Authority Key Identifier: keyid:20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a1:40:9d:2e:42:bc:ab:e4:7d:90:4c:c5:12:89:28:22:36: 30:c8:29:00:f7:0c:d3:bf:4c:4a:d8:9e:5f:c4:ab:d8:c9:9a: c7:50:54:f5:78:fd:15:95:15:b3:73:b9:50:e9:e1:00:f2:dc: 05:97:a0:5a:ab:ba:95:03:52:47:1f:89:7e:5a:8f:42:89:54: ab:d1:cb:05:22:e8:0d:86:d1:04:e1:8a:6f:33:01:c3:3a:0a: 44:5c:85:85:b7:03:62:ef:7d:be:1a:cd:57:13:be:fd:f2:01: 1a:58:5b:d0:b1:c3:89:2f:92:ff:de:62:11:62:60:11:dc:ec: d7:81:51:cb:e5:86:36:a5:32:70:af:77:5b:31:24:67:b8:7b: 8b:97:52:8c:b8:e2:49:2b:7a:ce:eb:9a:24:eb:d1:ba:e3:b3: 90:b5:59:b5:78:79:b6:59:e2:7c:e5:8c:cf:2b:cd:50:70:88: cd:87:0e:d8:e2:76:1d:73:12:86:0d:6f:b0:12:ca:5a:7a:6a: 7c:04:5c:eb:ad:95:af:50:c3:a3:4c:d2:a6:a0:95:49:93:13: 86:f4:26:43:c5:5c:84:ad:40:fc:52:a5:fd:39:d5:bc:f2:55: 54:40:c0:e1:a0:41:45:9d:61:8d:cb:7d:d1:dd:3c:4d:93:82: e2:f5:2f:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MUJCRTExMC8GA1UEBRMoMjBBMTVGRDM5Rjc1MzRDN0E3QTI1MzFGRUQ4QjVBMTcw OEE5M0Y1MjAeFw0yNjA5MTcwODUwNDZaFw0yNjA5MjQwODUwNDZaMBgxFjAUBgNV BAMTDTZhYWJhOWU2LWQ0YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwoIuHNm2O64L4K/RyPapTOT99j55K950HRFzTVg1nt1xnZLvYycxk68WLoi+A ZuxTxHVpOEH6FWgKuH+cZeGdB6VeLyvOqTcVbcnK+6QODt92d4Ym4hvatb3Mp7T/ LUFB6HHMRwgqhC8jSOjXZ+C/IVR5ZLsVLErneAwiBX5pjivFiL+IdZEE3ITJ++E/ DnfTVTOnKlI+Rh76Ef+w1ZSKVY0OVdBl3wRrSqIJAPh1eZ/a2NNmIv3/fbVc8MWT P8k5chtw0bZjxyLqO/yUGDtQFf8dtsq3i7O6CMkbBwBCYsN0/sns0S+YQEtyjXdP /QeyIOIXKGxUQCKTuuFSql0nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyYqNbAVM CZ9BS1UdLsm5s+uWle0wHwYDVR0jBBgwFoAUIKFf0591NMenolMf7YtaFwipP1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxQkJFL0I3Qjk4RkFDNTI5 OTExRjE4OTkxMTkzRDkwODMzNzczL0lLRmYwNTkxTk1lbm9sTWY3WXRhRndpcFAx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSUtGZjA1OTFOTWVub2xNZjdZdGFGd2lwUDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx QkJFL0I3Qjk4RkFDNTI5OTExRjE4OTkxMTkzRDkwODMzNzczL0lLRmYwNTkxTk1l bm9sTWY3WXRhRndpcFAxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkoUCdLkK8q+R9kEzFEokoIjYwyCkA9wzTv0xK2J5fxKvYyZrHUFT1eP0VlRWz c7lQ6eEA8twFl6Baq7qVA1JHH4l+Wo9CiVSr0csFIugNhtEE4YpvMwHDOgpEXIWF twNi732+Gs1XE7798gEaWFvQscOJL5L/3mIRYmAR3OzXgVHL5YY2pTJwr3dbMSRn uHuLl1KMuOJJK3rO65ok69G647OQtVm1eHm2WeJ85YzPK81QcIjNhw7Y4nYdcxKG DW+wEspaemp8BFzrrZWvUMOjTNKmoJVJkxOG9CZDxVyErUD8UqX9OdW88lVUQMDh oEFFnWGNy33R3TxNk4Li9S9p -----END CERTIFICATE-----Generated at Sat Sep 19 08:44:01 2026 by rpki-client