$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: 6GhlE2K0SwK2MwgfnQXTCrrCGTGyjiK+d7x4AfmqmHk= Subject key identifier: 29:40:2F:BA:87:EA:84:D5:B6:9E:0D:95:32:9E:C0:A4:1D:C0:8A:30 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 0AE2 Signing time: Sun 04 Oct 2026 19:27:02 +0000 Manifest this update: Sun 04 Oct 2026 19:27:02 +0000 Manifest next update: Sun 11 Oct 2026 19:27:02 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: 4UnHx4MmN8sFqSb6vXYTvRxUvV8txhCkcXnjIGG3u3A=) 2: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: rJhV33fhTZ9wWjDZMsmY3oUmfWvnegOyW8s4W29U15g=) 3: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ADIn3fSPUFxghKrm6LZn3szet1wFIU+8TgC1/BfDmm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Oct 4 19:27:02 2026 GMT Not After : Oct 11 19:27:02 2026 GMT Subject: CN=6ac2a886-036c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:39:3d:97:74:e7:0c:c3:86:70:b2:cb:3b: 89:23:a5:7e:52:30:ba:f7:6b:91:df:c7:b9:a4:43: a5:14:0b:6b:a7:d9:da:d2:a4:e9:eb:40:df:a1:a9: 1d:55:59:20:8b:03:2c:9d:57:b0:e9:bf:9e:d8:0d: bf:06:41:85:2b:4a:1d:ac:cd:fc:6b:ba:a1:47:68: 27:0f:b6:0a:c1:e2:16:34:38:5a:d7:36:70:42:0c: 18:fa:2e:c6:01:10:38:da:fd:f3:03:e0:5f:39:34: d3:6a:2f:1b:8e:80:19:6a:87:bb:e3:5f:49:e2:b7: e8:ae:8f:31:93:75:a9:9c:e8:3e:81:08:77:f2:35: cd:dd:87:d4:65:63:3d:b9:21:a4:0d:eb:14:ba:4c: 7a:f8:03:fc:c8:1b:b8:fb:5e:b8:8d:3d:79:e3:4b: 10:74:6a:5e:11:94:ed:0a:85:ec:6b:40:5e:f7:70: 90:f1:d5:f0:b0:a4:bb:92:3d:d3:70:dc:0d:50:eb: 7f:0e:a4:a1:10:3c:1d:9a:c6:78:6d:bb:12:da:36: 7a:e7:fc:27:1f:8d:08:f6:1d:68:94:a8:00:30:48: 81:b0:9b:ad:4d:dd:89:db:68:da:97:50:c2:d9:8c: 25:22:6b:9a:25:05:f2:c4:3d:b7:7e:67:08:0d:a7: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:40:2F:BA:87:EA:84:D5:B6:9E:0D:95:32:9E:C0:A4:1D:C0:8A:30 X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:6e:a8:44:6f:77:b5:3a:35:06:e0:b5:89:53:84:ed:6c:52: 58:ed:30:23:cc:58:3d:33:49:28:6b:6b:84:81:c3:46:fc:bd: 23:00:c1:b2:5d:7e:4e:11:79:3a:af:c0:10:05:c4:0b:98:3b: ed:6f:72:c6:db:c8:d5:f5:13:2e:2d:0e:8c:68:83:72:3b:d7: 08:61:7f:61:92:9f:aa:9d:ae:b4:a8:12:9e:3c:05:80:cb:f6: 33:96:b0:38:b9:70:43:c3:a6:96:8c:0e:9a:3b:6d:3e:47:82: ec:2d:17:6d:29:e3:51:ac:ca:7e:c9:5d:c5:05:03:f8:b4:24: 96:1e:23:2a:72:69:98:38:9c:07:47:e0:2b:9a:8b:da:e7:cb: 4e:4c:f3:7f:47:34:9c:a4:21:fa:70:61:f9:c2:11:dc:d2:39: 46:7a:cc:e1:ac:0a:cb:9e:a0:3c:4f:ec:36:4a:05:a4:47:a6: 66:cd:79:87:19:a9:40:a6:75:29:f6:31:6d:bf:44:6e:5b:1e: f0:43:fb:27:8f:a1:da:92:53:b6:6c:80:f0:6f:00:89:a9:e2: 90:76:1b:14:a2:1b:69:f8:c4:7e:b5:0b:da:7a:b1:a2:78:12: 36:19:6a:59:f3:23:59:18:09:4c:45:a3:20:24:46:2f:56:23: d2:13:c5:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjYxMDA0MTkyNzAyWhcNMjYxMDExMTkyNzAyWjAYMRYwFAYD VQQDEw02YWMyYTg4Ni0wMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsM5PZd05wzDhnCyyzuJI6V+UjC692uR38e5pEOlFAtrp9na0qTp60Dfoakd VVkgiwMsnVew6b+e2A2/BkGFK0odrM38a7qhR2gnD7YKweIWNDha1zZwQgwY+i7G ARA42v3zA+BfOTTTai8bjoAZaoe7419J4rforo8xk3WpnOg+gQh38jXN3YfUZWM9 uSGkDesUukx6+AP8yBu4+164jT1540sQdGpeEZTtCoXsa0Be93CQ8dXwsKS7kj3T cNwNUOt/DqShEDwdmsZ4bbsS2jZ65/wnH40I9h1olKgAMEiBsJutTd2J22jal1DC 2YwlImuaJQXyxD23fmcIDadOowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClAL7qH 6oTVtp4NlTKewKQdwIowMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsm6oRG93tTo1BuC1iVOE7WxSWO0wI8xYPTNJKGtrhIHDRvy9IwDBsl1+ThF5 Oq/AEAXEC5g77W9yxtvI1fUTLi0OjGiDcjvXCGF/YZKfqp2utKgSnjwFgMv2M5aw OLlwQ8OmlowOmjttPkeC7C0XbSnjUazKfsldxQUD+LQklh4jKnJpmDicB0fgK5qL 2ufLTkzzf0c0nKQh+nBh+cIR3NI5RnrM4awKy56gPE/sNkoFpEemZs15hxmpQKZ1 KfYxbb9Eblse8EP7J4+h2pJTtmyA8G8AianikHYbFKIbafjEfrUL2nqxongSNhlq WfMjWRgJTEWjICRGL1Yj0hPFig== -----END CERTIFICATE-----Generated at Tue Oct 6 21:10:35 2026 by rpki-client