$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json) Hash identifier: e1k2YHUADbfwkcJLDwMxKCdDUmRZoYFse2UXjUkK9w4= Subject key identifier: 17:D8:37:B1:AA:93:F8:BD:63:CC:CB:D6:C2:AF:92:E5:D8:C5:38:1A Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft Manifest number: D2 Signing time: Thu 03 Sep 2026 06:56:49 +0000 Manifest this update: Thu 03 Sep 2026 06:56:48 +0000 Manifest next update: Thu 10 Sep 2026 06:56:48 +0000 Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: 4vTzG2LZoiP2smayC64TWUAUC3nweiRUL8lOs98yiNQ=) 2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: yNRoRcrSs2idnKKKQBvpZT7hGrIPyAJ/BqXKminAWZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Validity Not Before: Sep 3 06:56:48 2026 GMT Not After : Sep 10 06:56:48 2026 GMT Subject: CN=6a991a31-4fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:9a:30:f2:47:ff:82:89:81:6a:3d:79:b8: a5:d4:4c:0a:a0:11:8c:22:4e:65:ac:c9:75:4e:f7: 70:8d:eb:d2:58:93:ae:a0:ff:2d:a2:98:58:0f:b0: bc:81:27:d7:b1:1a:57:13:c4:01:7e:5f:fb:b9:3f: c7:2b:c6:90:4d:a8:21:77:6f:35:1c:ac:5d:5e:fd: e5:40:72:bd:3f:63:bc:bf:24:3d:b8:2f:89:32:e9: f3:e0:9b:27:a7:73:77:96:c6:d4:1e:8f:0a:5a:39: 77:bb:b4:13:d3:ea:d1:26:e6:49:e5:9c:52:96:12: ee:cc:20:2e:76:e3:ae:40:4b:16:fb:ff:94:33:30: 81:2a:30:66:c3:48:d9:2c:93:a4:ca:33:68:db:77: a3:ba:34:55:b4:b6:54:8e:7e:b2:5d:d5:5f:6e:12: 62:21:0e:99:df:f5:ad:36:c7:f7:b2:3f:ea:9c:7f: 84:5a:d6:b1:3d:88:e7:3e:6c:c5:83:45:9a:6e:2c: 60:40:13:49:a5:6e:10:df:cc:3e:7d:34:e8:71:7e: 86:0b:7b:0d:c7:17:d6:1a:4d:fa:25:17:2c:b7:1e: 70:0b:38:ab:a4:85:92:40:da:76:ea:c7:1d:6c:3a: c0:90:86:b7:7c:27:fc:84:03:bb:be:e3:20:66:c4: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D8:37:B1:AA:93:F8:BD:63:CC:CB:D6:C2:AF:92:E5:D8:C5:38:1A X509v3 Authority Key Identifier: keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d1:18:d7:71:4d:18:79:be:6f:70:dd:da:1a:a6:4a:b1:52: a5:50:38:ce:e3:47:76:48:a3:94:ec:4e:a8:13:46:83:0e:77: e1:5f:20:5a:55:ca:39:9b:bd:22:bd:51:76:30:82:1f:bc:e5: e5:64:b9:37:f7:09:56:b1:04:00:d3:58:5f:68:f9:cc:53:36: c5:2b:da:4d:97:3c:ac:37:27:39:38:9c:cd:19:05:5d:e6:2a: 19:52:28:0c:6f:5b:e3:eb:1f:bb:3a:66:50:13:97:73:c0:4f: 33:ef:7f:95:3e:24:83:7a:00:d7:77:f8:17:ce:ca:93:19:14: d6:2e:e4:ce:6a:05:ed:d6:12:b0:1e:d3:7f:cc:7f:79:a6:29: bc:eb:f8:7c:2e:94:c7:e6:77:fa:3e:54:e7:a8:03:13:05:f5: 1e:78:62:98:06:3e:ad:d6:b5:d5:35:85:f1:b2:9e:6c:a7:ac: ec:f1:f0:4b:4f:41:84:67:c3:f6:48:9c:ba:f2:ad:70:da:33: 9f:96:e0:18:ee:2e:45:c7:f4:ee:58:70:bf:f6:bc:9e:c2:b1: a8:43:c3:c8:c5:45:d2:d5:ae:d9:b1:4f:6a:4e:55:11:44:81: 5f:69:4c:dc:54:e4:25:68:d4:2f:a9:9d:3b:9a:96:b2:d0:38: c2:8f:ed:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDNjIxMTAvBgNVBAUTKDIxQzhGMkI2RTAxRDBBODJEMTNDMzUxODhDM0M5M0U2 RjUxNEJBOTQwHhcNMjYwOTAzMDY1NjQ4WhcNMjYwOTEwMDY1NjQ4WjAYMRYwFAYD VQQDEw02YTk5MWEzMS00ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHyaMPJH/4KJgWo9ebil1EwKoBGMIk5lrMl1TvdwjevSWJOuoP8tophYD7C8 gSfXsRpXE8QBfl/7uT/HK8aQTaghd281HKxdXv3lQHK9P2O8vyQ9uC+JMunz4Jsn p3N3lsbUHo8KWjl3u7QT0+rRJuZJ5ZxSlhLuzCAuduOuQEsW+/+UMzCBKjBmw0jZ LJOkyjNo23ejujRVtLZUjn6yXdVfbhJiIQ6Z3/WtNsf3sj/qnH+EWtaxPYjnPmzF g0WabixgQBNJpW4Q38w+fTTocX6GC3sNxxfWGk36JRcstx5wCzirpIWSQNp26scd bDrAkIa3fCf8hAO7vuMgZsSgHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfYN7Gq k/i9Y8zL1sKvkuXYxTgaMB8GA1UdIwQYMBaAFCHI8rbgHQqC0Tw1GIw8k+b1FLqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUM2Mi8wQUVBQUNENjZC NjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVBZENvTFJQRFVZakR5VDV2VVV1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUM2Mi8wQUVBQUNENjZCNjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVBZENv TFJQRFVZakR5VDV2VVV1cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO9EY13FNGHm+b3Dd2hqmSrFSpVA4zuNHdkijlOxOqBNGgw534V8gWlXKOZu9 Ir1RdjCCH7zl5WS5N/cJVrEEANNYX2j5zFM2xSvaTZc8rDcnOTiczRkFXeYqGVIo DG9b4+sfuzpmUBOXc8BPM+9/lT4kg3oA13f4F87KkxkU1i7kzmoF7dYSsB7Tf8x/ eaYpvOv4fC6Ux+Z3+j5U56gDEwX1HnhimAY+rda11TWF8bKebKes7PHwS09BhGfD 9kicuvKtcNozn5bgGO4uRcf07lhwv/a8nsKxqEPDyMVF0tWu2bFPak5VEUSBX2lM 3FTkJWjUL6mdO5qWstA4wo/trQ== -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:06 2026 by rpki-client