$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft File: IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json) Hash identifier: Xp5szCMuBwlDYY5ENfPA779vCbPQTJ5fvFvWOUpeK9c= Subject key identifier: 20:01:6F:83:D2:6F:AB:B4:36:18:F1:DA:0F:86:FF:03:AC:C7:73:B2 Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 Certificate issuer: /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft Manifest number: 9A Signing time: Sun 11 Oct 2026 07:58:27 +0000 Manifest this update: Sun 11 Oct 2026 07:58:26 +0000 Manifest next update: Sun 18 Oct 2026 07:58:26 +0000 Files and hashes: 1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: E89JD7UawB/a49ipIkFxHYgj7b97NUdzLZYNhwf4gh4=) 2: 78211876DA3811F080F82F148DD3641D.roa (hash: iQuCstGoIK1MPnU6/cDDIt+974fe7iZAlTkSxssvjXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 07:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Validity Not Before: Oct 11 07:58:26 2026 GMT Not After : Oct 18 07:58:26 2026 GMT Subject: CN=6acb41a3-93af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:68:ab:84:43:f4:96:c8:e9:15:3e:16:25: 63:23:5b:43:13:00:84:c7:fe:ba:83:5a:38:e6:79: 98:57:b6:bf:00:d5:f8:0e:fa:c7:99:e2:1d:6c:f5: 85:02:3f:80:fe:81:0b:9c:e5:be:4a:29:38:25:4a: 1d:30:8e:42:f0:ce:87:d9:56:a6:ce:ca:19:71:bf: a0:5a:4d:24:17:0c:28:dc:f2:d9:bb:2f:62:85:5e: 35:11:ae:3e:e3:d9:f1:31:a4:89:c8:0b:95:d2:89: 67:90:50:b7:7c:26:43:03:d3:4c:54:f6:c4:26:4d: 55:92:c6:f1:06:79:d5:8c:5e:4e:55:9f:4d:bc:2c: 4e:8a:21:2c:f1:e1:f8:8b:c2:9f:4c:2e:42:d9:eb: 24:4a:d3:1e:74:45:51:14:e4:79:5b:be:c5:a6:a2: fd:8f:ce:62:a8:41:0b:3e:5b:20:51:c6:42:2d:65: 9f:2d:82:ab:ad:56:44:76:47:4b:03:26:8e:b3:32: cc:47:7d:8e:b5:a6:b5:f3:7a:ed:8c:73:b9:2f:0e: c5:97:53:fd:f2:1d:21:d9:50:d6:ed:6e:55:23:3c: a2:ad:98:59:9c:ee:79:05:16:39:d0:5f:42:6f:74: f1:71:79:41:ee:ae:a8:09:ab:40:70:5a:e1:3f:61: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:01:6F:83:D2:6F:AB:B4:36:18:F1:DA:0F:86:FF:03:AC:C7:73:B2 X509v3 Authority Key Identifier: keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a6:0a:0f:0f:c7:de:ea:6f:c9:25:53:a5:dd:bc:d5:06:c5: b0:ca:75:59:16:85:de:0f:28:df:3f:02:49:3d:a7:37:32:02: f3:91:58:ce:09:8d:b7:6b:a2:97:7d:8c:c6:12:e1:a9:b5:22: 8b:e6:22:ad:69:3b:e5:48:8b:fc:97:91:54:99:8e:bd:0d:e5: 45:40:f2:7e:6c:90:a8:c5:8a:27:23:ad:19:d5:60:39:35:da: a5:e8:84:0f:b7:75:c6:91:6f:7f:a2:7c:82:69:28:1e:31:78: 4e:ad:60:cb:76:14:52:5c:4e:5c:62:d4:84:0e:97:b3:19:79: c3:68:82:cd:d9:70:dd:92:4e:48:4a:12:3f:fa:e4:cd:12:51: 82:84:21:a9:b0:30:c9:bc:20:12:e5:35:a3:b2:3e:74:ad:fb: 6e:82:1a:2e:af:b9:2e:a0:da:8b:db:5e:5d:93:25:3e:43:55: d9:17:9d:3a:22:7d:ee:7c:62:20:2f:b5:9d:be:6c:9d:7b:48: 28:ee:70:56:38:a3:e9:aa:c6:b0:57:61:6c:9b:5a:6a:a1:4b: 79:b5:83:e7:d1:72:4b:aa:e5:5d:ef:1e:d2:33:94:14:c3:5b: 45:73:35:9f:01:24:25:4d:84:14:83:20:73:d0:1e:e9:1c:2f: 59:1e:38:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQwQjIxMTAvBgNVBAUTKDIwRjNCQkQ0OThGNDNDOTc5MTNFRTFCOTk0MjlEQjg5 MEI0NzYyQjAwHhcNMjYxMDExMDc1ODI2WhcNMjYxMDE4MDc1ODI2WjAYMRYwFAYD VQQDEw02YWNiNDFhMy05M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs49oq4RD9JbI6RU+FiVjI1tDEwCEx/66g1o45nmYV7a/ANX4DvrHmeIdbPWF Aj+A/oELnOW+Sik4JUodMI5C8M6H2VamzsoZcb+gWk0kFwwo3PLZuy9ihV41Ea4+ 49nxMaSJyAuV0olnkFC3fCZDA9NMVPbEJk1VksbxBnnVjF5OVZ9NvCxOiiEs8eH4 i8KfTC5C2eskStMedEVRFOR5W77FpqL9j85iqEELPlsgUcZCLWWfLYKrrVZEdkdL AyaOszLMR32Otaa183rtjHO5Lw7Fl1P98h0h2VDW7W5VIzyirZhZnO55BRY50F9C b3TxcXlB7q6oCatAcFrhP2F80QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCABb4PS b6u0Nhjx2g+G/wOsx3OyMB8GA1UdIwQYMBaAFCDzu9SY9DyXkT7huZQp24kLR2Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDBCMi9EMTQ2RTRGMERB MzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9JUE83MUpqMFBKZVJQdUc1bENuYmlRdEhZ ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lQTzcxSmowUEplUlB1RzVsQ25iaVF0SFlyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDBCMi9EMTQ2RTRGMERBMzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9JUE83MUpqMFBK ZVJQdUc1bENuYmlRdEhZckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIqYKDw/H3upvySVTpd281QbFsMp1WRaF3g8o3z8CST2nNzIC85FYzgmNt2ui l32MxhLhqbUii+YirWk75UiL/JeRVJmOvQ3lRUDyfmyQqMWKJyOtGdVgOTXapeiE D7d1xpFvf6J8gmkoHjF4Tq1gy3YUUlxOXGLUhA6Xsxl5w2iCzdlw3ZJOSEoSP/rk zRJRgoQhqbAwybwgEuU1o7I+dK37boIaLq+5LqDai9teXZMlPkNV2RedOiJ97nxi IC+1nb5snXtIKO5wVjij6arGsFdhbJtaaqFLebWD59FyS6rlXe8e0jOUFMNbRXM1 nwEkJU2EFIMgc9Ae6RwvWR44tg== -----END CERTIFICATE-----Generated at Sun Oct 11 23:14:18 2026 by rpki-client