$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: 3yKZBv5GLmnIz5RA9bBFD5M+rcUpkGvoo+r5/ZyHZT8= Subject key identifier: 08:BE:29:4D:C2:71:4E:F4:81:5A:79:BF:2E:20:31:0F:ED:74:9D:B5 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 02D4 Signing time: Wed 07 Oct 2026 01:35:04 +0000 Manifest this update: Wed 07 Oct 2026 01:35:04 +0000 Manifest next update: Wed 14 Oct 2026 01:35:04 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: iobDbPdlbXYn/PyB0VaSMgZBvslt3YS4SaJ1WRmsn8Q=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: Y2tXrS6Zqm630FVkkr6TwAuMdb/vqk2vx1Gd77KYwEw=) 3: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: ljxHrBu6KIuaVxEtn8fq/MRvf7thmklR0IUaRaPlt+E=) 4: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: iRobZBHErdOmSfTVjmR1SsfPNzoXkE0mbzfwrTvVbZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Oct 7 01:35:04 2026 GMT Not After : Oct 14 01:35:04 2026 GMT Subject: CN=6ac5a1c8-8e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:ad:93:1b:ed:67:11:25:cf:ba:ad:d3:c2: 78:86:06:a0:1e:43:8f:f4:74:84:b3:e3:b9:c0:34: 8f:61:66:87:50:27:0e:06:c7:aa:af:66:ac:57:81: 1e:d3:1c:8f:5e:c1:71:f9:19:73:73:d0:ad:0d:69: 6c:07:29:e3:cc:17:ce:79:0e:5b:4e:2f:1d:4c:77: a5:ba:c0:28:c4:dc:58:15:96:b5:36:cf:e4:47:d2: ff:7b:7c:eb:26:f2:ce:13:a8:49:07:7c:de:02:44: a0:b9:96:82:35:4c:7a:3b:3e:52:40:f2:84:33:45: d5:98:af:ee:eb:4f:83:0b:6c:53:50:09:4b:e9:89: 30:55:ac:93:e2:dd:21:b7:ce:49:36:0f:85:cd:8e: a5:35:cc:b3:3b:4f:04:0f:11:dd:98:c2:df:42:b9: 6c:57:b2:7e:23:ee:46:26:e8:48:63:5e:e5:fd:27: ed:ab:44:2b:ce:41:6c:46:a5:b9:67:24:1e:bb:4c: 9c:9f:d6:46:f6:54:57:2b:b3:fd:e9:d5:fa:2e:13: 9e:ec:5a:62:9e:5f:5e:a2:82:70:9e:fd:b9:7a:9d: e8:aa:b8:62:17:ff:b7:fa:46:44:cf:7c:62:8f:84: 65:4a:c7:f3:60:d6:dd:21:55:b3:3a:e6:a9:1a:6b: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BE:29:4D:C2:71:4E:F4:81:5A:79:BF:2E:20:31:0F:ED:74:9D:B5 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:47:e6:29:5d:f3:12:08:9d:05:07:5c:57:7f:07:fb:a3:51: 53:f1:7c:44:d3:b1:ad:ff:de:5b:56:31:f3:1c:78:ec:88:84: 17:d9:ba:04:26:2b:16:e8:0c:f2:c9:ec:8b:6d:b2:54:ac:48: 5f:86:3c:38:9b:1b:ac:fd:79:cb:5c:68:67:db:cd:a0:f6:bf: 8d:20:c2:7c:20:28:eb:00:02:d9:1d:0b:03:05:1d:be:d2:bd: 3a:74:a2:7e:cd:00:46:72:bf:d8:e5:4f:1d:cb:5d:a7:65:35: a0:8f:a3:2d:85:7f:40:b1:c4:d2:3a:1f:eb:4c:38:33:dd:9d: 4f:27:37:f3:a4:09:e8:44:d8:6e:1a:60:54:ea:2a:fd:a4:c1: ce:d4:cf:52:0d:f4:7a:ac:5a:28:dd:79:26:29:d0:c5:76:76: 1a:eb:17:5c:6c:bb:22:4e:e9:9e:cd:6a:bb:6c:14:5c:e4:63: 4d:53:84:f5:10:b6:e5:44:8a:c3:31:22:0f:19:2d:30:ae:5b: 9e:dd:39:28:10:cb:ee:a2:4e:ce:a1:31:62:8d:4d:fd:6f:0b: 9f:fc:9e:75:a0:c4:03:37:2c:fd:19:ca:d8:ed:e8:94:22:f8: 69:63:e5:00:80:5e:f6:79:59:a0:df:d8:b9:4a:d7:cd:75:cf: 2e:30:f3:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYxMDA3MDEzNTA0WhcNMjYxMDE0MDEzNTA0WjAYMRYwFAYD VQQDEw02YWM1YTFjOC04ZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzmtkxvtZxElz7qt08J4hgagHkOP9HSEs+O5wDSPYWaHUCcOBseqr2asV4Ee 0xyPXsFx+Rlzc9CtDWlsBynjzBfOeQ5bTi8dTHelusAoxNxYFZa1Ns/kR9L/e3zr JvLOE6hJB3zeAkSguZaCNUx6Oz5SQPKEM0XVmK/u60+DC2xTUAlL6YkwVayT4t0h t85JNg+FzY6lNcyzO08EDxHdmMLfQrlsV7J+I+5GJuhIY17l/Sftq0QrzkFsRqW5 ZyQeu0ycn9ZG9lRXK7P96dX6LhOe7Fpinl9eooJwnv25ep3oqrhiF/+3+kZEz3xi j4RlSsfzYNbdIVWzOuapGmsD6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAi+KU3C cU70gVp5vy4gMQ/tdJ21MB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD0fmKV3zEgidBQdcV38H+6NRU/F8RNOxrf/eW1Yx8xx47IiEF9m6BCYrFugM 8snsi22yVKxIX4Y8OJsbrP15y1xoZ9vNoPa/jSDCfCAo6wAC2R0LAwUdvtK9OnSi fs0ARnK/2OVPHctdp2U1oI+jLYV/QLHE0jof60w4M92dTyc386QJ6ETYbhpgVOoq /aTBztTPUg30eqxaKN15JinQxXZ2GusXXGy7Ik7pns1qu2wUXORjTVOE9RC25USK wzEiDxktMK5bnt05KBDL7qJOzqExYo1N/W8Ln/yedaDEAzcs/RnK2O3olCL4aWPl AIBe9nlZoN/YuUrXzXXPLjDzGQ== -----END CERTIFICATE-----Generated at Wed Oct 7 07:59:11 2026 by rpki-client