$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json) Hash identifier: AXnBEDsPnFa7Gy8Vv5nSacenNt4DFITfaCUTxPi9IIg= Subject key identifier: 79:7A:F2:06:98:B9:20:3D:C5:91:A4:7E:5A:88:F9:0B:79:BB:63:C2 Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft Manifest number: 0150 Signing time: Fri 04 Sep 2026 08:56:07 +0000 Manifest this update: Fri 04 Sep 2026 08:56:06 +0000 Manifest next update: Fri 11 Sep 2026 08:56:06 +0000 Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: HTQbcs4oVLUzI+JJ/dE8YWGlzAMlL20kk/qCSVXxpow=) 2: BB5954CE241111F094390A32C4F9AE02.roa (hash: ef4lv30v406PmcKm4a1LzWHrixGqc5q9ekgP0Wh8CuU=) 3: lM-TprDofa3mdD2nduyXi_4xBlU.asa (hash: nBHzp1rY3qS8haLL2LslsF//VUiGFxVcvC4ou7bnwZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 08:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Validity Not Before: Sep 4 08:56:06 2026 GMT Not After : Sep 11 08:56:06 2026 GMT Subject: CN=6a9a87a7-7048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d4:b0:52:fa:80:de:db:1c:8d:28:f1:aa:69: 7e:06:44:50:96:38:c7:12:32:e4:1e:86:db:0f:db: b6:5e:f6:aa:9d:0c:1e:a8:2a:e4:73:02:23:c5:7e: d2:72:fd:c7:68:27:7b:f3:db:f6:16:89:86:12:d3: 1e:63:18:40:fd:74:47:5e:25:42:74:c4:68:69:74: a4:83:63:0d:d8:02:5e:c2:66:18:00:15:40:fd:27: 70:1a:25:b3:ac:07:b1:e0:e4:e3:50:fd:20:f9:4d: 6d:6b:8b:de:6f:49:84:09:f8:f3:10:19:7b:9f:aa: 07:00:76:2b:f1:e4:82:3f:5c:18:d1:85:52:d8:9b: 31:65:6c:c5:5f:07:7a:4f:0c:1e:18:7c:30:ac:42: 78:f7:f3:a2:c0:a0:63:c3:8b:0d:66:30:6b:e5:71: cb:42:a5:55:d9:db:a3:42:7d:dd:b1:b3:f8:65:f4: 10:25:0d:50:f1:3c:bd:85:3d:04:72:58:72:c4:6c: 86:18:17:87:f4:84:69:96:6c:61:61:1e:2c:56:b2: 0a:1f:44:21:92:91:d2:7b:61:f5:89:05:84:4a:1e: 3c:c0:13:9a:bd:9a:7a:87:7d:99:0d:8e:0f:2c:9d: f2:c1:93:26:eb:4c:08:60:13:23:fd:56:44:f7:fd: cd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7A:F2:06:98:B9:20:3D:C5:91:A4:7E:5A:88:F9:0B:79:BB:63:C2 X509v3 Authority Key Identifier: keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:13:aa:5e:aa:da:ab:a9:c7:0f:ef:6f:7b:64:ca:2d:ad: 84:68:b9:58:8f:36:87:99:99:c2:fd:d3:5d:ab:97:76:db:77: 6b:5b:b8:b1:21:f4:bf:3d:44:0f:21:a5:1d:d0:7c:0d:1b:30: 0d:d6:71:22:04:79:52:24:09:2f:9d:05:37:2f:c8:33:f6:3b: 16:76:7b:63:5e:f3:16:8e:47:5c:09:b0:67:72:e6:e0:f2:f8: 13:70:33:48:3d:27:c9:9f:be:cd:91:18:da:fe:dc:72:42:ec: eb:d5:4e:1d:a2:7a:26:d6:73:4e:1f:8e:b0:c2:4e:76:dc:56: 61:aa:cd:02:a0:83:47:b9:6b:8c:fa:c8:03:ed:9b:43:76:4c: fe:3c:5b:b8:5e:d4:53:ad:a4:af:83:d2:c6:ae:ab:a6:4e:3d: 26:91:04:85:60:71:4a:ff:6e:e6:cb:86:7a:dc:af:6f:73:b4: 5e:e9:8d:94:fc:e5:f4:6d:2d:37:bd:5b:5a:41:98:7e:a2:55: 69:ba:5d:db:df:30:52:a2:32:15:20:49:e8:a6:4c:f8:20:18: d5:fc:8a:84:7f:ae:77:f4:9e:a3:ba:53:40:ef:2d:a5:79:c7: 1c:a5:52:fb:97:d9:ae:50:87:0b:f2:e7:9b:78:ad:25:cf:2a: 20:ad:39:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKEQ2MjcxNkY3NjFGMTg4RDU2RkExMTdGOURDOTRCRTQx NDEwNEE2ODEwHhcNMjYwOTA0MDg1NjA2WhcNMjYwOTExMDg1NjA2WjAYMRYwFAYD VQQDEw02YTlhODdhNy03MDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztSwUvqA3tscjSjxqml+BkRQljjHEjLkHobbD9u2XvaqnQweqCrkcwIjxX7S cv3HaCd789v2FomGEtMeYxhA/XRHXiVCdMRoaXSkg2MN2AJewmYYABVA/SdwGiWz rAex4OTjUP0g+U1ta4veb0mECfjzEBl7n6oHAHYr8eSCP1wY0YVS2JsxZWzFXwd6 TwweGHwwrEJ49/OiwKBjw4sNZjBr5XHLQqVV2dujQn3dsbP4ZfQQJQ1Q8Ty9hT0E clhyxGyGGBeH9IRplmxhYR4sVrIKH0QhkpHSe2H1iQWESh48wBOavZp6h32ZDY4P LJ3ywZMm60wIYBMj/VZE9/3N9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHl68gaY uSA9xZGkflqI+Qt5u2PCMB8GA1UdIwQYMBaAFNYnFvdh8YjVb6EX+dyUvkFBBKaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My8wNUZGQzAwRUFD ODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlOVnZvUmY1M0pTLVFVRUVw b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My8wNUZGQzAwRUFDODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlO VnZvUmY1M0pTLVFVRUVwb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkAATql6q2qupxw/vb3tkyi2thGi5WI82h5mZwv3TXauXdtt3a1u4sSH0vz1E DyGlHdB8DRswDdZxIgR5UiQJL50FNy/IM/Y7FnZ7Y17zFo5HXAmwZ3Lm4PL4E3Az SD0nyZ++zZEY2v7cckLs69VOHaJ6JtZzTh+OsMJOdtxWYarNAqCDR7lrjPrIA+2b Q3ZM/jxbuF7UU62kr4PSxq6rpk49JpEEhWBxSv9u5suGetyvb3O0XumNlPzl9G0t N71bWkGYfqJVabpd298wUqIyFSBJ6KZM+CAY1fyKhH+ud/Seo7pTQO8tpXnHHKVS +5fZrlCHC/Lnm3itJc8qIK055A== -----END CERTIFICATE-----Generated at Sat Sep 5 02:53:53 2026 by rpki-client