$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft File: iEJo0B0Z6qM0kqniXPayue5vG34.mft (raw, json) Hash identifier: +skde+xq1AzWWTwACI/FcP4PjriWBoD8v+KbTP9+TAs= Subject key identifier: 8A:67:AE:CC:5C:1C:DC:88:DC:56:1A:A4:0C:D1:FE:23:98:2F:75:D4 Authority key identifier: 88:42:68:D0:1D:19:EA:A3:34:92:A9:E2:5C:F6:B2:B9:EE:6F:1B:7E Certificate issuer: /CN=A91C9ADB/serialNumber=884268D01D19EAA33492A9E25CF6B2B9EE6F1B7E Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft Manifest number: 2F Signing time: Tue 27 Oct 2026 09:00:57 +0000 Manifest this update: Tue 27 Oct 2026 09:00:56 +0000 Manifest next update: Tue 03 Nov 2026 09:00:56 +0000 Files and hashes: 1: iEJo0B0Z6qM0kqniXPayue5vG34.crl (hash: INlXz29EbjrN+haOfrgj63STAmlbf6lBBMPgxcGTwFU=) 2: 2571056C8F1611F1B716621D3511F970.roa (hash: hfGZNvQE+P3B8l2oyHgnKQJxAfVEZlWoNG/6zvrHKow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.crl rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9ADB, serialNumber=884268D01D19EAA33492A9E25CF6B2B9EE6F1B7E Validity Not Before: Oct 27 09:00:56 2026 GMT Not After : Nov 3 09:00:56 2026 GMT Subject: CN=6ae06848-8c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:85:ae:30:c2:2b:f1:91:86:62:93:18:b9: 54:04:2a:96:dd:bc:28:76:69:20:f7:71:08:51:19: d6:53:cb:27:3a:79:53:6b:f6:46:55:e4:28:20:f0: 47:ae:3e:9d:9b:c2:4f:ec:3f:d4:1c:1f:6b:fe:f9: 24:21:e6:5d:34:6f:c1:4b:58:ec:2d:c6:aa:01:8b: e2:58:e9:71:ed:46:88:fe:a5:90:eb:60:19:2f:6d: cc:89:b3:8c:ac:41:87:8f:c0:8d:f5:4d:5b:84:58: 5c:48:f1:13:f9:24:fa:a8:20:69:ff:f6:a4:1f:39: 55:c8:77:e4:10:d4:aa:78:01:01:fe:12:29:64:29: 53:b0:c0:3d:f5:46:9b:99:87:40:fa:ce:c5:6b:26: 90:9a:6a:42:52:9b:32:e7:81:40:ab:d0:6b:ab:7c: 08:38:bb:bc:22:d9:8c:1f:f7:41:aa:83:01:1b:f5: 97:16:13:0b:72:65:2b:49:84:6d:fb:f8:f0:ee:be: 6d:e4:6f:f3:80:6d:4a:ef:45:e4:e2:9d:ad:df:cd: fc:bd:58:a2:b9:8e:c1:69:eb:94:ac:87:00:38:26: 4e:92:1c:d0:53:7f:e2:3f:8e:31:04:34:58:13:f9: 02:f3:fc:8e:4c:67:03:3f:5e:12:13:9e:29:85:d9: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:67:AE:CC:5C:1C:DC:88:DC:56:1A:A4:0C:D1:FE:23:98:2F:75:D4 X509v3 Authority Key Identifier: keyid:88:42:68:D0:1D:19:EA:A3:34:92:A9:E2:5C:F6:B2:B9:EE:6F:1B:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3d:84:45:a3:11:d6:04:f9:7b:66:ac:8b:0f:f1:a2:08:87: 74:cd:a4:90:28:0e:a2:c7:f0:d9:32:11:60:d9:6e:65:ce:36: be:ad:c1:db:83:6b:fa:b7:74:30:a9:bb:be:32:09:e6:0d:ec: 54:6a:9e:6e:ce:9e:35:09:a1:a7:cf:86:f6:f2:c0:11:71:58: 19:c0:8d:c4:af:1b:1d:1b:59:e4:14:44:fe:1c:a6:b4:a3:69: 1d:c0:9d:ab:2e:ce:be:fe:ae:47:c2:0a:ac:1d:bf:41:95:d9: 4d:a0:4e:c8:cb:5a:23:79:5f:05:84:18:29:ab:1f:fc:12:8f: 4a:01:14:f1:5d:2c:ca:24:4c:38:14:ea:19:8d:0a:02:20:36: 93:76:15:86:17:71:24:49:b1:a4:48:53:f2:8c:e2:91:05:af: 37:92:b2:dd:1e:64:f7:ce:b4:f6:6a:a5:5b:48:03:24:aa:21: 3b:9a:ca:c0:a3:9f:67:db:b7:d1:44:1c:83:0f:52:43:83:07: 63:45:f7:d1:5f:05:32:c7:68:a3:9f:a1:06:bb:b4:8d:7a:54: 55:47:35:d1:56:62:99:ea:9c:dc:ff:98:9b:e8:17:15:8a:ec: db:8d:72:81:bb:c2:5e:8d:e3:03:32:ab:7b:1f:92:83:29:07: 42:e4:b7:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUFEQjExMC8GA1UEBRMoODg0MjY4RDAxRDE5RUFBMzM0OTJBOUUyNUNGNkIyQjlF RTZGMUI3RTAeFw0yNjEwMjcwOTAwNTZaFw0yNjExMDMwOTAwNTZaMBgxFjAUBgNV BAMTDTZhZTA2ODQ4LThjM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEzIWuMMIr8ZGGYpMYuVQEKpbdvCh2aSD3cQhRGdZTyyc6eVNr9kZV5Cgg8Eeu Pp2bwk/sP9QcH2v++SQh5l00b8FLWOwtxqoBi+JY6XHtRoj+pZDrYBkvbcyJs4ys QYePwI31TVuEWFxI8RP5JPqoIGn/9qQfOVXId+QQ1Kp4AQH+EilkKVOwwD31RpuZ h0D6zsVrJpCaakJSmzLngUCr0GurfAg4u7wi2Ywf90GqgwEb9ZcWEwtyZStJhG37 +PDuvm3kb/OAbUrvReTina3fzfy9WKK5jsFp65SshwA4Jk6SHNBTf+I/jjEENFgT +QLz/I5MZwM/XhITnimF2VTtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUimeuzFwc 3IjcVhqkDNH+I5gvddQwHwYDVR0jBBgwFoAUiEJo0B0Z6qM0kqniXPayue5vG34w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QURCLzI5NkEwOEY0OEYx NTExRjE5MzM3NjJCOTM0MTFGOTcwL2lFSm8wQjBaNnFNMGtxbmlYUGF5dWU1dkcz NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUVKbzBCMFo2cU0wa3FuaVhQYXl1ZTV2RzM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QURCLzI5NkEwOEY0OEYxNTExRjE5MzM3NjJCOTM0MTFGOTcwL2lFSm8wQjBaNnFN MGtxbmlYUGF5dWU1dkczNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWPYRFoxHWBPl7ZqyLD/GiCId0zaSQKA6ix/DZMhFg2W5lzja+rcHbg2v6t3Qw qbu+MgnmDexUap5uzp41CaGnz4b28sARcVgZwI3ErxsdG1nkFET+HKa0o2kdwJ2r Ls6+/q5HwgqsHb9BldlNoE7Iy1ojeV8FhBgpqx/8Eo9KARTxXSzKJEw4FOoZjQoC IDaTdhWGF3EkSbGkSFPyjOKRBa83krLdHmT3zrT2aqVbSAMkqiE7msrAo59n27fR RByDD1JDgwdjRffRXwUyx2ijn6EGu7SNelRVRzXRVmKZ6pzc/5ib6BcViuzbjXKB u8JejeMDMqt7H5KDKQdC5Ldm -----END CERTIFICATE-----Generated at Wed Oct 28 11:42:36 2026 by rpki-client