$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json) Hash identifier: hhhdWTQfW68CC2JyDQ2wxVgpAN5QqDzOWFkqUF4Zki0= Subject key identifier: EC:45:4A:31:78:A9:48:0D:AC:F1:07:F4:C4:2E:52:BB:74:B5:DB:AD Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft Manifest number: 01F7 Signing time: Mon 05 Oct 2026 03:37:47 +0000 Manifest this update: Mon 05 Oct 2026 03:37:46 +0000 Manifest next update: Mon 12 Oct 2026 03:37:46 +0000 Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: 7Et2MhjRGHkMofVhI5tVQUBIwbnfDe0my+NCyt8ZvVs=) 2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: G/hNSwdPwr6sWdX5GJHpkSXfMQminGyj9bSfmUXWOG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Validity Not Before: Oct 5 03:37:46 2026 GMT Not After : Oct 12 03:37:46 2026 GMT Subject: CN=6ac31b8b-de08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2e:9b:fc:c1:aa:e4:b7:10:c3:e3:81:0c:17: d0:29:ca:3c:51:cb:1f:63:51:73:4b:94:ef:76:70: 76:38:50:1e:d0:8c:d8:1e:2f:c2:6a:6a:97:49:b1: 5e:46:8d:65:e5:76:a8:64:d7:a6:7b:d0:92:54:ad: 6d:c6:a5:2a:f2:01:a4:8b:78:a8:0e:e4:b1:d1:50: 01:41:5b:b2:dd:b4:35:0b:07:26:ae:0e:19:78:73: 57:33:35:ee:20:2d:9c:0b:6e:60:68:d0:3c:87:9b: 96:04:49:03:a4:9b:ea:45:a9:52:7c:96:4e:28:94: 70:2f:61:24:ac:ba:c0:c8:94:87:e9:83:cc:11:6b: 04:ae:86:73:90:08:8f:6c:91:82:af:91:f5:f2:41: 6c:e5:29:4f:f9:7a:83:d7:0a:b1:39:6c:f5:29:4b: da:ee:99:e9:5c:d0:a9:fc:0f:9d:cf:35:34:ec:31: 4d:e4:c1:00:d6:94:22:5b:09:18:f3:79:1d:be:8c: 22:d1:6f:99:37:c0:59:a0:20:ad:91:a4:c4:cc:aa: 7c:b1:44:59:f3:16:6a:e2:ac:2c:ff:1a:51:8c:a5: 8d:42:a1:12:d9:1e:30:ee:be:cf:02:75:c8:6a:a6: 1c:c8:a1:ed:04:98:20:58:bb:51:1b:d8:44:c0:b6: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:45:4A:31:78:A9:48:0D:AC:F1:07:F4:C4:2E:52:BB:74:B5:DB:AD X509v3 Authority Key Identifier: keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:70:a0:38:2b:b2:d2:bc:61:56:ae:2b:4e:3b:48:b7:89:d9: ed:91:6a:aa:6f:ee:4f:2b:97:02:f6:12:ce:20:d4:6f:7f:9b: 90:3e:9e:bf:10:bb:37:9a:fb:14:05:56:23:5b:11:1d:65:e8: 9f:aa:74:7d:bb:49:3b:ad:ca:3e:29:86:9f:f4:a7:3e:6e:b1: c9:d1:af:11:85:6b:41:45:ee:c6:26:15:75:58:7d:e5:2d:08: f4:91:c6:95:cf:0c:e5:98:f8:bb:25:13:76:09:2c:c4:6c:db: e1:a7:07:20:c6:13:69:a5:c9:67:54:a1:c8:93:f9:11:ef:29: 14:75:5e:bd:f9:aa:2e:0d:e6:80:61:a9:5a:80:c8:41:0c:1d: e5:a0:16:59:09:41:9d:55:81:2c:9a:88:ea:69:dc:01:27:2d: 41:c8:c1:a5:8a:40:b0:ce:70:07:d9:fc:5b:88:80:d1:19:09: 25:dc:51:4e:ae:18:ae:24:df:8f:bf:50:78:46:5a:fe:dc:86: 7c:b6:b3:c3:39:1b:1e:f8:7c:f6:8e:0c:93:b9:ec:83:cd:25: 91:67:10:3d:74:e1:e6:94:50:b8:f2:40:45:66:b6:ef:e9:82: 7c:2b:fb:a2:20:08:e2:4d:bf:4c:02:e8:01:d7:ed:d6:03:b1: 32:34:53:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1 QUIwNUFDQzUwHhcNMjYxMDA1MDMzNzQ2WhcNMjYxMDEyMDMzNzQ2WjAYMRYwFAYD VQQDEw02YWMzMWI4Yi1kZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlS6b/MGq5LcQw+OBDBfQKco8UcsfY1FzS5TvdnB2OFAe0IzYHi/CamqXSbFe Ro1l5XaoZNeme9CSVK1txqUq8gGki3ioDuSx0VABQVuy3bQ1Cwcmrg4ZeHNXMzXu IC2cC25gaNA8h5uWBEkDpJvqRalSfJZOKJRwL2EkrLrAyJSH6YPMEWsEroZzkAiP bJGCr5H18kFs5SlP+XqD1wqxOWz1KUva7pnpXNCp/A+dzzU07DFN5MEA1pQiWwkY 83kdvowi0W+ZN8BZoCCtkaTEzKp8sURZ8xZq4qws/xpRjKWNQqES2R4w7r7PAnXI aqYcyKHtBJggWLtRG9hEwLZagQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxFSjF4 qUgNrPEH9MQuUrt0tdutMB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOXCgOCuy0rxhVq4rTjtIt4nZ7ZFqqm/uTyuXAvYSziDUb3+bkD6evxC7N5r7 FAVWI1sRHWXon6p0fbtJO63KPimGn/SnPm6xydGvEYVrQUXuxiYVdVh95S0I9JHG lc8M5Zj4uyUTdgksxGzb4acHIMYTaaXJZ1ShyJP5Ee8pFHVevfmqLg3mgGGpWoDI QQwd5aAWWQlBnVWBLJqI6mncASctQcjBpYpAsM5wB9n8W4iA0RkJJdxRTq4YriTf j79QeEZa/tyGfLazwzkbHvh89o4Mk7nsg80lkWcQPXTh5pRQuPJARWa27+mCfCv7 oiAI4k2/TALoAdft1gOxMjRTWQ== -----END CERTIFICATE-----Generated at Tue Oct 6 08:40:07 2026 by rpki-client