$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft File: Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json) Hash identifier: Dw2Y+Epf2onvy3NMrvg1C/shb459CGuiHS/jUjy/Kv0= Subject key identifier: 3E:63:38:98:F5:02:AA:1E:D7:88:42:E5:C4:4D:11:65:79:29:DD:69 Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft Manifest number: CC Signing time: Wed 21 Oct 2026 07:17:40 +0000 Manifest this update: Wed 21 Oct 2026 07:17:40 +0000 Manifest next update: Wed 28 Oct 2026 07:17:40 +0000 Files and hashes: 1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: AdZ2pG+tqSs5xPQMEo8LRwC9VBw+tVrIt+WI7kILBXI=) 2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: 2jaK9Imhu+Xw7a9whl7nd2mMko9E0vTzAQrleZ3Kuic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Validity Not Before: Oct 21 07:17:40 2026 GMT Not After : Oct 28 07:17:40 2026 GMT Subject: CN=6ad86714-2a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:83:c6:83:d9:3c:ac:83:c6:73:55:d4:93: 61:3f:0b:79:7a:9a:6b:72:4c:86:88:6a:c1:50:99: a4:92:61:10:89:7d:26:5b:4b:5d:82:ad:8e:c4:6a: 25:9b:9e:86:7c:60:10:57:30:7d:e7:9f:e3:d4:e2: aa:44:2f:8b:c7:76:03:95:1f:9b:f4:25:d8:40:69: 30:a4:44:0c:11:da:e3:50:e0:09:18:1b:1a:8d:ff: 49:9e:ea:f7:e1:ae:da:6e:e4:48:4d:ba:01:d2:fc: 1b:cf:fe:dd:96:bf:91:43:c5:3b:54:5d:83:72:63: c2:ba:f1:b8:22:e9:5e:46:05:b5:d4:40:95:24:f3: dd:ae:23:b7:a2:e6:16:74:54:a3:02:68:61:66:54: 15:f2:9b:91:95:8f:22:61:94:c9:f0:07:a9:a3:4d: 54:87:08:09:b1:c6:9b:94:9c:be:f3:5f:9b:cb:c9: b0:7e:e9:b9:07:4a:fc:cc:e3:bc:1e:a0:e9:dd:ad: 0e:14:f4:6c:a1:a2:18:0b:38:30:e7:52:dd:ef:2e: da:29:05:48:97:f9:2a:87:b2:14:bc:78:4c:fa:75: 2c:0c:e4:df:f2:12:25:c1:06:a8:ce:74:80:cc:be: e8:62:34:0a:b8:bd:18:4c:0d:a0:1f:20:34:78:b5: cc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:63:38:98:F5:02:AA:1E:D7:88:42:E5:C4:4D:11:65:79:29:DD:69 X509v3 Authority Key Identifier: keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:36:da:e3:bd:ef:25:37:0d:32:3b:7e:87:07:1a:f0:8b: 95:02:4a:50:f2:4e:c0:9b:02:02:66:62:74:c2:4c:0b:15:61: 90:6e:b6:46:bf:36:83:52:12:52:5a:9e:f8:97:c3:8e:5d:b5: 33:e6:9f:90:74:d6:5f:fc:7e:9e:51:a6:f5:e0:34:c8:57:64: c9:92:01:44:01:8b:c3:7e:93:6c:66:5a:ed:77:59:93:c7:45: f6:a5:1b:52:97:27:ee:9d:70:87:7f:fe:e0:d5:a1:1f:27:69: 87:3d:9c:c6:cc:40:d1:8b:98:27:38:3d:e5:d0:22:8a:7e:bf: c7:d1:fd:c9:94:f9:5b:4d:59:ef:63:5e:33:37:03:8c:b3:41: 07:13:c7:d3:d0:91:35:05:27:66:9f:64:fb:50:a3:5c:0d:4d: 0c:0f:da:44:61:9c:4c:e4:96:db:02:48:8d:e2:39:9d:49:d5: 1b:04:b3:b8:b4:9e:de:91:5f:6f:42:c2:0b:f1:4b:ee:44:2e: df:7d:da:36:e2:de:c5:81:54:54:73:13:ee:78:ef:fa:a7:a9: 08:9d:e9:d9:74:84:f0:af:11:e4:9f:2a:72:05:df:c0:4b:10: ec:89:81:93:f6:30:a2:f3:8e:f5:f7:95:48:62:bf:ef:fa:57: 27:72:a8:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFNkQxMTAvBgNVBAUTKDIyNDcyMTg3NkExMUUyRDNBNEI5OEIyMUJDODRGNzhF NjRGRUM4NDYwHhcNMjYxMDIxMDcxNzQwWhcNMjYxMDI4MDcxNzQwWjAYMRYwFAYD VQQDEw02YWQ4NjcxNC0yYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+ODxoPZPKyDxnNV1JNhPwt5epprckyGiGrBUJmkkmEQiX0mW0tdgq2OxGol m56GfGAQVzB955/j1OKqRC+Lx3YDlR+b9CXYQGkwpEQMEdrjUOAJGBsajf9Jnur3 4a7abuRITboB0vwbz/7dlr+RQ8U7VF2DcmPCuvG4IuleRgW11ECVJPPdriO3ouYW dFSjAmhhZlQV8puRlY8iYZTJ8Aepo01UhwgJscablJy+81+by8mwfum5B0r8zOO8 HqDp3a0OFPRsoaIYCzgw51Ld7y7aKQVIl/kqh7IUvHhM+nUsDOTf8hIlwQaoznSA zL7oYjQKuL0YTA2gHyA0eLXMQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5jOJj1 Aqoe14hC5cRNEWV5Kd1pMB8GA1UdIwQYMBaAFCJHIYdqEeLTpLmLIbyE945k/shG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU2RC81MTExMEFGRTk3 NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0T2t1WXNodklUM2ptVC15 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrY2hoMm9SNHRPa3VZc2h2SVQzam1ULXlFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU2RC81MTExMEFGRTk3NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0 T2t1WXNodklUM2ptVC15RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADTE22uO97yU3DTI7focHGvCLlQJKUPJOwJsCAmZidMJMCxVhkG62Rr82g1IS Ulqe+JfDjl21M+afkHTWX/x+nlGm9eA0yFdkyZIBRAGLw36TbGZa7XdZk8dF9qUb Upcn7p1wh3/+4NWhHydphz2cxsxA0YuYJzg95dAiin6/x9H9yZT5W01Z72NeMzcD jLNBBxPH09CRNQUnZp9k+1CjXA1NDA/aRGGcTOSW2wJIjeI5nUnVGwSzuLSe3pFf b0LCC/FL7kQu333aNuLexYFUVHMT7njv+qepCJ3p2XSE8K8R5J8qcgXfwEsQ7ImB k/YwovOO9feVSGK/7/pXJ3KoNg== -----END CERTIFICATE-----Generated at Thu Oct 22 01:37:04 2026 by rpki-client