$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: n7x4N/cNeF+EcjTk5o7sSRHAB08ACoS+RR9f4NHg8R0= Subject key identifier: EA:66:7E:45:DE:B4:41:5D:85:CE:51:54:51:F6:ED:C5:84:2F:D0:D9 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 0243 Signing time: Sat 03 Oct 2026 03:04:14 +0000 Manifest this update: Sat 03 Oct 2026 03:04:14 +0000 Manifest next update: Sat 10 Oct 2026 03:04:14 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: ndDerZDkTF7J2AkwQywj3BKQQfl55Gym+iRFk0xMIww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Oct 3 03:04:14 2026 GMT Not After : Oct 10 03:04:14 2026 GMT Subject: CN=6ac070ae-a699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4e:83:24:57:83:07:fa:78:77:2b:22:f3:81: 01:ea:4e:b9:bf:34:8b:55:7a:b6:ae:86:71:17:eb: e5:96:b0:99:53:5c:71:cd:53:b4:da:10:58:98:a9: a6:a1:a1:b4:23:6b:fe:a8:c6:03:38:68:31:e8:98: 4f:61:29:7c:5d:f3:e2:b1:df:94:af:39:96:af:47: 9e:65:5e:32:45:9b:d9:4a:1d:e7:57:35:14:25:d1: 00:ce:37:ea:5f:20:0f:8a:c5:07:21:d7:9c:5c:cb: 7d:1f:a4:cc:c3:07:b4:a9:5f:f6:9f:33:21:1d:10: ea:cf:4c:a3:62:b5:27:6a:21:81:8d:85:e2:c7:f4: 11:48:a1:f1:c1:b6:9f:ff:f7:48:b4:ca:86:0e:5a: f3:a3:0c:9e:71:1b:b4:1e:c4:6c:d6:1e:c7:be:1c: 12:11:e3:5b:6b:6a:ae:70:f2:98:26:ee:48:a0:e4: b2:32:71:19:51:bf:82:dc:7d:3b:01:26:82:1d:c4: 8e:2a:09:2c:ee:2a:d0:dc:74:62:a5:2e:56:46:3e: 39:16:ca:d4:a3:cf:68:b1:b4:36:5a:77:64:4b:4b: c7:6c:41:6b:c8:69:fe:5d:d0:e6:b4:d3:a4:70:68: 3d:b8:12:10:2c:5c:2c:9b:db:8f:c5:64:1d:f9:7e: e2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:66:7E:45:DE:B4:41:5D:85:CE:51:54:51:F6:ED:C5:84:2F:D0:D9 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ce:15:17:a4:25:71:4c:1f:c6:3e:45:f0:06:eb:5c:30:b8: e6:a2:6a:49:4e:49:8f:7b:9b:18:e4:41:6e:3f:e3:73:dd:7c: 50:33:44:3e:ff:0f:b3:1b:25:66:9d:38:ab:f5:52:b3:86:c2: 3a:26:21:20:15:c5:a0:84:ae:bb:29:30:bb:06:d5:b7:f5:92: 72:2e:d1:13:a1:78:aa:28:e9:5c:39:00:9d:87:0a:16:63:6a: ad:63:99:f2:d5:f3:bb:e6:61:14:e9:a9:38:da:51:23:fe:b2: 50:ec:86:4f:d3:a0:c8:94:85:70:bb:3b:d8:f2:e7:04:39:e4: c6:29:f9:16:e9:51:12:56:9f:d8:e0:94:1f:b2:18:f8:dc:47: 87:c1:c4:47:11:03:a0:45:a2:88:97:c1:60:61:8b:50:b6:13: 2c:1b:47:02:e1:f5:af:e9:0d:49:66:67:ec:67:73:bd:3e:fc: e4:8b:1b:38:3f:3d:05:f9:e1:3b:f4:7c:62:67:c2:67:2a:0d: fd:bf:64:5b:51:db:de:4d:25:50:2b:e6:83:88:b8:a5:96:8e: cc:7b:52:50:4b:5f:38:d5:00:bc:09:09:08:ff:3d:59:c7:5f: 3f:5c:20:85:dd:db:04:d2:c8:5f:ba:b3:1e:21:50:c1:b4:84: 7d:0c:6b:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjYxMDAzMDMwNDE0WhcNMjYxMDEwMDMwNDE0WjAYMRYwFAYD VQQDEw02YWMwNzBhZS1hNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm06DJFeDB/p4dysi84EB6k65vzSLVXq2roZxF+vllrCZU1xxzVO02hBYmKmm oaG0I2v+qMYDOGgx6JhPYSl8XfPisd+UrzmWr0eeZV4yRZvZSh3nVzUUJdEAzjfq XyAPisUHIdecXMt9H6TMwwe0qV/2nzMhHRDqz0yjYrUnaiGBjYXix/QRSKHxwbaf //dItMqGDlrzowyecRu0HsRs1h7HvhwSEeNba2qucPKYJu5IoOSyMnEZUb+C3H07 ASaCHcSOKgks7irQ3HRipS5WRj45FsrUo89osbQ2WndkS0vHbEFryGn+XdDmtNOk cGg9uBIQLFwsm9uPxWQd+X7iwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpmfkXe tEFdhc5RVFH27cWEL9DZMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXc4VF6QlcUwfxj5F8AbrXDC45qJqSU5Jj3ubGORBbj/jc918UDNEPv8Psxsl Zp04q/VSs4bCOiYhIBXFoISuuykwuwbVt/WSci7RE6F4qijpXDkAnYcKFmNqrWOZ 8tXzu+ZhFOmpONpRI/6yUOyGT9OgyJSFcLs72PLnBDnkxin5FulRElaf2OCUH7IY +NxHh8HERxEDoEWiiJfBYGGLULYTLBtHAuH1r+kNSWZn7GdzvT785IsbOD89Bfnh O/R8YmfCZyoN/b9kW1Hb3k0lUCvmg4i4pZaOzHtSUEtfONUAvAkJCP89WcdfP1wg hd3bBNLIX7qzHiFQwbSEfQxrZQ== -----END CERTIFICATE-----Generated at Sun Oct 4 08:16:32 2026 by rpki-client