$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: aB0CRGJaI98SOP5mFx5kJ1jQWijB4+BW11Ln9hNJ8wE= Subject key identifier: F3:69:AC:EC:F5:1E:13:28:6C:77:F4:51:EA:83:22:09:ED:57:84:3C Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: FD Signing time: Thu 01 Oct 2026 07:30:32 +0000 Manifest this update: Thu 01 Oct 2026 07:30:32 +0000 Manifest next update: Thu 08 Oct 2026 07:30:32 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: iOVimwZNNGgPA2nLF/7/xhp0m9dVyx41MOLK3gbKVfc=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: +lH463qDPAwERrsUQl45+mVf4irW7NMTQzUVhbxqY6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 07:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Oct 1 07:30:32 2026 GMT Not After : Oct 8 07:30:32 2026 GMT Subject: CN=6abe0c18-79ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:df:d1:b5:d2:96:3e:bb:36:a6:e3:86:44:83: 93:57:b9:cf:ab:a5:20:d8:3e:be:dc:1d:0b:18:63: ec:f9:b8:dd:ad:e2:87:e5:eb:04:fb:ca:44:d3:50: 75:84:ed:51:66:f3:3a:99:e5:b2:c1:e3:01:5b:e5: a1:c7:cc:3a:1f:15:0d:c5:22:1b:3f:0d:70:e8:4d: c6:b6:f5:09:46:6d:e8:e1:15:bb:77:ca:79:bc:41: dc:1e:b3:5b:97:58:3d:8b:30:29:38:1c:5f:1f:cb: f1:50:36:98:56:1c:d6:c3:04:04:eb:a2:2f:87:60: 51:f9:d3:cb:21:9b:0d:29:b0:c0:16:50:74:d1:47: 9f:fe:85:f6:1c:93:14:64:c5:a4:74:99:01:67:3a: 61:a5:b0:b6:a9:66:2c:16:a1:71:1f:1d:c7:44:73: 70:11:a1:c4:90:6e:8e:e5:52:8d:f4:bc:af:15:9f: 18:23:4c:f6:fe:ef:e5:0f:7a:f6:c0:6b:d2:c8:2d: 64:fd:b6:bf:6b:0c:a4:3b:d2:d8:d2:85:07:a1:3a: 7e:c4:b5:40:bb:f3:93:c9:43:19:04:b8:57:d4:3a: f1:00:20:cf:c6:26:b1:9c:60:fc:9e:2d:7f:e1:c7: 7e:b5:68:26:aa:b9:8e:0f:97:34:81:d8:0a:2b:fe: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:69:AC:EC:F5:1E:13:28:6C:77:F4:51:EA:83:22:09:ED:57:84:3C X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:dd:2d:07:66:61:a4:8b:3a:61:24:0c:72:86:fe:fd:d5:b6: d2:4f:5f:6a:2d:22:7f:80:d1:ca:2f:c4:a1:90:c0:4a:fa:ec: 73:67:59:13:c3:ed:0e:b9:39:9f:8a:0f:17:84:21:0b:99:cf: 42:d2:a1:c2:6c:24:58:59:6c:d2:a2:28:01:d0:19:28:46:87: 66:06:a4:9e:bb:22:02:c2:fa:74:3d:a3:23:a0:26:60:4a:19: 6f:fc:65:4f:59:3a:27:11:80:01:99:85:8b:04:be:cd:7b:fe: dd:fc:66:10:26:d6:5d:f3:18:5f:28:0d:49:99:1b:bf:c2:a6: f9:81:a9:85:b5:8b:a2:ce:f7:09:2d:8b:7c:95:06:0d:e8:eb: be:a7:e0:94:7c:43:45:c3:51:cd:5e:10:3c:3b:aa:d2:e4:7c: 8f:2b:7e:40:7d:19:bb:fe:f5:de:b0:5c:b5:4d:ef:b9:18:ba: 02:4a:57:1e:ac:42:61:c1:4e:47:d4:58:1d:2b:0f:8d:d0:4e: b8:7d:44:47:c8:43:84:a6:0a:53:76:d6:dc:5c:17:bf:50:97: 3e:4b:e0:5f:e8:34:08:e7:18:25:4a:ef:50:0b:8a:13:ef:6d: 8d:d6:3f:bf:c6:a5:80:0b:1b:4b:19:52:d3:cd:09:01:9f:d4: 4f:1b:22:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0 OUJDNDZDODkwHhcNMjYxMDAxMDczMDMyWhcNMjYxMDA4MDczMDMyWjAYMRYwFAYD VQQDEw02YWJlMGMxOC03OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d/RtdKWPrs2puOGRIOTV7nPq6Ug2D6+3B0LGGPs+bjdreKH5esE+8pE01B1 hO1RZvM6meWyweMBW+Whx8w6HxUNxSIbPw1w6E3GtvUJRm3o4RW7d8p5vEHcHrNb l1g9izApOBxfH8vxUDaYVhzWwwQE66Ivh2BR+dPLIZsNKbDAFlB00Uef/oX2HJMU ZMWkdJkBZzphpbC2qWYsFqFxHx3HRHNwEaHEkG6O5VKN9LyvFZ8YI0z2/u/lD3r2 wGvSyC1k/ba/awykO9LY0oUHoTp+xLVAu/OTyUMZBLhX1DrxACDPxiaxnGD8ni1/ 4cd+tWgmqrmOD5c0gdgKK/4QUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNprOz1 HhMobHf0UeqDIgntV4Q8MB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9FRDBGMTFGNDQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJs Y0dWVXRTeThWdlJKdkViSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASN0tB2ZhpIs6YSQMcob+/dW20k9fai0if4DRyi/EoZDASvrsc2dZE8PtDrk5 n4oPF4QhC5nPQtKhwmwkWFls0qIoAdAZKEaHZgaknrsiAsL6dD2jI6AmYEoZb/xl T1k6JxGAAZmFiwS+zXv+3fxmECbWXfMYXygNSZkbv8Km+YGphbWLos73CS2LfJUG DejrvqfglHxDRcNRzV4QPDuq0uR8jyt+QH0Zu/713rBctU3vuRi6AkpXHqxCYcFO R9RYHSsPjdBOuH1ER8hDhKYKU3bW3FwXv1CXPkvgX+g0COcYJUrvUAuKE+9tjdY/ v8algAsbSxlS080JAZ/UTxsigw== -----END CERTIFICATE-----Generated at Fri Oct 2 14:48:39 2026 by rpki-client