$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft File: imo4PyYPbU0jV1rp-WvcpErwgWE.mft (raw, json) Hash identifier: c8dk5ZExnavaR25LdZtdhoBmSCyXYw+jBGT1yVZfQ+Y= Subject key identifier: 30:CD:FF:B0:4C:84:B0:26:4A:50:F5:09:1B:8F:01:80:AD:7C:98:41 Authority key identifier: 8A:6A:38:3F:26:0F:6D:4D:23:57:5A:E9:F9:6B:DC:A4:4A:F0:81:61 Certificate issuer: /CN=A91D2432/serialNumber=8A6A383F260F6D4D23575AE9F96BDCA44AF08161 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft Manifest number: 2D Signing time: Wed 07 Oct 2026 09:20:56 +0000 Manifest this update: Wed 07 Oct 2026 09:20:55 +0000 Manifest next update: Wed 14 Oct 2026 09:20:55 +0000 Files and hashes: 1: imo4PyYPbU0jV1rp-WvcpErwgWE.crl (hash: BDwtpgGFTEuexX7AsVo0C6wgAy826Q9rz6uoqHT75v0=) 2: 8B561272865211F19521866891A30FBC.roa (hash: CmE/ScQDfyD7qcIIyHlSoauvCQK1eBuHZtmN3CfgXTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.crl rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2432, serialNumber=8A6A383F260F6D4D23575AE9F96BDCA44AF08161 Validity Not Before: Oct 7 09:20:55 2026 GMT Not After : Oct 14 09:20:55 2026 GMT Subject: CN=6ac60ef8-772f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:b3:c1:16:b2:e9:06:70:d9:1c:c6:17:a1: d9:37:a8:86:a4:4e:e7:e1:5f:6f:9b:be:a8:37:44: 19:77:11:18:ac:2d:36:76:c4:24:b3:58:68:32:34: a0:dc:12:95:d5:0b:7b:7e:44:2b:1a:03:83:33:2d: a4:4a:39:bc:89:87:55:b2:8c:70:92:f3:65:71:3a: b3:1e:c7:b2:75:6e:35:74:28:e1:31:2e:31:4d:53: ae:d3:6a:4c:e9:46:0d:61:15:1d:e6:ce:bb:9a:69: d0:21:b7:0e:6c:be:f4:fe:e5:72:92:4d:7b:b2:f1: eb:b8:b7:99:61:49:ee:7e:c7:1a:1b:db:9e:f6:03: 7d:ea:7c:73:5d:64:ac:b7:b0:a7:eb:d4:6d:38:f9: 71:ba:b5:42:14:9b:50:9e:ea:fb:22:41:71:a3:4d: fc:19:f1:f5:64:6f:17:d4:2c:b3:a8:10:22:a8:74: af:23:2d:6b:8d:56:17:37:3e:e8:e7:d1:0b:48:17: 48:49:8d:50:98:c4:00:b0:3e:8e:e3:e3:14:7b:a5: 81:d8:e0:17:a9:c0:05:f3:11:d2:e8:61:4a:fa:ee: 8b:5b:8f:08:8b:3f:aa:7c:87:3b:af:ad:b9:61:d0: a2:90:72:c3:8e:f7:e8:01:0b:6a:90:d5:8a:55:27: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CD:FF:B0:4C:84:B0:26:4A:50:F5:09:1B:8F:01:80:AD:7C:98:41 X509v3 Authority Key Identifier: keyid:8A:6A:38:3F:26:0F:6D:4D:23:57:5A:E9:F9:6B:DC:A4:4A:F0:81:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:2b:98:55:bf:88:5f:b8:2d:99:f5:5d:ba:73:4d:e5:5a:ef: c9:cc:20:e0:56:6a:3c:28:02:a1:fb:25:bf:88:46:33:fe:a8: 8c:42:5d:84:eb:a6:6e:b3:81:29:e1:9e:68:cf:25:66:28:b4: b2:6c:93:7e:36:b1:b2:6c:d1:b0:03:f2:ad:98:eb:b4:cd:c8: d7:22:40:13:5c:5c:55:07:86:d5:b5:31:17:3f:5d:43:7d:65: 19:b6:eb:ca:e9:48:fb:a6:b2:f1:48:45:8c:ec:49:a1:24:78: 99:7d:74:d7:e5:db:83:a2:2a:1b:fa:8b:96:28:38:e5:47:ba: e5:90:38:3f:f3:ee:5f:64:1a:51:65:0d:73:4a:29:26:9c:fa: 30:31:dc:d0:16:b2:7e:95:3f:2b:42:23:09:cf:8a:5f:5d:ff: 51:a1:aa:5f:79:90:70:e7:5c:b3:07:6b:b5:a8:75:b9:3e:9e: 9b:30:4f:aa:40:f8:b7:3c:69:9d:19:17:91:49:cd:96:c9:ff: a0:14:d5:0e:7d:ec:7a:d2:75:3b:40:eb:b1:18:64:f7:10:21: cc:92:b0:a8:24:90:76:5c:a9:de:a8:12:e7:e5:93:20:ae:c7: 09:d8:7d:67:32:73:ba:6c:55:3e:a6:02:e7:90:c9:eb:e9:f5: e7:20:1e:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzMjExMC8GA1UEBRMoOEE2QTM4M0YyNjBGNkQ0RDIzNTc1QUU5Rjk2QkRDQTQ0 QUYwODE2MTAeFw0yNjEwMDcwOTIwNTVaFw0yNjEwMTQwOTIwNTVaMBgxFjAUBgNV BAMTDTZhYzYwZWY4LTc3MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTS7PBFrLpBnDZHMYXodk3qIakTufhX2+bvqg3RBl3ERisLTZ2xCSzWGgyNKDc EpXVC3t+RCsaA4MzLaRKObyJh1WyjHCS82VxOrMex7J1bjV0KOExLjFNU67Takzp Rg1hFR3mzruaadAhtw5svvT+5XKSTXuy8eu4t5lhSe5+xxob2572A33qfHNdZKy3 sKfr1G04+XG6tUIUm1Ce6vsiQXGjTfwZ8fVkbxfULLOoECKodK8jLWuNVhc3Pujn 0QtIF0hJjVCYxACwPo7j4xR7pYHY4BepwAXzEdLoYUr67otbjwiLP6p8hzuvrblh 0KKQcsOO9+gBC2qQ1YpVJ2S3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMM3/sEyE sCZKUPUJG48BgK18mEEwHwYDVR0jBBgwFoAUimo4PyYPbU0jV1rp+WvcpErwgWEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDMyLzlCQ0QyRDk2ODJD QjExRjFCNTRBQjg3RDc3QTMwRkJDL2ltbzRQeVlQYlUwalYxcnAtV3ZjcEVyd2dX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaW1vNFB5WVBiVTBqVjFycC1XdmNwRXJ3Z1dFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDMyLzlCQ0QyRDk2ODJDQjExRjFCNTRBQjg3RDc3QTMwRkJDL2ltbzRQeVlQYlUw alYxcnAtV3ZjcEVyd2dXRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzK5hVv4hfuC2Z9V26c03lWu/JzCDgVmo8KAKh+yW/iEYz/qiMQl2E66Zus4Ep 4Z5ozyVmKLSybJN+NrGybNGwA/KtmOu0zcjXIkATXFxVB4bVtTEXP11DfWUZtuvK 6Uj7prLxSEWM7EmhJHiZfXTX5duDoiob+ouWKDjlR7rlkDg/8+5fZBpRZQ1zSikm nPowMdzQFrJ+lT8rQiMJz4pfXf9RoapfeZBw51yzB2u1qHW5Pp6bME+qQPi3PGmd GReRSc2Wyf+gFNUOfex60nU7QOuxGGT3ECHMkrCoJJB2XKneqBLn5ZMgrscJ2H1n MnO6bFU+pgLnkMnr6fXnIB5p -----END CERTIFICATE-----Generated at Thu Oct 8 10:54:10 2026 by rpki-client