$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft File: iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft (raw, json) Hash identifier: nZX4ixAvYN+tzk0Y/tb0A8mBN6GxqbQAGoFoXrf4I6U= Subject key identifier: D3:4A:96:BB:38:AE:F4:B3:E5:F2:03:36:CE:B5:6F:14:4A:69:53:77 Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD Certificate issuer: /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft Manifest number: 99 Signing time: Tue 27 Oct 2026 07:45:28 +0000 Manifest this update: Tue 27 Oct 2026 07:45:28 +0000 Manifest next update: Tue 03 Nov 2026 07:45:28 +0000 Files and hashes: 1: iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl (hash: 9ycvq92HZUrYxN18d2OfT40Vc+QnR+J4lXeMLdSRLOY=) 2: 75431F44F12311F09E054F8D4F6F56BC.roa (hash: dSpl28NojgoPbGTH9IFDprulOgPwqOMWIzrfbBeiOaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Validity Not Before: Oct 27 07:45:28 2026 GMT Not After : Nov 3 07:45:28 2026 GMT Subject: CN=6ae05698-59f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:e2:08:47:4a:61:89:ce:90:71:89:56:9b: d0:d8:8b:53:4e:b7:c8:32:06:b7:b0:89:ce:08:f9: 0b:6f:ec:46:08:38:0b:b4:70:d3:48:c0:64:d5:bf: 9c:84:b8:1b:3e:6b:c2:9c:8a:69:4a:cd:ce:a3:19: 80:88:c6:dc:ca:18:1d:d7:f9:e9:64:4a:05:4a:5d: 20:29:78:59:9c:18:a0:54:91:65:97:92:4d:b2:a9: 61:06:a9:76:d4:2f:41:e9:04:97:c4:44:0d:c0:82: 22:f2:a9:4f:21:36:e8:98:ad:bc:42:60:b4:5e:78: 1a:99:3c:ce:b0:f8:0c:87:a7:7f:ac:7e:0d:fc:c4: 8e:40:5c:dc:93:9c:81:89:ca:f1:33:86:14:31:4b: cb:3d:64:2a:02:c5:35:3b:10:19:b5:f7:40:9a:a9: c7:45:dc:8d:05:aa:f6:97:b5:71:94:f6:5b:c4:59: c3:af:a9:e4:e0:2f:fd:a1:bc:1b:96:53:0c:2e:89: 0f:d2:20:2a:88:47:f7:38:03:23:99:14:35:bb:6e: 83:1e:8f:e6:d0:2a:49:25:21:d1:26:13:b9:b5:69: ab:f1:16:fc:41:c6:cb:59:99:ee:c9:53:e2:6f:1c: 9e:fa:d9:7e:69:07:02:ce:49:4d:1e:02:24:4e:61: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4A:96:BB:38:AE:F4:B3:E5:F2:03:36:CE:B5:6F:14:4A:69:53:77 X509v3 Authority Key Identifier: keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:77:1a:c8:65:6e:84:f6:22:25:c1:c1:ba:42:d2:f6:62:04: df:24:9c:79:e2:8d:96:c8:b7:60:0c:cd:0a:06:23:87:4e:5c: 1a:20:f7:b2:db:39:a2:3c:58:22:b8:f8:38:f2:a3:86:e5:43: 19:79:91:88:cc:94:b2:78:bb:ff:27:f7:93:bd:8f:9c:f6:78: dc:a9:21:e6:28:b4:db:2f:0b:34:a3:4b:a5:52:6d:af:70:d8: 13:18:40:47:07:ed:86:d0:5c:9e:b0:67:04:00:ed:df:f7:83: b4:0b:de:97:a4:b6:ab:8a:59:33:0e:c4:58:a4:57:45:e5:5f: de:24:70:03:dc:c8:62:81:ab:d2:85:e5:99:1a:06:99:8d:5a: c7:15:8b:37:20:e4:95:90:a6:ee:5d:7c:42:64:07:d0:ec:b1: e4:ce:58:78:54:7a:97:65:f2:a0:fc:10:5a:6d:f8:0d:98:f2: 28:ad:6e:b6:a1:99:3e:b9:54:45:11:e6:5c:a9:aa:c9:e0:2b: 92:df:56:0d:6f:80:bb:61:e1:0d:5b:b5:b4:17:4f:20:22:c9: ea:4b:e7:40:56:32:68:46:8f:7a:eb:c6:73:e1:98:77:91:3e: 3f:93:c3:cd:6e:b7:05:61:4f:cf:e5:a3:fd:43:29:bb:22:09: 46:7c:c7:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJCOUExMTAvBgNVBAUTKDg5MDI2OEZEMjVDNzc5RTM2RkJCODcyRjYwMTNGMzA0 MTVGRkEyREQwHhcNMjYxMDI3MDc0NTI4WhcNMjYxMTAzMDc0NTI4WjAYMRYwFAYD VQQDEw02YWUwNTY5OC01OWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndDiCEdKYYnOkHGJVpvQ2ItTTrfIMga3sInOCPkLb+xGCDgLtHDTSMBk1b+c hLgbPmvCnIppSs3OoxmAiMbcyhgd1/npZEoFSl0gKXhZnBigVJFll5JNsqlhBql2 1C9B6QSXxEQNwIIi8qlPITbomK28QmC0XngamTzOsPgMh6d/rH4N/MSOQFzck5yB icrxM4YUMUvLPWQqAsU1OxAZtfdAmqnHRdyNBar2l7VxlPZbxFnDr6nk4C/9obwb llMMLokP0iAqiEf3OAMjmRQ1u26DHo/m0CpJJSHRJhO5tWmr8Rb8QcbLWZnuyVPi bxye+tl+aQcCzklNHgIkTmHCUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNKlrs4 rvSz5fIDNs61bxRKaVN3MB8GA1UdIwQYMBaAFIkCaP0lx3njb7uHL2AT8wQV/6Ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI5QS81RUEzNDYyQUYx MjIxMUYwQUM1Q0RBN0U0RTZGNTZCQy9pUUpvX1NYSGVlTnZ1NGN2WUJQekJCWF9v dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRSm9fU1hIZWVOdnU0Y3ZZQlB6QkJYX290MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI5QS81RUEzNDYyQUYxMjIxMUYwQUM1Q0RBN0U0RTZGNTZCQy9pUUpvX1NYSGVl TnZ1NGN2WUJQekJCWF9vdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn3cayGVuhPYiJcHBukLS9mIE3ySceeKNlsi3YAzNCgYjh05cGiD3sts5ojxY Irj4OPKjhuVDGXmRiMyUsni7/yf3k72PnPZ43Kkh5ii02y8LNKNLpVJtr3DYExhA RwfthtBcnrBnBADt3/eDtAvel6S2q4pZMw7EWKRXReVf3iRwA9zIYoGr0oXlmRoG mY1axxWLNyDklZCm7l18QmQH0Oyx5M5YeFR6l2XyoPwQWm34DZjyKK1utqGZPrlU RRHmXKmqyeArkt9WDW+Au2HhDVu1tBdPICLJ6kvnQFYyaEaPeuvGc+GYd5E+P5PD zW63BWFPz+Wj/UMpuyIJRnzHLA== -----END CERTIFICATE-----Generated at Tue Oct 27 20:40:30 2026 by rpki-client