$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json) Hash identifier: DHfn6wnOBI79A87aAqCnMK0nEqRr8cgSvGjPeaRShmI= Subject key identifier: 2A:99:F2:85:55:D2:E1:F2:8C:27:8C:2B:0D:3D:71:80:BF:74:90:74 Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft Manifest number: 085A Signing time: Fri 18 Sep 2026 20:54:31 +0000 Manifest this update: Fri 18 Sep 2026 20:54:31 +0000 Manifest next update: Fri 25 Sep 2026 20:54:31 +0000 Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: Cixy8GTuUMUcG9FlK+CMJ2N8m9qP7D1i/F64tT/LSCU=) 2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: C86QSzMPJfidhhZAtCALwlPi6LGTUSBetHOGRrIMSeU=) 3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: Gqr5gUPYx0CJyOxSeCXlqpQBiTSLSQ6IJMBMylryXzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Validity Not Before: Sep 18 20:54:31 2026 GMT Not After : Sep 25 20:54:31 2026 GMT Subject: CN=6aada507-8684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:d1:06:21:7b:42:e8:b7:ac:1d:5d:78:29: 25:0e:30:65:9b:7a:b3:6c:62:9d:4e:f6:db:23:0b: 72:ad:3d:a8:33:af:60:74:f6:85:b4:19:cf:7c:83: f3:d3:a1:9a:82:52:eb:38:44:ce:eb:17:81:f3:b7: 39:85:50:1b:1b:f5:fa:cf:45:59:59:67:cf:98:fd: a2:4d:55:c7:5e:1a:6d:82:87:71:4e:ff:ce:a8:39: b2:43:31:d5:c0:4e:5f:71:5a:a2:8b:72:83:a6:ce: 46:a0:5a:b7:af:7e:81:ff:40:37:4b:9e:71:4d:d5: f8:e8:b6:fc:6f:25:a5:ae:1a:3a:d8:6e:93:c4:3a: cd:bf:2e:2f:4b:4c:e3:3c:d7:cc:48:09:a5:7e:64: 29:cf:1d:7d:8d:e5:a1:29:27:85:dd:79:3f:11:a9: 02:b3:f0:0a:76:da:66:ab:e7:bc:10:5c:e0:82:33: af:11:9a:cf:c1:0e:6d:ec:cb:ff:b7:de:72:63:76: 43:19:da:07:20:be:2f:9f:15:c2:e8:df:df:f2:3c: cf:f0:c6:76:eb:0d:01:fe:04:f1:ab:b7:50:d8:26: ac:ae:28:5a:02:e1:3c:b0:f9:06:9c:ef:b3:67:b3: 4a:09:17:92:5d:7a:b7:22:c7:95:4b:74:42:81:ab: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:99:F2:85:55:D2:E1:F2:8C:27:8C:2B:0D:3D:71:80:BF:74:90:74 X509v3 Authority Key Identifier: keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b8:e4:a3:d2:01:ee:54:7c:6a:fb:73:f5:01:9e:a5:0f:c7: 00:61:d6:b4:f1:21:37:ea:15:a9:a2:b4:ff:e5:5e:04:cd:6e: f4:63:ba:6c:f0:88:7c:e9:f9:a3:92:db:aa:5a:69:b6:62:54: ba:f3:ed:1f:08:5d:18:fc:ce:25:51:88:4e:ed:bc:ec:8a:42: 80:c4:d1:d4:1b:55:55:36:54:45:e1:64:2f:45:3d:35:89:55: 6f:6e:0c:cd:99:09:b4:92:af:f1:93:1d:85:6d:fc:90:03:5f: 8f:e2:b7:39:2b:35:c5:1c:08:d5:83:00:15:1e:ea:b0:a9:4f: d8:be:95:0d:7a:60:d4:7d:71:c7:ff:8b:7f:5d:5d:a3:21:9b: 5c:0b:18:e8:0d:22:78:35:29:cd:9c:ba:61:f0:ef:23:fe:c9: 21:e6:18:fb:d3:ff:54:0b:66:a7:5f:2c:9c:f4:ae:d2:fc:c3: d8:cc:ee:4e:6e:b0:76:54:d2:33:fc:89:09:72:cd:a2:d4:62: dc:e9:15:ae:bc:bb:78:83:ab:6b:f8:ea:60:d1:00:0c:9e:86: 25:37:bc:c0:1f:d6:10:76:48:4b:6f:af:fa:c7:11:a0:b6:a6: ce:93:13:55:d5:bd:7e:da:53:e2:ea:9e:0d:f4:04:f4:e3:d7: 92:b1:15:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3RTQxMTAvBgNVBAUTKDhCREE4QTFGRTA3QjQ2QzMzMDYzMDQ2QTcyNUVBQjg1 NjQyQjlDMkQwHhcNMjYwOTE4MjA1NDMxWhcNMjYwOTI1MjA1NDMxWjAYMRYwFAYD VQQDEw02YWFkYTUwNy04Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp/RBiF7Qui3rB1deCklDjBlm3qzbGKdTvbbIwtyrT2oM69gdPaFtBnPfIPz 06GaglLrOETO6xeB87c5hVAbG/X6z0VZWWfPmP2iTVXHXhptgodxTv/OqDmyQzHV wE5fcVqii3KDps5GoFq3r36B/0A3S55xTdX46Lb8byWlrho62G6TxDrNvy4vS0zj PNfMSAmlfmQpzx19jeWhKSeF3Xk/EakCs/AKdtpmq+e8EFzggjOvEZrPwQ5t7Mv/ t95yY3ZDGdoHIL4vnxXC6N/f8jzP8MZ26w0B/gTxq7dQ2CasrihaAuE8sPkGnO+z Z7NKCReSXXq3IseVS3RCgauQTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqZ8oVV 0uHyjCeMKw09cYC/dJB0MB8GA1UdIwQYMBaAFIvaih/ge0bDMGMEanJeq4VkK5wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzdFNC8zNkZCMTE0NDFE NUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1JzTXdZd1JxY2w2cmhXUXJu QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5cUtILUI3UnNNd1l3UnFjbDZyaFdRcm5DMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzdFNC8zNkZCMTE0NDFENUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1Jz TXdZd1JxY2w2cmhXUXJuQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhrjko9IB7lR8avtz9QGepQ/HAGHWtPEhN+oVqaK0/+VeBM1u9GO6bPCIfOn5 o5LbqlpptmJUuvPtHwhdGPzOJVGITu287IpCgMTR1BtVVTZUReFkL0U9NYlVb24M zZkJtJKv8ZMdhW38kANfj+K3OSs1xRwI1YMAFR7qsKlP2L6VDXpg1H1xx/+Lf11d oyGbXAsY6A0ieDUpzZy6YfDvI/7JIeYY+9P/VAtmp18snPSu0vzD2MzuTm6wdlTS M/yJCXLNotRi3OkVrry7eIOra/jqYNEADJ6GJTe8wB/WEHZIS2+v+scRoLamzpMT VdW9ftpT4uqeDfQE9OPXkrEVwQ== -----END CERTIFICATE-----Generated at Sat Sep 19 13:30:01 2026 by rpki-client