$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: 0tI87PcdnEjZfvHKTsmKIJzJ1QS2pTDzruNZEVdpFp4= Subject key identifier: AC:3E:90:48:52:18:10:73:50:49:37:B0:D6:88:92:CC:36:7E:94:B6 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 0209 Signing time: Sun 25 Oct 2026 03:32:48 +0000 Manifest this update: Sun 25 Oct 2026 03:32:48 +0000 Manifest next update: Sun 01 Nov 2026 03:32:48 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: vp0gwks8HHChVI7HoLP3o0qfTjPMIB1r7U9sObneDwQ=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RzTaCvSWMhcAn1QVwJbuqA3HBhTH7/SoovljwgVLgeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 03:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Oct 25 03:32:48 2026 GMT Not After : Nov 1 03:32:48 2026 GMT Subject: CN=6add7860-41c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:08:af:84:96:f7:57:9d:43:79:e2:4d:4a: fe:0d:09:c0:91:97:9c:3f:79:93:d1:4a:4a:fe:e8: 59:ba:cf:0b:97:80:2e:cf:54:da:28:21:8e:1c:02: b1:0b:f6:6b:e1:11:7a:37:ae:56:03:97:1e:91:3a: 30:d2:98:9f:52:fd:aa:15:46:f4:5e:49:8b:33:97: b8:e5:ad:40:1d:be:00:2c:0b:55:82:fc:e9:8c:78: dc:f7:a8:fd:a4:cf:ae:45:94:52:5f:0e:10:0c:0d: 48:8d:43:1a:f4:50:2a:c2:9a:a0:1f:26:f9:84:d6: 1f:5f:1e:9f:98:5f:46:0f:35:b0:26:8b:9b:a2:21: d2:ab:64:fa:b3:75:42:ca:dc:12:f6:36:d3:aa:ac: f2:64:53:7e:ed:96:d4:da:d5:75:e4:3e:e1:ff:61: 37:dc:e6:c6:e4:aa:49:ee:14:73:57:33:55:25:2d: 7d:66:d4:cf:11:23:3b:bf:e7:5c:32:d9:74:fc:03: ee:75:fd:8b:5c:89:bd:3c:22:00:d6:53:5e:9f:eb: e7:46:fa:f1:3d:4a:e5:3c:51:6c:1d:c7:d2:c2:e5: 1a:7d:bf:6b:e4:f7:21:b2:6c:ba:9a:c2:99:57:c2: c1:4e:9a:eb:a3:1c:e3:43:cc:78:5b:e4:6a:3b:03: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:90:48:52:18:10:73:50:49:37:B0:D6:88:92:CC:36:7E:94:B6 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3c:10:e7:85:43:4f:6b:4b:e9:ba:98:fd:50:3c:88:f7:f5: 4c:2e:ff:f1:0b:98:29:89:2c:27:ac:82:e5:c4:e1:7d:08:80: 57:0b:8a:64:90:9c:5d:e0:83:bd:0c:15:bf:f5:fc:60:a1:d0: 00:7c:55:c5:d2:c6:17:71:3b:cd:1d:64:8b:18:b0:81:74:28: 87:b2:b3:65:04:d9:90:06:20:37:3b:33:42:83:da:3c:b3:2c: 0a:e2:48:cb:07:28:7d:aa:a2:3a:8a:25:7a:e4:d5:33:8b:31: eb:5d:13:88:a3:06:93:2d:52:b7:ca:c7:f3:c3:05:ec:2e:b4: cc:3b:82:ab:94:f0:f8:d2:1b:68:41:f6:ec:1a:d7:c7:f7:b5: df:27:6b:d9:9b:ca:7d:b9:2b:a8:58:64:0e:30:4c:42:76:ff: 8a:b2:3e:04:5a:6f:77:79:b1:1f:16:fe:56:d8:36:0f:81:83: 46:b1:9b:8f:b1:8b:74:eb:c8:99:2c:84:f8:8d:3a:e2:7c:a1: bd:6d:11:a8:39:a1:41:71:79:1d:fa:11:e5:35:44:45:64:7e: 23:3f:8f:9f:b9:0e:b0:78:67:cc:43:e3:36:37:3c:f8:83:b6: 68:d6:5e:1c:7c:45:56:15:ef:c0:32:ed:5d:b1:54:1f:f0:83: cf:d2:e3:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjYxMDI1MDMzMjQ4WhcNMjYxMTAxMDMzMjQ4WjAYMRYwFAYD VQQDEw02YWRkNzg2MC00MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnV0Ir4SW91edQ3niTUr+DQnAkZecP3mT0UpK/uhZus8Ll4Auz1TaKCGOHAKx C/Zr4RF6N65WA5cekTow0pifUv2qFUb0XkmLM5e45a1AHb4ALAtVgvzpjHjc96j9 pM+uRZRSXw4QDA1IjUMa9FAqwpqgHyb5hNYfXx6fmF9GDzWwJouboiHSq2T6s3VC ytwS9jbTqqzyZFN+7ZbU2tV15D7h/2E33ObG5KpJ7hRzVzNVJS19ZtTPESM7v+dc Mtl0/APudf2LXIm9PCIA1lNen+vnRvrxPUrlPFFsHcfSwuUafb9r5Pchsmy6msKZ V8LBTprroxzjQ8x4W+RqOwNVHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKw+kEhS GBBzUEk3sNaIksw2fpS2MB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmTwQ54VDT2tL6bqY/VA8iPf1TC7/8QuYKYksJ6yC5cThfQiAVwuKZJCcXeCD vQwVv/X8YKHQAHxVxdLGF3E7zR1kixiwgXQoh7KzZQTZkAYgNzszQoPaPLMsCuJI ywcofaqiOooleuTVM4sx610TiKMGky1St8rH88MF7C60zDuCq5Tw+NIbaEH27BrX x/e13ydr2ZvKfbkrqFhkDjBMQnb/irI+BFpvd3mxHxb+Vtg2D4GDRrGbj7GLdOvI mSyE+I064nyhvW0RqDmhQXF5HfoR5TVERWR+Iz+Pn7kOsHhnzEPjNjc8+IO2aNZe HHxFVhXvwDLtXbFUH/CDz9LjvA== -----END CERTIFICATE-----Generated at Sun Oct 25 09:15:03 2026 by rpki-client