$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft File: iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json) Hash identifier: U1dWz3s53CqCYz0Mt16ztMaqGS4CMkjinMw08nYIyUg= Subject key identifier: 58:4E:A0:8C:18:5E:60:05:A4:CA:E9:9C:B2:4C:76:0D:67:EC:DC:2C Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft Manifest number: 097E Signing time: Sat 24 Oct 2026 20:45:34 +0000 Manifest this update: Sat 24 Oct 2026 20:45:34 +0000 Manifest next update: Sat 31 Oct 2026 20:45:34 +0000 Files and hashes: 1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: 9sf4GBov5fTswY1p1aNr3wtcmjq3qzxWkQ5L+2PC8yw=) 2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: B8m2ePIUCgEMFkUqEdw865bj5KYfUZe6gW5FvbGFIPQ=) 3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: w4kX8b17fTC2s9BhESajxJlKj2QyQzvAORehV2EbPSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Validity Not Before: Oct 24 20:45:34 2026 GMT Not After : Oct 31 20:45:34 2026 GMT Subject: CN=6add18ee-028b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:44:9c:3b:99:4f:5c:1f:79:fa:23:fb:37:34: b4:ca:4e:3c:17:3c:7c:f4:51:42:03:f1:0a:e0:37: fb:3d:84:3c:60:4c:9d:94:0d:14:18:92:3f:83:28: a9:f5:8b:4d:82:c2:58:65:1a:d0:c8:c2:ec:44:81: b8:f8:3f:31:20:fd:24:c6:cb:36:7b:6e:9c:19:f3: 25:ab:43:68:28:f0:ad:cb:3e:35:5d:a2:a5:15:45: cb:0a:41:5b:a5:84:a9:e7:2b:9d:e9:45:94:bd:9b: 08:21:5c:d2:65:ed:b0:60:d3:aa:6a:52:ad:a9:c5: a0:51:5d:aa:3d:24:4d:0b:a3:6e:f9:3f:7a:3a:0c: e7:66:df:f8:40:80:60:91:b9:13:f1:66:87:b6:d5: aa:02:b1:b0:79:37:f6:f2:e0:dc:ec:89:d2:2f:0a: e1:f1:21:91:6c:7f:2b:34:07:ad:1d:24:49:12:27: 4c:5c:ef:22:65:24:f3:d5:1e:2f:e6:5e:89:d7:9c: 39:ab:59:45:4a:e5:48:ef:02:62:eb:3d:89:f1:ca: f0:d6:a8:78:fa:0e:27:59:15:08:a3:26:c3:d8:d1: 7b:c5:8f:da:54:41:a3:51:48:cf:db:70:4f:3d:ab: 7a:77:13:8d:6e:dc:eb:aa:cf:57:a1:3b:8a:bc:c6: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4E:A0:8C:18:5E:60:05:A4:CA:E9:9C:B2:4C:76:0D:67:EC:DC:2C X509v3 Authority Key Identifier: keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5e:c0:c2:ed:6d:d7:80:e0:75:b6:f3:69:46:86:4a:81:7a: dc:c3:30:e8:5c:89:50:9d:6e:31:bb:5b:15:5f:41:20:2d:81: 11:35:e6:6c:43:d1:c9:c6:a0:77:e9:83:8d:90:08:47:1f:ee: 24:ea:87:ee:9e:56:34:ce:63:a1:9c:7d:9d:c6:fd:b2:96:8d: 41:a8:3d:24:eb:31:e0:1f:f7:69:08:fe:78:d3:24:f8:ae:73: fb:97:b4:56:62:5d:6c:01:14:0c:b0:84:20:75:84:f8:3d:fe: e0:20:13:e0:16:37:0a:85:bd:77:de:58:38:1e:4b:a4:0a:14: 1b:16:e4:14:c6:ff:80:8d:ba:2c:71:23:09:7d:73:ce:0a:1b: 71:88:b6:68:8e:28:b9:e8:43:a0:71:cd:ea:8d:63:c8:eb:61: 5a:8b:5b:07:2c:0f:8d:3d:97:d5:87:27:26:19:ec:64:f5:60: 3a:16:4f:0c:97:bc:4f:b2:c4:6a:12:7e:5f:65:fc:0a:8f:87: ec:e2:1e:e3:6e:18:f5:45:35:6c:3e:9a:5e:b6:d3:68:51:b3: ff:a4:0f:da:20:ce:a1:1d:9d:c7:9f:a6:2d:bb:24:bd:52:bf: 39:94:d9:25:8e:22:60:2d:e9:6e:f5:ef:de:7e:aa:93:68:60: cf:2c:a2:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKDg4N0U3OUUyNUI2RDFEMzdFRjFGMzFCQzVBMDIzMkY4 RTc2NTE1NDUwHhcNMjYxMDI0MjA0NTM0WhcNMjYxMDMxMjA0NTM0WjAYMRYwFAYD VQQDEw02YWRkMThlZS0wMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kScO5lPXB95+iP7NzS0yk48Fzx89FFCA/EK4Df7PYQ8YEydlA0UGJI/gyip 9YtNgsJYZRrQyMLsRIG4+D8xIP0kxss2e26cGfMlq0NoKPCtyz41XaKlFUXLCkFb pYSp5yud6UWUvZsIIVzSZe2wYNOqalKtqcWgUV2qPSRNC6Nu+T96OgznZt/4QIBg kbkT8WaHttWqArGweTf28uDc7InSLwrh8SGRbH8rNAetHSRJEidMXO8iZSTz1R4v 5l6J15w5q1lFSuVI7wJi6z2J8crw1qh4+g4nWRUIoybD2NF7xY/aVEGjUUjP23BP Pat6dxONbtzrqs9XoTuKvMZM/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhOoIwY XmAFpMrpnLJMdg1n7NwsMB8GA1UdIwQYMBaAFIh+eeJbbR037x8xvFoCMvjnZRVF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi9pSDU1NGx0dEhUZnZIekc4V2dJeS1PZGxG VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lINTU0bHR0SFRmdkh6RzhXZ0l5LU9kbEZVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi9pSDU1NGx0dEhU ZnZIekc4V2dJeS1PZGxGVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADl7Awu1t14DgdbbzaUaGSoF63MMw6FyJUJ1uMbtbFV9BIC2BETXmbEPRycag d+mDjZAIRx/uJOqH7p5WNM5joZx9ncb9spaNQag9JOsx4B/3aQj+eNMk+K5z+5e0 VmJdbAEUDLCEIHWE+D3+4CAT4BY3CoW9d95YOB5LpAoUGxbkFMb/gI26LHEjCX1z zgobcYi2aI4ouehDoHHN6o1jyOthWotbBywPjT2X1YcnJhnsZPVgOhZPDJe8T7LE ahJ+X2X8Co+H7OIe424Y9UU1bD6aXrbTaFGz/6QP2iDOoR2dx5+mLbskvVK/OZTZ JY4iYC3pbvXv3n6qk2hgzyyiyw== -----END CERTIFICATE-----Generated at Mon Oct 26 14:40:50 2026 by rpki-client