$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: oCqlK2GNGiIVd9gkKRuR6Dxb/xbSW7ixdtii53IcS6g= Subject key identifier: 1E:09:D2:E3:4C:19:6B:F0:89:B8:82:18:3C:50:D5:F5:88:48:C8:88 Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: 01EA Signing time: Wed 07 Oct 2026 03:54:00 +0000 Manifest this update: Wed 07 Oct 2026 03:53:59 +0000 Manifest next update: Wed 14 Oct 2026 03:53:59 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: MPNbWBhxHRerNSM8V/LaUQbFmys4DS/289coGTfrmkg=) 2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: m02khT/jg2hbvP72RR7nK1qweNEQkqkW4mCPiNuzwrw=) 3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: KXSh6prRPhPWK5BnqXhTsFwQImo2BvM4I7HOo4Rrn/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Oct 7 03:53:59 2026 GMT Not After : Oct 14 03:53:59 2026 GMT Subject: CN=6ac5c258-eea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9b:0d:aa:f3:85:f8:8e:70:de:d0:0b:1c:0c: 0d:55:49:0d:91:fa:df:ac:e6:f3:66:32:32:c2:39: 49:1d:8f:74:81:01:01:b3:ee:2f:bc:d3:67:a1:69: 47:f2:bd:22:c9:e4:a4:a5:91:d8:4b:5e:df:46:06: 83:88:86:8f:5f:d1:48:89:44:d7:4c:c2:dc:42:0b: c4:d4:76:7f:db:f0:8d:b8:52:af:12:c0:b3:f6:61: ce:e4:2e:7d:fd:ab:22:bc:51:11:ed:98:0f:22:dd: 81:d7:b3:8b:a3:a2:bf:a0:4b:a6:eb:6e:e7:20:86: b2:d9:cb:78:32:0e:5d:b4:4f:7b:83:0c:b5:38:b4: c7:7d:ea:10:9a:92:0c:18:c1:f8:92:5d:49:e4:b8: 29:06:69:0c:72:10:60:b3:b1:a0:76:02:d4:09:d6: da:f5:b9:d1:05:36:7d:70:2e:55:16:04:72:a6:18: 30:25:84:16:95:b3:c8:f4:e4:d0:07:d9:34:5f:71: 2a:97:a7:19:bf:85:a1:1d:a6:f0:4b:00:86:32:88: ef:f6:e7:44:13:11:4a:e6:34:4e:f1:84:e4:56:7d: cb:e4:7f:a4:bb:29:4a:01:58:e3:ea:48:3d:4c:07: 45:d1:3f:5a:c8:22:4b:d3:f7:40:6a:f7:07:43:1b: 8d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:09:D2:E3:4C:19:6B:F0:89:B8:82:18:3C:50:D5:F5:88:48:C8:88 X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:a1:e4:35:53:07:56:67:3b:4a:e3:bb:b7:a3:f6:33:63:ae: 10:c6:9e:f5:83:83:84:e8:f7:92:b8:ad:2a:4a:22:71:e7:60: 07:d0:03:68:64:da:f8:e3:c4:c3:db:e3:f8:5d:32:f0:1c:77: da:89:bd:7e:a7:36:b3:45:fc:02:e6:3e:9e:54:94:1a:4e:8e: a6:e2:67:ab:a2:a2:18:f5:5d:a3:02:54:e2:93:2b:d4:a0:75: a3:14:fc:42:1b:ba:1d:10:b3:bd:18:9d:b7:bb:f2:88:15:08: 25:af:1f:73:1b:ab:a9:d1:77:5b:4e:5f:03:c4:2e:40:46:f3: c7:97:21:4d:81:58:af:94:e0:2f:a2:62:5e:ca:fd:3a:44:81: f7:44:ee:c5:03:8c:11:cd:a8:45:30:6d:e6:6f:b7:03:d5:b1: 94:57:b1:bb:ca:92:da:a7:85:7f:67:49:a0:7b:0c:65:29:3d: 87:f3:c2:21:1d:ae:9d:85:0f:43:c7:46:4e:b4:b1:9c:b8:6c: 45:aa:3e:74:ab:c0:d9:8d:66:86:7f:20:49:06:12:69:9c:bc: cc:6d:d1:36:60:be:20:37:f5:0e:90:70:45:b3:e9:ef:aa:1c: ef:2e:d8:16:ed:53:68:52:58:f0:6e:ca:48:42:00:74:54:a4: 01:48:7b:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjYxMDA3MDM1MzU5WhcNMjYxMDE0MDM1MzU5WjAYMRYwFAYD VQQDEw02YWM1YzI1OC1lZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45sNqvOF+I5w3tALHAwNVUkNkfrfrObzZjIywjlJHY90gQEBs+4vvNNnoWlH 8r0iyeSkpZHYS17fRgaDiIaPX9FIiUTXTMLcQgvE1HZ/2/CNuFKvEsCz9mHO5C59 /asivFER7ZgPIt2B17OLo6K/oEum627nIIay2ct4Mg5dtE97gwy1OLTHfeoQmpIM GMH4kl1J5LgpBmkMchBgs7GgdgLUCdba9bnRBTZ9cC5VFgRyphgwJYQWlbPI9OTQ B9k0X3Eql6cZv4WhHabwSwCGMojv9udEExFK5jRO8YTkVn3L5H+kuylKAVjj6kg9 TAdF0T9ayCJL0/dAavcHQxuN9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4J0uNM GWvwibiCGDxQ1fWISMiIMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtaHkNVMHVmc7SuO7t6P2M2OuEMae9YODhOj3kritKkoicedgB9ADaGTa+OPE w9vj+F0y8Bx32om9fqc2s0X8AuY+nlSUGk6OpuJnq6KiGPVdowJU4pMr1KB1oxT8 Qhu6HRCzvRidt7vyiBUIJa8fcxurqdF3W05fA8QuQEbzx5chTYFYr5TgL6JiXsr9 OkSB90TuxQOMEc2oRTBt5m+3A9WxlFexu8qS2qeFf2dJoHsMZSk9h/PCIR2unYUP Q8dGTrSxnLhsRao+dKvA2Y1mhn8gSQYSaZy8zG3RNmC+IDf1DpBwRbPp76oc7y7Y Fu1TaFJY8G7KSEIAdFSkAUh71w== -----END CERTIFICATE-----Generated at Thu Oct 8 03:59:51 2026 by rpki-client