$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: 9t5IxSfHh03eRtif38vkV9R1aAa1Uukyj82fq27KEBk= Subject key identifier: 40:74:11:C0:22:58:D7:E1:69:B8:75:DA:76:14:33:F4:5E:F3:66:CF Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 07E8 Signing time: Sat 24 Oct 2026 21:48:23 +0000 Manifest this update: Sat 24 Oct 2026 21:48:23 +0000 Manifest next update: Sat 31 Oct 2026 21:48:23 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: XjPSmsmZLNV48xWM7zKoJShkf1LIkUDPdHYLASVPO98=) 2: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=) 3: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=) 4: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=) 5: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=) 6: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=) 8: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=) 9: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 21:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Oct 24 21:48:23 2026 GMT Not After : Oct 31 21:48:23 2026 GMT Subject: CN=6add27a7-8c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:a7:a3:c1:39:2e:22:b8:30:1e:b7:a5:cb: bc:f9:b4:a4:35:5a:74:20:4d:0f:bb:05:16:4b:a0: 59:1a:7e:68:15:61:68:86:41:1f:05:8d:bd:f6:ab: d4:ca:62:1e:18:a4:28:29:53:32:50:75:44:40:86: 2a:e9:31:d4:04:03:33:ab:f1:dc:1f:9e:a8:49:1f: 3d:ef:ac:af:2e:b1:ff:aa:17:d2:48:fd:ee:98:39: bc:77:0b:91:fc:f4:67:28:f2:64:78:a6:62:f1:c0: 1e:14:75:56:2f:8b:3a:40:5c:75:1a:05:ad:07:f9: b7:f7:e8:9b:4e:24:d7:50:ed:76:9b:64:a2:86:4f: 11:c9:63:1e:54:46:eb:3b:6e:88:e9:2e:0a:9b:06: 75:6b:fb:f6:e1:5d:e1:61:88:2d:41:a4:f4:cf:ba: a2:06:98:37:08:f9:ff:f1:5a:93:69:34:17:0c:45: 57:16:3e:7d:5b:eb:dc:b5:15:90:8c:15:94:f1:09: 59:b1:83:b0:28:ea:fa:97:f1:7f:1e:5b:82:70:28: 1d:18:2e:51:33:66:39:f8:fd:d1:80:90:6e:d7:fb: 5a:15:5a:48:0e:5b:33:e9:38:22:22:8c:2f:56:88: 66:d7:41:52:aa:b4:5a:99:03:3a:ae:32:d2:7a:6f: 2f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:74:11:C0:22:58:D7:E1:69:B8:75:DA:76:14:33:F4:5E:F3:66:CF X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:8c:1f:89:95:f7:12:27:f3:d3:97:7c:33:4a:16:01:67:49: f0:8d:a2:7d:11:17:3c:89:3e:a3:56:21:7b:9f:f3:98:71:4a: 3a:7d:89:8b:a0:54:1e:b1:c5:f8:59:26:da:1b:8d:e5:af:23: 70:c6:9c:de:61:d1:71:bb:55:5d:73:01:f7:fb:cf:6d:33:8e: c3:ec:10:59:85:b1:71:aa:f8:c6:e2:64:ea:6e:5d:cc:4f:4e: 09:a3:12:15:3c:2b:5f:be:da:99:21:a4:93:71:dd:6b:78:29: 2c:37:a0:4a:7d:51:bb:12:5d:c8:8f:83:1c:90:bf:a0:77:91: 9f:24:c6:7f:ca:7d:bc:a9:49:3f:9e:8e:ac:df:e8:31:9a:44: 8f:82:bd:c3:2a:82:32:07:be:c7:d1:24:36:f3:e7:be:33:e7: bf:8d:0f:ad:8d:43:4d:59:34:82:3e:12:63:ae:33:95:77:27: 1f:96:24:9a:b7:5c:69:fb:8f:8b:33:7a:d3:cb:3f:cb:8a:0b: fb:60:e2:eb:98:2c:75:a1:d4:40:7d:f8:53:4b:30:e9:35:a2: 48:21:82:fd:c6:93:83:2b:76:91:66:e4:49:40:51:e1:09:b4: fe:56:28:b3:f8:3d:92:14:c2:17:80:8d:54:71:cc:de:e0:8d: 6e:ee:a5:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjYxMDI0MjE0ODIzWhcNMjYxMDMxMjE0ODIzWjAYMRYwFAYD VQQDEw02YWRkMjdhNy04YzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mSno8E5LiK4MB63pcu8+bSkNVp0IE0PuwUWS6BZGn5oFWFohkEfBY299qvU ymIeGKQoKVMyUHVEQIYq6THUBAMzq/HcH56oSR8976yvLrH/qhfSSP3umDm8dwuR /PRnKPJkeKZi8cAeFHVWL4s6QFx1GgWtB/m39+ibTiTXUO12m2Sihk8RyWMeVEbr O26I6S4KmwZ1a/v24V3hYYgtQaT0z7qiBpg3CPn/8VqTaTQXDEVXFj59W+vctRWQ jBWU8QlZsYOwKOr6l/F/HluCcCgdGC5RM2Y5+P3RgJBu1/taFVpIDlsz6TgiIowv Vohm10FSqrRamQM6rjLSem8vtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEB0EcAi WNfhabh12nYUM/Re82bPMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiYwfiZX3Eifz05d8M0oWAWdJ8I2ifREXPIk+o1Yhe5/zmHFKOn2Ji6BUHrHF +Fkm2huN5a8jcMac3mHRcbtVXXMB9/vPbTOOw+wQWYWxcar4xuJk6m5dzE9OCaMS FTwrX77amSGkk3Hda3gpLDegSn1RuxJdyI+DHJC/oHeRnyTGf8p9vKlJP56OrN/o MZpEj4K9wyqCMge+x9EkNvPnvjPnv40PrY1DTVk0gj4SY64zlXcnH5YkmrdcafuP izN608s/y4oL+2Di65gsdaHUQH34U0sw6TWiSCGC/caTgyt2kWbkSUBR4Qm0/lYo s/g9khTCF4CNVHHM3uCNbu6lgA== -----END CERTIFICATE-----Generated at Sun Oct 25 20:57:00 2026 by rpki-client