$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: ImH+wA1hDusWYXt7TocUp5hawbXfKQyxAhdUsR/3f24= Subject key identifier: A3:3F:63:A3:CF:B2:16:1B:3E:26:0E:97:09:B6:BD:96:2A:27:0A:1F Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 07E9 Signing time: Mon 26 Oct 2026 21:45:25 +0000 Manifest this update: Mon 26 Oct 2026 21:45:24 +0000 Manifest next update: Mon 02 Nov 2026 21:45:24 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: 4wQML2ojs0sVqzSCAPf8Df2bOTNJFMORpriVHeotrEs=) 2: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=) 3: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=) 4: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=) 5: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=) 6: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=) 7: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=) 9: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 21:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Oct 26 21:45:24 2026 GMT Not After : Nov 2 21:45:24 2026 GMT Subject: CN=6adfc9f5-6f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:22:15:82:89:d9:22:1f:f1:47:74:b9:70: 71:33:1b:e4:44:e9:b5:8b:f9:65:7b:c6:80:dd:26: e8:74:f4:ff:43:95:76:11:30:b5:e6:9d:02:34:d6: 6f:89:aa:20:2f:53:76:50:d1:ba:10:5f:b2:b0:9c: 56:2a:20:d3:3e:51:49:5a:b7:b0:df:b5:8d:72:78: 5e:0a:e7:73:58:04:ef:1c:76:5e:55:1c:a5:1a:a1: 16:c1:76:1d:13:99:e5:b8:6f:70:cc:53:ff:a0:0a: 37:79:1c:f6:33:b4:1f:e5:05:1b:d2:9c:37:88:88: 44:eb:7f:3d:ec:5c:3d:1f:c0:a1:49:e9:b6:0d:c5: 85:24:44:73:e1:8a:45:66:62:92:b9:d7:46:d2:27: 84:16:2d:0a:24:b9:36:09:28:0f:ba:68:97:e7:fb: df:4b:76:3a:fe:e2:db:25:f2:a5:77:36:2a:cf:37: 10:89:c7:3d:cc:86:56:78:a9:f3:7a:72:1c:0e:8b: 33:1b:ab:3c:9c:f6:21:d8:aa:51:ad:9f:b9:38:e2: f6:8e:ac:3d:c4:28:e9:28:c3:dc:7c:d0:dc:cf:79: 6a:ce:b6:e0:49:74:ad:5b:dd:94:9c:15:54:40:58: 73:99:d0:dc:e5:53:32:c1:4b:13:e7:ca:7c:9d:8c: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3F:63:A3:CF:B2:16:1B:3E:26:0E:97:09:B6:BD:96:2A:27:0A:1F X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:cc:a9:df:83:8b:1e:d6:4a:f3:e7:e3:e3:89:3f:31:e4:c8: 22:81:9d:8f:7e:d9:6d:69:a6:39:6d:c9:33:0a:56:8a:99:48: 8e:4a:95:b7:ac:e1:be:0c:42:89:6c:b9:f7:14:39:b3:2f:0a: af:56:53:d4:db:c1:d3:5c:ad:7f:c5:26:90:ab:94:f5:80:78: 62:e8:c7:f2:a4:60:b1:c2:39:76:57:a0:d6:8b:c7:0b:c8:ac: e4:11:b3:e0:8f:7c:65:c5:bb:1c:79:db:cf:fd:79:e0:91:1f: 99:08:6b:26:1a:f5:89:c7:14:b3:52:30:ce:ce:1f:04:c2:57: 18:60:29:ff:6d:ab:67:4d:67:d7:a1:85:cb:87:28:5a:2f:d5: d9:8e:7d:31:c9:3d:d4:6c:ad:bf:ef:f8:fc:bf:0d:a3:db:15: 86:ef:9d:19:b2:cf:ed:95:42:9c:53:80:45:20:da:7c:fe:50: fb:73:3f:ca:d9:d3:77:7a:95:d9:d7:fa:bb:b7:ed:e8:30:82: 86:40:2d:a5:80:9c:b3:15:34:cd:4c:15:a0:71:4a:ca:74:41: bc:de:27:ae:62:f6:6e:b8:d4:97:72:87:a5:58:bb:3f:32:5d: 0d:b1:fb:d0:0d:24:36:a6:5e:bf:56:7c:ae:7c:57:b0:81:e9: 3a:16:d8:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjYxMDI2MjE0NTI0WhcNMjYxMTAyMjE0NTI0WjAYMRYwFAYD VQQDEw02YWRmYzlmNS02ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaAiFYKJ2SIf8Ud0uXBxMxvkROm1i/lle8aA3SbodPT/Q5V2ETC15p0CNNZv iaogL1N2UNG6EF+ysJxWKiDTPlFJWrew37WNcnheCudzWATvHHZeVRylGqEWwXYd E5nluG9wzFP/oAo3eRz2M7Qf5QUb0pw3iIhE63897Fw9H8ChSem2DcWFJERz4YpF ZmKSuddG0ieEFi0KJLk2CSgPumiX5/vfS3Y6/uLbJfKldzYqzzcQicc9zIZWeKnz enIcDoszG6s8nPYh2KpRrZ+5OOL2jqw9xCjpKMPcfNDcz3lqzrbgSXStW92UnBVU QFhzmdDc5VMywUsT58p8nYwNywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKM/Y6PP shYbPiYOlwm2vZYqJwofMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFcyp34OLHtZK8+fj44k/MeTIIoGdj37ZbWmmOW3JMwpWiplIjkqVt6zhvgxC iWy59xQ5sy8Kr1ZT1NvB01ytf8UmkKuU9YB4YujH8qRgscI5dleg1ovHC8is5BGz 4I98ZcW7HHnbz/154JEfmQhrJhr1iccUs1Iwzs4fBMJXGGAp/22rZ01n16GFy4co Wi/V2Y59Mck91Gytv+/4/L8No9sVhu+dGbLP7ZVCnFOARSDafP5Q+3M/ytnTd3qV 2df6u7ft6DCChkAtpYCcsxU0zUwVoHFKynRBvN4nrmL2brjUl3KHpVi7PzJdDbH7 0A0kNqZev1Z8rnxXsIHpOhbYYQ== -----END CERTIFICATE-----Generated at Tue Oct 27 12:55:38 2026 by rpki-client