$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json) Hash identifier: UQTClkL4aGKRbe3TllntRJaL6Kp4My4rHMs96EWtCv8= Subject key identifier: 1F:A7:95:D2:F7:F8:F5:4E:AF:99:CF:0F:15:D2:53:66:EE:1D:89:6B Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Certificate serial: 0601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft Manifest number: 05F3 Signing time: Sun 18 Oct 2026 23:05:21 +0000 Manifest this update: Sun 18 Oct 2026 23:05:21 +0000 Manifest next update: Sun 25 Oct 2026 23:05:21 +0000 Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: UoCKBh2UEi/VinrkwkqV/TcUlxxcnqYBhd5KokMVa48=) 2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 23:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1537 (0x601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Validity Not Before: Oct 18 23:05:21 2026 GMT Not After : Oct 25 23:05:21 2026 GMT Subject: CN=6ad550b1-5c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:af:9f:cd:5b:58:65:36:58:d1:79:e6:a4: 1c:21:d7:cb:2d:cc:04:8b:2d:e8:24:60:32:28:5d: fc:0f:c7:13:67:86:4c:93:a7:7a:aa:d1:3b:d2:ec: 78:1b:30:c7:23:44:d9:e3:8a:3b:fc:5b:1f:19:65: cd:79:3a:0f:09:f9:d1:43:a9:b6:21:de:9d:79:a2: 55:db:da:f3:20:87:b4:f7:7d:65:48:27:fb:44:23: 00:fe:d3:b4:0d:17:72:ac:0b:f8:b8:dc:3c:00:ae: 00:9f:1d:76:4e:74:d1:8d:7b:2c:f2:b7:19:f0:9d: 0f:fc:67:8d:23:0b:7a:9e:b8:a1:4d:75:0a:98:68: 62:de:f8:7d:6a:b3:8d:bc:28:fc:ce:b3:bf:60:40: e1:80:9a:06:d2:96:68:24:3f:94:90:f0:e2:63:bc: 95:01:a4:c1:f0:1a:5f:c5:e2:d5:30:08:37:ab:78: 51:5f:90:c5:6c:06:71:fc:0d:08:65:df:97:39:23: d0:cc:c3:93:e8:c4:e1:e9:e1:72:a3:c4:b4:e7:10: fc:e8:6c:5b:01:5b:4a:f9:ed:55:0c:8e:6f:34:39: 39:e7:a4:00:c6:d5:bd:b5:8e:5b:c8:b3:03:c1:0c: 2c:76:88:8b:27:24:91:51:38:25:8d:2f:cf:c3:e3: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A7:95:D2:F7:F8:F5:4E:AF:99:CF:0F:15:D2:53:66:EE:1D:89:6B X509v3 Authority Key Identifier: keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6c:4d:73:80:ef:56:b3:b1:52:61:d5:cb:9d:3a:90:d4:fb: 4a:85:7c:5f:cc:0d:92:11:c3:71:ae:95:64:5c:ff:92:81:c6: ec:5f:1f:7b:6b:b5:d4:07:d2:be:69:52:a9:98:92:d2:7d:50: d5:ec:ef:31:f5:5b:42:4f:47:0e:77:63:e6:22:50:fa:c8:a9: bc:13:aa:77:27:f6:50:9b:c0:06:05:cc:43:af:98:62:b2:91: 83:42:8a:f1:b9:77:67:97:5d:26:23:e2:d7:b5:57:dd:4a:7e: 23:69:f3:eb:0f:b9:80:86:9b:1b:9f:4e:3c:66:8b:39:53:e7: 30:fa:2a:2f:84:d6:be:a9:8c:8b:95:a8:7e:11:77:e3:45:cc: e2:2d:f4:08:7f:f7:3c:b3:bc:b4:bd:e3:71:56:e4:b9:93:3e: 6d:c0:10:12:47:38:f0:93:35:6d:f0:e9:94:bb:db:1b:c2:50: 38:82:74:4f:07:43:c5:7d:ea:59:95:21:b8:42:27:71:a1:93: a4:a1:16:da:ca:7c:ca:85:75:57:6c:0d:aa:b0:4f:52:68:23: bf:ad:dd:ee:23:2c:b2:3a:e9:5f:ff:3c:ec:86:8f:fb:35:b0: 90:ca:1e:09:df:39:56:41:1b:14:29:ef:8b:a2:77:da:fc:15: 1c:44:dd:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1 NURCMzFDRTgwHhcNMjYxMDE4MjMwNTIxWhcNMjYxMDI1MjMwNTIxWjAYMRYwFAYD VQQDEw02YWQ1NTBiMS01YzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXGvn81bWGU2WNF55qQcIdfLLcwEiy3oJGAyKF38D8cTZ4ZMk6d6qtE70ux4 GzDHI0TZ44o7/FsfGWXNeToPCfnRQ6m2Id6deaJV29rzIIe0931lSCf7RCMA/tO0 DRdyrAv4uNw8AK4Anx12TnTRjXss8rcZ8J0P/GeNIwt6nrihTXUKmGhi3vh9arON vCj8zrO/YEDhgJoG0pZoJD+UkPDiY7yVAaTB8BpfxeLVMAg3q3hRX5DFbAZx/A0I Zd+XOSPQzMOT6MTh6eFyo8S05xD86GxbAVtK+e1VDI5vNDk556QAxtW9tY5byLMD wQwsdoiLJySRUTgljS/Pw+NeJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+nldL3 +PVOr5nPDxXSU2buHYlrMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NERGQS84NDU5ODRDRTFBODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFN VzVjTHZpazAyYU5WMnpIT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArGxNc4DvVrOxUmHVy506kNT7SoV8X8wNkhHDca6VZFz/koHG7F8fe2u11AfS vmlSqZiS0n1Q1ezvMfVbQk9HDndj5iJQ+sipvBOqdyf2UJvABgXMQ6+YYrKRg0KK 8bl3Z5ddJiPi17VX3Up+I2nz6w+5gIabG59OPGaLOVPnMPoqL4TWvqmMi5WofhF3 40XM4i30CH/3PLO8tL3jcVbkuZM+bcAQEkc48JM1bfDplLvbG8JQOIJ0TwdDxX3q WZUhuEIncaGTpKEW2sp8yoV1V2wNqrBPUmgjv63d7iMssjrpX/887IaP+zWwkMoe Cd85VkEbFCnvi6J32vwVHETd9A== -----END CERTIFICATE-----Generated at Tue Oct 20 12:25:49 2026 by rpki-client