$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft File: IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft (raw, json) Hash identifier: LTjJYG7nbeUSXoZ0+kxk+tblgnhytQLHvVT+eeDE1vQ= Subject key identifier: 2D:A3:0E:9E:9A:9A:A6:6E:5B:E1:A2:86:58:D6:5B:5C:D3:D9:C5:35 Authority key identifier: 21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA Certificate issuer: /CN=A91EA409/serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft Manifest number: 0171 Signing time: Sat 17 Oct 2026 05:31:43 +0000 Manifest this update: Sat 17 Oct 2026 05:31:43 +0000 Manifest next update: Sat 24 Oct 2026 05:31:43 +0000 Files and hashes: 1: IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl (hash: 7NbgDg0EdKtfYHxw1h6/JbCj/nad/7L1SlTDzc6NYRI=) 2: E9F177B89D9C11EFA9526A6CC4F9AE02.roa (hash: aIh23/3y8xgm3k9QGKPnGbqB42NXH2OLUXREX9l30Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 05:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA409, serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA Validity Not Before: Oct 17 05:31:43 2026 GMT Not After : Oct 24 05:31:43 2026 GMT Subject: CN=6ad3083f-1e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:c3:77:4e:c7:68:2f:eb:49:0b:d1:7c:6f: d0:1f:8b:95:a6:8c:cc:0e:6b:0a:99:ed:63:98:44: 01:30:1b:41:2d:f9:67:05:7d:58:a2:6d:1c:a1:dc: c3:58:0d:90:69:08:83:82:b1:7e:c2:05:46:43:c1: 5c:96:c7:fe:bb:3b:59:59:09:6a:45:7b:90:ff:46: 8c:39:8e:77:fd:e9:5c:08:4c:4c:54:10:a5:12:3b: b4:e3:f0:e9:3e:5b:bc:12:fc:b2:bf:98:f2:c3:b9: af:72:88:b0:5d:95:26:0f:e6:96:c0:3d:5f:98:4b: e1:81:8b:fa:be:a1:22:37:99:5c:09:b0:79:79:cd: f5:de:8b:bb:32:c0:d1:88:bb:8d:87:47:dd:1b:60: ab:62:33:84:3d:cf:99:08:80:28:91:82:23:8a:40: 81:6c:b8:67:2f:a9:ec:6a:1c:4a:f4:57:ec:33:e1: 0e:30:d0:1c:49:dd:93:51:d1:1a:47:cd:2f:5c:b1: 6c:71:55:2c:8f:57:43:3a:34:db:7a:0a:fb:4b:78: a7:08:34:b6:f5:cf:d9:e4:2b:49:fc:e2:55:ef:56: a4:77:28:6c:22:3b:55:18:69:bb:5a:e0:b8:fa:58: 43:04:29:91:99:72:c7:3c:d0:20:46:da:f3:77:f4: 57:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A3:0E:9E:9A:9A:A6:6E:5B:E1:A2:86:58:D6:5B:5C:D3:D9:C5:35 X509v3 Authority Key Identifier: keyid:21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dc:a5:91:8b:09:30:96:36:b3:06:5a:fa:aa:e1:1e:ce:65: 8d:20:65:06:39:d4:fa:c0:87:3f:cb:e0:11:1f:d7:31:e6:2a: 95:17:d1:5a:95:a7:1a:36:72:32:2a:af:af:3e:fd:2a:79:a1: 27:c7:8b:a9:36:cf:10:d5:0f:3b:ce:3e:9c:ad:cf:01:f4:0e: 51:25:84:f4:59:63:4a:34:2d:18:42:4b:fa:97:75:b3:45:4e: 52:f9:8e:21:12:d5:5f:30:61:98:b9:49:a8:8d:5d:2c:f9:47: c4:67:01:4a:73:e8:22:42:47:da:49:f2:cc:89:76:66:ad:cd: 91:2d:2f:3b:1c:05:74:f1:7b:44:04:a1:1f:f3:ed:ac:d3:1e: 36:98:3c:2b:fb:ce:30:44:45:42:cf:3a:c2:a3:6a:c6:29:97: 2d:55:97:76:b4:fa:43:fe:fb:48:83:e1:8c:b7:a2:2f:1c:19: 89:42:41:7d:eb:ec:ee:da:ef:95:03:aa:68:dd:6a:61:71:23: cc:54:41:64:0e:d2:44:3d:4b:3e:c3:58:e1:6a:82:54:c4:eb: ed:08:68:92:0f:a5:22:fd:0d:3c:5d:0b:32:e0:ed:3f:f4:3f: 01:07:5f:81:a1:58:25:5d:83:09:e3:dd:3c:13:85:22:f9:62: a9:0a:31:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0MDkxMTAvBgNVBAUTKDIxNjRERDU5QTYxNUQ1RjJFMzM5M0U3MjA5OEE3M0FE ODY4RTc4REEwHhcNMjYxMDE3MDUzMTQzWhcNMjYxMDI0MDUzMTQzWjAYMRYwFAYD VQQDEw02YWQzMDgzZi0xZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEXDd07HaC/rSQvRfG/QH4uVpozMDmsKme1jmEQBMBtBLflnBX1Yom0codzD WA2QaQiDgrF+wgVGQ8Fclsf+uztZWQlqRXuQ/0aMOY53/elcCExMVBClEju04/Dp Plu8Evyyv5jyw7mvcoiwXZUmD+aWwD1fmEvhgYv6vqEiN5lcCbB5ec313ou7MsDR iLuNh0fdG2CrYjOEPc+ZCIAokYIjikCBbLhnL6nsahxK9FfsM+EOMNAcSd2TUdEa R80vXLFscVUsj1dDOjTbegr7S3inCDS29c/Z5CtJ/OJV71akdyhsIjtVGGm7WuC4 +lhDBCmRmXLHPNAgRtrzd/RX8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2jDp6a mqZuW+GihljWW1zT2cU1MB8GA1UdIwQYMBaAFCFk3VmmFdXy4zk+cgmKc62Gjnja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQwOS9GOTQ0RTNDQzlD QUIxMUVGQUI1OTU1MTZDNEY5QUUwMi9JV1RkV2FZVjFmTGpPVDV5Q1lwenJZYU9l Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lXVGRXYVlWMWZMak9UNXlDWXB6cllhT2VOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQwOS9GOTQ0RTNDQzlDQUIxMUVGQUI1OTU1MTZDNEY5QUUwMi9JV1RkV2FZVjFm TGpPVDV5Q1lwenJZYU9lTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHdylkYsJMJY2swZa+qrhHs5ljSBlBjnU+sCHP8vgER/XMeYqlRfRWpWnGjZy Miqvrz79KnmhJ8eLqTbPENUPO84+nK3PAfQOUSWE9FljSjQtGEJL+pd1s0VOUvmO IRLVXzBhmLlJqI1dLPlHxGcBSnPoIkJH2knyzIl2Zq3NkS0vOxwFdPF7RAShH/Pt rNMeNpg8K/vOMERFQs86wqNqximXLVWXdrT6Q/77SIPhjLeiLxwZiUJBfevs7trv lQOqaN1qYXEjzFRBZA7SRD1LPsNY4WqCVMTr7Qhokg+lIv0NPF0LMuDtP/Q/AQdf gaFYJV2DCePdPBOFIvliqQoxww== -----END CERTIFICATE-----Generated at Sun Oct 18 13:32:00 2026 by rpki-client