$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: RD6aZWrCkm8DqeKUu9VFqYPuChY2liSrb4MPjFmEeVU= Subject key identifier: 20:3D:20:08:E8:FD:05:AA:FE:1B:84:6D:86:EF:F5:FA:05:5E:E6:75 Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: 0158 Signing time: Sat 10 Oct 2026 17:31:51 +0000 Manifest this update: Sat 10 Oct 2026 17:31:51 +0000 Manifest next update: Sat 17 Oct 2026 17:31:51 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: 1K3cgFsW8ewhQ8RbD3JLO+bUgR8M53xgZuyy0i8nnro=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: akLA24IwRVeRV87VrcCP9mJOdJA7ntWRSTCaXT2ZWc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Oct 10 17:31:51 2026 GMT Not After : Oct 17 17:31:51 2026 GMT Subject: CN=6aca7687-7fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:2f:60:af:ac:d4:28:15:30:b7:73:16:51: f7:25:95:ad:ef:52:eb:49:95:11:aa:e8:71:ec:cd: 84:02:10:da:89:38:33:82:6e:b7:53:c7:f4:2c:60: d5:06:88:f6:16:3c:d0:37:d4:61:74:d4:a2:0c:b6: 0a:45:24:1b:54:82:41:04:29:8f:21:3b:b2:8e:76: b5:56:76:3e:ce:5a:da:72:24:47:cd:eb:46:34:84: 7d:80:46:30:c5:2f:8a:3d:aa:b9:61:48:fc:6c:90: c6:99:41:9f:dc:9b:62:0f:8e:a1:fe:8e:bf:96:7f: 49:8e:9d:9a:c3:02:06:a2:76:8a:d5:be:cc:79:55: 34:52:68:7d:14:cf:2e:21:80:76:60:74:f0:c4:23: a2:43:80:30:67:7e:8c:1c:42:6d:7f:3f:e1:54:e2: b8:99:48:91:6d:93:22:b9:57:7c:e9:82:44:1b:ac: 6a:18:01:ac:12:f8:2c:7a:70:14:2d:4b:ad:8f:56: a1:a5:46:12:07:09:be:0f:2f:5d:de:93:ed:1d:55: 30:b2:52:14:71:00:c6:7d:8f:29:11:3f:c7:0d:a5: f6:53:81:cc:40:52:31:c8:13:4d:1c:30:90:28:73: 7e:0d:ef:c5:2d:b0:aa:24:bb:b3:5f:39:fb:8a:2b: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3D:20:08:E8:FD:05:AA:FE:1B:84:6D:86:EF:F5:FA:05:5E:E6:75 X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:de:d1:bf:52:5e:60:84:32:8c:89:00:a9:44:28:f2:40:56: 09:43:6a:5a:c8:3d:a7:ef:9d:84:15:12:3f:e3:48:2e:e5:cd: 7e:a6:af:4a:4b:54:c4:ba:d2:cb:42:1d:00:fa:8d:2b:24:cf: 6f:10:59:37:e6:4f:7b:43:1b:b0:fd:3a:e2:e7:e7:04:e2:0d: 8e:92:83:a5:43:9c:e6:05:4c:2c:11:a7:c2:d4:94:17:fb:38: 89:55:4b:f0:78:a9:a9:50:0c:c7:47:0c:f0:06:01:96:2a:33: eb:2b:ee:53:9a:ae:fc:35:51:8d:1b:7f:9d:20:1c:54:a9:27: ae:da:a1:74:f0:a4:75:05:76:43:46:58:bb:a2:4f:53:c5:04: 8a:7d:15:71:70:f5:35:d2:38:ab:d8:c4:74:f1:98:44:6c:9b: c4:0a:fa:3f:6f:ea:e0:cf:f1:49:a3:38:32:9b:d4:6a:a7:ea: 12:ee:d4:5c:79:a4:e8:db:40:aa:08:a1:a3:49:66:10:3b:76: 3a:f2:f4:d8:fe:d4:c9:4e:99:66:a0:51:84:f7:01:af:61:05: f5:3e:4e:16:80:10:b6:f0:ed:db:c1:d0:79:1b:95:b5:50:67: 16:8a:a4:41:41:02:75:b8:ad:06:5c:e8:af:da:32:74:c8:63: 8c:75:2b:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjYxMDEwMTczMTUxWhcNMjYxMDE3MTczMTUxWjAYMRYwFAYD VQQDEw02YWNhNzY4Ny03ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCUvYK+s1CgVMLdzFlH3JZWt71LrSZURquhx7M2EAhDaiTgzgm63U8f0LGDV Boj2FjzQN9RhdNSiDLYKRSQbVIJBBCmPITuyjna1VnY+zlraciRHzetGNIR9gEYw xS+KPaq5YUj8bJDGmUGf3JtiD46h/o6/ln9Jjp2awwIGonaK1b7MeVU0Umh9FM8u IYB2YHTwxCOiQ4AwZ36MHEJtfz/hVOK4mUiRbZMiuVd86YJEG6xqGAGsEvgsenAU LUutj1ahpUYSBwm+Dy9d3pPtHVUwslIUcQDGfY8pET/HDaX2U4HMQFIxyBNNHDCQ KHN+De/FLbCqJLuzXzn7iiuahwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCA9IAjo /QWq/huEbYbv9foFXuZ1MB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHN7Rv1JeYIQyjIkAqUQo8kBWCUNqWsg9p++dhBUSP+NILuXNfqavSktUxLrS y0IdAPqNKyTPbxBZN+ZPe0MbsP064ufnBOINjpKDpUOc5gVMLBGnwtSUF/s4iVVL 8HipqVAMx0cM8AYBlioz6yvuU5qu/DVRjRt/nSAcVKknrtqhdPCkdQV2Q0ZYu6JP U8UEin0VcXD1NdI4q9jEdPGYRGybxAr6P2/q4M/xSaM4MpvUaqfqEu7UXHmk6NtA qgiho0lmEDt2OvL02P7UyU6ZZqBRhPcBr2EF9T5OFoAQtvDt28HQeRuVtVBnFoqk QUECdbitBlzor9oydMhjjHUroQ== -----END CERTIFICATE-----Generated at Sun Oct 11 01:04:42 2026 by rpki-client