$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: RcPoHPI70jem9vFU+H2BH3ZP4ZfMj20oceLvKrI9Ptg= Subject key identifier: 05:DB:57:8D:03:B5:F7:E3:88:ED:EC:36:B4:E3:80:DC:50:5D:58:09 Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: 0159 Signing time: Mon 12 Oct 2026 17:34:47 +0000 Manifest this update: Mon 12 Oct 2026 17:34:46 +0000 Manifest next update: Mon 19 Oct 2026 17:34:46 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: T4jd6BLQtkZa6jHUw12FCVZWc0IDy+whvrvT/+0H1p4=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: akLA24IwRVeRV87VrcCP9mJOdJA7ntWRSTCaXT2ZWc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Oct 12 17:34:46 2026 GMT Not After : Oct 19 17:34:46 2026 GMT Subject: CN=6acd1a37-1546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:10:81:83:50:14:36:8d:1c:86:29:5b:3d:aa: d4:82:0e:af:6a:60:b2:16:25:15:82:2a:d4:14:27: 2e:2b:71:aa:5f:c0:92:b3:0f:4b:f7:5b:02:4c:9d: 90:bd:74:f7:d1:b2:bb:d9:24:e7:8f:59:f4:65:ad: 90:da:00:bf:88:11:08:81:18:9b:49:5c:d2:d9:2a: 23:d4:90:99:77:f7:71:24:5c:30:bd:2c:04:e1:ac: 0f:ed:8f:e9:b0:dc:6b:a9:00:36:15:d3:29:8b:17: a5:93:14:c8:f7:b1:92:c7:0b:f7:a1:d2:72:34:9e: 95:a8:f4:cd:80:86:f1:56:dc:d3:b6:51:e3:b3:b0: 73:0b:39:86:25:d8:fb:15:24:a0:5e:38:d8:0f:07: 6c:e6:32:22:69:96:75:26:f8:03:fb:9c:5e:8e:4e: 76:71:bf:3a:2d:68:36:6b:90:7a:17:91:ef:68:da: 50:39:e0:35:06:21:ea:5c:84:9f:48:13:05:ae:06: 77:09:6c:33:c8:04:44:d3:1a:71:b8:59:92:5a:e7: 06:6c:f1:1c:d3:fb:16:d7:76:af:8f:ff:7d:79:90: fe:69:87:ba:c8:01:e0:4b:5f:8e:6a:43:71:cc:23: 8b:e0:af:48:6a:de:3f:26:fd:9c:5f:a8:8f:da:6b: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:57:8D:03:B5:F7:E3:88:ED:EC:36:B4:E3:80:DC:50:5D:58:09 X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:6f:4c:55:7c:b2:b2:6f:d3:7a:3e:ba:fa:bf:13:58:3c:77: 59:9d:8d:0b:4a:95:10:5d:c2:8e:9c:af:15:2c:19:11:68:b2: cb:68:eb:a6:36:22:b3:de:93:bf:b8:ea:b8:3e:11:12:a0:34: 22:de:da:59:8b:82:54:e4:51:bf:63:ca:5e:9f:fc:1a:ee:05: 49:b8:ef:cf:6c:6e:fb:67:df:c5:1d:e6:4f:eb:e4:f5:37:44: 4b:9f:d3:4e:92:74:92:cb:d8:96:79:cc:47:cb:cf:01:6a:61: 46:78:f0:7f:7e:69:ae:c6:07:41:34:cc:9d:ba:e7:b8:82:9d: ca:b5:d4:9f:70:c6:29:e9:35:ec:65:75:06:e4:90:3f:39:b9: 8f:dc:8b:40:05:49:30:8f:7d:cb:d5:3f:5d:32:8e:45:7d:fb: 32:c7:64:ad:9e:c3:5d:9f:44:ed:11:4d:0b:57:7b:41:b2:78: 02:33:a6:06:b7:32:a1:6f:0a:d1:10:a8:da:23:ea:8d:30:3d: d2:cc:51:50:64:33:62:a8:51:32:f1:54:90:50:a8:5c:c7:cf: 79:bc:00:c2:cb:e5:95:85:c0:c9:67:94:25:6a:8c:3b:4a:25: c9:1f:c5:d0:79:80:1e:82:c3:0d:75:af:04:c3:7d:02:8e:e0: a0:9d:ce:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjYxMDEyMTczNDQ2WhcNMjYxMDE5MTczNDQ2WjAYMRYwFAYD VQQDEw02YWNkMWEzNy0xNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hCBg1AUNo0chilbParUgg6vamCyFiUVgirUFCcuK3GqX8CSsw9L91sCTJ2Q vXT30bK72STnj1n0Za2Q2gC/iBEIgRibSVzS2Soj1JCZd/dxJFwwvSwE4awP7Y/p sNxrqQA2FdMpixelkxTI97GSxwv3odJyNJ6VqPTNgIbxVtzTtlHjs7BzCzmGJdj7 FSSgXjjYDwds5jIiaZZ1JvgD+5xejk52cb86LWg2a5B6F5HvaNpQOeA1BiHqXISf SBMFrgZ3CWwzyARE0xpxuFmSWucGbPEc0/sW13avj/99eZD+aYe6yAHgS1+OakNx zCOL4K9Iat4/Jv2cX6iP2mvPQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXbV40D tffjiO3sNrTjgNxQXVgJMB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArW9MVXyysm/Tej66+r8TWDx3WZ2NC0qVEF3CjpyvFSwZEWiyy2jrpjYis96T v7jquD4REqA0It7aWYuCVORRv2PKXp/8Gu4FSbjvz2xu+2ffxR3mT+vk9TdES5/T TpJ0ksvYlnnMR8vPAWphRnjwf35prsYHQTTMnbrnuIKdyrXUn3DGKek17GV1BuSQ Pzm5j9yLQAVJMI99y9U/XTKORX37MsdkrZ7DXZ9E7RFNC1d7QbJ4AjOmBrcyoW8K 0RCo2iPqjTA90sxRUGQzYqhRMvFUkFCoXMfPebwAwsvllYXAyWeUJWqMO0olyR/F 0HmAHoLDDXWvBMN9Ao7goJ3OTw== -----END CERTIFICATE-----Generated at Tue Oct 13 02:45:17 2026 by rpki-client