$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.mft File: iV3GotWZyMSlcd4uxUoY6ksH_dw.mft (raw, json) Hash identifier: k98o5Fl3rPAaZ8+J8TgxrJ+5vqv2nr5xJmOFtZi8118= Subject key identifier: 31:7C:4B:1C:14:43:CF:B0:A5:63:56:77:0E:A9:0D:38:EE:E1:77:C1 Authority key identifier: 89:5D:C6:A2:D5:99:C8:C4:A5:71:DE:2E:C5:4A:18:EA:4B:07:FD:DC Certificate issuer: /CN=A91EC40B/serialNumber=895DC6A2D599C8C4A571DE2EC54A18EA4B07FDDC Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV3GotWZyMSlcd4uxUoY6ksH_dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.mft Manifest number: 0F Signing time: Mon 05 Oct 2026 09:42:51 +0000 Manifest this update: Mon 05 Oct 2026 09:42:51 +0000 Manifest next update: Mon 12 Oct 2026 09:42:51 +0000 Files and hashes: 1: iV3GotWZyMSlcd4uxUoY6ksH_dw.crl (hash: Fj5FK/l+5NdXsf957TFlTj6nviduWtFw9jdmybbf4gk=) 2: BD0FEBE8B74511F19465573B3911F970.roa (hash: 8AzWDvA4mZ/9sZizLSjSIzeelepqlgrJVS/9LvPRW2k=) 3: 75E103FEB74211F18575F6A33811F970.roa (hash: FpMyEChOJbNHHEBFZPb9ike8mfDJlr6twsPB6np1pNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.crl rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV3GotWZyMSlcd4uxUoY6ksH_dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC40B, serialNumber=895DC6A2D599C8C4A571DE2EC54A18EA4B07FDDC Validity Not Before: Oct 5 09:42:51 2026 GMT Not After : Oct 12 09:42:51 2026 GMT Subject: CN=6ac3711b-5bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:23:48:e8:f3:02:1d:5c:01:79:bc:70:72: c4:da:f9:2b:0e:9a:d2:5a:1a:7e:97:d7:6f:ff:6f: 6c:7d:28:72:98:6f:3c:bd:d7:e3:3a:94:36:4b:b9: 14:1f:fa:1d:ce:92:1b:57:e2:5e:b8:42:5a:2a:15: d6:3f:05:d4:96:94:1a:ea:6e:be:ba:d3:d8:62:21: 29:77:6d:d6:ed:3a:72:c0:10:d0:d9:e2:d9:3b:cb: 90:c3:36:c4:1b:94:d3:db:0c:96:61:b3:5c:5b:d1: a9:ed:bc:2d:a2:d4:0f:4a:22:8c:21:2f:5b:5d:f3: cd:0e:af:5d:97:a0:f9:f2:20:84:fa:91:23:c0:0a: 03:87:dd:26:62:f3:69:bc:63:b2:0c:86:93:69:4e: c1:b4:e8:ad:22:01:88:90:8e:cd:6e:19:45:89:43: 99:22:cb:f3:3a:ca:e5:5d:54:13:b1:00:77:43:13: 60:1d:8b:1d:a5:5b:57:cc:e9:9c:a9:f2:2c:c3:d9: 2a:b2:6a:ea:90:19:f5:4b:19:3e:5e:35:9f:c1:15: b7:91:f0:82:91:f3:40:9c:4b:03:89:c7:1a:1c:9a: 7e:0b:fb:ec:9c:97:f0:a7:d1:b1:e9:1e:ab:ee:6c: 7e:96:90:30:52:18:59:1e:68:62:e1:4b:da:02:dd: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7C:4B:1C:14:43:CF:B0:A5:63:56:77:0E:A9:0D:38:EE:E1:77:C1 X509v3 Authority Key Identifier: keyid:89:5D:C6:A2:D5:99:C8:C4:A5:71:DE:2E:C5:4A:18:EA:4B:07:FD:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV3GotWZyMSlcd4uxUoY6ksH_dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:98:9a:f9:31:9b:d5:3e:fd:25:39:c1:68:73:53:f8:2f:0b: 8b:d7:b3:5c:3e:ef:ae:0a:5d:87:2a:24:fb:5e:fb:13:c7:f6: 51:05:04:79:8e:71:91:d7:c9:95:25:2c:4e:99:8e:5b:f9:87: 2b:98:44:10:01:8b:b9:30:6e:f3:bd:9a:e9:7e:94:df:a5:5e: 7a:cf:80:dc:8f:f8:d0:83:54:65:30:fd:41:49:33:00:5a:cd: 76:7a:9f:72:8f:a9:50:62:5b:fe:3a:37:b5:7c:df:5f:13:05: 6e:06:f7:c0:8e:4e:17:c9:f2:22:53:73:dc:35:7d:7f:a0:fa: d1:7d:48:25:62:89:d8:55:e0:6b:a7:42:00:19:d2:e3:86:77: d7:9e:3b:f2:47:12:a4:d5:7b:82:28:2e:bb:27:d2:b0:66:7f: 40:fc:fc:46:0d:8a:f9:04:cd:72:f4:2f:71:1c:d8:25:32:bf: 57:59:b7:98:f1:23:39:8b:db:36:5c:dd:a1:50:24:53:f8:4f: 4e:e7:ab:ab:0e:dd:aa:16:a2:b5:0b:ad:29:c1:dd:2e:49:fd: 3e:d1:60:dd:cd:19:d8:22:bc:ad:93:82:0e:c6:6e:a9:86:0b: 0d:31:09:46:7c:47:19:d1:9e:b5:33:97:27:cc:d3:75:8f:bb: fc:ea:99:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzQwQjExMC8GA1UEBRMoODk1REM2QTJENTk5QzhDNEE1NzFERTJFQzU0QTE4RUE0 QjA3RkREQzAeFw0yNjEwMDUwOTQyNTFaFw0yNjEwMTIwOTQyNTFaMBgxFjAUBgNV BAMTDTZhYzM3MTFiLTViYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC+yNI6PMCHVwBebxwcsTa+SsOmtJaGn6X12//b2x9KHKYbzy91+M6lDZLuRQf +h3OkhtX4l64QloqFdY/BdSWlBrqbr6609hiISl3bdbtOnLAENDZ4tk7y5DDNsQb lNPbDJZhs1xb0antvC2i1A9KIowhL1td880Or12XoPnyIIT6kSPACgOH3SZi82m8 Y7IMhpNpTsG06K0iAYiQjs1uGUWJQ5kiy/M6yuVdVBOxAHdDE2Adix2lW1fM6Zyp 8izD2SqyauqQGfVLGT5eNZ/BFbeR8IKR80CcSwOJxxocmn4L++ycl/Cn0bHpHqvu bH6WkDBSGFkeaGLhS9oC3errAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMXxLHBRD z7ClY1Z3DqkNOO7hd8EwHwYDVR0jBBgwFoAUiV3GotWZyMSlcd4uxUoY6ksH/dww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDNDBCLzYzMzBBM0M2QjY0 RTExRjFCMzdDMEMxOTZDMTFGOTcwL2lWM0dvdFdaeU1TbGNkNHV4VW9ZNmtzSF9k dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVYzR290V1p5TVNsY2Q0dXhVb1k2a3NIX2R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD NDBCLzYzMzBBM0M2QjY0RTExRjFCMzdDMEMxOTZDMTFGOTcwL2lWM0dvdFdaeU1T bGNkNHV4VW9ZNmtzSF9kdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBimJr5MZvVPv0lOcFoc1P4LwuL17NcPu+uCl2HKiT7XvsTx/ZRBQR5jnGR18mV JSxOmY5b+YcrmEQQAYu5MG7zvZrpfpTfpV56z4Dcj/jQg1RlMP1BSTMAWs12ep9y j6lQYlv+Oje1fN9fEwVuBvfAjk4XyfIiU3PcNX1/oPrRfUglYonYVeBrp0IAGdLj hnfXnjvyRxKk1XuCKC67J9KwZn9A/PxGDYr5BM1y9C9xHNglMr9XWbeY8SM5i9s2 XN2hUCRT+E9O56urDt2qFqK1C60pwd0uSf0+0WDdzRnYIrytk4IOxm6phgsNMQlG fEcZ0Z61M5cnzNN1j7v86pnL -----END CERTIFICATE-----Generated at Mon Oct 5 16:40:29 2026 by rpki-client