$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft File: iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft (raw, json) Hash identifier: EFfHiXwreJ2PtzQgv+CHWzcJgoO4hZVs7EveJCgFHPU= Subject key identifier: 9B:AD:3F:77:9A:7E:11:8E:01:37:0E:37:4A:A4:33:ED:D1:0A:45:7F Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft Manifest number: 0255 Signing time: Wed 07 Oct 2026 02:44:32 +0000 Manifest this update: Wed 07 Oct 2026 02:44:32 +0000 Manifest next update: Wed 14 Oct 2026 02:44:32 +0000 Files and hashes: 1: iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl (hash: +0Eg0nyEIou/3ZUTF3CbpBBkq9ZXDuymjAIGxa1HTOE=) 2: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (hash: EAtID2r50bcuRZVKtp+bEX8FvFjLB8tjThINGgwdwIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE62, serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Validity Not Before: Oct 7 02:44:32 2026 GMT Not After : Oct 14 02:44:32 2026 GMT Subject: CN=6ac5b210-1060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:16:83:36:e9:ac:91:9d:e4:2b:c8:e9:8e: 45:84:18:56:90:2d:6a:40:1a:e2:a6:2b:d1:13:66: 34:96:05:1b:52:b7:ba:c0:ab:81:90:68:3a:e4:33: 06:f3:7d:87:be:24:77:8e:53:d2:eb:7a:b6:b9:7b: b6:30:22:0e:db:6c:17:ab:1f:5a:e0:d0:3a:18:de: 4a:75:d5:6d:3b:d8:62:6a:85:0f:de:66:f8:a8:e0: 29:8c:2c:ba:63:a2:d2:d6:53:62:e7:35:a0:20:9f: 5c:4a:9f:65:85:ec:6a:8e:b4:0e:e4:b3:c2:2d:59: fe:f8:24:6a:6b:c3:e9:0f:d2:26:f9:11:f7:b3:69: 5c:ec:d5:b1:31:7b:bf:fc:f5:12:cd:5b:9e:49:cf: dd:bf:de:4b:4c:fb:6f:15:e8:5a:72:d6:cd:6c:9c: df:ae:5d:c9:44:dc:25:7c:39:2d:8f:02:20:76:56: a1:d3:39:14:16:68:40:f3:4e:97:14:f9:46:25:1d: 25:fa:2c:64:e6:ce:d5:eb:b7:a1:d2:42:f7:44:cb: 6a:07:eb:39:91:91:2f:9a:ed:67:5a:d3:c0:25:e6: 87:4e:a6:c7:92:f1:cb:44:a2:47:d3:50:1c:1f:41: c4:12:b7:2c:b5:c8:27:bb:e8:31:08:26:cd:78:6f: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AD:3F:77:9A:7E:11:8E:01:37:0E:37:4A:A4:33:ED:D1:0A:45:7F X509v3 Authority Key Identifier: keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:06:8c:f7:44:b1:dd:97:03:5b:42:15:9a:68:7a:d8:6d:a4: 99:5a:01:93:4b:91:7c:13:33:f0:8c:af:29:57:28:ee:2e:e1: 94:c1:99:26:22:4e:62:43:b4:8a:37:0c:a3:00:bd:3d:75:31: ca:6f:c1:f9:28:0c:b9:dd:ae:a3:3d:77:46:6e:ca:a2:1d:e5: 5a:6f:55:21:91:87:17:3d:5f:a0:76:82:e0:1b:47:d5:71:2a: cf:88:fc:b8:aa:32:1a:fa:3b:a5:e8:68:24:69:bc:fe:a8:3d: ca:d8:c3:a0:01:1d:c6:b8:32:0d:bf:72:82:ec:80:f5:e8:91: 57:e0:ee:ca:42:97:68:97:2d:55:e7:7b:4e:04:7d:e1:88:3b: 5e:17:87:60:14:fb:86:18:c9:31:c6:06:ef:c7:25:2f:a2:24: 33:28:78:a9:ed:d0:a7:c5:eb:0d:79:0c:32:3a:c2:d1:a8:17: ca:47:35:95:26:ac:fa:26:73:67:94:7e:a9:95:1d:93:04:ed: ec:4c:c6:91:9c:d0:e5:6c:2c:d8:76:47:c0:71:f5:19:90:56: 07:9d:3d:73:d1:45:9b:b0:c7:a5:17:13:6f:b7:e2:a1:5e:e0: 6b:a8:fc:24:84:ea:60:02:76:1f:00:c8:be:53:9c:8c:ce:70: fc:d6:b4:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNFNjIxMTAvBgNVBAUTKDg5MDI3ODkwMDMzRDVENjIzQkQ0RTQzOTg2RTg4MEY2 QUIxMzg0OTQwHhcNMjYxMDA3MDI0NDMyWhcNMjYxMDE0MDI0NDMyWjAYMRYwFAYD VQQDEw02YWM1YjIxMC0xMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngcWgzbprJGd5CvI6Y5FhBhWkC1qQBripivRE2Y0lgUbUre6wKuBkGg65DMG 832HviR3jlPS63q2uXu2MCIO22wXqx9a4NA6GN5KddVtO9hiaoUP3mb4qOApjCy6 Y6LS1lNi5zWgIJ9cSp9lhexqjrQO5LPCLVn++CRqa8PpD9Im+RH3s2lc7NWxMXu/ /PUSzVueSc/dv95LTPtvFehactbNbJzfrl3JRNwlfDktjwIgdlah0zkUFmhA806X FPlGJR0l+ixk5s7V67eh0kL3RMtqB+s5kZEvmu1nWtPAJeaHTqbHkvHLRKJH01Ac H0HEErcstcgnu+gxCCbNeG8WnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJutP3ea fhGOATcON0qkM+3RCkV/MB8GA1UdIwQYMBaAFIkCeJADPV1iO9TkOYbogParE4SU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0U2Mi8yMUQ1Q0NERTM0 MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhXSTcxT1E1aHVpQTlxc1Ro SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRSjRrQU05WFdJNzFPUTVodWlBOXFzVGhKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0U2Mi8yMUQ1Q0NERTM0MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhX STcxT1E1aHVpQTlxc1RoSlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYgaM90Sx3ZcDW0IVmmh62G2kmVoBk0uRfBMz8IyvKVco7i7hlMGZJiJOYkO0 ijcMowC9PXUxym/B+SgMud2uoz13Rm7Koh3lWm9VIZGHFz1foHaC4BtH1XEqz4j8 uKoyGvo7pehoJGm8/qg9ytjDoAEdxrgyDb9yguyA9eiRV+DuykKXaJctVed7TgR9 4Yg7XheHYBT7hhjJMcYG78clL6IkMyh4qe3Qp8XrDXkMMjrC0agXykc1lSas+iZz Z5R+qZUdkwTt7EzGkZzQ5Wws2HZHwHH1GZBWB509c9FFm7DHpRcTb7fioV7ga6j8 JITqYAJ2HwDIvlOcjM5w/Na0OA== -----END CERTIFICATE-----Generated at Wed Oct 7 14:30:28 2026 by rpki-client