$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft File: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json) Hash identifier: 9b4XmMe9vMf1l61N+bIikwp4WetVvbfL38xCUrERLD8= Subject key identifier: 6A:DA:7D:A8:97:31:5A:2D:F3:95:4C:2F:EF:97:70:2B:F3:84:C5:46 Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934 Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft Manifest number: 0CF3 Signing time: Tue 06 Oct 2026 18:31:55 +0000 Manifest this update: Tue 06 Oct 2026 18:31:54 +0000 Manifest next update: Tue 13 Oct 2026 18:31:54 +0000 Files and hashes: 1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: jWwmAjdRXqP93YaLfVrN1xInvSJfyUcAiG5j9LRCBpY=) 2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: Sez/a2sgGSbWwvJeQPZUS5uIi1mmZfqNVL6dsISb/6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934 Validity Not Before: Oct 6 18:31:54 2026 GMT Not After : Oct 13 18:31:54 2026 GMT Subject: CN=6ac53e9b-fa86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:48:77:1f:3d:83:ed:29:58:72:2a:10:74: 8d:2c:fc:55:3a:08:f2:16:fb:42:73:01:f8:66:01: f9:14:9e:fc:52:e1:23:88:71:8a:4b:f9:03:4e:5b: 3a:8a:52:07:55:09:40:3e:d9:33:f6:a1:e0:d2:43: 5f:5b:23:1e:16:d7:82:d5:ff:c8:06:0f:03:21:89: df:85:31:1f:23:c7:66:e6:2e:98:cf:a2:e1:54:6c: 00:9e:70:88:6a:ba:af:e0:e5:0a:f3:a6:3e:25:06: 9f:be:8b:24:96:6f:40:82:1f:69:b7:a4:68:2f:be: ae:dc:4c:73:38:25:bc:3c:5a:86:7a:f2:a0:b8:11: 25:62:59:20:68:c2:b1:2c:91:2e:b5:fa:90:3a:4d: 26:65:07:68:1e:97:a5:e0:6a:09:c2:f0:15:e4:d6: 1f:97:dc:b0:95:45:ab:12:90:5f:a6:d8:06:40:ed: f6:09:ff:ae:32:53:7f:21:00:3e:50:8b:a9:e1:af: c2:31:2b:b4:18:46:69:29:40:7d:20:aa:8f:62:34: e8:c9:37:2a:96:1a:de:2e:33:e6:45:23:b6:f7:9d: 40:69:b8:79:75:ea:c5:ab:90:06:d8:4f:00:fe:6c: 17:50:45:3b:2b:3e:ea:9b:3a:72:b6:6d:3c:9c:61: a9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DA:7D:A8:97:31:5A:2D:F3:95:4C:2F:EF:97:70:2B:F3:84:C5:46 X509v3 Authority Key Identifier: keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2d:d1:e6:83:94:a2:3c:c7:3a:c9:90:ff:a6:e8:bd:d7:5b: 53:64:7b:3f:c6:f8:5c:67:fe:7c:a4:ae:ec:cc:2b:41:e4:31: ca:7a:9a:fa:00:a5:c9:76:d0:e6:66:7b:8b:d1:1b:f4:ad:5d: bb:a8:d2:b6:fd:30:e8:0a:94:de:9a:21:fc:49:41:b7:5c:d2: 61:e7:32:62:25:67:81:a5:d9:a0:8a:11:cd:31:68:3c:e4:21: 9b:9b:f2:3a:11:d8:8e:f4:20:37:59:df:15:86:9c:8d:bc:e2: 43:82:e5:aa:08:5c:44:bc:37:1e:a5:c0:48:5c:34:b5:4c:92: 95:28:2c:af:b3:80:b4:ea:5b:19:5c:64:d9:c0:01:f4:2f:87: 0f:80:a7:05:e3:ac:b7:1e:37:af:2d:e8:98:15:18:8d:44:cb: 6f:c7:3a:ae:87:08:59:69:14:81:ce:56:48:f2:82:0a:e2:f5: 5f:4e:e6:a0:d5:aa:bf:1a:43:c9:95:cd:4b:62:81:37:fe:94: 4d:42:f3:3b:c2:ba:f0:37:12:f1:5f:75:a2:c4:b3:4a:0d:21: cb:6d:1e:06:be:02:d0:14:eb:c1:86:16:fe:3f:a5:67:d9:8a: c5:20:a4:d5:52:f8:a7:bc:f9:87:21:48:54:31:2e:00:e8:f3: 18:11:66:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwNDYxMTAvBgNVBAUTKDg5NDgwOTYzMDk1NjkyNDM4MkNDMzlENDYwRkE0NzY0 QjAxNzU5MzQwHhcNMjYxMDA2MTgzMTU0WhcNMjYxMDEzMTgzMTU0WjAYMRYwFAYD VQQDEw02YWM1M2U5Yi1mYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xFIdx89g+0pWHIqEHSNLPxVOgjyFvtCcwH4ZgH5FJ78UuEjiHGKS/kDTls6 ilIHVQlAPtkz9qHg0kNfWyMeFteC1f/IBg8DIYnfhTEfI8dm5i6Yz6LhVGwAnnCI arqv4OUK86Y+JQafvosklm9Agh9pt6RoL76u3ExzOCW8PFqGevKguBElYlkgaMKx LJEutfqQOk0mZQdoHpel4GoJwvAV5NYfl9ywlUWrEpBfptgGQO32Cf+uMlN/IQA+ UIup4a/CMSu0GEZpKUB9IKqPYjToyTcqlhreLjPmRSO2951Aabh5derFq5AG2E8A /mwXUEU7Kz7qmzpytm08nGGpbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrafaiX MVot85VML++XcCvzhMVGMB8GA1UdIwQYMBaAFIlICWMJVpJDgsw51GD6R2SwF1k0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA0Ni8zRkIwMkFFMjE0 RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2trT0N6RG5VWVBwSFpMQVhX VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVZ0pZd2xXa2tPQ3pEblVZUHBIWkxBWFdUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA0Ni8zRkIwMkFFMjE0RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2tr T0N6RG5VWVBwSFpMQVhXVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjS3R5oOUojzHOsmQ/6bovddbU2R7P8b4XGf+fKSu7MwrQeQxynqa+gClyXbQ 5mZ7i9Eb9K1du6jStv0w6AqU3poh/ElBt1zSYecyYiVngaXZoIoRzTFoPOQhm5vy OhHYjvQgN1nfFYacjbziQ4LlqghcRLw3HqXASFw0tUySlSgsr7OAtOpbGVxk2cAB 9C+HD4CnBeOstx43ry3omBUYjUTLb8c6rocIWWkUgc5WSPKCCuL1X07moNWqvxpD yZXNS2KBN/6UTULzO8K68DcS8V91osSzSg0hy20eBr4C0BTrwYYW/j+lZ9mKxSCk 1VL4p7z5hyFIVDEuAOjzGBFmlA== -----END CERTIFICATE-----Generated at Wed Oct 7 07:42:52 2026 by rpki-client