$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: apgeuJcD1tMrOtUcbbiVZLcmCLnaKTtN0ftG8vsyCHc= Subject key identifier: 9C:75:74:A9:53:F0:9F:5B:FE:F4:07:FE:B2:63:6E:5A:D6:28:1D:9B Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: EA Signing time: Tue 13 Oct 2026 07:17:48 +0000 Manifest this update: Tue 13 Oct 2026 07:17:47 +0000 Manifest next update: Tue 20 Oct 2026 07:17:47 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: EEZs0C3IiRY4+VqaH9AAqp80byYVNmD6bCPJ0hm1SyU=) 2: 48C2333271D011F18649332165A30FBC.roa (hash: LDP5Esly8VYRBXjaigIiSwQbm+Rq9+J2C6Fns5Nz1AU=) 3: C8E215DA72BD11F1A5B8119C6EA30FBC.roa (hash: 42F8H8tLM7SW8VbxSmhfljA+OlaX9YJW6w/yvaOHuEM=) 4: 7E782718940B11F1AE7863F93E11F970.roa (hash: XTTBwDL+3ZX31Mb6Vk3dZi/vUMZFs0rfR5N64dJPp9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 07:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Oct 13 07:17:47 2026 GMT Not After : Oct 20 07:17:47 2026 GMT Subject: CN=6acddb1c-773e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c0:f9:db:da:5e:d3:82:f2:d9:07:9f:34:fe: d6:1e:68:fd:3e:a8:33:0a:72:a4:ca:e6:46:45:54: 75:eb:0b:7e:94:ab:f7:c7:fd:53:75:e2:17:c7:db: 94:17:5f:db:02:5b:da:a5:58:b2:a8:95:f3:cf:63: fb:b7:d1:e5:7b:e5:39:ca:99:dc:a4:c9:32:08:9d: f6:9e:e5:05:ff:f0:53:09:a2:f1:04:69:46:66:42: fe:bc:7f:04:08:8d:ea:ee:d7:0d:91:51:c0:f2:91: 8d:4c:3b:1f:6d:f1:b7:3e:55:d8:53:17:c9:e3:6d: e5:09:2e:c0:e8:03:67:2e:cf:34:99:08:1c:f7:82: d1:92:73:dd:b4:29:f3:e9:7d:5a:3a:7b:c5:c8:f8: ab:85:40:11:fe:59:60:dd:40:68:f6:e5:0e:de:ee: b3:6e:62:e5:cb:cc:87:64:21:95:6b:26:43:b9:55: c8:f9:e0:23:b5:c7:3d:f5:2d:ce:a4:09:4c:df:99: 17:dd:88:8c:ce:98:6f:a4:db:73:0f:b4:87:49:4a: e4:b3:b5:28:c4:da:76:18:09:0e:1c:47:64:c8:5e: a6:e8:04:39:14:70:48:ad:7f:1e:d6:02:e2:ac:a7: 7f:83:28:56:bd:20:9b:27:fe:13:a8:40:08:81:b9: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:75:74:A9:53:F0:9F:5B:FE:F4:07:FE:B2:63:6E:5A:D6:28:1D:9B X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:34:e0:b5:02:ab:dd:4d:98:cd:b3:4a:38:18:1b:25:d3:9c: 3f:1c:09:c9:72:af:fd:f4:8b:83:bc:03:74:31:13:b8:57:8e: de:e4:ef:c6:a3:31:22:ae:9e:ad:ac:12:9e:ca:37:83:97:5b: 37:1d:76:e4:7d:5f:99:ca:6e:a8:c2:fe:83:98:a1:56:f8:77: c5:8e:cd:34:19:77:9d:87:c2:7d:d3:2b:91:f7:d2:d2:e8:66: 8f:f3:4b:e8:01:26:27:5e:2d:a1:07:5a:38:34:df:d9:d6:8b: ec:8d:e1:bc:5e:ad:8b:e1:71:5d:e5:d1:6a:1b:39:4f:ff:43: 3d:58:40:73:ff:55:7f:39:e1:67:48:7f:83:75:f7:da:0c:68: 92:12:d4:44:fc:d7:5a:2a:f7:e9:6e:18:b6:11:1d:e7:0f:40: 55:51:a1:c7:3f:e0:ea:bc:fb:d8:28:38:ca:fb:da:df:ff:2e: f2:6e:84:20:b5:57:d2:84:de:82:0a:da:dc:d9:48:ce:10:29: 9d:17:a6:4a:64:e4:61:08:3d:bd:75:aa:d7:6b:cf:b2:54:61: ca:c4:3f:71:54:a2:e9:e6:7c:d9:c6:0e:5c:a2:e9:86:9c:c8: fa:72:34:53:63:17:89:85:b1:53:89:66:17:63:63:71:ee:69: d1:77:36:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwRTAxMTAvBgNVBAUTKDg5NzA3N0I3MUYyQzVBRURERTZDMURENDk1NDdEQ0M5 OTUyQ0RBQkUwHhcNMjYxMDEzMDcxNzQ3WhcNMjYxMDIwMDcxNzQ3WjAYMRYwFAYD VQQDEw02YWNkZGIxYy03NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08D529pe04Ly2QefNP7WHmj9PqgzCnKkyuZGRVR16wt+lKv3x/1TdeIXx9uU F1/bAlvapViyqJXzz2P7t9Hle+U5ypncpMkyCJ32nuUF//BTCaLxBGlGZkL+vH8E CI3q7tcNkVHA8pGNTDsfbfG3PlXYUxfJ423lCS7A6ANnLs80mQgc94LRknPdtCnz 6X1aOnvFyPirhUAR/llg3UBo9uUO3u6zbmLly8yHZCGVayZDuVXI+eAjtcc99S3O pAlM35kX3YiMzphvpNtzD7SHSUrks7UoxNp2GAkOHEdkyF6m6AQ5FHBIrX8e1gLi rKd/gyhWvSCbJ/4TqEAIgbkSSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJx1dKlT 8J9b/vQH/rJjblrWKB2bMB8GA1UdIwQYMBaAFIlwd7cfLFrt3mwd1JVH3MmVLNq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDBFMC8zRkJCNUUwNDdC NTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1M2ViQjNVbFVmY3laVXMy cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDBFMC8zRkJCNUUwNDdCNTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1 M2ViQjNVbFVmY3laVXMycjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjzTgtQKr3U2YzbNKOBgbJdOcPxwJyXKv/fSLg7wDdDETuFeO3uTvxqMxIq6e rawSnso3g5dbNx125H1fmcpuqML+g5ihVvh3xY7NNBl3nYfCfdMrkffS0uhmj/NL 6AEmJ14toQdaODTf2daL7I3hvF6ti+FxXeXRahs5T/9DPVhAc/9VfznhZ0h/g3X3 2gxokhLURPzXWir36W4YthEd5w9AVVGhxz/g6rz72Cg4yvva3/8u8m6EILVX0oTe ggra3NlIzhApnRemSmTkYQg9vXWq12vPslRhysQ/cVSi6eZ82cYOXKLphpzI+nI0 U2MXiYWxU4lmF2Njce5p0Xc2FA== -----END CERTIFICATE-----Generated at Wed Oct 14 20:31:25 2026 by rpki-client