$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: 5OPb+gA7tio4yXwUI73Ja6FpSpmoi1gvoK4bR+bfcTU= Subject key identifier: A8:4A:C6:9D:65:8F:C8:C5:39:54:AD:AC:CC:39:02:36:FF:47:C5:10 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 0247 Signing time: Fri 11 Sep 2026 02:31:55 +0000 Manifest this update: Fri 11 Sep 2026 02:31:55 +0000 Manifest next update: Fri 18 Sep 2026 02:31:55 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: CoUoBT53MGFRTrN3MAOuPbtrAaaXdGGF+MhK4dKmSm0=) 2: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) 3: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Sep 11 02:31:55 2026 GMT Not After : Sep 18 02:31:55 2026 GMT Subject: CN=6aa3681b-c8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:15:c1:42:ed:3d:98:c5:a2:e3:97:5b:84: 10:71:ab:70:74:c1:c8:3e:be:b2:b4:10:12:19:90: e5:34:a0:f7:50:01:b4:c8:15:b4:ed:08:1b:00:bb: d9:60:b5:67:10:79:8b:82:93:c1:53:54:15:c0:87: 44:41:80:48:4b:82:b7:fc:32:5c:d8:bb:29:7b:0a: db:37:49:87:d9:aa:68:9d:62:82:57:4d:69:d5:d8: f5:0c:15:b2:f3:aa:9c:e8:30:c8:82:8c:d2:bf:e9: c0:48:fd:96:74:ab:1f:f7:cb:d8:b4:45:91:4b:98: c4:17:cb:59:3f:09:8a:3b:83:31:29:ec:43:67:e6: 0c:34:d4:ce:58:14:f7:71:b0:ff:0f:80:1d:60:02: dd:19:6b:ed:b1:a7:ce:ba:51:98:31:d1:de:83:60: d1:93:0a:dc:5f:57:f6:67:9f:ff:1f:9d:dc:c5:f0: 8e:6d:1a:78:bb:b0:3b:cc:ba:31:11:08:da:4b:2b: c3:7c:41:1e:95:27:37:de:29:40:25:0d:77:cf:0b: f0:1d:5a:2e:e5:e0:bd:60:cd:ae:03:7a:4b:19:8c: db:c7:d8:18:5e:f9:43:24:64:33:7e:5e:a7:8c:ec: b0:fd:58:a5:5f:0f:f8:4a:5d:b2:fe:e2:c4:a7:22: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:C6:9D:65:8F:C8:C5:39:54:AD:AC:CC:39:02:36:FF:47:C5:10 X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:4e:81:19:de:ac:eb:96:81:cd:1b:9f:79:a1:5f:93:30:e1: 26:b5:ad:12:f7:2f:1b:52:8c:8a:cc:80:c9:bb:5c:05:67:9a: f2:cb:8d:43:64:db:0b:36:63:31:ff:05:36:41:cc:d4:69:1f: 67:62:67:d5:fc:e6:fa:0d:c5:d1:16:ce:16:62:1c:87:de:29: 5e:37:7b:24:cc:5a:e0:a8:7c:38:33:94:5b:e3:30:ba:26:cb: 54:30:63:f5:c5:22:b2:63:a4:40:04:52:51:a1:6b:ba:f9:fc: a6:49:72:33:d9:fe:b9:b6:76:1c:15:d2:55:56:03:76:15:7d: e1:d7:fb:62:10:2d:c4:54:25:61:96:fe:e1:d0:bf:83:51:a7: 6d:35:76:aa:f5:59:6b:3e:ef:f2:7a:7b:f6:b8:13:14:ff:cb: ef:81:ab:67:0e:28:03:ac:bc:6e:1d:ff:de:8c:15:74:dc:50: f8:eb:42:92:49:20:4e:4a:78:f9:4e:45:6e:54:22:d1:0e:1f: 26:f6:b0:6c:0a:9a:db:1f:c8:8d:4e:99:5e:ba:b0:17:d5:e0: 06:f5:8d:01:65:32:21:ef:95:71:a5:dd:41:6c:b1:33:63:df: f0:dd:18:64:be:5f:50:31:ce:96:02:67:30:a2:80:8a:8b:e0: 18:16:57:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwOTExMDIzMTU1WhcNMjYwOTE4MDIzMTU1WjAYMRYwFAYD VQQDEw02YWEzNjgxYi1jOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTsVwULtPZjFouOXW4QQcatwdMHIPr6ytBASGZDlNKD3UAG0yBW07QgbALvZ YLVnEHmLgpPBU1QVwIdEQYBIS4K3/DJc2LspewrbN0mH2aponWKCV01p1dj1DBWy 86qc6DDIgozSv+nASP2WdKsf98vYtEWRS5jEF8tZPwmKO4MxKexDZ+YMNNTOWBT3 cbD/D4AdYALdGWvtsafOulGYMdHeg2DRkwrcX1f2Z5//H53cxfCObRp4u7A7zLox EQjaSyvDfEEelSc33ilAJQ13zwvwHVou5eC9YM2uA3pLGYzbx9gYXvlDJGQzfl6n jOyw/VilXw/4Sl2y/uLEpyJA/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhKxp1l j8jFOVStrMw5Ajb/R8UQMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACE6BGd6s65aBzRufeaFfkzDhJrWtEvcvG1KMisyAybtcBWea8suNQ2TbCzZj Mf8FNkHM1GkfZ2Jn1fzm+g3F0RbOFmIch94pXjd7JMxa4Kh8ODOUW+MwuibLVDBj 9cUismOkQARSUaFruvn8pklyM9n+ubZ2HBXSVVYDdhV94df7YhAtxFQlYZb+4dC/ g1GnbTV2qvVZaz7v8np79rgTFP/L74GrZw4oA6y8bh3/3owVdNxQ+OtCkkkgTkp4 +U5FblQi0Q4fJvawbAqa2x/IjU6ZXrqwF9XgBvWNAWUyIe+VcaXdQWyxM2Pf8N0Y ZL5fUDHOlgJnMKKAiovgGBZXVQ== -----END CERTIFICATE-----Generated at Fri Sep 11 09:50:20 2026 by rpki-client