$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: HKGZklL7gpUa9xmRFQoWNZHimFQP0p5li6VuTIMpCwc= Subject key identifier: F8:8B:86:A6:02:7F:FC:7A:24:54:B2:AC:90:A5:55:61:23:89:94:CD Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1DE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1DC9 Signing time: Tue 06 Oct 2026 16:07:32 +0000 Manifest this update: Tue 06 Oct 2026 16:07:31 +0000 Manifest next update: Tue 13 Oct 2026 16:07:31 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: dzlEc3fn8vzHwP2Nrf40Ci/FUU9D1vbydk18PnwzXeQ=) 2: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: SMMdB5FfbHvQ8XxRMRHHqZDp8nFnCc1tqnhGm5C6OOg=) 3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: 8mj54azzqhjHXfOWyNFC53u9e3MBttuOm97GXb6TaYE=) 4: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: uLWtAzm0T2XZ8XrHmk3i4Qv1rCDDVOMUdZgDRK+R9AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7655 (0x1de7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Oct 6 16:07:31 2026 GMT Not After : Oct 13 16:07:31 2026 GMT Subject: CN=6ac51cc4-0a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:61:c0:bb:36:ba:62:01:c1:f8:3f:28:5c: 74:be:38:b7:0a:3d:76:65:39:aa:8d:2c:4e:45:18: 5d:ee:fd:fc:fe:c9:d9:69:32:1b:0b:7d:dd:d8:af: 43:d2:92:4f:a6:95:28:ec:d5:46:a7:d1:a7:70:21: 91:8e:04:d7:27:9d:b0:57:77:fe:1e:58:a5:8e:6e: a2:5a:10:73:5f:5a:25:b1:a9:d5:f9:9a:53:c7:24: d4:57:7c:b4:79:d6:af:60:60:8b:56:9c:4c:4a:0a: c0:03:68:07:78:70:5d:8a:e4:a4:a7:8f:24:64:af: f4:0d:1b:9b:0e:1b:64:37:2a:50:a8:c9:3d:a3:6a: 0a:a2:c8:7e:bb:89:22:f7:e0:4b:e4:83:e8:6a:99: e2:88:cf:0b:97:08:ba:70:ae:48:f0:b1:7d:06:9e: d6:97:3e:29:e6:57:d2:6a:b0:e2:00:e2:48:ac:41: 34:11:d0:d8:0b:7b:b3:08:75:a3:85:ac:26:9d:41: 7e:f8:4f:5d:11:dc:6a:f9:ad:1b:7b:c0:73:ac:28: 2f:1f:25:33:76:c5:d4:00:cd:e5:b4:aa:d6:2a:96: b2:96:db:4f:c0:7b:09:5f:60:7d:b6:90:75:f0:91: 18:5a:18:a1:78:e5:95:af:dd:3a:5e:59:f8:0d:91: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8B:86:A6:02:7F:FC:7A:24:54:B2:AC:90:A5:55:61:23:89:94:CD X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a4:2d:8a:2d:cd:b3:3b:26:1e:ec:d8:91:b8:c3:a4:e7:02: d3:43:70:d1:99:09:e6:96:25:38:df:a2:3c:80:b8:68:0e:7e: fb:ee:a7:8e:7e:07:a2:b4:79:00:33:c4:00:1a:c3:48:f6:cc: 1d:ff:4f:5d:46:cd:9d:d7:33:a4:9f:90:b7:9d:c1:f1:ab:8f: f6:e4:c8:f9:69:f7:15:eb:91:62:d0:38:4a:05:8d:ee:d6:84: a8:fe:ef:4d:7f:40:2c:b3:46:2e:e3:63:f8:45:58:13:92:04: 38:cc:a6:8f:94:cc:24:8f:c3:32:3a:98:20:2e:f5:22:eb:8e: 6a:b7:5b:51:1d:6d:aa:dc:14:01:63:8e:98:6c:33:85:c6:94: ca:22:f1:cb:27:1a:b4:d1:f5:c2:24:c5:c9:ab:82:2e:77:5b: 91:08:b4:4b:96:77:65:81:e4:c2:f9:29:cb:dd:8e:0a:70:21: b4:6b:f4:bd:7d:72:fe:33:82:9c:30:bc:82:44:f7:fa:2b:1a: 4e:c4:56:ac:41:0e:29:3c:77:14:43:84:e2:88:22:96:23:d8: 79:ff:49:18:b2:ff:c3:fc:ee:ab:6e:06:6d:15:9c:54:1b:d8: 1b:d3:d4:13:44:90:c8:f1:f8:6b:26:5a:fe:d0:b3:46:73:a8: b9:a9:2b:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjYxMDA2MTYwNzMxWhcNMjYxMDEzMTYwNzMxWjAYMRYwFAYD VQQDEw02YWM1MWNjNC0wYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IBhwLs2umIBwfg/KFx0vji3Cj12ZTmqjSxORRhd7v38/snZaTIbC33d2K9D 0pJPppUo7NVGp9GncCGRjgTXJ52wV3f+Hliljm6iWhBzX1olsanV+ZpTxyTUV3y0 edavYGCLVpxMSgrAA2gHeHBdiuSkp48kZK/0DRubDhtkNypQqMk9o2oKosh+u4ki 9+BL5IPoapniiM8Llwi6cK5I8LF9Bp7Wlz4p5lfSarDiAOJIrEE0EdDYC3uzCHWj hawmnUF++E9dEdxq+a0be8BzrCgvHyUzdsXUAM3ltKrWKpaylttPwHsJX2B9tpB1 8JEYWhiheOWVr906Xln4DZGILwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiLhqYC f/x6JFSyrJClVWEjiZTNMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANaQtii3NszsmHuzYkbjDpOcC00Nw0ZkJ5pYlON+iPIC4aA5+++6njn4HorR5 ADPEABrDSPbMHf9PXUbNndczpJ+Qt53B8auP9uTI+Wn3FeuRYtA4SgWN7taEqP7v TX9ALLNGLuNj+EVYE5IEOMymj5TMJI/DMjqYIC71IuuOardbUR1tqtwUAWOOmGwz hcaUyiLxyycatNH1wiTFyauCLndbkQi0S5Z3ZYHkwvkpy92OCnAhtGv0vX1y/jOC nDC8gkT3+isaTsRWrEEOKTx3FEOE4ogiliPYef9JGLL/w/zuq24GbRWcVBvYG9PU E0SQyPH4ayZa/tCzRnOouakr/g== -----END CERTIFICATE-----Generated at Thu Oct 8 17:17:16 2026 by rpki-client