$ rpki-client -vvvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: q8TMfowRNKmypRfffneAOlwohklxPvxBkHs0wB0eyvc= Subject key identifier: 17:8A:44:16:2A:9B:D7:F0:93:EF:B4:1C:D7:15:6F:E9:DA:A4:95:D2 Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: 0191 Signing time: Tue 29 Sep 2026 04:53:39 +0000 Manifest this update: Tue 29 Sep 2026 04:53:38 +0000 Manifest next update: Tue 06 Oct 2026 04:53:38 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: NDZQLUBOcN1z1XkdSfeggINCdGAxddwyVRDKqicE/ss=) 2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: EDFQEdiEmOIwcAFLSsj8eYAZyjqk/sVRS9qA9gJE9Ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 04:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Sep 29 04:53:38 2026 GMT Not After : Oct 6 04:53:38 2026 GMT Subject: CN=6abb4452-ec48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:d1:00:dd:65:40:a8:38:2a:de:a3:fe:79: a0:cb:96:93:f9:c4:6b:94:4e:e2:58:b2:66:ed:81: 67:54:c0:59:7d:2e:8f:95:5d:f9:b1:8a:e0:81:ff: 72:e4:33:38:31:30:7d:a3:df:b0:57:45:d2:a4:ae: ef:8e:ae:b6:c5:d0:c6:08:e0:97:aa:75:0f:55:d3: 9e:55:ba:13:4f:5f:10:ee:09:b4:71:85:12:8e:8e: f8:43:09:52:48:3d:7e:0e:b5:1a:7f:d3:40:79:89: dd:ac:66:a6:30:4b:30:ab:47:2d:ca:48:a3:5d:e6: a2:d6:8f:33:8f:0c:b9:dd:6c:67:9d:fb:13:8c:76: f2:76:c4:f9:d0:97:02:1e:2c:40:be:5b:80:0d:08: b3:c7:01:de:42:44:c9:b8:a7:6c:5c:f8:d8:66:bc: 30:c1:c5:1d:f9:23:c8:2d:10:8a:e2:e5:42:b0:dd: a3:95:79:11:de:56:50:47:32:22:f3:a5:43:81:c4: 14:4e:de:36:3c:e6:62:bf:09:90:aa:b0:65:35:82: c1:00:f2:f6:3a:d5:f8:49:a8:93:6a:e3:ac:fe:18: f9:cd:93:7d:ab:a6:fe:be:47:9b:36:9b:a7:3e:23: a5:e2:4a:1c:f8:0a:31:c8:15:28:3b:1f:29:96:45: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:44:16:2A:9B:D7:F0:93:EF:B4:1C:D7:15:6F:E9:DA:A4:95:D2 X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:4e:fa:41:dc:c4:2b:ca:6d:9b:0b:30:6e:08:40:f2:58:d7: ba:94:83:41:5e:80:2c:68:a3:d2:98:24:7e:74:48:5c:74:27: 88:e5:da:ce:0c:87:67:a2:9f:00:2c:95:5c:ac:d8:bf:22:4e: 33:86:af:43:e3:7b:3e:a7:19:db:c8:c0:46:e6:81:12:59:21: d4:e8:b0:ce:6a:84:48:a8:db:44:63:60:69:aa:4c:a0:39:f8: 3c:0d:4b:5a:d0:5c:e0:3a:ee:44:c7:14:cd:65:ec:8a:54:e8: ac:1c:2c:7b:8c:00:62:2e:68:21:a5:3f:d1:85:a1:24:57:b9: 72:9e:bf:12:0d:b0:7b:24:96:9d:68:2d:da:da:f5:d0:ec:69: 30:71:8a:ee:cd:ab:78:b2:09:e5:6c:64:5d:8c:34:d4:16:f3: 2c:8e:1f:f9:78:7a:21:14:66:1d:d6:d5:25:5c:19:29:6c:e4: 30:c8:c2:bb:76:90:44:25:2c:11:e4:3d:f6:0f:81:f2:9c:62: 11:68:b7:f9:19:2f:8f:3b:97:e9:fe:3c:23:45:d8:cc:3d:37: da:d3:5d:b6:ab:db:1f:01:b2:d5:29:e7:18:47:1a:9a:19:f7: ff:57:d9:2c:56:33:df:46:05:45:02:75:21:7b:c5:37:1d:4e: 0e:ef:a5:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjYwOTI5MDQ1MzM4WhcNMjYxMDA2MDQ1MzM4WjAYMRYwFAYD VQQDEw02YWJiNDQ1Mi1lYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2/RAN1lQKg4Kt6j/nmgy5aT+cRrlE7iWLJm7YFnVMBZfS6PlV35sYrggf9y 5DM4MTB9o9+wV0XSpK7vjq62xdDGCOCXqnUPVdOeVboTT18Q7gm0cYUSjo74QwlS SD1+DrUaf9NAeYndrGamMEswq0ctykijXeai1o8zjwy53WxnnfsTjHbydsT50JcC HixAvluADQizxwHeQkTJuKdsXPjYZrwwwcUd+SPILRCK4uVCsN2jlXkR3lZQRzIi 86VDgcQUTt42POZivwmQqrBlNYLBAPL2OtX4SaiTauOs/hj5zZN9q6b+vkebNpun PiOl4koc+AoxyBUoOx8plkUPOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeKRBYq m9fwk++0HNcVb+napJXSMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu076QdzEK8ptmwswbghA8ljXupSDQV6ALGij0pgkfnRIXHQniOXazgyHZ6Kf ACyVXKzYvyJOM4avQ+N7PqcZ28jARuaBElkh1OiwzmqESKjbRGNgaapMoDn4PA1L WtBc4DruRMcUzWXsilTorBwse4wAYi5oIaU/0YWhJFe5cp6/Eg2weySWnWgt2tr1 0OxpMHGK7s2reLIJ5WxkXYw01BbzLI4f+Xh6IRRmHdbVJVwZKWzkMMjCu3aQRCUs EeQ99g+B8pxiEWi3+RkvjzuX6f48I0XYzD032tNdtqvbHwGy1SnnGEcamhn3/1fZ LFYz30YFRQJ1IXvFNx1ODu+lng== -----END CERTIFICATE-----Generated at Wed Sep 30 20:52:27 2026 by rpki-client