$ rpki-client -vvvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: 1GW4lSnkDwTQZzb/y8QvmXlyV+C+3By5uDt6K0Sfnck= Subject key identifier: AB:12:65:A3:04:44:6B:1B:5E:BB:D1:BA:C2:B2:47:BE:08:8A:5C:F7 Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 02A2 Signing time: Wed 23 Sep 2026 02:00:17 +0000 Manifest this update: Wed 23 Sep 2026 02:00:16 +0000 Manifest next update: Wed 30 Sep 2026 02:00:16 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: YjYIN6yKOoNx3ICYN0emcfaiXTNXLHhXMTsn0LIesJs=) 2: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: QcfGkLYWjAnaAIuPRWdouuM5MQwIc64e/KwwHNAejyQ=) 3: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: X+ionRnl4NOsyOEaMY5HP4N1Hw33cXFC4QNX+HEEnQg=) 4: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: Tz3+hdgyWtYc1/HUoUjEsmhsHMVSkBuU+zwj3+lRJ4Y=) 5: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: BEQq2adPF9DtUnPGJHJJfgnf6dGwneA1V3UD4qTY/sk=) 6: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Qt9iDMNj4N3ReIVZuI3czqq9ixUtCUuaWxevQugerDE=) 7: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /2oZAnJe5MS3Gc5JLji4AqiTQoX9Gmdygu0nAIyf1NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Sep 23 02:00:16 2026 GMT Not After : Sep 30 02:00:16 2026 GMT Subject: CN=6ab332b1-f725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:0b:7b:1e:27:a2:b6:13:92:6f:7b:08:7b: 0d:90:9c:2c:a1:ac:1d:de:3b:b1:1b:6c:9d:da:d4: 0e:c0:df:d3:2c:38:3c:95:96:fc:88:0a:55:43:b2: b6:17:38:73:61:f4:71:54:49:4b:8a:e1:f4:d1:8d: 54:c1:c8:33:4d:53:0a:a8:9f:4d:be:fe:99:8c:5c: a2:df:3a:98:7a:bf:2a:35:60:ce:bf:96:dc:6c:01: 55:d2:ba:4a:4a:df:65:76:da:cc:ee:e0:e9:cc:9a: cb:9c:4a:29:3c:43:e5:47:11:1c:eb:26:ca:c2:1f: 89:d9:e8:b9:9c:d1:38:2d:9f:e5:02:33:84:3d:5e: 38:1d:9c:ba:e2:b9:0c:bb:3c:e8:99:e4:14:38:33: 12:8b:b0:15:72:44:65:e7:76:82:2c:91:7b:62:28: 9c:e7:05:4d:9f:41:cc:6a:23:86:e4:cc:ce:b5:5c: 1f:13:6f:5b:53:69:41:a9:a2:41:f2:5c:f3:c4:bd: 78:cf:25:61:c0:38:d7:99:e1:ca:bd:93:6d:08:52: 4b:ef:be:6a:7a:1a:c6:e5:b7:51:4c:40:73:ba:a7: 34:c8:b2:cd:48:f7:62:e2:b6:68:7a:de:ed:dd:5b: fc:2a:9d:db:70:52:4c:24:36:79:3e:b5:23:8e:5d: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:65:A3:04:44:6B:1B:5E:BB:D1:BA:C2:B2:47:BE:08:8A:5C:F7 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b6:9e:ff:64:34:13:7e:9f:e5:c6:49:c4:20:85:7e:56:56: 5e:89:44:91:87:2e:08:35:61:41:d6:c5:55:d3:26:5f:3d:a8: dc:45:e9:50:6b:e3:c6:ad:ae:2c:10:6a:6f:bd:52:9c:a7:54: c8:03:ca:29:41:54:93:03:93:5f:b3:1d:16:ef:44:9f:88:a3: 69:79:9d:4b:cd:83:80:37:d5:e0:80:73:c9:c1:d8:2b:c0:da: a9:72:5c:e9:41:0d:6b:27:db:cb:38:13:ce:40:3a:0a:c7:dd: ef:df:a4:ff:b5:62:8d:69:a2:3e:e6:0b:cf:04:17:54:e2:27: 6d:17:2e:4d:7b:75:c6:27:07:6d:94:10:1b:1c:cb:0c:10:b5: 34:ab:eb:be:bf:42:11:8a:51:85:8d:21:30:6d:53:fa:de:04: 7b:7a:19:92:76:a3:dd:95:34:43:2f:19:f4:75:cb:fa:c7:0f: 1c:64:44:df:36:b8:46:4c:13:b8:e5:a4:ca:55:3b:6d:ca:17: 99:b3:dc:b7:f1:bc:f8:1b:ca:c5:69:9c:32:5e:dc:0c:88:fa: aa:ba:ce:b1:b0:5b:6a:60:0f:b4:07:30:e3:b4:5b:b3:17:2d: 6a:d9:3e:5c:32:cb:66:f9:0d:37:6b:38:05:97:fd:d2:ec:9b: 70:ad:3d:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjYwOTIzMDIwMDE2WhcNMjYwOTMwMDIwMDE2WjAYMRYwFAYD VQQDEw02YWIzMzJiMS1mNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVoLex4norYTkm97CHsNkJwsoawd3juxG2yd2tQOwN/TLDg8lZb8iApVQ7K2 FzhzYfRxVElLiuH00Y1UwcgzTVMKqJ9Nvv6ZjFyi3zqYer8qNWDOv5bcbAFV0rpK St9ldtrM7uDpzJrLnEopPEPlRxEc6ybKwh+J2ei5nNE4LZ/lAjOEPV44HZy64rkM uzzomeQUODMSi7AVckRl53aCLJF7Yiic5wVNn0HMaiOG5MzOtVwfE29bU2lBqaJB 8lzzxL14zyVhwDjXmeHKvZNtCFJL775qehrG5bdRTEBzuqc0yLLNSPdi4rZoet7t 3Vv8Kp3bcFJMJDZ5PrUjjl1NFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsSZaME RGsbXrvRusKyR74Iilz3MB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVbae/2Q0E36f5cZJxCCFflZWXolEkYcuCDVhQdbFVdMmXz2o3EXpUGvjxq2u LBBqb71SnKdUyAPKKUFUkwOTX7MdFu9En4ijaXmdS82DgDfV4IBzycHYK8DaqXJc 6UENayfbyzgTzkA6Csfd79+k/7VijWmiPuYLzwQXVOInbRcuTXt1xicHbZQQGxzL DBC1NKvrvr9CEYpRhY0hMG1T+t4Ee3oZknaj3ZU0Qy8Z9HXL+scPHGRE3za4RkwT uOWkylU7bcoXmbPct/G8+BvKxWmcMl7cDIj6qrrOsbBbamAPtAcw47Rbsxctatk+ XDLLZvkNN2s4BZf90uybcK09bw== -----END CERTIFICATE-----Generated at Fri Sep 25 02:24:07 2026 by rpki-client