$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json) Hash identifier: gsgqqp8o/I2NKJdUJBjwT/cJQfpIKPnbw4s0+VVeUWs= Subject key identifier: BE:FC:C6:85:A4:D8:12:2F:EF:D0:92:79:F9:5A:77:5A:DA:67:58:B8 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft Manifest number: 0780 Signing time: Sun 04 Oct 2026 21:51:44 +0000 Manifest this update: Sun 04 Oct 2026 21:51:44 +0000 Manifest next update: Sun 11 Oct 2026 21:51:44 +0000 Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: 0aZlmOUJzRXQSGrfED0yScx7NfFVGyDXBF2xU2TG5nc=) 2: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: uXnEhZMN5p3rr0PlaZXyG56XwBcCtum50akoQAm9H/U=) 3: A08AFBB284F211EE89828225C4F9AE02.roa (hash: 9AVVD+icBTsjsE1p6yw2d23t+3pL5hwBjgfMVN+ybEk=) 4: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: cLqF+FYKgySilfFTaVNQOA0caLM+dLKLkkEq/OktR3Y=) 5: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: yjiUEg90fnpv0QBcsW6mTbQABnoEdV6bwbUeRkmNaXI=) 6: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: CS2R8tkabqv/MCZKUBC01yde/O1dQ83gQrEzytIlA0E=) 7: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: kX4lwSq0b8cISkWx2ijvpu5VCo8Hlo55HVdaxhHk2dU=) 8: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: nkMuqXHF/RySePSZ24/1EeVyhSQICCcs6NULkRxvzXA=) 9: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: 6v5ejZfpThNkCGdZpElSBNnAPrFliabgKJpDCt299R0=) 10: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: K9a3qlzvjX851djZATBy7HtK/BnNMu8v3TQ/RW6t65g=) 11: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: 9kLyz41+LyEUa7Qe6tisfAGLex0hD3yPOszPhWqjqtA=) 12: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: 1sw8QAa0S7c7eRNoU5sA7YgpwjYsQi22yjKGbAqsiCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 4 21:51:44 2026 GMT Not After : Oct 11 21:51:44 2026 GMT Subject: CN=6ac2ca70-308b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:49:8c:c6:88:aa:7d:60:2d:71:b5:83:a2: 12:fe:9e:86:15:bf:d7:de:5a:9d:9b:0d:32:a7:ae: 6f:32:fa:0b:94:28:76:1c:cf:11:a4:38:99:84:a1: 72:ab:32:40:ee:cc:f0:e4:67:ff:38:79:77:40:55: 7b:49:44:de:fb:2e:66:e9:c3:5d:d0:c0:a9:2e:57: 50:83:ad:3f:d9:6b:41:79:17:4b:7b:7b:5f:95:df: a3:80:40:1b:7d:b3:c1:dc:98:e5:9d:7c:f9:e2:28: 91:db:66:01:18:b5:85:1f:fa:71:e5:0a:da:25:38: 81:95:a5:a5:ef:ee:e6:46:f5:e3:a3:85:8a:5f:bb: a4:c8:fd:1c:a1:34:ca:78:c2:fd:54:71:77:88:31: f6:75:11:2e:b1:b2:97:5f:7e:16:93:4d:75:d2:17: 35:fc:13:4c:ac:f0:0c:97:6f:fe:6b:7b:cc:67:45: 97:d5:1f:f9:51:a0:97:2e:6f:f7:0b:39:9f:f2:2e: f1:68:3e:3b:65:60:90:de:49:e4:e9:dc:45:ca:43: 65:ab:74:82:65:59:ac:df:04:45:14:8e:bc:5c:4a: d3:1b:b4:2f:e8:3a:ca:20:31:d0:f4:cf:c2:07:80: df:82:65:d8:68:b7:86:27:e8:8a:31:16:bf:fb:6c: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FC:C6:85:A4:D8:12:2F:EF:D0:92:79:F9:5A:77:5A:DA:67:58:B8 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:27:6e:5b:b1:26:12:3b:99:b1:cb:1e:ec:89:b7:56:db:eb: 2a:93:92:e8:f4:e8:e7:5a:b2:96:e6:2a:75:eb:82:10:4e:6b: bd:a4:36:04:0a:18:fb:f9:e0:31:50:3c:b0:21:58:cd:eb:88: 67:7e:b5:b9:7b:e0:47:fa:d0:d1:34:0d:9a:3d:6e:11:66:f0: 13:4c:3d:50:41:6d:2d:c8:d8:31:1d:08:f9:b6:8f:b0:13:85: e7:60:4c:75:9a:02:e3:92:39:2e:39:d7:7e:20:9b:22:fb:21: 27:40:57:4f:ad:c9:61:c4:01:5d:3b:52:ae:f6:f4:35:0f:55: 68:7a:55:eb:b1:77:f8:be:4b:54:5e:0c:f6:34:2e:15:23:6b: aa:60:4b:68:b6:87:5e:89:73:40:ec:2b:30:6a:ad:4d:46:f9: ea:af:c8:5d:32:69:5b:08:f8:5d:17:a4:6b:b7:84:5f:8d:ed: bd:be:f9:00:e2:d0:c8:b1:b3:b4:f4:0d:be:ee:ed:79:ec:55: a1:b9:1a:3e:04:4a:c8:20:19:b1:89:90:2a:09:4e:49:e2:0e: d7:79:0b:f7:70:d1:06:a1:6e:42:9c:d7:1b:31:58:13:3a:02: e4:41:7d:c9:b1:3d:15:9b:0a:7f:a4:e4:1c:8a:a5:bb:65:2c: a0:4a:91:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjYxMDA0MjE1MTQ0WhcNMjYxMDExMjE1MTQ0WjAYMRYwFAYD VQQDEw02YWMyY2E3MC0zMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhFJjMaIqn1gLXG1g6IS/p6GFb/X3lqdmw0yp65vMvoLlCh2HM8RpDiZhKFy qzJA7szw5Gf/OHl3QFV7SUTe+y5m6cNd0MCpLldQg60/2WtBeRdLe3tfld+jgEAb fbPB3JjlnXz54iiR22YBGLWFH/px5QraJTiBlaWl7+7mRvXjo4WKX7ukyP0coTTK eML9VHF3iDH2dREusbKXX34Wk0110hc1/BNMrPAMl2/+a3vMZ0WX1R/5UaCXLm/3 Czmf8i7xaD47ZWCQ3knk6dxFykNlq3SCZVms3wRFFI68XErTG7Qv6DrKIDHQ9M/C B4DfgmXYaLeGJ+iKMRa/+2xIxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL78xoWk 2BIv79CSeflad1raZ1i4MB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3 Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiyduW7EmEjuZscse7Im3VtvrKpOS6PTo51qyluYqdeuCEE5rvaQ2BAoY+/ng MVA8sCFYzeuIZ361uXvgR/rQ0TQNmj1uEWbwE0w9UEFtLcjYMR0I+baPsBOF52BM dZoC45I5LjnXfiCbIvshJ0BXT63JYcQBXTtSrvb0NQ9VaHpV67F3+L5LVF4M9jQu FSNrqmBLaLaHXolzQOwrMGqtTUb56q/IXTJpWwj4XReka7eEX43tvb75AOLQyLGz tPQNvu7teexVobkaPgRKyCAZsYmQKglOSeIO13kL93DRBqFuQpzXGzFYEzoC5EF9 ybE9FZsKf6TkHIqlu2UsoEqRLA== -----END CERTIFICATE-----Generated at Tue Oct 6 03:38:59 2026 by rpki-client