$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: xvhF7UFnuddaUFfxHAUEXpVOACz9sZWYjh0vctn13Eg= Subject key identifier: 87:93:60:EB:7C:DF:D0:47:B7:BA:59:38:29:FB:DB:61:E2:E7:24:EA Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 0843 Signing time: Tue 22 Sep 2026 20:48:48 +0000 Manifest this update: Tue 22 Sep 2026 20:48:48 +0000 Manifest next update: Tue 29 Sep 2026 20:48:48 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: ylK3WkoBpTmYR9j/Rv07kiQ3iPj0Z3nDv4uT1bucb1Q=) 2: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: 9YsIlIllhbjKELWofqw1jKbJ9ZMkFk/KGAHeyjk+MvM=) 3: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: dGQ2Shga7JyItz/gX367HOAIx3zB2wdadpgo2oiYCAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: Sep 22 20:48:48 2026 GMT Not After : Sep 29 20:48:48 2026 GMT Subject: CN=6ab2e9b0-c251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:0e:99:9b:81:e3:4c:c0:97:a9:e0:9e:ba: d4:d2:45:ea:74:ba:6c:d2:d0:db:43:d1:dd:ea:4f: 96:34:e7:07:db:78:29:cd:ed:90:04:6b:07:f9:ba: 5b:9a:76:a9:f0:61:58:fe:19:1c:6c:44:f9:d5:cf: ae:03:0a:91:f2:57:28:5a:d3:61:dd:58:11:b6:39: 39:16:3a:e7:62:ea:2e:37:30:11:c4:c0:b7:75:22: f0:01:ac:c5:4c:28:3b:5d:5e:65:48:e0:3f:1e:7f: 48:3d:6b:ce:5e:48:66:75:2c:b2:44:27:f5:da:ea: b1:6a:53:bf:ec:21:b9:2a:20:9a:81:cd:e5:b3:25: 0f:b1:83:86:60:91:8b:e0:da:ba:ce:b0:a0:00:7e: 80:19:ef:f0:2a:be:ce:74:49:b2:6d:71:84:64:66: 7a:ad:d7:20:cc:3b:13:84:d8:19:0b:75:9b:b6:74: 6e:fc:d7:2e:5e:c3:f1:60:dc:b4:d0:4e:65:e7:bd: 7f:49:17:9d:ff:75:9d:57:1f:17:7b:22:db:81:6b: a3:f1:7c:99:2b:ee:4e:d1:c7:06:c1:a3:f2:fb:5a: 17:bc:54:e6:92:50:21:f1:06:91:61:14:da:3b:95: eb:aa:93:7d:41:13:6f:f2:6f:29:17:2c:31:d4:e1: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:93:60:EB:7C:DF:D0:47:B7:BA:59:38:29:FB:DB:61:E2:E7:24:EA X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a0:23:65:6c:4d:3d:ce:74:c5:26:e3:62:41:7b:56:e4:c4: 3a:6d:45:69:e2:71:5d:69:06:92:9c:ba:56:07:75:17:2b:95: 78:c8:c2:95:b1:bf:ca:1d:95:a3:6d:88:b6:4a:0e:ac:db:35: 15:f5:30:a1:3c:23:a7:94:aa:8c:a7:98:85:93:cd:60:e2:7a: b6:f2:53:a7:da:4e:f2:ce:e9:60:2b:ed:99:7c:83:fb:2b:06: ed:97:c0:52:a6:2e:50:05:38:4d:1b:88:e3:53:b9:d4:17:c4: 62:fc:e8:25:f7:ab:84:99:5e:43:97:c4:45:70:00:2d:a5:dc: f0:58:80:df:fe:81:0c:b7:bf:54:11:35:0f:d9:dc:52:f6:35: 16:e5:8f:32:10:cd:af:b2:0f:c3:e9:d5:2b:07:85:f4:57:80: 5b:a2:a2:70:5a:88:0e:4a:ab:3e:2c:27:ce:31:73:6e:03:ca: 7b:a1:1a:f0:e8:b8:f6:08:e1:dc:97:61:d9:fb:c2:9c:4a:a0: e1:fa:aa:a4:ec:ac:57:8a:24:79:ac:c1:63:bd:63:e9:c1:5f: 98:83:c2:4d:b8:ea:57:a8:21:0f:c1:9d:66:25:70:8e:86:33: ae:be:31:56:68:f1:7e:b1:84:a2:06:b9:e9:cb:25:69:e1:2d: dd:5c:79:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjYwOTIyMjA0ODQ4WhcNMjYwOTI5MjA0ODQ4WjAYMRYwFAYD VQQDEw02YWIyZTliMC1jMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0j4OmZuB40zAl6ngnrrU0kXqdLps0tDbQ9Hd6k+WNOcH23gpze2QBGsH+bpb mnap8GFY/hkcbET51c+uAwqR8lcoWtNh3VgRtjk5FjrnYuouNzARxMC3dSLwAazF TCg7XV5lSOA/Hn9IPWvOXkhmdSyyRCf12uqxalO/7CG5KiCagc3lsyUPsYOGYJGL 4Nq6zrCgAH6AGe/wKr7OdEmybXGEZGZ6rdcgzDsThNgZC3WbtnRu/NcuXsPxYNy0 0E5l571/SRed/3WdVx8XeyLbgWuj8XyZK+5O0ccGwaPy+1oXvFTmklAh8QaRYRTa O5XrqpN9QRNv8m8pFywx1OFmbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeTYOt8 39BHt7pZOCn722Hi5yTqMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnqAjZWxNPc50xSbjYkF7VuTEOm1FaeJxXWkGkpy6Vgd1FyuVeMjClbG/yh2V o22ItkoOrNs1FfUwoTwjp5SqjKeYhZPNYOJ6tvJTp9pO8s7pYCvtmXyD+ysG7ZfA UqYuUAU4TRuI41O51BfEYvzoJferhJleQ5fERXAALaXc8FiA3/6BDLe/VBE1D9nc UvY1FuWPMhDNr7IPw+nVKweF9FeAW6KicFqIDkqrPiwnzjFzbgPKe6Ea8Oi49gjh 3Jdh2fvCnEqg4fqqpOysV4okeazBY71j6cFfmIPCTbjqV6ghD8GdZiVwjoYzrr4x VmjxfrGEoga56cslaeEt3Vx5Xw== -----END CERTIFICATE-----Generated at Wed Sep 23 01:45:58 2026 by rpki-client