$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft File: iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json) Hash identifier: RuLUHAF3fgSXOtiqOE90fUWvoD1CnUsjvd7VagtCRRc= Subject key identifier: C9:E4:23:DB:87:AA:D8:71:56:33:17:89:10:60:1C:6E:DB:B4:CC:28 Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft Manifest number: 0130 Signing time: Fri 25 Sep 2026 05:42:57 +0000 Manifest this update: Fri 25 Sep 2026 05:42:56 +0000 Manifest next update: Fri 02 Oct 2026 05:42:56 +0000 Files and hashes: 1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: gcs3HjpCHkezltGx07hVofYbBnwhXYfZw7oV+LuZ9LY=) 2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Validity Not Before: Sep 25 05:42:56 2026 GMT Not After : Oct 2 05:42:56 2026 GMT Subject: CN=6ab609e0-b692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c3:9a:cf:16:61:45:f3:28:52:d6:c3:ca:b9: e0:f6:99:e1:a2:4b:68:72:dc:2a:45:69:52:33:92: e8:6a:6a:01:9d:fe:c7:9f:80:d6:bf:ec:cb:30:b2: 40:13:91:12:65:9e:6e:63:bc:65:b3:31:e2:21:d4: 61:08:4f:6e:0c:8e:52:08:b5:b9:9a:26:f1:47:f9: 40:6c:19:b4:e7:f1:91:ca:8a:20:82:7d:88:48:b9: a6:b1:9b:f2:5e:96:6a:e2:de:61:6c:8b:f8:c6:b2: 9a:6c:4b:1c:fd:c8:4a:e6:7c:2a:d0:3e:f1:14:6b: a2:9e:4f:91:dc:4a:1d:96:d6:ea:3c:6d:2e:ce:54: bc:e4:e7:fb:b6:c8:ef:13:41:37:f4:ba:e5:dd:6c: 2e:c6:86:c2:ba:c2:4c:e4:1b:24:95:2f:01:12:f0: ac:07:8f:97:ef:88:e7:c4:f6:d4:3c:c3:29:e7:9b: 2a:e5:d9:3c:b6:8b:eb:aa:d4:c1:a6:c7:57:bc:75: 35:0a:61:09:ba:3e:6f:4d:fb:a9:a5:95:07:e9:7c: 6e:07:ca:97:b6:ca:0b:09:d8:64:c3:0e:76:77:81: a4:88:31:cd:07:a7:72:7f:38:4e:a4:7f:fd:6d:99: aa:f1:3c:23:bc:8c:e6:14:06:be:77:cc:c8:85:a9: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E4:23:DB:87:AA:D8:71:56:33:17:89:10:60:1C:6E:DB:B4:CC:28 X509v3 Authority Key Identifier: keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:db:d0:99:17:18:8b:21:03:37:0a:70:05:90:2e:3f:c3:75: ee:6b:13:85:fb:8f:01:af:e0:3e:c2:c8:0d:15:29:49:b0:50: ee:23:a9:d4:80:cf:3e:ec:89:69:47:4e:39:de:e8:8f:52:a9: 29:f6:ea:4c:a8:28:9c:94:fe:33:0b:4d:fc:cd:db:69:8b:96: b5:85:23:8a:5b:35:29:9f:23:b6:0e:ed:6e:64:9b:cf:cd:6c: 39:9b:d6:5b:66:79:e2:7c:f5:07:b7:77:47:40:e1:40:36:f6: cf:c4:d7:b4:1c:7d:cf:c0:82:f8:b0:0a:c2:03:ff:d4:d0:6c: 73:3b:72:5a:26:1c:e2:74:2f:4f:41:f2:d5:79:74:1e:a8:60: df:1f:bd:33:09:be:4b:83:e5:fb:61:33:c6:9e:b9:3b:83:d3: 48:d6:20:72:e7:08:ab:9c:71:0c:30:9f:2f:00:17:7f:74:4a: c1:70:22:fd:97:29:c5:0a:58:c6:23:4a:e8:f7:c1:e3:25:9c: 30:bd:58:ea:6c:7b:5e:4c:76:24:18:19:2f:30:aa:2b:97:35: 64:d2:88:be:7b:8a:33:b1:3a:e9:dc:c0:81:04:3e:ca:92:03: 6d:15:07:50:90:df:e4:e5:c4:45:77:b6:f5:84:ae:ed:ee:01: ca:a9:0b:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQ0IxMTAvBgNVBAUTKDg5NjY0MjNFRTJBNDE1NjMxRjdBRjMxNEU0RDg4NDAw N0E4NDY4QjYwHhcNMjYwOTI1MDU0MjU2WhcNMjYxMDAyMDU0MjU2WjAYMRYwFAYD VQQDEw02YWI2MDllMC1iNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjcOazxZhRfMoUtbDyrng9pnhoktoctwqRWlSM5LoamoBnf7Hn4DWv+zLMLJA E5ESZZ5uY7xlszHiIdRhCE9uDI5SCLW5mibxR/lAbBm05/GRyooggn2ISLmmsZvy XpZq4t5hbIv4xrKabEsc/chK5nwq0D7xFGuink+R3EodltbqPG0uzlS85Of7tsjv E0E39Lrl3WwuxobCusJM5BsklS8BEvCsB4+X74jnxPbUPMMp55sq5dk8tovrqtTB psdXvHU1CmEJuj5vTfuppZUH6XxuB8qXtsoLCdhkww52d4GkiDHNB6dyfzhOpH/9 bZmq8TwjvIzmFAa+d8zIhalcGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnkI9uH qthxVjMXiRBgHG7btMwoMB8GA1UdIwQYMBaAFIlmQj7ipBVjH3rzFOTYhAB6hGi2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi82NTBFNjAwQUVB NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9pV1pDUHVLa0ZXTWZldk1VNU5pRUFIcUVh TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lXWkNQdUtrRldNZmV2TVU1TmlFQUhxRWFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFDQi82NTBFNjAwQUVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9pV1pDUHVLa0ZX TWZldk1VNU5pRUFIcUVhTFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAddvQmRcYiyEDNwpwBZAuP8N17msThfuPAa/gPsLIDRUpSbBQ7iOp1IDPPuyJ aUdOOd7oj1KpKfbqTKgonJT+MwtN/M3baYuWtYUjils1KZ8jtg7tbmSbz81sOZvW W2Z54nz1B7d3R0DhQDb2z8TXtBx9z8CC+LAKwgP/1NBscztyWiYc4nQvT0Hy1Xl0 Hqhg3x+9Mwm+S4Pl+2Ezxp65O4PTSNYgcucIq5xxDDCfLwAXf3RKwXAi/ZcpxQpY xiNK6PfB4yWcML1Y6mx7Xkx2JBgZLzCqK5c1ZNKIvnuKM7E66dzAgQQ+ypIDbRUH UJDf5OXERXe29YSu7e4ByqkLyQ== -----END CERTIFICATE-----Generated at Fri Sep 25 11:00:27 2026 by rpki-client