$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft File: IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json) Hash identifier: G/gKbqdHXw82IAw6ihRydsiaT/XOrYKT0mE+yOthDWg= Subject key identifier: 99:49:04:2F:A3:0E:9C:43:8F:3E:D5:41:7B:31:9C:03:3F:1E:68:F5 Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 Certificate issuer: /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft Manifest number: 91 Signing time: Wed 23 Sep 2026 07:14:08 +0000 Manifest this update: Wed 23 Sep 2026 07:14:07 +0000 Manifest next update: Wed 30 Sep 2026 07:14:07 +0000 Files and hashes: 1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: mQ0UYqDoNUqfW+tBL8wwnEeVTpET0dbsxMtV+iKtIks=) 2: 78211876DA3811F080F82F148DD3641D.roa (hash: iQuCstGoIK1MPnU6/cDDIt+974fe7iZAlTkSxssvjXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Validity Not Before: Sep 23 07:14:07 2026 GMT Not After : Sep 30 07:14:07 2026 GMT Subject: CN=6ab37c40-303c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:0d:82:56:ca:37:56:37:99:dc:e6:82:ee: cf:15:4e:36:f6:2a:02:c3:d4:db:94:57:d4:5f:1e: 2e:7c:a8:c4:81:b0:c3:17:6a:cb:47:63:c4:38:1f: 14:de:45:34:23:21:35:19:31:a2:de:c0:0d:fa:e8: 80:6b:07:24:27:0b:14:61:62:98:8d:e2:fc:14:57: b5:4b:b2:37:e1:92:6a:81:c5:fa:c9:9f:9e:6b:d9: b1:48:f3:e9:6e:92:35:09:1d:43:5c:01:0a:23:de: 00:d9:29:73:45:04:d5:d7:97:c4:23:5e:8a:b3:ec: be:b1:c3:ee:cf:6b:49:cd:a0:b0:a8:79:93:58:4c: 4c:e4:95:22:e4:b0:f4:92:eb:4d:f3:3b:98:bb:40: df:ee:53:1e:ce:e5:55:d8:52:ce:0f:10:72:0b:b0: cb:67:75:2b:ca:70:0e:34:b1:96:94:ef:18:3a:df: 33:c4:69:87:c6:72:be:5c:a2:86:ab:d9:2a:89:07: 23:d8:00:d3:ee:ea:e6:13:bb:01:8c:01:dd:8c:99: a2:d9:9a:a8:95:99:cf:38:02:a4:78:7a:0e:3b:b8: 71:66:f8:66:bf:66:9f:99:4a:85:51:a1:b8:01:52: 00:3a:52:2d:88:c3:3b:53:14:1f:a1:d1:3a:5a:d5: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:49:04:2F:A3:0E:9C:43:8F:3E:D5:41:7B:31:9C:03:3F:1E:68:F5 X509v3 Authority Key Identifier: keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f9:8c:1e:ca:a2:b3:0c:03:4a:5e:ed:b4:cc:88:4e:06:7f: 29:00:6f:e5:46:6b:f4:5c:8f:3b:b2:53:35:da:9b:30:36:b5: cc:10:da:2d:4a:a1:46:82:17:d0:5e:cb:82:df:ae:6c:55:a8: 83:c8:3e:1c:00:5d:3e:1a:41:79:89:60:20:98:01:ce:15:3f: f3:ad:51:f2:e7:4f:af:f3:41:51:89:6d:f8:65:c8:db:0c:d3: 76:d5:58:92:a6:43:5a:28:3c:ec:57:dd:24:81:0b:37:22:59: da:d9:3c:36:38:0f:2f:2e:0f:69:6f:08:7d:7b:3b:af:e2:64: b6:fa:ba:e5:26:12:4e:32:ad:e7:db:51:af:7c:b1:df:86:2d: 81:99:b4:14:ed:f4:e8:5f:a4:0d:74:21:d6:65:c7:4f:ee:e9: 43:68:fb:b8:2f:a6:ae:cd:71:8e:cd:08:27:6d:d6:f3:7b:54: b7:ee:9f:84:2e:11:56:d2:2a:df:37:c5:6c:7a:c4:c0:e1:4d: ec:c5:72:63:63:d6:e7:7b:85:ba:ff:3e:e7:a4:9a:8e:9a:b4: 34:b8:0c:00:ed:17:1b:6e:99:29:f8:fd:87:31:c8:00:c3:0e: 75:58:be:b6:02:83:27:11:5d:af:e7:75:73:ae:75:6f:93:0d: 56:ae:9f:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQwQjIxMTAvBgNVBAUTKDIwRjNCQkQ0OThGNDNDOTc5MTNFRTFCOTk0MjlEQjg5 MEI0NzYyQjAwHhcNMjYwOTIzMDcxNDA3WhcNMjYwOTMwMDcxNDA3WjAYMRYwFAYD VQQDEw02YWIzN2M0MC0zMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uwNglbKN1Y3mdzmgu7PFU429ioCw9TblFfUXx4ufKjEgbDDF2rLR2PEOB8U 3kU0IyE1GTGi3sAN+uiAawckJwsUYWKYjeL8FFe1S7I34ZJqgcX6yZ+ea9mxSPPp bpI1CR1DXAEKI94A2SlzRQTV15fEI16Ks+y+scPuz2tJzaCwqHmTWExM5JUi5LD0 kutN8zuYu0Df7lMezuVV2FLODxByC7DLZ3UrynAONLGWlO8YOt8zxGmHxnK+XKKG q9kqiQcj2ADT7urmE7sBjAHdjJmi2ZqolZnPOAKkeHoOO7hxZvhmv2afmUqFUaG4 AVIAOlItiMM7UxQfodE6WtXYXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlJBC+j DpxDjz7VQXsxnAM/Hmj1MB8GA1UdIwQYMBaAFCDzu9SY9DyXkT7huZQp24kLR2Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDBCMi9EMTQ2RTRGMERB MzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9JUE83MUpqMFBKZVJQdUc1bENuYmlRdEhZ ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lQTzcxSmowUEplUlB1RzVsQ25iaVF0SFlyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDBCMi9EMTQ2RTRGMERBMzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9JUE83MUpqMFBK ZVJQdUc1bENuYmlRdEhZckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAofmMHsqiswwDSl7ttMyITgZ/KQBv5UZr9FyPO7JTNdqbMDa1zBDaLUqhRoIX 0F7Lgt+ubFWog8g+HABdPhpBeYlgIJgBzhU/861R8udPr/NBUYlt+GXI2wzTdtVY kqZDWig87FfdJIELNyJZ2tk8NjgPLy4PaW8IfXs7r+Jktvq65SYSTjKt59tRr3yx 34YtgZm0FO306F+kDXQh1mXHT+7pQ2j7uC+mrs1xjs0IJ23W83tUt+6fhC4RVtIq 3zfFbHrEwOFN7MVyY2PW53uFuv8+56Sajpq0NLgMAO0XG26ZKfj9hzHIAMMOdVi+ tgKDJxFdr+d1c651b5MNVq6f4w== -----END CERTIFICATE-----Generated at Fri Sep 25 08:51:35 2026 by rpki-client