$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: NEw55hgyokI6KAjiST/M/Y2kzePufrZYQKruvM4e3Sc= Subject key identifier: 66:65:F3:7B:08:FF:69:3F:74:AA:19:1F:F3:C2:96:FF:51:D6:D8:BD Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 02CE Signing time: Fri 25 Sep 2026 01:16:31 +0000 Manifest this update: Fri 25 Sep 2026 01:16:30 +0000 Manifest next update: Fri 02 Oct 2026 01:16:30 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: KvD/MVLQnzwA4ri8UUybE0joSDblgDmu7I/2+w4IYvg=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: Y2tXrS6Zqm630FVkkr6TwAuMdb/vqk2vx1Gd77KYwEw=) 3: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: ljxHrBu6KIuaVxEtn8fq/MRvf7thmklR0IUaRaPlt+E=) 4: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: iRobZBHErdOmSfTVjmR1SsfPNzoXkE0mbzfwrTvVbZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Sep 25 01:16:30 2026 GMT Not After : Oct 2 01:16:30 2026 GMT Subject: CN=6ab5cb6e-fc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:af:75:26:e2:ec:71:03:e3:02:76:61:76: 78:13:92:4c:45:11:0d:c5:d6:1f:30:2c:25:6b:9b: 18:0f:c4:dd:3a:88:58:22:a8:b3:8e:9b:7e:9e:ad: 3f:d5:a4:8d:bc:43:37:63:17:66:bf:8a:f9:94:26: ac:c9:c3:30:88:3d:4f:9a:70:cc:ba:b5:e4:01:42: 36:73:76:a8:46:f8:37:69:51:d1:5b:48:a6:60:83: e3:84:64:a1:51:1b:cd:db:1e:1a:3a:ae:53:9f:43: 63:54:c6:34:64:47:cf:5d:e2:e3:4c:93:77:a6:d8: 3b:19:3c:61:dc:8e:4e:ea:b8:46:f2:44:3b:35:65: a7:98:75:6b:61:25:e6:51:cd:1e:b5:96:e2:ef:43: 24:a1:bc:d2:2f:02:31:6f:33:c7:1a:ba:44:07:56: ab:bd:09:b3:16:13:a2:55:71:49:36:6f:e7:ef:e3: 2b:ef:c1:48:db:ff:da:14:16:f3:85:9e:cf:a7:2a: 66:22:83:20:81:93:79:11:55:a0:71:a5:fa:a4:84: a3:f0:b8:fa:79:a7:30:5f:e0:d7:ef:ae:4b:b5:28: 87:e5:9f:ad:26:51:9c:43:59:79:ab:e5:3e:b6:cc: 20:90:19:29:d0:15:60:5d:35:0c:e2:db:c4:e2:f4: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:65:F3:7B:08:FF:69:3F:74:AA:19:1F:F3:C2:96:FF:51:D6:D8:BD X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:08:cf:1b:b4:1e:36:68:24:bd:a8:81:58:5f:38:ea:6b:ea: 7d:23:1f:e3:b4:07:b3:13:d0:cb:0d:e5:06:05:69:9f:98:0f: ce:8c:4b:fc:96:88:a6:1c:c3:0a:31:bb:ad:9b:7d:e8:90:83: f0:d7:0b:06:6a:b6:18:02:c9:ee:a4:da:65:3a:1e:2c:5c:e7: af:e3:12:12:ce:5f:90:21:ee:06:73:c3:49:7b:4c:62:50:fa: fb:92:50:92:7f:cd:60:05:df:58:88:00:7e:ce:ec:31:89:19: 5a:94:06:52:93:32:a8:18:d2:5d:84:aa:3b:c0:29:db:81:7a: 9a:88:5f:b5:8a:36:ab:20:ec:fc:d6:fa:95:b3:22:6e:71:fe: 7c:bf:a9:3c:d8:b7:b3:94:c2:6a:a8:94:1c:ea:67:1f:46:82: 82:b4:38:a5:6a:39:b4:e5:80:b7:21:9c:95:d2:02:5e:58:08: ca:cb:d7:cb:e0:f8:d6:0a:9b:f0:09:9b:d9:94:bb:69:be:d0: de:5a:e7:73:c1:3f:9d:23:8a:7c:58:0c:67:1a:b5:16:c1:9a: 3c:8e:90:c0:26:80:e1:cf:0e:81:2c:20:fe:96:48:10:78:07: 25:e6:5c:99:95:59:09:c7:a1:36:ca:1e:d1:74:e6:ed:1e:cb: 64:18:85:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYwOTI1MDExNjMwWhcNMjYxMDAyMDExNjMwWjAYMRYwFAYD VQQDEw02YWI1Y2I2ZS1mYzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxGvdSbi7HED4wJ2YXZ4E5JMRRENxdYfMCwla5sYD8TdOohYIqizjpt+nq0/ 1aSNvEM3Yxdmv4r5lCasycMwiD1PmnDMurXkAUI2c3aoRvg3aVHRW0imYIPjhGSh URvN2x4aOq5Tn0NjVMY0ZEfPXeLjTJN3ptg7GTxh3I5O6rhG8kQ7NWWnmHVrYSXm Uc0etZbi70MkobzSLwIxbzPHGrpEB1arvQmzFhOiVXFJNm/n7+Mr78FI2//aFBbz hZ7PpypmIoMggZN5EVWgcaX6pISj8Lj6eacwX+DX765LtSiH5Z+tJlGcQ1l5q+U+ tswgkBkp0BVgXTUM4tvE4vSxPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZl83sI /2k/dKoZH/PClv9R1ti9MB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQjPG7QeNmgkvaiBWF846mvqfSMf47QHsxPQyw3lBgVpn5gPzoxL/JaIphzD CjG7rZt96JCD8NcLBmq2GALJ7qTaZToeLFznr+MSEs5fkCHuBnPDSXtMYlD6+5JQ kn/NYAXfWIgAfs7sMYkZWpQGUpMyqBjSXYSqO8Ap24F6mohftYo2qyDs/Nb6lbMi bnH+fL+pPNi3s5TCaqiUHOpnH0aCgrQ4pWo5tOWAtyGcldICXlgIysvXy+D41gqb 8Amb2ZS7ab7Q3lrnc8E/nSOKfFgMZxq1FsGaPI6QwCaA4c8OgSwg/pZIEHgHJeZc mZVZCcehNsoe0XTm7R7LZBiFhw== -----END CERTIFICATE-----Generated at Fri Sep 25 22:35:41 2026 by rpki-client