$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft File: I58TWYV0hKnEkCCp2sIKlBl9qw8.mft (raw, json) Hash identifier: hjQW9pU601w4c1lXyu2oMrT+L11S+8urMskAXXNtTCM= Subject key identifier: 3F:47:0F:76:63:3C:EE:78:63:9A:EB:99:36:84:08:B9:82:92:A3:46 Authority key identifier: 23:9F:13:59:85:74:84:A9:C4:90:20:A9:DA:C2:0A:94:19:7D:AB:0F Certificate issuer: /CN=A91B67D6/serialNumber=239F1359857484A9C49020A9DAC20A94197DAB0F Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I58TWYV0hKnEkCCp2sIKlBl9qw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft Manifest number: 28 Signing time: Thu 01 Oct 2026 10:11:52 +0000 Manifest this update: Thu 01 Oct 2026 10:11:51 +0000 Manifest next update: Thu 08 Oct 2026 10:11:51 +0000 Files and hashes: 1: I58TWYV0hKnEkCCp2sIKlBl9qw8.crl (hash: Zehae26IklYzivXmq95nqSK6gGqszM1Pd/ymEeToVu8=) 2: 02EDD61E83C711F189BAF24284A30FBC.roa (hash: 3F8WyCXReOkeErmDsnDtVe+2KoBuJVIO2yNSIG3UaX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.crl rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I58TWYV0hKnEkCCp2sIKlBl9qw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D6, serialNumber=239F1359857484A9C49020A9DAC20A94197DAB0F Validity Not Before: Oct 1 10:11:51 2026 GMT Not After : Oct 8 10:11:51 2026 GMT Subject: CN=6abe31e7-a825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:54:d9:3e:ad:88:82:7a:b8:4f:ec:ed:c2: c5:4b:37:71:45:ca:1b:10:2b:01:30:f7:b2:81:4b: 3c:80:9e:65:e9:22:d2:50:b2:bd:ad:5d:3f:20:0e: 19:d0:46:80:48:81:06:ac:c2:d7:4f:fe:ae:45:ea: 51:6e:7c:9b:4d:ab:92:b9:bd:50:7f:bd:f4:41:b1: d2:94:b1:1b:e4:58:6a:29:ce:75:97:65:8f:d8:f5: 99:3d:97:a3:7f:9f:13:46:92:36:cd:79:34:3d:2b: d1:7d:07:f0:02:68:b1:55:87:93:ad:de:e1:ef:bb: 45:da:89:91:92:0f:3f:d9:ff:cc:fd:e6:f1:f7:df: 62:21:3e:c8:78:75:89:2f:52:db:36:e8:0f:b0:f2: b8:75:11:07:e8:64:87:02:8c:79:3d:20:df:7e:06: e0:c8:1d:ce:9c:ad:f7:37:6b:04:b0:6f:e9:4d:2b: 38:9c:13:2f:a1:bf:d4:d5:e9:63:88:a3:b2:9c:bc: cd:86:18:64:bc:88:eb:ba:e9:18:e3:1a:0b:6b:2f: d7:17:2d:af:13:93:01:55:9d:71:2d:e5:21:76:3b: fe:05:75:7a:3c:ef:b7:3d:29:fd:b3:a2:a5:e3:45: 1d:1a:d1:b9:f9:36:d5:b2:85:2f:6f:4c:69:de:4c: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:47:0F:76:63:3C:EE:78:63:9A:EB:99:36:84:08:B9:82:92:A3:46 X509v3 Authority Key Identifier: keyid:23:9F:13:59:85:74:84:A9:C4:90:20:A9:DA:C2:0A:94:19:7D:AB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I58TWYV0hKnEkCCp2sIKlBl9qw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ad:14:3e:8d:fc:65:10:9b:cb:ff:40:35:3f:a6:ef:a8:32: 33:f5:ac:e5:66:ed:60:3d:14:f5:06:51:3a:93:4e:0a:64:55: b4:0d:d9:6a:0f:52:ee:0a:84:d6:2b:82:91:7d:bf:db:c2:89: 2e:79:be:59:46:0b:81:0a:83:23:dd:76:33:0f:1d:68:e8:18: a8:a8:7f:e2:8f:8c:4d:57:ba:a4:c2:44:c1:a9:b7:aa:9e:19: 0d:a1:8a:c9:20:75:cd:b2:f9:b8:13:d5:64:62:98:fc:8c:9e: 2f:c7:29:20:73:a1:43:60:3f:5c:c8:89:c1:6f:44:db:24:4e: bf:b4:9f:a4:5a:04:39:d2:62:2b:96:83:14:39:0b:64:e5:9d: eb:ff:ac:45:8d:9d:f3:16:8b:e4:d8:04:76:00:e1:43:16:e7: 83:a5:e9:3d:4b:94:68:6a:e5:cc:7f:87:75:39:13:8d:4b:06: ba:81:dd:1b:99:ff:e7:19:80:d2:16:2f:e3:ce:3b:66:37:c7: 8f:c1:16:ce:b2:6c:1b:18:f1:f3:34:c6:ed:72:2f:88:7e:73: 8e:59:d4:0f:13:66:24:4a:d0:ce:80:eb:57:cb:36:02:60:7d: 85:aa:36:83:63:e2:6e:88:de:7c:c8:c7:9b:27:fe:f7:c0:36: 61:63:2b:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjdENjExMC8GA1UEBRMoMjM5RjEzNTk4NTc0ODRBOUM0OTAyMEE5REFDMjBBOTQx OTdEQUIwRjAeFw0yNjEwMDExMDExNTFaFw0yNjEwMDgxMDExNTFaMBgxFjAUBgNV BAMTDTZhYmUzMWU3LWE4MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCM71TZPq2Ignq4T+ztwsVLN3FFyhsQKwEw97KBSzyAnmXpItJQsr2tXT8gDhnQ RoBIgQaswtdP/q5F6lFufJtNq5K5vVB/vfRBsdKUsRvkWGopznWXZY/Y9Zk9l6N/ nxNGkjbNeTQ9K9F9B/ACaLFVh5Ot3uHvu0XaiZGSDz/Z/8z95vH332IhPsh4dYkv Uts26A+w8rh1EQfoZIcCjHk9IN9+BuDIHc6crfc3awSwb+lNKzicEy+hv9TV6WOI o7KcvM2GGGS8iOu66RjjGgtrL9cXLa8TkwFVnXEt5SF2O/4FdXo877c9Kf2zoqXj RR0a0bn5NtWyhS9vTGneTNRlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUP0cPdmM8 7nhjmuuZNoQIuYKSo0YwHwYDVR0jBBgwFoAUI58TWYV0hKnEkCCp2sIKlBl9qw8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2N0Q2Lzc3QTcwMjdDODND MzExRjFCQzg4NUIzRjgzQTMwRkJDL0k1OFRXWVYwaEtuRWtDQ3Ayc0lLbEJsOXF3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSTU4VFdZVjBoS25Fa0NDcDJzSUtsQmw5cXc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 N0Q2Lzc3QTcwMjdDODNDMzExRjFCQzg4NUIzRjgzQTMwRkJDL0k1OFRXWVYwaEtu RWtDQ3Ayc0lLbEJsOXF3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCUrRQ+jfxlEJvL/0A1P6bvqDIz9azlZu1gPRT1BlE6k04KZFW0DdlqD1LuCoTW K4KRfb/bwokueb5ZRguBCoMj3XYzDx1o6BioqH/ij4xNV7qkwkTBqbeqnhkNoYrJ IHXNsvm4E9VkYpj8jJ4vxykgc6FDYD9cyInBb0TbJE6/tJ+kWgQ50mIrloMUOQtk 5Z3r/6xFjZ3zFovk2AR2AOFDFueDpek9S5RoauXMf4d1ORONSwa6gd0bmf/nGYDS Fi/jzjtmN8ePwRbOsmwbGPHzNMbtci+IfnOOWdQPE2YkStDOgOtXyzYCYH2FqjaD Y+JuiN58yMebJ/73wDZhYyua -----END CERTIFICATE-----Generated at Sat Oct 3 11:14:23 2026 by rpki-client