$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft File: iPsdIcuIPJfCmst31NaIhLOnpgg.mft (raw, json) Hash identifier: c5czUqxaFgIIS4o9BqHX5NviyHyA6X3fhP8/j+qMZMY= Subject key identifier: 38:EF:D0:53:4D:AB:3B:0D:C3:79:71:58:EB:05:EE:AE:D1:A1:F2:1F Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 Certificate issuer: /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft Manifest number: A0 Signing time: Fri 25 Sep 2026 07:25:07 +0000 Manifest this update: Fri 25 Sep 2026 07:25:06 +0000 Manifest next update: Fri 02 Oct 2026 07:25:06 +0000 Files and hashes: 1: iPsdIcuIPJfCmst31NaIhLOnpgg.crl (hash: zq2ulb1MKCdWIbZOCMXA36Tx9pR7Q5VniuzpoTPptrI=) 2: 74C3FC2413B911F1B7CEB625083D8C67.roa (hash: P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Validity Not Before: Sep 25 07:25:06 2026 GMT Not After : Oct 2 07:25:06 2026 GMT Subject: CN=6ab621d3-30ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:2a:a2:9c:02:80:82:ce:98:4e:5b:a4:31: a5:5b:19:7d:0d:c8:3a:f6:7f:ef:7b:6b:a7:59:ab: 63:fd:d3:72:34:ff:90:cf:c4:0e:2e:93:b9:b7:8f: 5f:d1:51:d9:1e:55:37:ac:0e:01:da:67:50:9e:55: 5b:04:d9:2f:60:db:27:c7:31:1e:af:cb:a1:e8:35: 51:cf:95:12:8c:8f:5e:e1:aa:e2:74:44:80:42:d1: da:fb:95:ee:19:58:f1:ee:4c:fe:41:d0:fe:09:a3: 6b:f6:41:71:55:70:0b:59:53:45:3c:14:84:6d:51: c6:70:f1:80:29:70:f6:11:24:44:f1:94:b5:25:0a: 3d:84:80:56:a1:80:18:84:d2:61:bd:94:50:50:a3: 33:d1:16:f9:f7:74:34:09:d1:aa:cf:52:50:05:f2: 51:7f:2a:9e:4c:39:8a:51:96:01:bb:18:2e:45:a9: 23:99:86:cd:2e:78:0d:77:f1:36:d8:b3:e7:5d:59: 51:4e:98:6c:d7:c3:53:07:28:bc:8a:35:b3:79:d5: 69:4f:60:8c:8d:59:fe:90:aa:5f:79:1c:79:78:48: 66:d2:5d:9f:ad:16:80:24:e3:80:32:57:b8:8c:67: 76:c6:0f:f6:5f:57:c2:49:fb:dd:f1:25:bd:50:5a: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EF:D0:53:4D:AB:3B:0D:C3:79:71:58:EB:05:EE:AE:D1:A1:F2:1F X509v3 Authority Key Identifier: keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3c:4f:3c:f9:13:9b:05:83:d4:99:a7:12:9d:15:0d:37:ab: 6f:b3:97:4b:79:2b:a6:22:df:7f:d2:fb:4d:d2:2a:a4:8b:0b: 32:40:ec:0b:f2:5d:e7:18:29:25:31:8c:47:7e:ca:c1:0a:e8: 03:f7:4f:ec:2f:77:30:be:2b:c4:a9:84:03:8f:2d:67:77:90: 40:b0:a7:cf:08:3d:d5:ae:ca:56:62:41:21:9e:23:d4:01:1d: 50:47:3c:f2:43:eb:b7:65:06:a1:e7:79:6f:57:bb:0b:09:51: 63:cf:b6:2a:60:8f:50:be:e5:70:14:c6:3f:af:44:23:d7:65: 40:04:3c:e3:fc:7a:be:b8:79:73:c8:97:33:b6:8b:fc:28:f4: 75:36:46:cc:42:ea:f5:79:4a:19:9d:ee:3d:79:c6:b8:2c:dc: d5:e9:ed:2c:b0:0f:5f:a9:1e:aa:91:22:f5:c6:d7:25:13:f9: da:ba:e8:05:b6:0e:b1:73:b2:65:6e:0f:c4:17:3a:7a:c0:6e: a8:40:93:44:bd:d3:e3:86:99:3a:0b:98:c0:41:2c:92:c4:ce: f6:81:70:7e:87:87:b1:c1:cb:c0:71:aa:2d:68:43:16:cc:11: 45:61:19:ca:46:da:a1:fc:b0:0c:42:cd:ce:77:3e:cb:06:0b: 42:f6:51:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBMDQxMTAvBgNVBAUTKDg4RkIxRDIxQ0I4ODNDOTdDMjlBQ0I3N0Q0RDY4ODg0 QjNBN0E2MDgwHhcNMjYwOTI1MDcyNTA2WhcNMjYxMDAyMDcyNTA2WjAYMRYwFAYD VQQDEw02YWI2MjFkMy0zMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDwqopwCgILOmE5bpDGlWxl9Dcg69n/ve2unWatj/dNyNP+Qz8QOLpO5t49f 0VHZHlU3rA4B2mdQnlVbBNkvYNsnxzEer8uh6DVRz5USjI9e4aridESAQtHa+5Xu GVjx7kz+QdD+CaNr9kFxVXALWVNFPBSEbVHGcPGAKXD2ESRE8ZS1JQo9hIBWoYAY hNJhvZRQUKMz0Rb593Q0CdGqz1JQBfJRfyqeTDmKUZYBuxguRakjmYbNLngNd/E2 2LPnXVlRTphs18NTByi8ijWzedVpT2CMjVn+kKpfeRx5eEhm0l2frRaAJOOAMle4 jGd2xg/2X1fCSfvd8SW9UFrU5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjv0FNN qzsNw3lxWOsF7q7RofIfMB8GA1UdIwQYMBaAFIj7HSHLiDyXwprLd9TWiISzp6YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkEwNC8yNUM1Mjc3RUM5 QUUxMUYwOThFOTI3NDVDNEY5QUUwMi9pUHNkSWN1SVBKZkNtc3QzMU5hSWhMT25w Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lQc2RJY3VJUEpmQ21zdDMxTmFJaExPbnBnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkEwNC8yNUM1Mjc3RUM5QUUxMUYwOThFOTI3NDVDNEY5QUUwMi9pUHNkSWN1SVBK ZkNtc3QzMU5hSWhMT25wZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZjxPPPkTmwWD1JmnEp0VDTerb7OXS3krpiLff9L7TdIqpIsLMkDsC/Jd5xgp JTGMR37KwQroA/dP7C93ML4rxKmEA48tZ3eQQLCnzwg91a7KVmJBIZ4j1AEdUEc8 8kPrt2UGoed5b1e7CwlRY8+2KmCPUL7lcBTGP69EI9dlQAQ84/x6vrh5c8iXM7aL /Cj0dTZGzELq9XlKGZ3uPXnGuCzc1entLLAPX6keqpEi9cbXJRP52rroBbYOsXOy ZW4PxBc6esBuqECTRL3T44aZOguYwEEsksTO9oFwfoeHscHLwHGqLWhDFswRRWEZ ykbaofywDELNznc+ywYLQvZRcw== -----END CERTIFICATE-----Generated at Sat Sep 26 04:12:47 2026 by rpki-client