$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json) Hash identifier: Ag/z+HI7HVUc6j7eSsWzLfbYra0pXUnBwD/ebYvajLs= Subject key identifier: 88:F9:6F:6E:C6:72:34:51:83:D2:88:20:7F:A1:D9:4F:FF:DC:BF:F0 Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft Manifest number: 015A Signing time: Wed 23 Sep 2026 04:59:37 +0000 Manifest this update: Wed 23 Sep 2026 04:59:37 +0000 Manifest next update: Wed 30 Sep 2026 04:59:37 +0000 Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: vgwQ4rJ6xAnB08peueqmsj4KlMxlru6kHnJ3bgO2WXE=) 2: BB5954CE241111F094390A32C4F9AE02.roa (hash: ef4lv30v406PmcKm4a1LzWHrixGqc5q9ekgP0Wh8CuU=) 3: lM-TprDofa3mdD2nduyXi_4xBlU.asa (hash: nBHzp1rY3qS8haLL2LslsF//VUiGFxVcvC4ou7bnwZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Validity Not Before: Sep 23 04:59:37 2026 GMT Not After : Sep 30 04:59:37 2026 GMT Subject: CN=6ab35cb9-186b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:3b:f7:b6:fe:17:8e:28:62:07:53:14:ac: a5:95:2b:70:7a:60:3c:92:46:30:54:60:2a:6a:e2: 71:82:66:06:db:9e:97:e0:b2:88:6e:d7:fb:a8:55: b2:b2:e1:49:74:0a:c3:ed:3b:c4:01:8c:90:08:b3: 89:bf:32:a9:35:c1:24:a1:3c:54:4d:7b:f4:20:1a: 44:37:c0:2b:9c:4b:ee:4c:c6:94:8c:47:99:8e:16: 36:3a:4d:48:c3:30:28:fa:6f:d5:4d:75:94:39:9f: 0b:9d:6c:5d:73:4c:ef:fc:df:00:ad:d9:e9:31:74: 58:2a:ad:fc:59:d5:62:45:c4:a9:ca:6a:16:f6:51: f3:b0:cf:f0:80:dd:a6:14:3d:50:86:5d:05:68:95: 7d:62:10:54:6e:99:0d:e8:13:ad:2f:8a:e2:c8:cc: 26:36:ff:e6:a6:e0:ef:a8:e1:7b:97:3c:89:01:e8: ad:64:2f:8c:2a:74:84:93:be:bc:e3:b9:ac:d3:de: 7e:ad:0e:9b:d6:ca:5e:ac:dc:4d:38:3d:e9:84:14: 55:cc:e6:ea:a6:27:86:f4:68:8a:aa:69:24:2d:64: a1:89:d4:a6:39:f3:fe:9e:3b:11:4d:31:aa:df:5f: 3f:fb:3d:16:b1:1a:0c:f8:49:11:eb:80:22:fb:14: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F9:6F:6E:C6:72:34:51:83:D2:88:20:7F:A1:D9:4F:FF:DC:BF:F0 X509v3 Authority Key Identifier: keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b7:b1:63:4c:89:6d:e4:b1:49:03:59:59:78:ae:07:a1:3a: 7d:80:a2:e2:c9:fe:66:d5:d0:4c:af:6b:5d:5d:47:d0:bc:2d: 26:93:2b:09:46:8b:12:5a:39:0c:8e:6c:bd:8d:48:3a:90:45: 18:67:ac:dd:2d:49:6f:52:a9:95:e2:8e:c0:e0:76:71:21:84: 46:30:5f:7f:f0:a4:7e:d7:5b:13:dc:31:2f:e7:af:5b:80:96: bd:78:a5:fa:ac:22:84:55:a3:15:6d:9e:d9:c8:3a:88:cb:59: 11:02:df:f2:24:8a:00:d9:ed:95:29:89:d6:63:67:53:f6:a3: 45:08:c6:74:21:37:0b:b7:60:f1:4d:b7:d1:68:6a:1d:6e:59: c0:f2:81:c8:5d:c3:ee:2f:ff:e0:44:ab:43:01:17:a2:dc:40: 7f:b4:af:75:7c:54:dc:76:56:00:f2:2b:73:50:5b:b3:6f:ae: 1a:de:8d:df:95:18:1a:73:19:c0:29:9d:cf:b8:57:ee:6c:2a: 54:8c:bf:45:b0:16:f2:b7:b1:3f:04:e0:72:71:e4:25:1c:93: eb:91:a6:9e:48:4d:9a:32:3a:47:88:61:d7:79:a4:00:20:be: a9:d8:7d:77:1e:0f:d3:4a:d6:67:ae:1c:81:73:5a:d8:44:0f: b9:c2:58:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKEQ2MjcxNkY3NjFGMTg4RDU2RkExMTdGOURDOTRCRTQx NDEwNEE2ODEwHhcNMjYwOTIzMDQ1OTM3WhcNMjYwOTMwMDQ1OTM3WjAYMRYwFAYD VQQDEw02YWIzNWNiOS0xODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUw797b+F44oYgdTFKyllStwemA8kkYwVGAqauJxgmYG256X4LKIbtf7qFWy suFJdArD7TvEAYyQCLOJvzKpNcEkoTxUTXv0IBpEN8ArnEvuTMaUjEeZjhY2Ok1I wzAo+m/VTXWUOZ8LnWxdc0zv/N8ArdnpMXRYKq38WdViRcSpymoW9lHzsM/wgN2m FD1Qhl0FaJV9YhBUbpkN6BOtL4riyMwmNv/mpuDvqOF7lzyJAeitZC+MKnSEk768 47ms095+rQ6b1sperNxNOD3phBRVzObqpieG9GiKqmkkLWShidSmOfP+njsRTTGq 318/+z0WsRoM+EkR64Ai+xTyNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIj5b27G cjRRg9KIIH+h2U//3L/wMB8GA1UdIwQYMBaAFNYnFvdh8YjVb6EX+dyUvkFBBKaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My8wNUZGQzAwRUFD ODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlOVnZvUmY1M0pTLVFVRUVw b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My8wNUZGQzAwRUFDODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlO VnZvUmY1M0pTLVFVRUVwb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFLexY0yJbeSxSQNZWXiuB6E6fYCi4sn+ZtXQTK9rXV1H0LwtJpMrCUaLElo5 DI5svY1IOpBFGGes3S1Jb1KpleKOwOB2cSGERjBff/CkftdbE9wxL+evW4CWvXil +qwihFWjFW2e2cg6iMtZEQLf8iSKANntlSmJ1mNnU/ajRQjGdCE3C7dg8U230Whq HW5ZwPKByF3D7i//4ESrQwEXotxAf7SvdXxU3HZWAPIrc1Bbs2+uGt6N35UYGnMZ wCmdz7hX7mwqVIy/RbAW8rexPwTgcnHkJRyT65GmnkhNmjI6R4hh13mkACC+qdh9 dx4P00rWZ64cgXNa2EQPucJY8A== -----END CERTIFICATE-----Generated at Thu Sep 24 23:00:33 2026 by rpki-client