$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: yIgsz5+GdNfX2IwYhzVApVRo1seeU9YfBkZTsY4QM8U= Subject key identifier: 6B:42:0F:D8:89:C9:2F:58:5F:C3:47:2B:B1:99:0C:BC:13:22:91:C6 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 023E Signing time: Wed 23 Sep 2026 02:20:37 +0000 Manifest this update: Wed 23 Sep 2026 02:20:37 +0000 Manifest next update: Wed 30 Sep 2026 02:20:37 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: Pk9sR1KKK5QyE/68ETY2YjXBGyMAdm1xYTTXJ7xH2/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Sep 23 02:20:37 2026 GMT Not After : Sep 30 02:20:37 2026 GMT Subject: CN=6ab33775-5f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:56:ab:e9:87:33:b4:32:4a:f8:00:e9:3e: 82:20:f0:24:30:79:eb:75:de:70:6c:31:00:48:e1: 28:57:11:91:37:58:c9:c8:c7:dc:f7:79:81:08:19: ab:72:37:71:fc:cf:bc:b2:8a:a4:b6:2b:5c:3d:10: d3:0b:40:f8:0f:d3:db:9a:7f:22:0f:4c:d6:06:80: 48:b6:91:60:9c:70:ec:64:30:58:5f:1a:f8:c8:12: de:b3:84:9b:51:36:7f:fa:be:08:27:5c:f2:6e:3d: 03:66:64:e1:84:41:5e:5b:f1:1c:12:35:75:22:1d: 98:f3:e1:40:a7:63:a5:20:46:20:61:3a:74:48:c0: ef:6a:0f:85:fd:55:13:00:02:7f:e4:f9:03:8c:67: 94:19:6f:e7:e8:70:f6:6f:73:a0:c4:d5:86:df:cc: c3:85:65:98:cc:a0:e6:31:1c:b2:5c:9c:cb:57:f9: 24:e5:ab:d2:d5:a9:5f:09:67:f7:fc:f7:af:cf:64: d8:2c:e3:bb:a9:77:56:bf:7f:69:44:1f:c2:cb:6c: 1b:3d:ce:75:9d:f3:ef:64:27:e1:f9:1b:a5:89:04: 9c:ee:78:47:db:44:84:7a:c6:cd:51:92:d7:46:bd: fa:a5:66:d9:47:c9:2e:50:14:58:6c:fe:7e:0f:85: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:42:0F:D8:89:C9:2F:58:5F:C3:47:2B:B1:99:0C:BC:13:22:91:C6 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:1f:95:1c:60:03:e0:81:d5:50:1e:b6:75:2b:d0:c4:46:86: a5:88:b3:9e:f6:8f:7e:7b:85:ae:4f:51:00:3d:cd:cc:6c:ec: 0e:d2:e2:43:d6:32:c7:32:26:58:76:86:26:42:d7:31:93:0c: b8:68:12:a5:98:68:6b:ee:a6:88:a4:0b:7c:48:55:95:37:ec: e3:dc:b2:a2:e6:8f:f3:85:98:af:7e:80:00:7f:6e:cc:38:aa: ae:1c:e5:7c:d6:2c:86:57:87:ca:d5:53:98:79:43:81:48:6f: c5:e3:4e:71:38:bd:3e:9b:86:1e:ac:b3:1c:ef:71:dd:77:2a: f7:45:6c:a4:e4:d7:8d:de:db:6e:76:65:fa:55:1f:eb:60:9c: a4:b7:e5:80:06:8d:c3:ba:a7:a3:80:a9:b0:da:96:2b:a3:99: 25:0b:74:9a:13:ff:a6:eb:b6:fa:00:48:59:8c:d1:ba:51:c2: 1b:02:19:29:72:3f:67:61:a6:ca:0d:2b:74:b8:2d:41:72:2a: c1:d6:5e:7c:1d:6a:d0:4e:76:a9:8e:b6:30:2e:9d:8d:5a:d9: f5:fd:38:2b:46:6a:17:52:4b:4e:bd:e8:a1:49:e7:34:fe:e7: 0e:90:7a:6f:83:b2:54:b9:eb:79:6d:82:dd:12:cb:f2:cf:da: a4:79:c3:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjYwOTIzMDIyMDM3WhcNMjYwOTMwMDIyMDM3WjAYMRYwFAYD VQQDEw02YWIzMzc3NS01ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQZWq+mHM7QySvgA6T6CIPAkMHnrdd5wbDEASOEoVxGRN1jJyMfc93mBCBmr cjdx/M+8soqktitcPRDTC0D4D9Pbmn8iD0zWBoBItpFgnHDsZDBYXxr4yBLes4Sb UTZ/+r4IJ1zybj0DZmThhEFeW/EcEjV1Ih2Y8+FAp2OlIEYgYTp0SMDvag+F/VUT AAJ/5PkDjGeUGW/n6HD2b3OgxNWG38zDhWWYzKDmMRyyXJzLV/kk5avS1alfCWf3 /Pevz2TYLOO7qXdWv39pRB/Cy2wbPc51nfPvZCfh+RuliQSc7nhH20SEesbNUZLX Rr36pWbZR8kuUBRYbP5+D4VQ8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtCD9iJ yS9YX8NHK7GZDLwTIpHGMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0B+VHGAD4IHVUB62dSvQxEaGpYiznvaPfnuFrk9RAD3NzGzsDtLiQ9YyxzIm WHaGJkLXMZMMuGgSpZhoa+6miKQLfEhVlTfs49yyouaP84WYr36AAH9uzDiqrhzl fNYshleHytVTmHlDgUhvxeNOcTi9PpuGHqyzHO9x3Xcq90VspOTXjd7bbnZl+lUf 62CcpLflgAaNw7qno4CpsNqWK6OZJQt0mhP/puu2+gBIWYzRulHCGwIZKXI/Z2Gm yg0rdLgtQXIqwdZefB1q0E52qY62MC6djVrZ9f04K0ZqF1JLTr3ooUnnNP7nDpB6 b4OyVLnreW2C3RLL8s/apHnDNQ== -----END CERTIFICATE-----Generated at Thu Sep 24 08:32:00 2026 by rpki-client