$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: I9xC5ESDvrnHMFicquv8AJvF+eDyjd4jHq3HBW3LgZ0= Subject key identifier: AA:8E:8E:A8:A9:D6:65:70:16:45:AF:DF:1B:66:4E:E1:4E:E6:CA:6C Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: CD Signing time: Wed 23 Sep 2026 06:34:00 +0000 Manifest this update: Wed 23 Sep 2026 06:34:00 +0000 Manifest next update: Wed 30 Sep 2026 06:34:00 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: Eqb5Q6X2jlEuE1epukF59q6z2eC2FZ1zvpiu810/hHo=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Sep 23 06:34:00 2026 GMT Not After : Sep 30 06:34:00 2026 GMT Subject: CN=6ab372d8-be21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:5f:60:9a:1a:ff:29:a1:fd:8a:6f:43:24: f3:4d:6c:4e:16:fe:e1:ec:c8:7d:fe:24:01:36:af: e3:4c:6f:6b:55:ae:d0:68:d3:fb:c2:97:54:f5:5b: ca:ab:71:15:ee:98:60:1c:c4:e9:98:8f:c6:6c:ed: f3:ef:e5:e2:1b:aa:bb:1a:e2:83:7a:5b:b6:28:da: b4:d7:c7:ca:93:89:b4:17:64:02:46:8c:26:9b:98: c5:b3:40:fe:3f:67:3f:d9:ff:0e:ee:c1:aa:cf:f9: ce:1f:a5:f1:75:03:86:53:04:1a:23:5c:51:e3:17: a0:db:a4:fe:07:21:5b:93:55:46:94:c5:2a:4c:03: 25:e9:16:60:d9:d2:1b:69:bd:0d:77:ad:57:f6:dd: 8c:16:5b:33:5c:ff:16:5c:e0:9d:f3:f1:eb:c0:8f: f0:20:35:18:00:4d:13:05:39:06:41:4a:75:e7:d8: dc:f6:18:35:bd:66:e6:91:ea:57:ed:52:e9:31:c6: a6:c2:ca:58:d3:39:8e:09:79:37:db:71:77:38:04: 45:42:ff:82:28:52:70:bb:19:50:07:8b:f5:c9:c4: 33:36:7c:51:77:5e:77:83:a0:5b:9f:1a:ff:53:d2: 19:9e:ad:fb:73:6e:ce:1a:77:4a:73:74:b8:21:4c: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8E:8E:A8:A9:D6:65:70:16:45:AF:DF:1B:66:4E:E1:4E:E6:CA:6C X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2b:2d:da:58:14:ac:3f:1a:01:57:bd:fa:52:86:be:4b:d7: b1:0e:5a:69:c3:41:71:dc:0e:c1:96:4e:99:41:f6:a3:3f:53: 91:f8:bc:6c:aa:61:79:fa:85:23:e8:06:aa:dc:86:fa:d1:81: a6:dd:6e:6a:d5:85:0d:ba:d5:83:4f:9c:0c:9b:39:58:c3:28: e5:33:86:f0:6c:87:4d:c6:32:a1:60:10:c4:0d:fa:c3:1b:08: e6:c0:61:e4:0e:9a:a9:bc:22:26:3c:15:75:f5:87:84:87:97: bb:5e:5c:1b:1b:f2:aa:10:e6:e5:c1:53:aa:63:36:b6:c5:d4: 0a:72:89:32:34:c9:87:76:d3:13:5c:76:09:3e:f8:e6:d4:8e: eb:18:f0:5d:f8:9f:15:a4:a0:56:91:dd:70:3f:ef:f1:de:a8: 3b:7c:ee:a2:ba:27:a6:32:63:f0:bd:59:3d:29:d3:48:1e:9d: b4:5e:25:28:7c:f0:c7:75:24:04:80:dd:0f:db:b2:38:99:09: 2a:e0:7b:db:34:ad:aa:da:fc:59:d3:37:db:ba:38:f8:91:f0: 8d:cd:fc:7a:d0:31:7d:fe:dd:17:d6:df:35:19:77:a7:ea:15: 2b:94:ef:e6:33:99:23:a1:6f:21:d7:99:eb:9d:f4:55:9a:ad: 5a:a5:08:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxODUxMTAvBgNVBAUTKDg5Nzg0RDZEOTM4QjA1Q0MzQjdCNjY2RTVFN0FFRTky MjNERTRENzAwHhcNMjYwOTIzMDYzNDAwWhcNMjYwOTMwMDYzNDAwWjAYMRYwFAYD VQQDEw02YWIzNzJkOC1iZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjxfYJoa/ymh/YpvQyTzTWxOFv7h7Mh9/iQBNq/jTG9rVa7QaNP7wpdU9VvK q3EV7phgHMTpmI/GbO3z7+XiG6q7GuKDelu2KNq018fKk4m0F2QCRowmm5jFs0D+ P2c/2f8O7sGqz/nOH6XxdQOGUwQaI1xR4xeg26T+ByFbk1VGlMUqTAMl6RZg2dIb ab0Nd61X9t2MFlszXP8WXOCd8/HrwI/wIDUYAE0TBTkGQUp159jc9hg1vWbmkepX 7VLpMcamwspY0zmOCXk323F3OARFQv+CKFJwuxlQB4v1ycQzNnxRd153g6Bbnxr/ U9IZnq37c27OGndKc3S4IUzriwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqOjqip 1mVwFkWv3xtmTuFO5spsMB8GA1UdIwQYMBaAFIl4TW2TiwXMO3tmbl567pIj3k1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODE4NS84NTAxMTUzMjg0 QUMxMUYwOEQzQUI5NzlDNEY5QUUwMi9pWGhOYlpPTEJjdzdlMlp1WG5ydWtpUGVU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODE4NS84NTAxMTUzMjg0QUMxMUYwOEQzQUI5NzlDNEY5QUUwMi9pWGhOYlpPTEJj dzdlMlp1WG5ydWtpUGVUWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHist2lgUrD8aAVe9+lKGvkvXsQ5aacNBcdwOwZZOmUH2oz9Tkfi8bKphefqF I+gGqtyG+tGBpt1uatWFDbrVg0+cDJs5WMMo5TOG8GyHTcYyoWAQxA36wxsI5sBh 5A6aqbwiJjwVdfWHhIeXu15cGxvyqhDm5cFTqmM2tsXUCnKJMjTJh3bTE1x2CT74 5tSO6xjwXfifFaSgVpHdcD/v8d6oO3zuoronpjJj8L1ZPSnTSB6dtF4lKHzwx3Uk BIDdD9uyOJkJKuB72zStqtr8WdM327o4+JHwjc38etAxff7dF9bfNRl3p+oVK5Tv 5jOZI6FvIdeZ6530VZqtWqUIFg== -----END CERTIFICATE-----Generated at Fri Sep 25 03:05:29 2026 by rpki-client