$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json) Hash identifier: RJH6nHfMbV3ZQLi90q2/3BzLk5P4jP8qxH9J+1dQ5A4= Subject key identifier: C5:C4:E8:D3:96:63:78:47:55:7B:5C:14:5F:CA:D0:F2:16:E8:9F:E9 Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft Manifest number: 0150 Signing time: Wed 23 Sep 2026 05:06:41 +0000 Manifest this update: Wed 23 Sep 2026 05:06:41 +0000 Manifest next update: Wed 30 Sep 2026 05:06:41 +0000 Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: RFPjYzmT3M4ijmV6UEn8qCb+FuyTJUzXS3ZF93fmrPY=) 2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: Sep 23 05:06:41 2026 GMT Not After : Sep 30 05:06:41 2026 GMT Subject: CN=6ab35e61-75f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:24:3a:f9:1f:11:45:f4:cb:3c:f2:f5:0f: 93:94:7e:2c:fd:8a:cf:e2:ec:91:2e:b5:31:41:58: b6:23:45:80:8b:91:45:6a:73:06:b1:e8:24:de:83: f3:13:c1:88:59:a0:06:9e:ac:88:8b:83:50:7a:bb: 7c:3f:5c:71:45:07:97:44:54:15:8f:0f:fe:57:eb: 96:17:eb:1d:01:33:c6:b8:ef:8f:a1:0f:07:03:86: 00:c3:a2:9a:39:32:0a:70:d3:b7:00:fc:cb:fd:65: 1c:8f:fd:06:b8:de:1a:0e:75:72:9b:ff:ed:dc:c4: 8e:3c:cd:a1:a3:9a:ac:66:cb:3d:90:21:83:3b:e5: a8:0d:90:32:83:c2:73:13:e4:cb:59:64:eb:cd:d4: 55:13:89:8a:c4:89:fa:13:c1:c0:58:43:77:47:0e: 97:c7:ab:ef:ba:9a:f4:0f:99:e6:19:8b:69:7f:84: 09:cd:69:24:31:b5:3b:b3:04:f5:29:16:80:1a:2d: 7a:a2:6c:2c:a7:2a:d9:7c:86:1e:58:59:f1:d7:b7: 33:d2:12:71:a4:93:1d:f8:f4:b4:00:44:67:68:5f: 39:6c:60:87:ee:ce:08:0c:2d:28:5b:8f:c5:6d:76: cc:46:e0:77:7c:9b:b0:8f:c6:a2:a6:61:89:ef:8d: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C4:E8:D3:96:63:78:47:55:7B:5C:14:5F:CA:D0:F2:16:E8:9F:E9 X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e4:e1:cc:1c:06:a2:e0:d8:aa:ca:e3:6e:24:45:58:ec:ef: 5c:1c:b9:af:ea:69:bc:18:87:7a:66:91:c6:3b:1a:c3:1c:65: 9c:cf:69:2f:69:92:1b:79:92:d8:e2:1b:d6:a9:71:b1:3a:9a: cc:ac:32:c5:b4:a0:9f:d1:e9:81:fd:73:52:2a:3f:69:85:41: db:f6:81:51:ea:f2:21:9d:52:7b:7f:fc:1a:46:23:88:b1:47: 97:35:05:13:a3:66:7e:95:28:ad:f2:a9:89:93:8d:ed:40:91: 79:8d:aa:a3:d8:bb:62:55:b7:b1:83:f8:34:99:35:55:1c:ad: 46:21:f3:b3:1d:74:a5:00:06:3d:e1:f5:1a:00:f2:52:46:fb: e6:11:e9:01:bd:05:3e:67:e2:c9:82:fd:c2:fc:1f:c2:5f:ce: 50:23:33:50:03:0f:6f:54:a3:83:e4:ca:6a:7b:fe:78:82:bb: 33:fb:c8:67:5a:05:a6:c2:a4:7a:d6:1c:c5:06:96:c5:47:93: 9c:97:3d:a8:0c:f9:98:74:28:07:cf:46:c5:43:51:8a:38:3b: b9:b0:fa:eb:b4:6d:f4:f6:f4:87:b3:8b:bd:51:b7:20:87:81: 8d:4f:99:6c:ff:99:23:6f:a8:03:0b:ad:92:03:9f:19:74:aa: 6d:8a:aa:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD QTJDOEQxRDkwHhcNMjYwOTIzMDUwNjQxWhcNMjYwOTMwMDUwNjQxWjAYMRYwFAYD VQQDEw02YWIzNWU2MS03NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F4kOvkfEUX0yzzy9Q+TlH4s/YrP4uyRLrUxQVi2I0WAi5FFanMGsegk3oPz E8GIWaAGnqyIi4NQert8P1xxRQeXRFQVjw/+V+uWF+sdATPGuO+PoQ8HA4YAw6Ka OTIKcNO3APzL/WUcj/0GuN4aDnVym//t3MSOPM2ho5qsZss9kCGDO+WoDZAyg8Jz E+TLWWTrzdRVE4mKxIn6E8HAWEN3Rw6Xx6vvupr0D5nmGYtpf4QJzWkkMbU7swT1 KRaAGi16omwspyrZfIYeWFnx17cz0hJxpJMd+PS0AERnaF85bGCH7s4IDC0oW4/F bXbMRuB3fJuwj8aipmGJ740u0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXE6NOW Y3hHVXtcFF/K0PIW6J/pMB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5 OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUts X0VrYmZMNi1hT19LTEkwZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATOThzBwGouDYqsrjbiRFWOzvXBy5r+ppvBiHemaRxjsawxxlnM9pL2mSG3mS 2OIb1qlxsTqazKwyxbSgn9Hpgf1zUio/aYVB2/aBUeryIZ1Se3/8GkYjiLFHlzUF E6NmfpUorfKpiZON7UCReY2qo9i7YlW3sYP4NJk1VRytRiHzsx10pQAGPeH1GgDy Ukb75hHpAb0FPmfiyYL9wvwfwl/OUCMzUAMPb1Sjg+TKanv+eIK7M/vIZ1oFpsKk etYcxQaWxUeTnJc9qAz5mHQoB89GxUNRijg7ubD667Rt9Pb0h7OLvVG3IIeBjU+Z bP+ZI2+oAwutkgOfGXSqbYqqKw== -----END CERTIFICATE-----Generated at Thu Sep 24 23:53:10 2026 by rpki-client