$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: kk19t/+Gbmn4jvxADkb8qNWHtITyQZfzGnmqFabg7mY= Subject key identifier: 87:28:77:F7:36:D1:06:5B:2D:C8:44:27:DC:1C:9C:FC:E2:E8:B4:CE Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: 01E3 Signing time: Wed 23 Sep 2026 03:21:43 +0000 Manifest this update: Wed 23 Sep 2026 03:21:42 +0000 Manifest next update: Wed 30 Sep 2026 03:21:42 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: u6uBKECdei8ORz0kWZv0bOZAPsVOjLwqjKm4qqtL8vs=) 2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: m02khT/jg2hbvP72RR7nK1qweNEQkqkW4mCPiNuzwrw=) 3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: KXSh6prRPhPWK5BnqXhTsFwQImo2BvM4I7HOo4Rrn/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Sep 23 03:21:42 2026 GMT Not After : Sep 30 03:21:42 2026 GMT Subject: CN=6ab345c7-57f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:75:e2:1d:9f:32:02:35:2f:ca:5a:97:fe: 4c:9e:78:31:98:5f:de:30:c0:ec:50:f5:7a:8f:0a: 53:46:fc:25:08:11:4c:36:8b:94:93:a5:7d:bf:2c: fa:e0:5e:47:a6:7e:97:8e:69:4a:c8:f7:29:9a:95: 61:ea:fa:0d:2e:70:a4:50:c8:d1:be:60:46:38:96: 96:38:0a:30:e7:cc:6c:64:69:49:7e:92:69:8c:04: 6c:7f:f0:56:07:e2:91:33:17:4b:2f:e0:7a:1b:4f: 65:b4:3b:76:29:de:bf:f5:3e:e8:44:c6:ed:5a:ab: 2b:78:0d:90:f5:44:d9:61:29:84:64:13:6c:6e:22: 70:a6:ca:e2:4d:ed:59:d2:2c:c1:2a:b7:41:7c:4a: 7a:91:01:96:1b:cb:43:75:2b:39:d9:8a:f0:e1:52: 5c:cb:62:56:c9:03:20:db:bf:13:5a:6a:62:71:c6: 8e:da:99:a6:a1:34:3f:81:b7:10:46:a9:92:7d:ba: 25:17:21:98:9f:08:a1:7b:4e:9e:b9:19:11:67:bf: 49:b6:09:4f:a7:9a:62:5a:5f:df:13:45:f2:22:9e: 60:14:bb:4a:4e:f9:58:05:e1:8b:33:ee:2f:ec:7b: de:dc:d0:cb:68:65:dc:8e:72:30:9e:fc:da:b0:df: c5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:77:F7:36:D1:06:5B:2D:C8:44:27:DC:1C:9C:FC:E2:E8:B4:CE X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:09:f4:a1:4d:da:b9:c1:28:2b:36:f7:20:40:1c:d3:96:2c: f5:bd:d1:04:fa:d4:65:64:3f:70:58:f6:65:2c:7c:d3:22:07: a8:31:a3:47:13:76:5e:b1:e3:5f:06:43:bd:83:14:1f:4a:d0: af:75:df:2f:4f:45:a6:76:2d:92:33:2c:5c:f8:46:57:86:c2: 0c:07:35:30:dc:4d:7f:0b:32:29:28:b3:8a:4c:08:f2:9c:2f: 0d:b2:8a:27:a5:8b:3e:6b:b2:0a:b3:e1:42:07:42:fb:6a:de: f8:44:1b:9a:bf:27:b9:8c:93:79:ba:b7:b1:e3:9a:e5:08:71: 8d:0c:44:13:67:f8:d0:1a:28:c6:a6:a4:ac:2c:db:b2:b3:89: ef:de:5c:cb:6f:c7:6f:4f:2a:16:99:15:2a:14:2e:1d:79:77: 2f:b7:17:5d:fd:e7:64:6f:82:59:eb:22:64:a0:41:3e:52:ed: d6:0f:02:0e:38:0e:69:80:cb:df:3f:80:15:fb:65:21:63:43: 38:32:60:9e:ea:76:6f:65:9a:d7:76:ab:4c:36:68:fe:55:9c: 50:93:60:ad:00:da:a1:f4:e5:9c:23:96:5f:0a:0e:a9:e0:d6: d8:7f:76:c7:3a:f1:f7:84:25:e3:15:13:20:5b:95:96:35:54: d2:6d:c1:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjYwOTIzMDMyMTQyWhcNMjYwOTMwMDMyMTQyWjAYMRYwFAYD VQQDEw02YWIzNDVjNy01N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5V14h2fMgI1L8pal/5MnngxmF/eMMDsUPV6jwpTRvwlCBFMNouUk6V9vyz6 4F5Hpn6XjmlKyPcpmpVh6voNLnCkUMjRvmBGOJaWOAow58xsZGlJfpJpjARsf/BW B+KRMxdLL+B6G09ltDt2Kd6/9T7oRMbtWqsreA2Q9UTZYSmEZBNsbiJwpsriTe1Z 0izBKrdBfEp6kQGWG8tDdSs52Yrw4VJcy2JWyQMg278TWmpiccaO2pmmoTQ/gbcQ RqmSfbolFyGYnwihe06euRkRZ79JtglPp5piWl/fE0XyIp5gFLtKTvlYBeGLM+4v 7Hve3NDLaGXcjnIwnvzasN/FQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcod/c2 0QZbLchEJ9wcnPzi6LTOMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmgn0oU3aucEoKzb3IEAc05Ys9b3RBPrUZWQ/cFj2ZSx80yIHqDGjRxN2XrHj XwZDvYMUH0rQr3XfL09FpnYtkjMsXPhGV4bCDAc1MNxNfwsyKSizikwI8pwvDbKK J6WLPmuyCrPhQgdC+2re+EQbmr8nuYyTebq3seOa5QhxjQxEE2f40BooxqakrCzb srOJ795cy2/Hb08qFpkVKhQuHXl3L7cXXf3nZG+CWesiZKBBPlLt1g8CDjgOaYDL 3z+AFftlIWNDODJgnup2b2Wa13arTDZo/lWcUJNgrQDaofTlnCOWXwoOqeDW2H92 xzrx94Ql4xUTIFuVljVU0m3Bjw== -----END CERTIFICATE-----Generated at Thu Sep 24 17:46:47 2026 by rpki-client