$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json) Hash identifier: nbaAg2epYWKGMoeUA99zDBPfJsBvpy+l9WSvfu27Xj8= Subject key identifier: A2:07:AE:8D:8A:E7:E3:DB:40:FB:FA:05:50:C7:69:7C:D5:FE:90:AE Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft Manifest number: 05E6 Signing time: Tue 22 Sep 2026 22:41:25 +0000 Manifest this update: Tue 22 Sep 2026 22:41:25 +0000 Manifest next update: Tue 29 Sep 2026 22:41:25 +0000 Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: v0e9Hdy9ixsih2HsCJ7neCORgyQlgWa/d8Ehb6qYL4g=) 2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Validity Not Before: Sep 22 22:41:25 2026 GMT Not After : Sep 29 22:41:25 2026 GMT Subject: CN=6ab30415-8d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:aa:17:a3:a2:8f:03:2a:e8:44:44:f8:91: 38:b4:42:b6:8c:12:44:ec:34:87:7a:fe:38:7f:a6: 65:ce:ee:e8:0c:8f:c1:70:5a:1c:c3:d9:be:48:c2: ce:03:9b:b2:95:91:67:14:98:c2:48:2c:78:9e:ad: 0d:2d:df:14:f3:0c:e3:22:31:b6:9e:9c:22:14:43: 0f:42:a0:33:4e:b4:7c:13:da:1a:93:3c:a5:9e:15: a7:ec:be:b9:42:92:6a:07:ee:53:1a:11:b5:9b:e7: 3c:03:b6:b4:33:4a:29:07:4d:a2:d1:6a:9e:3c:ac: f1:88:28:49:67:40:85:7c:a2:6e:26:1d:c7:f7:3b: 79:1c:5e:c0:36:be:64:da:97:c8:c7:64:85:40:be: 0a:ba:d8:4e:49:a3:8b:ea:23:99:34:b2:2c:a4:29: 6b:eb:83:24:cc:c7:39:ab:03:00:2f:41:a2:21:f8: 78:69:53:28:02:58:a7:37:03:70:2e:e4:f8:9a:b0: 20:9d:5b:64:15:24:47:73:31:7b:0b:08:67:52:ea: 43:8a:c3:fe:b1:07:7e:55:bb:ec:81:33:b8:96:ec: 78:3a:0d:ba:08:39:cd:d1:51:c6:b4:6b:70:f7:c5: 82:4b:5d:24:f6:d0:23:a8:77:16:f9:64:9c:f2:90: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:07:AE:8D:8A:E7:E3:DB:40:FB:FA:05:50:C7:69:7C:D5:FE:90:AE X509v3 Authority Key Identifier: keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f8:d0:ff:1a:fa:06:e0:93:4c:80:1a:9f:03:e4:86:f2:15: e4:40:ac:ef:03:64:4c:9b:74:88:36:40:89:53:38:bb:c8:b3: f3:2c:33:f4:45:99:d5:89:be:32:85:17:49:76:df:72:59:5f: 12:8e:8e:23:a8:79:3a:93:3c:1a:fa:fe:ed:6e:80:9d:7e:f8: f9:b7:f3:71:36:46:3c:65:28:1f:ed:9a:2c:b4:65:06:fa:60: ec:6c:a1:47:39:ca:b7:c1:84:6c:68:32:b6:75:6c:8d:91:8d: df:dd:5b:b4:95:04:f9:e5:17:03:ff:81:58:97:b6:60:52:5b: 63:9e:c2:c2:07:79:a8:76:21:8e:92:83:8a:a3:bc:f6:5e:23: 96:ca:98:e0:65:46:48:01:6a:93:94:91:b3:6e:83:06:25:71: 6a:59:ff:b7:cf:f2:4a:d5:a2:6d:55:85:f3:db:4f:e0:d0:18: 0c:c1:43:81:64:d7:21:0a:99:64:02:d2:a5:43:fc:94:d7:59: cc:23:40:29:8b:cf:09:50:65:08:ed:ae:9e:97:fb:a7:66:9d: 85:dc:9b:68:88:20:38:25:5f:94:7a:9e:64:a2:e9:2a:5b:65: 38:ef:11:9b:ad:be:1c:60:07:8b:c4:6b:04:09:e9:8c:21:d3: c1:e1:62:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1 NURCMzFDRTgwHhcNMjYwOTIyMjI0MTI1WhcNMjYwOTI5MjI0MTI1WjAYMRYwFAYD VQQDEw02YWIzMDQxNS04ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumSqF6OijwMq6ERE+JE4tEK2jBJE7DSHev44f6Zlzu7oDI/BcFocw9m+SMLO A5uylZFnFJjCSCx4nq0NLd8U8wzjIjG2npwiFEMPQqAzTrR8E9oakzylnhWn7L65 QpJqB+5TGhG1m+c8A7a0M0opB02i0WqePKzxiChJZ0CFfKJuJh3H9zt5HF7ANr5k 2pfIx2SFQL4KuthOSaOL6iOZNLIspClr64MkzMc5qwMAL0GiIfh4aVMoAlinNwNw LuT4mrAgnVtkFSRHczF7CwhnUupDisP+sQd+VbvsgTO4lux4Og26CDnN0VHGtGtw 98WCS10k9tAjqHcW+WSc8pAjEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIHro2K 5+PbQPv6BVDHaXzV/pCuMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NERGQS84NDU5ODRDRTFBODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFN VzVjTHZpazAyYU5WMnpIT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtPjQ/xr6BuCTTIAanwPkhvIV5ECs7wNkTJt0iDZAiVM4u8iz8ywz9EWZ1Ym+ MoUXSXbfcllfEo6OI6h5OpM8Gvr+7W6AnX74+bfzcTZGPGUoH+2aLLRlBvpg7Gyh RznKt8GEbGgytnVsjZGN391btJUE+eUXA/+BWJe2YFJbY57Cwgd5qHYhjpKDiqO8 9l4jlsqY4GVGSAFqk5SRs26DBiVxaln/t8/yStWibVWF89tP4NAYDMFDgWTXIQqZ ZALSpUP8lNdZzCNAKYvPCVBlCO2unpf7p2adhdybaIggOCVflHqeZKLpKltlOO8R m62+HGAHi8RrBAnpjCHTweFi1g== -----END CERTIFICATE-----Generated at Wed Sep 23 07:25:40 2026 by rpki-client