$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: N81108ZagE0WuvSfVIyOisRYuKGnsnD+dJHslJ+cHro= Subject key identifier: 52:23:74:0D:13:6F:CE:DE:D5:4C:C3:D6:C5:4E:DA:87:BF:3E:F2:80 Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 02E3 Signing time: Fri 25 Sep 2026 01:03:45 +0000 Manifest this update: Fri 25 Sep 2026 01:03:44 +0000 Manifest next update: Fri 02 Oct 2026 01:03:44 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: gLldtY0c6JS0NpCA5VGtgAlHgu1KZWNgEK4Ga4w0ByU=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Sep 25 01:03:44 2026 GMT Not After : Oct 2 01:03:44 2026 GMT Subject: CN=6ab5c870-344c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:ac:54:71:4b:6b:27:bd:26:8c:c0:78:2c: bd:0b:4c:33:58:dc:9b:18:37:df:1b:b2:02:59:12: bc:1b:17:2e:c4:88:42:ce:2b:2a:61:26:92:80:81: e8:8d:f0:d5:3e:e9:4f:07:27:cf:14:17:9a:89:b1: 43:ce:cd:f7:bd:6f:30:88:49:26:c9:19:78:c8:d7: be:b5:5c:60:8b:63:fb:fd:7e:1c:da:ec:b6:23:2c: 8e:39:99:bf:01:76:0f:f5:24:39:53:40:d8:b0:48: 4b:d2:56:38:68:3e:6f:9a:c6:61:0f:65:72:a8:6d: 92:e3:2a:52:4c:10:23:76:73:07:38:77:bd:21:9e: 9b:77:30:0e:2f:79:78:8d:87:77:be:a0:cd:4a:93: 18:8e:94:3b:b1:7b:da:e7:17:f0:64:2e:a2:55:e4: b8:b6:57:62:48:9d:31:35:4c:e3:30:86:a9:7d:fb: a9:0f:6f:5e:70:e9:c3:c0:0a:f0:ae:a3:7b:56:5f: a2:d3:7b:10:83:65:52:7a:de:b2:d5:da:a0:03:1c: 66:d9:cf:b0:b1:34:e7:ce:8e:50:87:08:c4:9f:ea: fb:54:77:b2:e7:d8:1c:34:1d:f9:00:f8:b4:1e:0c: 11:ec:d5:6d:43:f0:e1:4e:b3:12:51:3c:03:cd:04: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:23:74:0D:13:6F:CE:DE:D5:4C:C3:D6:C5:4E:DA:87:BF:3E:F2:80 X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:1c:3a:32:2f:d3:34:0c:62:4d:02:ff:8a:c0:19:1d:5e:33: d9:fb:69:21:11:e6:84:b7:92:2f:79:98:70:99:3b:9d:c2:80: 95:da:9f:b4:4d:b3:41:8b:e4:b6:99:2e:6c:a4:13:77:35:8d: 75:ed:62:fe:1e:6e:96:d6:ff:29:ce:6b:dd:bb:0b:88:ba:1b: 1f:23:ae:8f:c8:87:b2:fa:32:8b:e1:43:d1:62:d5:44:1a:1d: 11:b2:c5:ac:fb:44:7b:1c:5e:e1:72:e8:dc:ed:24:35:a6:f4: 1d:f5:5d:75:35:f2:03:f6:89:ec:b4:bd:68:7e:c6:56:e1:ad: 40:a8:16:0e:87:61:3f:b9:8b:63:29:46:bd:9e:81:bc:20:d9: 25:8f:7a:d1:5a:d6:e8:48:82:e2:0b:67:2b:ec:6d:fe:9a:ba: 36:dd:d6:38:76:9f:c6:9f:fb:6a:8e:e5:c2:2f:a1:97:b0:f7: 37:23:c1:7a:ec:74:ed:21:70:a3:f2:68:82:76:16:4b:83:99: 31:60:be:53:fc:86:72:d3:15:36:43:18:95:b9:5f:bc:e5:ad: a8:8a:f4:e7:6e:22:7a:06:91:4d:7f:18:d6:af:9f:0f:ca:96: 91:fe:55:dc:87:26:a6:75:85:de:55:1e:fe:a3:02:d7:f9:d5: 48:15:9f:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjYwOTI1MDEwMzQ0WhcNMjYxMDAyMDEwMzQ0WjAYMRYwFAYD VQQDEw02YWI1Yzg3MC0zNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj2esVHFLaye9JozAeCy9C0wzWNybGDffG7ICWRK8GxcuxIhCzisqYSaSgIHo jfDVPulPByfPFBeaibFDzs33vW8wiEkmyRl4yNe+tVxgi2P7/X4c2uy2IyyOOZm/ AXYP9SQ5U0DYsEhL0lY4aD5vmsZhD2VyqG2S4ypSTBAjdnMHOHe9IZ6bdzAOL3l4 jYd3vqDNSpMYjpQ7sXva5xfwZC6iVeS4tldiSJ0xNUzjMIapffupD29ecOnDwArw rqN7Vl+i03sQg2VSet6y1dqgAxxm2c+wsTTnzo5QhwjEn+r7VHey59gcNB35APi0 HgwR7NVtQ/DhTrMSUTwDzQR+PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIjdA0T b87e1UzD1sVO2oe/PvKAMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtxw6Mi/TNAxiTQL/isAZHV4z2ftpIRHmhLeSL3mYcJk7ncKAldqftE2zQYvk tpkubKQTdzWNde1i/h5ultb/Kc5r3bsLiLobHyOuj8iHsvoyi+FD0WLVRBodEbLF rPtEexxe4XLo3O0kNab0HfVddTXyA/aJ7LS9aH7GVuGtQKgWDodhP7mLYylGvZ6B vCDZJY960VrW6EiC4gtnK+xt/pq6Nt3WOHafxp/7ao7lwi+hl7D3NyPBeux07SFw o/JognYWS4OZMWC+U/yGctMVNkMYlblfvOWtqIr0524iegaRTX8Y1q+fD8qWkf5V 3IcmpnWF3lUe/qMC1/nVSBWfNg== -----END CERTIFICATE-----Generated at Fri Sep 25 10:13:53 2026 by rpki-client