$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: Rv1W6CWYfh3IVTcUAGoEKt9MHzJbU+SOyDecLYEKTh0= Subject key identifier: B8:6B:E0:7E:6B:63:18:21:8D:9B:83:92:2C:28:E9:4E:94:8B:D7:C2 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 19FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 19ED Signing time: Fri 02 Oct 2026 16:29:52 +0000 Manifest this update: Fri 02 Oct 2026 16:29:51 +0000 Manifest next update: Fri 09 Oct 2026 16:29:51 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: QPmFRJpw6P28PEA2zZe/+FOqDF5XqTm1FEote13Us9c=) 2: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: Yb/qxPAzJiLkKjk0COysI5j3RpY85yaJNQvUBrDuM3s=) 3: D421D958881611E78B9B0850C4F9AE02.roa (hash: rsK3+PYcLZtB8vJaGIMnh9NDX2ChOw6Z0/4rac1bRIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6655 (0x19ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Oct 2 16:29:51 2026 GMT Not After : Oct 9 16:29:51 2026 GMT Subject: CN=6abfdbff-1436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:58:4e:15:ab:c6:bd:b9:d4:ab:1d:3b:e8: ce:9a:a9:63:2e:9b:59:f4:11:14:a0:19:a8:cd:f1: 0f:97:1f:55:08:ba:a4:6a:67:29:da:1d:bf:d4:16: 21:d8:8d:d6:7e:02:78:57:72:5b:18:42:9b:17:8d: c8:69:c0:92:fd:b9:d5:8d:01:f0:4a:32:2c:4a:c0: ee:25:5c:59:52:23:57:cb:38:ac:64:a9:aa:a5:bb: 2c:2b:d7:7f:13:11:97:5a:00:fb:c8:91:3d:9d:b7: d9:b0:d6:cc:64:29:46:5f:42:69:53:79:a5:f6:d9: 5f:b3:a1:ec:c8:dc:4a:91:07:fe:40:55:c5:f2:01: b7:98:05:5d:ee:5a:e2:ba:cd:22:1c:d5:a9:0a:31: 43:48:99:cf:65:d8:85:07:af:53:49:7f:b0:e0:e7: 9e:53:c8:37:bb:3f:6d:26:c2:88:20:b4:70:bb:63: ec:25:06:34:c0:b7:60:6b:25:80:85:e7:2a:71:5d: d7:76:db:41:33:9c:38:00:d2:7c:cd:73:3d:71:4b: 89:9c:b8:f2:08:e3:40:c3:d6:40:7c:b3:a8:aa:31: e5:b5:91:a6:08:fa:13:4e:5c:d3:08:e0:b2:dd:ce: ec:80:dc:c4:b1:34:a7:00:cf:be:a5:ef:f6:58:31: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6B:E0:7E:6B:63:18:21:8D:9B:83:92:2C:28:E9:4E:94:8B:D7:C2 X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:24:0f:a6:78:94:d1:ce:6b:ca:3b:56:18:94:ea:fd:02:48: 0a:89:26:89:5b:97:90:f8:bf:d8:22:63:75:c6:50:f2:42:52: e6:94:63:5e:44:8c:d4:3e:7d:3c:9e:2e:7a:d7:36:1e:3e:23: 72:51:62:3b:4f:97:5e:93:ac:5f:3d:79:4e:01:34:42:1b:85: 42:7d:47:a9:2b:cd:38:a4:c9:68:93:ef:dd:25:bb:f0:83:2c: a1:0b:e2:38:46:5e:6a:12:1b:89:47:c6:73:cc:4d:17:ab:38: 22:99:13:cf:82:3b:82:a4:18:db:22:3c:80:30:7e:bc:8a:cb: 9f:0a:7b:f4:4a:18:27:8f:bc:ba:af:4a:78:69:c3:fa:9e:16: b6:5c:a1:4e:b1:f9:b1:27:58:44:c6:95:9b:d6:b0:56:47:d4: 89:53:f4:a5:63:6f:7a:8a:68:d1:bf:48:43:71:b5:1f:a9:3d: 84:93:2e:63:68:ed:6f:c3:10:1d:e2:c1:b5:77:d9:a0:b5:2b: 28:df:64:37:d6:1c:69:41:e2:bf:a5:04:93:e6:4f:0a:76:9b: 0a:3e:b5:fe:62:6a:c0:18:78:9b:d5:87:74:46:af:21:50:89: 57:f0:e4:25:7a:56:26:97:23:d5:1d:80:1b:39:ff:75:4a:bd: 7b:57:f8:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjYxMDAyMTYyOTUxWhcNMjYxMDA5MTYyOTUxWjAYMRYwFAYD VQQDEw02YWJmZGJmZi0xNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLVYThWrxr251KsdO+jOmqljLptZ9BEUoBmozfEPlx9VCLqkamcp2h2/1BYh 2I3WfgJ4V3JbGEKbF43IacCS/bnVjQHwSjIsSsDuJVxZUiNXyzisZKmqpbssK9d/ ExGXWgD7yJE9nbfZsNbMZClGX0JpU3ml9tlfs6HsyNxKkQf+QFXF8gG3mAVd7lri us0iHNWpCjFDSJnPZdiFB69TSX+w4OeeU8g3uz9tJsKIILRwu2PsJQY0wLdgayWA hecqcV3XdttBM5w4ANJ8zXM9cUuJnLjyCONAw9ZAfLOoqjHltZGmCPoTTlzTCOCy 3c7sgNzEsTSnAM++pe/2WDECKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhr4H5r YxghjZuDkiwo6U6Ui9fCMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVSQPpniU0c5ryjtWGJTq/QJICokmiVuXkPi/2CJjdcZQ8kJS5pRjXkSM1D59 PJ4uetc2Hj4jclFiO0+XXpOsXz15TgE0QhuFQn1HqSvNOKTJaJPv3SW78IMsoQvi OEZeahIbiUfGc8xNF6s4IpkTz4I7gqQY2yI8gDB+vIrLnwp79EoYJ4+8uq9KeGnD +p4WtlyhTrH5sSdYRMaVm9awVkfUiVP0pWNveopo0b9IQ3G1H6k9hJMuY2jtb8MQ HeLBtXfZoLUrKN9kN9YcaUHiv6UEk+ZPCnabCj61/mJqwBh4m9WHdEavIVCJV/Dk JXpWJpcj1R2AGzn/dUq9e1f4yA== -----END CERTIFICATE-----Generated at Sun Oct 4 07:09:29 2026 by rpki-client