$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: Ozipc3e8u9c2cDVB9jGK24mcpvzH4qcs7o4vxJlpN/A= Subject key identifier: 0E:D8:C6:A0:D0:09:BB:56:0B:83:79:58:36:91:4F:E6:A8:1C:FA:40 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0980 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 0923 Signing time: Sat 26 Sep 2026 20:26:59 +0000 Manifest this update: Sat 26 Sep 2026 20:26:58 +0000 Manifest next update: Sat 03 Oct 2026 20:26:58 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: cnl7M8A/UjOuvBL4F4/IwvJzKQebCRyjaEezcFG9+xk=) 2: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=) 3: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=) 4: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=) 5: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=) 6: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=) 7: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=) 8: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2432 (0x980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Sep 26 20:26:58 2026 GMT Not After : Oct 3 20:26:58 2026 GMT Subject: CN=6ab82a92-9095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:72:cb:21:05:82:4e:54:7a:d6:e4:8c:b8: c5:e7:bd:76:49:e2:d0:34:c9:85:a8:70:78:b2:54: 94:2c:c6:3c:e9:80:67:74:ef:a7:c8:c1:ea:f9:ff: 62:62:22:64:54:40:3e:7e:70:28:19:9a:93:1b:2b: 1e:27:e3:09:10:34:1a:c7:b9:15:f5:64:2d:69:5f: cf:7f:8f:b4:26:18:0e:12:a3:3a:52:0a:ad:f4:ed: 8a:a9:cc:e6:43:d7:59:f8:88:96:1c:0c:98:35:e9: fe:54:ef:6a:91:c6:d9:8c:09:a1:7a:63:3e:46:ee: 4a:6f:5a:4b:b1:5a:1b:22:00:f7:7f:7a:8f:5b:8e: 17:ed:47:db:6a:54:96:14:26:85:63:05:ac:d7:29: 10:46:de:98:93:e5:82:fa:7a:0c:b5:72:92:53:fe: ca:f3:61:19:cc:13:a2:8d:6d:b8:11:7f:fc:ab:df: 55:d2:04:41:26:e2:15:02:0b:8d:47:4f:fe:90:f0: 43:8f:4a:4a:bb:38:f1:8e:fb:3c:09:bf:25:9c:3b: 0c:59:88:ec:0a:e9:d9:01:7c:70:23:47:ff:d2:fd: d1:a0:60:4a:91:76:c2:29:61:a6:de:70:0a:b3:65: d4:d6:96:60:85:c7:81:99:7b:76:98:39:50:73:f3: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D8:C6:A0:D0:09:BB:56:0B:83:79:58:36:91:4F:E6:A8:1C:FA:40 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:9c:81:57:b7:cc:4d:10:c3:4a:95:bf:7d:dc:16:2b:c1:a4: 1d:8c:eb:cf:19:a5:a1:66:b1:64:4a:31:69:19:3e:fa:6f:83: cc:8d:96:d5:cf:d6:5e:d6:06:0f:2a:93:cc:99:e1:d0:1f:68: 8a:18:12:fc:43:e7:14:75:eb:3b:7f:b2:a1:b0:a3:84:ba:d5: 19:f1:fe:6b:34:5a:3a:0e:75:50:9f:ef:ef:1e:91:43:01:b7: 38:61:e5:7c:ff:a4:19:35:07:48:38:db:1e:e9:93:0c:3c:93: 71:c8:fe:2c:4f:ef:1e:88:0f:db:43:ef:b5:27:55:4c:c9:b6: b9:7a:d8:d5:a4:dd:d3:19:a2:61:b2:4d:f8:19:4c:b2:9c:22: 15:71:60:65:c0:67:3c:50:d9:81:24:1f:8a:68:e0:33:87:9a: 50:d3:3a:a4:f0:63:dc:69:77:bb:68:75:80:b5:96:99:82:d1: 78:95:97:bb:c7:66:29:cd:df:e9:18:23:07:2c:27:ba:df:28: 91:82:21:8e:20:12:d7:81:bb:c6:9b:42:d4:32:27:10:1c:8a: b7:70:e8:e6:2a:dd:81:31:1b:aa:a9:bc:bb:86:98:f0:e5:a6: 5d:8b:49:29:bf:23:78:54:91:ba:d2:e5:76:f9:2c:68:03:69: 45:f7:7d:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYwOTI2MjAyNjU4WhcNMjYxMDAzMjAyNjU4WjAYMRYwFAYD VQQDEw02YWI4MmE5Mi05MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjpyyyEFgk5UetbkjLjF5712SeLQNMmFqHB4slSULMY86YBndO+nyMHq+f9i YiJkVEA+fnAoGZqTGyseJ+MJEDQax7kV9WQtaV/Pf4+0JhgOEqM6Ugqt9O2Kqczm Q9dZ+IiWHAyYNen+VO9qkcbZjAmhemM+Ru5Kb1pLsVobIgD3f3qPW44X7UfbalSW FCaFYwWs1ykQRt6Yk+WC+noMtXKSU/7K82EZzBOijW24EX/8q99V0gRBJuIVAguN R0/+kPBDj0pKuzjxjvs8Cb8lnDsMWYjsCunZAXxwI0f/0v3RoGBKkXbCKWGm3nAK s2XU1pZghceBmXt2mDlQc/MKzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA7YxqDQ CbtWC4N5WDaRT+aoHPpAMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeZyBV7fMTRDDSpW/fdwWK8GkHYzrzxmloWaxZEoxaRk++m+DzI2W1c/WXtYG DyqTzJnh0B9oihgS/EPnFHXrO3+yobCjhLrVGfH+azRaOg51UJ/v7x6RQwG3OGHl fP+kGTUHSDjbHumTDDyTccj+LE/vHogP20PvtSdVTMm2uXrY1aTd0xmiYbJN+BlM spwiFXFgZcBnPFDZgSQfimjgM4eaUNM6pPBj3Gl3u2h1gLWWmYLReJWXu8dmKc3f 6RgjBywnut8okYIhjiAS14G7xptC1DInEByKt3Do5irdgTEbqqm8u4aY8OWmXYtJ Kb8jeFSRutLldvksaANpRfd9gg== -----END CERTIFICATE-----Generated at Sun Sep 27 08:54:47 2026 by rpki-client