$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: 59BVnsLHto7iD2IJmk6dXE7o6M6AsNqXj2Gw5bIZyao= Subject key identifier: B5:19:B5:0A:38:34:AA:C7:4A:45:CF:47:0B:A9:6F:73:98:23:F6:EA Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 3585 Signing time: Sat 26 Sep 2026 14:32:42 +0000 Manifest this update: Sat 26 Sep 2026 14:32:41 +0000 Manifest next update: Sat 03 Oct 2026 14:32:41 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: i7cgvnv1kqCubACpjNxrT8XLqnrjPgibCNhbuD5Ugdo=) 2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13702 (0x3586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Sep 26 14:32:41 2026 GMT Not After : Oct 3 14:32:41 2026 GMT Subject: CN=6ab7d789-7993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:eb:13:33:c9:da:29:2e:d8:7f:f3:00:ea: ce:f2:ef:6d:c9:d1:83:96:01:7b:8b:e0:f2:c9:95: 57:a6:f6:14:99:11:c3:f2:c8:bd:f6:60:53:d2:a4: d4:dd:b6:6f:f3:b7:32:25:d1:e9:89:00:71:dc:12: e6:5f:d0:f7:2c:1a:c6:d1:8e:a2:d9:04:81:d8:8c: d2:ec:01:fb:72:70:bc:c2:d0:79:9c:14:68:2c:1d: 36:e9:04:a6:34:3b:70:16:03:40:d9:10:6a:1d:80: 54:bd:63:a9:68:a3:c6:0a:ea:2b:96:9a:ce:89:10: 69:16:34:8e:f0:b6:bc:6d:6e:5b:2e:37:b6:38:56: 53:20:1c:8c:eb:95:9d:2b:7b:97:d2:48:52:2d:a0: ea:03:b1:12:d9:99:f5:72:fd:ca:fc:fb:f4:9e:97: e1:38:9e:db:72:70:e7:12:d9:4b:1b:bf:34:36:fc: 57:98:cd:b0:bc:43:33:d5:06:87:ca:2a:e7:67:92: 5d:60:de:61:fd:f6:56:43:b1:e5:f7:a7:31:ac:16: 94:ad:ae:fd:5c:e2:a5:f9:5a:7a:7e:a2:a2:0c:f6: 90:2e:ca:fe:06:0f:0c:4c:71:2e:83:52:02:d0:29: 49:75:db:ff:b6:46:f0:19:0c:5e:99:5c:5c:0f:27: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:19:B5:0A:38:34:AA:C7:4A:45:CF:47:0B:A9:6F:73:98:23:F6:EA X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:54:4b:0e:36:bc:bb:bb:b6:6b:ed:6c:ac:f7:53:c1:e9:5d: 8d:40:c0:50:cb:83:3a:31:36:b6:51:48:b7:d1:52:99:11:d8: 09:46:4e:b1:67:94:44:6c:9f:38:1f:3f:25:00:03:dd:81:e5: 61:5f:34:fd:84:62:3f:f8:fa:ce:af:ee:76:47:8b:26:e6:05: 66:4a:52:47:ca:d3:ec:25:55:eb:cb:1b:0d:85:ef:e8:4f:d1: 93:d2:6f:6c:43:99:5d:db:94:13:4d:fb:53:50:f3:4d:1c:69: d1:cc:71:54:e4:b1:82:e9:0b:7d:4b:6c:e2:fc:c6:e0:2d:5d: 92:9e:ca:92:39:ae:d1:ff:76:79:eb:c9:61:54:cf:ed:9b:86: e5:5e:e3:6d:cb:fd:12:11:b6:84:e2:15:2e:50:2a:b6:1d:47: 72:ac:4f:da:81:0e:8b:b7:fb:50:3c:e3:6d:35:1b:83:98:e7: 5a:b5:90:01:bf:af:89:40:b6:a0:88:5b:97:e5:e7:c9:b4:c9: 73:33:4c:39:e6:f0:c0:b1:7f:fc:42:52:24:5b:c5:00:c2:52: 88:de:4d:f9:da:8d:3c:6c:5e:17:b9:f0:ad:ae:f0:2c:c5:ec: c7:89:4d:17:e6:a9:dd:de:c6:ca:f9:0e:f5:11:92:f9:ac:66: 9b:f2:88:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjYwOTI2MTQzMjQxWhcNMjYxMDAzMTQzMjQxWjAYMRYwFAYD VQQDEw02YWI3ZDc4OS03OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6nrEzPJ2iku2H/zAOrO8u9tydGDlgF7i+DyyZVXpvYUmRHD8si99mBT0qTU 3bZv87cyJdHpiQBx3BLmX9D3LBrG0Y6i2QSB2IzS7AH7cnC8wtB5nBRoLB026QSm NDtwFgNA2RBqHYBUvWOpaKPGCuorlprOiRBpFjSO8La8bW5bLje2OFZTIByM65Wd K3uX0khSLaDqA7ES2Zn1cv3K/Pv0npfhOJ7bcnDnEtlLG780NvxXmM2wvEMz1QaH yirnZ5JdYN5h/fZWQ7Hl96cxrBaUra79XOKl+Vp6fqKiDPaQLsr+Bg8MTHEug1IC 0ClJddv/tkbwGQxemVxcDydkJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUZtQo4 NKrHSkXPRwupb3OYI/bqMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFRLDja8u7u2a+1srPdTweldjUDAUMuDOjE2tlFIt9FSmRHYCUZOsWeURGyf OB8/JQAD3YHlYV80/YRiP/j6zq/udkeLJuYFZkpSR8rT7CVV68sbDYXv6E/Rk9Jv bEOZXduUE037U1DzTRxp0cxxVOSxgukLfUts4vzG4C1dkp7Kkjmu0f92eevJYVTP 7ZuG5V7jbcv9EhG2hOIVLlAqth1HcqxP2oEOi7f7UDzjbTUbg5jnWrWQAb+viUC2 oIhbl+XnybTJczNMOebwwLF//EJSJFvFAMJSiN5N+dqNPGxeF7nwra7wLMXsx4lN F+ap3d7GyvkO9RGS+axmm/KI+w== -----END CERTIFICATE-----Generated at Sun Sep 27 10:14:26 2026 by rpki-client