$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json) Hash identifier: O5kjUf6ROo2Lqpwz/2vD321pSsLWfaoFGD++fCEapcg= Subject key identifier: 29:B2:D2:C6:43:C5:58:19:E6:08:BC:D6:9F:E8:89:3A:F2:2B:C1:25 Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft Manifest number: 0CAC Signing time: Wed 30 Sep 2026 18:47:41 +0000 Manifest this update: Wed 30 Sep 2026 18:47:41 +0000 Manifest next update: Wed 07 Oct 2026 18:47:41 +0000 Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: Jv+tqq4uDO0PHHQfkP0cAvwPoCfRZR/KzdgDUBEjxp8=) 2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: aUl7t5S7wwdZHMJJBNCy28ETR7/g4qJO+m/jz+Gzuxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 18:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Validity Not Before: Sep 30 18:47:41 2026 GMT Not After : Oct 7 18:47:41 2026 GMT Subject: CN=6abd594d-f045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:d3:33:d8:b6:3b:e5:49:ce:1e:95:d5:36: 30:25:bf:8b:cd:e3:41:c4:11:24:2a:ff:d4:3d:d8: 9d:46:6c:bb:18:47:d0:a1:81:23:48:bd:fc:df:79: 78:4d:06:33:3c:73:c7:e4:3f:82:d3:b6:c3:91:03: 52:7a:85:7b:c8:91:3f:be:ee:b3:8d:f8:04:af:12: df:62:6f:c3:2d:4e:28:99:ed:04:e3:0f:72:2e:74: c3:bb:b3:33:9e:19:47:2c:3b:b3:5e:b6:a8:55:dc: 47:ed:0e:91:cb:67:65:e7:48:d1:68:1d:48:58:4e: 67:e1:be:dc:8a:46:f8:33:8c:f2:db:31:93:ff:63: f9:06:07:2f:47:87:fb:f7:25:c2:65:9c:08:70:2e: f1:98:e9:3d:93:2e:24:74:33:e8:18:d9:95:d1:97: ac:5b:63:b6:f8:08:4b:b5:70:db:28:53:ae:cb:cc: 9a:21:c5:49:6f:4e:91:19:bb:28:3d:80:63:dd:f1: a1:cd:4f:ee:1e:b6:90:ee:cf:52:31:4c:45:e0:06: a8:a6:5c:38:42:29:4e:52:32:26:98:21:5b:4d:a9: c4:0a:67:96:58:fd:86:c6:0b:94:7e:1f:00:bc:a0: 1c:24:ed:dd:7b:88:a7:4c:ec:ac:1b:65:f3:51:35: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B2:D2:C6:43:C5:58:19:E6:08:BC:D6:9F:E8:89:3A:F2:2B:C1:25 X509v3 Authority Key Identifier: keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ef:a7:d7:dd:15:b2:53:72:40:3f:17:d4:9a:aa:be:cb:fb: 27:a4:7c:b2:b4:9c:ac:ca:fe:75:5c:46:30:00:cc:d4:c2:e1: db:ee:94:94:5b:15:a9:01:12:ef:c5:6e:08:41:61:85:4e:7c: 40:08:68:54:ed:18:8d:2e:b3:1b:67:ae:3e:e6:da:a5:9f:a0: 9d:d2:96:88:58:9f:24:86:9b:f5:c5:e3:20:26:33:4b:ba:9b: 47:e6:90:16:4d:b4:ec:68:c0:41:63:b3:3c:c9:57:eb:5d:16: 7a:f0:66:4c:6f:a0:c3:dd:6b:18:ee:e3:80:9f:33:bf:75:82: 31:61:44:7e:da:96:92:34:03:e1:f6:b9:59:01:57:de:a3:b9: b6:09:dd:26:59:b1:93:bc:55:6f:5e:47:a1:32:ae:81:92:8f: b9:e4:a0:30:01:cc:1a:20:b8:45:84:fd:94:ac:e7:de:f3:20: 66:04:0a:ac:e1:65:dd:80:6e:9a:15:25:fb:b2:0f:78:d6:14: 8d:8c:87:85:a8:13:1d:d9:b6:9d:04:28:4d:d0:3a:dc:2d:3f: 89:70:48:67:d4:19:de:84:8f:1e:83:02:44:f1:e9:d0:dd:0d: b3:a2:da:da:8d:95:ef:02:b3:19:d0:ce:7e:72:3f:8a:cd:89: 10:47:da:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0 RDE0MTRCMkQwHhcNMjYwOTMwMTg0NzQxWhcNMjYxMDA3MTg0NzQxWjAYMRYwFAYD VQQDEw02YWJkNTk0ZC1mMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsevTM9i2O+VJzh6V1TYwJb+LzeNBxBEkKv/UPdidRmy7GEfQoYEjSL3833l4 TQYzPHPH5D+C07bDkQNSeoV7yJE/vu6zjfgErxLfYm/DLU4ome0E4w9yLnTDu7Mz nhlHLDuzXraoVdxH7Q6Ry2dl50jRaB1IWE5n4b7cikb4M4zy2zGT/2P5BgcvR4f7 9yXCZZwIcC7xmOk9ky4kdDPoGNmV0ZesW2O2+AhLtXDbKFOuy8yaIcVJb06RGbso PYBj3fGhzU/uHraQ7s9SMUxF4Aaoplw4QilOUjImmCFbTanECmeWWP2GxguUfh8A vKAcJO3de4inTOysG2XzUTW/KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmy0sZD xVgZ5gi81p/oiTryK8ElMB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0 Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAu+n190VslNyQD8X1Jqqvsv7J6R8srScrMr+dVxGMADM1MLh2+6UlFsVqQES 78VuCEFhhU58QAhoVO0YjS6zG2euPubapZ+gndKWiFifJIab9cXjICYzS7qbR+aQ Fk207GjAQWOzPMlX610WevBmTG+gw91rGO7jgJ8zv3WCMWFEftqWkjQD4fa5WQFX 3qO5tgndJlmxk7xVb15HoTKugZKPueSgMAHMGiC4RYT9lKzn3vMgZgQKrOFl3YBu mhUl+7IPeNYUjYyHhagTHdm2nQQoTdA63C0/iXBIZ9QZ3oSPHoMCRPHp0N0Ns6La 2o2V7wKzGdDOfnI/is2JEEfaWg== -----END CERTIFICATE-----Generated at Thu Oct 1 15:23:53 2026 by rpki-client