$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.mft File: iV3GotWZyMSlcd4uxUoY6ksH_dw.mft (raw, json) Hash identifier: iK07jVfT1g/QFKOt8+OZkZHZsxVCaVmqexS6qsmYINY= Subject key identifier: CA:60:E2:3C:DD:A3:54:0C:07:52:98:86:8D:E0:2E:5A:1E:DE:8D:8F Authority key identifier: 89:5D:C6:A2:D5:99:C8:C4:A5:71:DE:2E:C5:4A:18:EA:4B:07:FD:DC Certificate issuer: /CN=A91EC40B/serialNumber=895DC6A2D599C8C4A571DE2EC54A18EA4B07FDDC Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV3GotWZyMSlcd4uxUoY6ksH_dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.mft Manifest number: 04 Signing time: Tue 22 Sep 2026 07:44:12 +0000 Manifest this update: Tue 22 Sep 2026 07:44:12 +0000 Manifest next update: Tue 29 Sep 2026 07:44:12 +0000 Files and hashes: 1: iV3GotWZyMSlcd4uxUoY6ksH_dw.crl (hash: izY2HvlU2Cw+RrEnF/aIWwzr6T4Cd/a4XkThtrEjj9A=) 2: C6B99754B64E11F1BFAD77356C11F970.roa (hash: k0rPbPGFg/gJSXEBkotawNx+LMj9A54Ip1ziPu3y/Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.crl rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV3GotWZyMSlcd4uxUoY6ksH_dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 07:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC40B, serialNumber=895DC6A2D599C8C4A571DE2EC54A18EA4B07FDDC Validity Not Before: Sep 22 07:44:12 2026 GMT Not After : Sep 29 07:44:12 2026 GMT Subject: CN=6ab231cc-7b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:f4:50:47:c4:c3:6f:7e:45:6b:82:a6:d1: 01:24:5b:93:6d:16:ac:90:ef:01:54:9d:24:9b:f7: 07:3f:e2:9d:b4:21:ab:06:cf:dd:6c:f9:9d:2e:4e: 25:f7:b5:2f:8a:11:60:0b:1c:de:b6:1a:e2:df:15: c6:1f:11:88:91:a2:02:3e:a0:d1:36:34:b4:1b:dc: c6:d8:d4:89:32:d1:29:0a:19:3e:c5:54:5c:a6:38: 20:a2:c0:8e:c8:97:e1:b7:51:bd:60:bb:50:e7:4e: 4f:6a:39:54:38:21:64:71:a4:90:ea:ce:48:b7:de: bd:6a:61:2d:db:98:26:e1:4b:48:6d:da:ec:75:ac: d9:d3:8a:e7:fd:77:32:dd:3a:df:f1:e6:fa:6b:71: 56:4d:54:d4:4c:da:1d:45:47:ba:a9:2c:2c:33:2d: 5e:05:f4:54:4f:07:35:8b:2f:0f:24:50:d2:38:1a: 31:bd:82:2d:7e:5b:73:2d:80:36:f9:9c:df:8f:80: 50:26:5f:b7:d1:f8:31:98:5d:0e:6b:27:c0:7f:22: 2f:84:67:52:5e:7c:48:68:fd:3c:03:cd:0e:d0:54: 7c:0a:bf:e2:21:0f:01:91:82:58:80:bf:87:a8:4f: be:4e:d3:da:1a:a3:6e:b2:21:6a:75:c2:f5:aa:e2: 57:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:60:E2:3C:DD:A3:54:0C:07:52:98:86:8D:E0:2E:5A:1E:DE:8D:8F X509v3 Authority Key Identifier: keyid:89:5D:C6:A2:D5:99:C8:C4:A5:71:DE:2E:C5:4A:18:EA:4B:07:FD:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV3GotWZyMSlcd4uxUoY6ksH_dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:9b:53:1f:b3:d8:9b:ed:16:12:1f:ec:a3:3f:ef:cf:36:c1: ca:5a:37:84:96:27:ac:b8:e4:95:26:9e:36:ee:71:5f:b4:e8: 49:27:88:c4:47:d4:d1:29:2c:a3:0f:40:6d:0d:04:5c:36:6f: 41:d2:c7:80:cd:ea:4b:54:6a:0f:b8:e5:51:fb:87:7f:33:35: 25:52:4f:48:7a:2e:b2:da:40:9b:bc:bc:3c:e2:62:0a:51:24: 38:a8:76:20:ae:9e:81:da:06:22:8d:88:fa:d1:ea:ac:88:63: b3:de:54:9f:04:e6:4a:04:a4:e5:b9:4b:f4:88:54:d3:00:fc: 8a:85:ef:b6:6c:66:dc:2a:39:2b:80:8c:3a:cf:11:f9:6e:1a: f3:f6:33:de:ad:1f:ba:c2:b1:d0:c6:b8:33:fd:b0:46:1c:ca: 2b:0a:60:5b:e6:a1:2d:43:3c:76:a8:9a:62:49:5e:00:c5:c0: 8b:82:fd:d2:7b:4f:b8:f2:9e:f7:a9:40:e9:11:fa:06:21:8f: fc:9f:70:55:c6:e7:a0:3b:0a:e8:b0:df:e8:63:ec:23:0f:a1: e6:fd:94:e9:04:6d:2b:ad:66:d7:d8:1c:bc:26:e1:51:8d:49: f0:d9:18:eb:54:90:f3:e1:3d:bc:a8:6d:0f:c0:50:f9:f7:77: 08:41:70:38 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzQwQjExMC8GA1UEBRMoODk1REM2QTJENTk5QzhDNEE1NzFERTJFQzU0QTE4RUE0 QjA3RkREQzAeFw0yNjA5MjIwNzQ0MTJaFw0yNjA5MjkwNzQ0MTJaMBgxFjAUBgNV BAMTDTZhYjIzMWNjLTdiMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD3vRQR8TDb35Fa4Km0QEkW5NtFqyQ7wFUnSSb9wc/4p20IasGz91s+Z0uTiX3 tS+KEWALHN62GuLfFcYfEYiRogI+oNE2NLQb3MbY1Iky0SkKGT7FVFymOCCiwI7I l+G3Ub1gu1DnTk9qOVQ4IWRxpJDqzki33r1qYS3bmCbhS0ht2ux1rNnTiuf9dzLd Ot/x5vprcVZNVNRM2h1FR7qpLCwzLV4F9FRPBzWLLw8kUNI4GjG9gi1+W3MtgDb5 nN+PgFAmX7fR+DGYXQ5rJ8B/Ii+EZ1JefEho/TwDzQ7QVHwKv+IhDwGRgliAv4eo T75O09oao26yIWp1wvWq4ldtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUymDiPN2j VAwHUpiGjeAuWh7ejY8wHwYDVR0jBBgwFoAUiV3GotWZyMSlcd4uxUoY6ksH/dww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDNDBCLzYzMzBBM0M2QjY0 RTExRjFCMzdDMEMxOTZDMTFGOTcwL2lWM0dvdFdaeU1TbGNkNHV4VW9ZNmtzSF9k dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVYzR290V1p5TVNsY2Q0dXhVb1k2a3NIX2R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD NDBCLzYzMzBBM0M2QjY0RTExRjFCMzdDMEMxOTZDMTFGOTcwL2lWM0dvdFdaeU1T bGNkNHV4VW9ZNmtzSF9kdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCum1Mfs9ib7RYSH+yjP+/PNsHKWjeEliesuOSVJp427nFftOhJJ4jER9TRKSyj D0BtDQRcNm9B0seAzepLVGoPuOVR+4d/MzUlUk9Iei6y2kCbvLw84mIKUSQ4qHYg rp6B2gYijYj60eqsiGOz3lSfBOZKBKTluUv0iFTTAPyKhe+2bGbcKjkrgIw6zxH5 bhrz9jPerR+6wrHQxrgz/bBGHMorCmBb5qEtQzx2qJpiSV4AxcCLgv3Se0+48p73 qUDpEfoGIY/8n3BVxuegOwrosN/oY+wjD6Hm/ZTpBG0rrWbX2By8JuFRjUnw2Rjr VJDz4T28qG0PwFD593cIQXA4 -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:30 2026 by rpki-client