$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft File: iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft (raw, json) Hash identifier: jmO3PaHpJpQhbApkQF9qC+5uefWeh52W0Lx6Tt+eHqQ= Subject key identifier: E2:6E:B8:91:9E:37:C4:A3:79:B3:75:D9:2B:DF:6B:05:0E:FF:DC:86 Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 Certificate issuer: /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft Manifest number: 0BD3 Signing time: Tue 22 Sep 2026 18:59:47 +0000 Manifest this update: Tue 22 Sep 2026 18:59:47 +0000 Manifest next update: Tue 29 Sep 2026 18:59:47 +0000 Files and hashes: 1: iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl (hash: GBp0ZkwmNVKFQ47ZVsrKeHL8xZwGXHyUtqF38Bv3bDM=) 2: FD86FDF6707311F1B807F94B77A30FBC.roa (hash: gDZWZJSsCK5hepLcVhYuiySc2jdwfmmWoqRN6NOgOZY=) 3: 1EDAC9BA85AA11F1B700E1E55BA30FBC.roa (hash: kf1pHs/8bNvsCfkzb+oZx7Nt2agM4ptLzDTnsP5UWjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Validity Not Before: Sep 22 18:59:47 2026 GMT Not After : Sep 29 18:59:47 2026 GMT Subject: CN=6ab2d023-c49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:fd:a2:36:7c:e2:ed:1e:fd:a7:8f:ed:27: 24:49:df:14:55:9b:f7:c9:be:5b:cb:6c:34:2d:a6: a8:b6:04:8c:37:b2:b8:5b:4a:fd:c1:0c:4b:77:ea: ec:a4:9e:de:74:a2:cb:d0:99:73:05:9c:67:d0:3e: 9f:40:06:f8:0b:3c:22:df:8e:4e:8e:c6:35:bf:86: bf:8f:ef:87:43:b8:9b:2f:bb:3f:0a:ae:ce:1d:cd: 37:9f:ea:55:cc:cb:c0:eb:da:25:54:08:3d:1b:99: d2:c0:4a:b9:c0:d1:c5:36:f5:a0:df:b9:5d:b1:27: 9c:ad:3c:b7:9e:7a:07:b5:fc:21:11:50:bc:4e:5e: 90:fd:42:d6:c9:31:52:7a:f5:0e:bb:03:aa:e7:fc: 7f:bd:77:dc:ee:e6:3c:e2:94:4b:9c:27:e0:80:1a: e4:b2:e2:dc:b1:88:17:32:93:de:f2:7f:c6:b1:fd: 87:c5:8c:b1:25:18:a0:a4:72:08:d8:1e:b0:01:7c: f8:85:1f:0a:ec:44:28:83:5e:69:32:7e:3f:fd:68: 97:22:bc:de:42:5e:27:63:57:c7:ca:c6:4a:72:a9: ce:7f:22:55:ef:0d:73:11:57:5c:54:74:f1:47:a3: 3c:f4:09:f9:8d:86:2c:35:47:05:84:54:dc:33:e5: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6E:B8:91:9E:37:C4:A3:79:B3:75:D9:2B:DF:6B:05:0E:FF:DC:86 X509v3 Authority Key Identifier: keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:3f:01:78:b2:85:7a:5e:43:da:d7:ba:68:81:d6:7c:c2:44: 0c:f5:d0:90:b7:a7:a4:a8:0b:c9:7f:2f:61:c3:88:f8:2f:12: db:77:ac:7e:c4:c5:1b:b3:54:c4:5c:8a:07:d7:55:70:ce:6e: 28:80:7f:54:1d:a8:42:c2:dd:e5:8e:bb:68:65:a2:8c:3d:4a: 2d:a2:0e:c7:68:45:44:94:7b:bd:bd:df:5e:d3:81:15:2e:c2: 4b:17:26:bc:f1:3a:7f:9e:45:1d:82:02:54:2a:6b:97:18:89: a8:82:3c:89:f8:66:bd:e7:8a:62:ff:ea:e0:33:7a:fa:f2:56: ac:ff:e5:2a:9a:01:e4:e3:2d:9f:a3:a3:a3:39:a6:3f:3d:58: 60:53:0d:a2:f6:4c:2e:b8:39:87:3a:c1:5e:14:25:c5:5c:b7: 45:34:2f:be:eb:f1:7d:fa:27:6b:d0:8c:1a:e5:21:85:e7:5f: 59:6d:de:29:8b:43:35:13:8b:a6:b0:ff:54:bb:01:e1:d3:da: bf:7e:f2:26:ad:3c:f4:d0:18:d7:f5:6e:95:b2:1b:d1:9e:cc: 60:48:17:da:8d:f8:63:5c:e6:d8:fe:26:dc:67:20:46:c5:02: 69:85:f7:22:80:5a:26:2d:c4:06:ea:56:fc:52:e2:74:c3:8d: 8b:4b:c0:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDkwQzExMC8GA1UEBRMoOEFFRTI5REIyRkU5MTQwN0ZFNDBFNEJFNzhDNDA2MjZE N0UxOEZCMTAeFw0yNjA5MjIxODU5NDdaFw0yNjA5MjkxODU5NDdaMBgxFjAUBgNV BAMTDTZhYjJkMDIzLWM0OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeQ/2iNnzi7R79p4/tJyRJ3xRVm/fJvlvLbDQtpqi2BIw3srhbSv3BDEt36uyk nt50osvQmXMFnGfQPp9ABvgLPCLfjk6OxjW/hr+P74dDuJsvuz8Krs4dzTef6lXM y8Dr2iVUCD0bmdLASrnA0cU29aDfuV2xJ5ytPLeeege1/CERULxOXpD9QtbJMVJ6 9Q67A6rn/H+9d9zu5jzilEucJ+CAGuSy4tyxiBcyk97yf8ax/YfFjLElGKCkcgjY HrABfPiFHwrsRCiDXmkyfj/9aJcivN5CXidjV8fKxkpyqc5/IlXvDXMRV1xUdPFH ozz0CfmNhiw1RwWEVNwz5aqrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4m64kZ43 xKN5s3XZK99rBQ7/3IYwHwYDVR0jBBgwFoAUiu4p2y/pFAf+QOS+eMQGJtfhj7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOTBDL0I3QzRFOTM2NUQy OTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFmLVFPUy1lTVFHSnRmaGo3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXU0cDJ5X3BGQWYtUU9TLWVNUUdKdGZoajdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OTBDL0I3QzRFOTM2NUQyOTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFm LVFPUy1lTVFHSnRmaGo3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADPwF4soV6XkPa17pogdZ8wkQM9dCQt6ekqAvJfy9hw4j4LxLbd6x+xMUbs1TE XIoH11Vwzm4ogH9UHahCwt3ljrtoZaKMPUotog7HaEVElHu9vd9e04EVLsJLFya8 8Tp/nkUdggJUKmuXGImogjyJ+Ga954pi/+rgM3r68las/+UqmgHk4y2fo6OjOaY/ PVhgUw2i9kwuuDmHOsFeFCXFXLdFNC++6/F9+idr0Iwa5SGF519Zbd4pi0M1E4um sP9UuwHh09q/fvImrTz00BjX9W6VshvRnsxgSBfajfhjXObY/ibcZyBGxQJphfci gFomLcQG6lb8UuJ0w42LS8Bz -----END CERTIFICATE-----Generated at Wed Sep 23 21:02:37 2026 by rpki-client