$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: AeECv/AC9wWwlSXOTpExUBqJqADnsviczw2eaI/1Atw= Subject key identifier: 47:A8:3F:5D:52:CB:50:BA:57:90:7D:B8:00:32:A3:75:ED:46:92:62 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: E1 Signing time: Fri 25 Sep 2026 06:48:03 +0000 Manifest this update: Fri 25 Sep 2026 06:48:03 +0000 Manifest next update: Fri 02 Oct 2026 06:48:03 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: cOoFuHMJcpZPjwyFdNJ9qaP9QMPTLWAOcm43LQIK2Y4=) 2: 48C2333271D011F18649332165A30FBC.roa (hash: LDP5Esly8VYRBXjaigIiSwQbm+Rq9+J2C6Fns5Nz1AU=) 3: 7E782718940B11F1AE7863F93E11F970.roa (hash: XTTBwDL+3ZX31Mb6Vk3dZi/vUMZFs0rfR5N64dJPp9c=) 4: C8E215DA72BD11F1A5B8119C6EA30FBC.roa (hash: 42F8H8tLM7SW8VbxSmhfljA+OlaX9YJW6w/yvaOHuEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Sep 25 06:48:03 2026 GMT Not After : Oct 2 06:48:03 2026 GMT Subject: CN=6ab61923-3573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:a4:fb:16:55:68:3a:5a:aa:2f:6e:df:80: 90:38:d1:0c:9b:eb:35:6c:ba:43:78:e5:ab:34:b8: cf:4c:fe:71:e8:9e:c8:13:e1:ba:10:7c:25:56:be: 7f:7b:8e:95:d6:4a:c8:a1:b6:0d:60:27:32:f8:f3: e1:e2:09:42:5b:77:22:5c:b8:db:e7:76:a2:0a:cb: 10:04:26:3e:9e:31:1a:e9:23:c5:4c:7d:a1:82:22: cd:8f:62:61:48:50:4c:29:38:e8:aa:10:08:48:6c: 68:1a:6e:73:6b:e7:02:03:41:18:f4:fb:1e:f7:c0: 13:d3:90:e0:ae:da:9c:ca:ce:25:1f:09:45:12:1c: a3:f8:d1:38:b2:c3:26:9d:ef:8c:f7:37:5f:d7:2a: d8:66:89:0f:de:1a:3c:01:e2:11:e4:ec:fd:96:1b: 3b:6f:16:de:8f:a8:8d:e0:1e:76:27:3b:9b:b3:16: de:ac:f9:5c:92:b1:83:09:8b:b9:d0:aa:ea:82:ec: b8:7b:7d:e9:0e:1b:e4:02:fd:20:6b:a3:c1:ef:da: ee:96:c3:e7:55:db:af:7c:ff:a1:7e:ba:52:c0:71: 11:e4:f7:72:85:b7:f4:12:03:a1:a4:12:39:50:5f: 31:7b:52:b7:56:13:d7:63:df:c1:6c:b0:18:d7:94: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A8:3F:5D:52:CB:50:BA:57:90:7D:B8:00:32:A3:75:ED:46:92:62 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:59:a0:2d:9e:94:b8:e6:a9:83:72:26:cc:4c:90:cc:7f:86: ac:0a:62:a9:c8:a8:6a:1b:cb:08:37:79:b1:ce:dc:8b:71:03: 30:f8:26:cf:71:ca:3b:84:b4:5a:a1:68:1a:5e:39:d8:ac:e2: fd:03:75:99:a9:b8:41:83:16:49:24:3d:fb:4e:4d:0c:2e:f0: 17:74:80:57:6f:0d:bc:2f:3d:9e:1d:fc:f0:dd:58:85:8e:27: 5a:83:40:f2:5c:40:5b:6d:03:40:76:96:09:ec:19:c1:a1:32: 5f:02:62:b1:fb:2a:eb:60:0a:db:5c:2d:6d:4d:6d:3d:90:aa: c4:92:21:52:85:f9:c7:9c:15:18:90:78:c2:2a:8b:ec:c2:ed: 07:49:3d:9d:ae:d7:86:9d:4b:f7:5d:34:ec:25:75:07:02:30: 26:0a:46:f5:4a:2e:51:03:9c:7e:3b:2a:ed:da:18:0f:08:96: fa:17:0e:4a:d5:1e:35:9c:57:92:b7:01:07:8b:07:a9:db:94: f6:4d:31:5b:57:54:ab:31:1b:fd:dd:eb:80:d9:f9:b7:50:80: 16:f3:3b:5a:16:d8:6b:3b:f9:cb:11:e6:a1:f0:72:16:7e:45: 2e:77:d5:3d:1e:f1:6f:a8:02:0b:df:24:ec:fd:7f:21:b4:3d: 00:7b:d3:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwRTAxMTAvBgNVBAUTKDg5NzA3N0I3MUYyQzVBRURERTZDMURENDk1NDdEQ0M5 OTUyQ0RBQkUwHhcNMjYwOTI1MDY0ODAzWhcNMjYxMDAyMDY0ODAzWjAYMRYwFAYD VQQDEw02YWI2MTkyMy0zNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3smk+xZVaDpaqi9u34CQONEMm+s1bLpDeOWrNLjPTP5x6J7IE+G6EHwlVr5/ e46V1krIobYNYCcy+PPh4glCW3ciXLjb53aiCssQBCY+njEa6SPFTH2hgiLNj2Jh SFBMKTjoqhAISGxoGm5za+cCA0EY9Pse98AT05Dgrtqcys4lHwlFEhyj+NE4ssMm ne+M9zdf1yrYZokP3ho8AeIR5Oz9lhs7bxbej6iN4B52JzubsxberPlckrGDCYu5 0Krqguy4e33pDhvkAv0ga6PB79rulsPnVduvfP+hfrpSwHER5Pdyhbf0EgOhpBI5 UF8xe1K3VhPXY9/BbLAY15SKbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeoP11S y1C6V5B9uAAyo3XtRpJiMB8GA1UdIwQYMBaAFIlwd7cfLFrt3mwd1JVH3MmVLNq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDBFMC8zRkJCNUUwNDdC NTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1M2ViQjNVbFVmY3laVXMy cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDBFMC8zRkJCNUUwNDdCNTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1 M2ViQjNVbFVmY3laVXMycjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADVmgLZ6UuOapg3ImzEyQzH+GrApiqcioahvLCDd5sc7ci3EDMPgmz3HKO4S0 WqFoGl452Kzi/QN1mam4QYMWSSQ9+05NDC7wF3SAV28NvC89nh388N1YhY4nWoNA 8lxAW20DQHaWCewZwaEyXwJisfsq62AK21wtbU1tPZCqxJIhUoX5x5wVGJB4wiqL 7MLtB0k9na7Xhp1L91007CV1BwIwJgpG9UouUQOcfjsq7doYDwiW+hcOStUeNZxX krcBB4sHqduU9k0xW1dUqzEb/d3rgNn5t1CAFvM7WhbYazv5yxHmofByFn5FLnfV PR7xb6gCC98k7P1/IbQ9AHvT8Q== -----END CERTIFICATE-----Generated at Fri Sep 25 15:09:22 2026 by rpki-client