$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: 820f9bOBOfpWKVzTe8bTMvIKMJi6r6JE498sSLEYzSc= Subject key identifier: 5D:E6:3A:6B:09:C7:CE:2F:80:37:38:66:39:75:84:CC:80:A6:75:3B Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 024E Signing time: Fri 25 Sep 2026 02:27:06 +0000 Manifest this update: Fri 25 Sep 2026 02:27:05 +0000 Manifest next update: Fri 02 Oct 2026 02:27:05 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: 5mAnQ2pa546z2XOuBrRHGHWUhddq2vvb3M26FSLQvnM=) 2: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) 3: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) 4: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Sep 25 02:27:05 2026 GMT Not After : Oct 2 02:27:05 2026 GMT Subject: CN=6ab5dbfa-2229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:02:e7:51:c6:e2:66:92:30:fe:38:cf:c5: ee:cf:3a:e7:a7:6c:80:e6:1f:e0:ac:bf:fd:6e:e9: 6c:60:a1:26:1a:e7:7a:04:0f:c7:c6:f2:22:d4:da: 2a:23:5d:83:5e:31:f2:82:b4:ca:6a:eb:3c:d6:24: bb:40:a1:4f:fa:c8:dd:70:2f:68:c3:5f:bf:44:49: 93:b9:09:36:f3:2b:1f:da:a2:6e:03:e9:20:ef:87: 04:88:d2:4a:c0:07:7d:d3:39:cd:06:b4:32:9c:b2: 89:c5:d6:32:d1:84:fc:1f:71:80:40:09:ad:78:d0: 63:09:72:f5:33:50:4d:54:1b:e7:a1:c9:99:83:c8: 7f:31:12:bc:5e:01:8f:fd:3d:f0:a1:20:ad:5f:61: a8:4c:bb:9e:15:7d:38:97:4a:be:3d:93:07:68:b3: 92:85:fc:10:f8:1f:b6:e4:b7:17:0b:67:c4:f0:1c: 84:53:17:4f:d5:0d:c6:d2:1b:c9:94:22:2e:13:c8: d2:63:49:2a:5c:7b:8e:d9:36:de:55:51:96:ff:c7: 68:bc:4c:b4:08:bb:44:1d:a3:98:79:dc:05:a7:1a: ee:b0:2b:da:de:b6:3f:31:79:a4:af:94:53:ee:89: c1:f1:6a:cc:d4:0c:6c:67:b0:9d:b6:d0:ab:fc:61: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E6:3A:6B:09:C7:CE:2F:80:37:38:66:39:75:84:CC:80:A6:75:3B X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:78:b1:f9:29:9a:10:c3:91:ee:26:15:23:0d:d9:00:27:28: 35:b0:55:20:87:16:4a:97:05:d1:9d:b0:6c:0d:f0:8f:0a:f7: 13:44:c2:53:b7:b0:b6:f1:07:ab:cb:d5:6d:47:f1:52:dc:15: dd:64:46:6f:34:d0:f0:bd:ff:4a:c1:62:f5:51:c6:a3:07:38: c9:b6:cb:a6:36:c0:51:8b:ff:8e:dc:7a:f7:b9:1b:65:45:a9: 33:f7:34:f6:7d:27:3a:d9:56:59:de:6b:f7:ba:f1:bd:6f:92: 91:27:bb:14:35:78:78:39:0c:02:9d:ad:8a:6d:96:31:06:ab: 99:c8:1b:c2:5f:52:00:20:fe:6a:2b:b5:fa:8d:1a:33:5b:5a: bb:db:8c:4a:9c:ff:1b:09:56:03:eb:4a:0f:18:53:45:57:e6: f0:33:25:bb:e2:1a:17:56:a2:91:37:45:fe:37:26:7c:d6:90: cd:80:49:cd:d2:29:58:af:34:81:86:8a:61:e7:b7:7e:3e:fc: 2e:9b:e5:07:16:9c:9e:1a:78:0e:62:8c:ec:39:d8:a0:bc:be: c8:89:53:49:de:51:c0:0c:83:e1:84:fd:9d:6b:97:bd:5e:de: 9f:b9:bd:33:6e:4d:31:a5:30:79:25:4e:07:b2:53:92:86:dd: 54:9b:86:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwOTI1MDIyNzA1WhcNMjYxMDAyMDIyNzA1WjAYMRYwFAYD VQQDEw02YWI1ZGJmYS0yMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhmoC51HG4maSMP44z8Xuzzrnp2yA5h/grL/9bulsYKEmGud6BA/HxvIi1Noq I12DXjHygrTKaus81iS7QKFP+sjdcC9ow1+/REmTuQk28ysf2qJuA+kg74cEiNJK wAd90znNBrQynLKJxdYy0YT8H3GAQAmteNBjCXL1M1BNVBvnocmZg8h/MRK8XgGP /T3woSCtX2GoTLueFX04l0q+PZMHaLOShfwQ+B+25LcXC2fE8ByEUxdP1Q3G0hvJ lCIuE8jSY0kqXHuO2TbeVVGW/8dovEy0CLtEHaOYedwFpxrusCva3rY/MXmkr5RT 7onB8WrM1AxsZ7CdttCr/GEQ4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3mOmsJ x84vgDc4Zjl1hMyApnU7MB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtnix+SmaEMOR7iYVIw3ZACcoNbBVIIcWSpcF0Z2wbA3wjwr3E0TCU7ewtvEH q8vVbUfxUtwV3WRGbzTQ8L3/SsFi9VHGowc4ybbLpjbAUYv/jtx697kbZUWpM/c0 9n0nOtlWWd5r97rxvW+SkSe7FDV4eDkMAp2tim2WMQarmcgbwl9SACD+aiu1+o0a M1tau9uMSpz/GwlWA+tKDxhTRVfm8DMlu+IaF1aikTdF/jcmfNaQzYBJzdIpWK80 gYaKYee3fj78LpvlBxacnhp4DmKM7DnYoLy+yIlTSd5RwAyD4YT9nWuXvV7en7m9 M25NMaUweSVOB7JTkobdVJuGeQ== -----END CERTIFICATE-----Generated at Sat Sep 26 16:50:28 2026 by rpki-client