$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json) Hash identifier: gd4HOHF1XkFtziWHmjEAF33gf2wPlggGUdybSTWyMzs= Subject key identifier: 99:51:5F:62:26:30:8E:D3:39:FA:C1:D3:D7:54:6E:2E:9D:34:63:E7 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft Manifest number: 0784 Signing time: Mon 12 Oct 2026 21:57:32 +0000 Manifest this update: Mon 12 Oct 2026 21:57:32 +0000 Manifest next update: Mon 19 Oct 2026 21:57:32 +0000 Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: wi08x8+kYbo9aio2fn0xmtzITai/0x5pm3aiQNRr4os=) 2: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: 6v5ejZfpThNkCGdZpElSBNnAPrFliabgKJpDCt299R0=) 3: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: kX4lwSq0b8cISkWx2ijvpu5VCo8Hlo55HVdaxhHk2dU=) 4: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: nkMuqXHF/RySePSZ24/1EeVyhSQICCcs6NULkRxvzXA=) 5: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: 9kLyz41+LyEUa7Qe6tisfAGLex0hD3yPOszPhWqjqtA=) 6: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: K9a3qlzvjX851djZATBy7HtK/BnNMu8v3TQ/RW6t65g=) 7: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: CS2R8tkabqv/MCZKUBC01yde/O1dQ83gQrEzytIlA0E=) 8: A08AFBB284F211EE89828225C4F9AE02.roa (hash: 9AVVD+icBTsjsE1p6yw2d23t+3pL5hwBjgfMVN+ybEk=) 9: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: 1sw8QAa0S7c7eRNoU5sA7YgpwjYsQi22yjKGbAqsiCw=) 10: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: uXnEhZMN5p3rr0PlaZXyG56XwBcCtum50akoQAm9H/U=) 11: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: cLqF+FYKgySilfFTaVNQOA0caLM+dLKLkkEq/OktR3Y=) 12: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: yjiUEg90fnpv0QBcsW6mTbQABnoEdV6bwbUeRkmNaXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 21:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 12 21:57:32 2026 GMT Not After : Oct 19 21:57:32 2026 GMT Subject: CN=6acd57cc-47b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:e5:77:ff:77:ed:a9:4b:5b:11:ad:70:4b: 7a:d1:88:2b:28:86:25:90:c8:8d:92:63:b6:bc:51: f5:c7:f6:5c:29:7b:ea:d0:9d:e5:75:5f:c0:c7:b8: ce:3f:a1:c6:67:ad:47:48:06:c6:fb:f1:dd:78:23: e3:a7:c6:a3:da:b2:52:06:99:16:6b:71:39:19:b0: a9:9b:96:f5:7f:68:7f:02:ba:7e:49:d0:6d:14:cb: f3:11:9a:fb:a6:5e:80:73:f2:da:40:1d:37:d3:81: 26:20:30:38:a7:14:87:9b:75:0f:3a:0f:d2:30:8b: c4:7a:a8:f2:2a:8a:a8:08:c5:81:f1:89:ce:8b:dc: a2:2d:a9:cd:6e:82:ed:c1:40:9f:e9:2e:96:58:b5: 20:46:f9:a0:61:3b:5d:93:95:fc:59:37:04:8b:42: f7:f7:3f:bc:6a:0d:57:e0:79:4b:59:d2:1e:23:39: 25:5f:95:4c:cc:ce:34:70:bf:47:a3:fb:ac:a5:23: 44:68:e8:a5:68:0d:e6:c4:51:b4:e2:38:68:d4:1e: 39:63:4a:8f:e5:a7:4e:3d:47:c2:ca:03:aa:77:f9: b4:c7:29:48:db:b8:79:9e:d0:9b:8f:21:7d:71:5d: 93:70:1e:04:e9:cc:86:86:ab:01:11:a6:28:01:08: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:51:5F:62:26:30:8E:D3:39:FA:C1:D3:D7:54:6E:2E:9D:34:63:E7 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:57:97:4f:bf:1c:e0:04:d7:d0:2b:d6:ae:ce:7b:1d:41:f2: c4:0f:57:94:e6:47:dc:73:ac:1f:22:bb:2a:0d:af:f3:18:a6: c0:51:4a:3c:55:6d:26:db:2f:e5:11:31:dd:90:c0:a0:94:87: 52:f0:4e:3d:8d:ca:f8:59:7b:c5:1f:44:64:69:92:f3:d4:5f: 10:87:e4:5a:59:c3:36:12:ad:52:61:14:67:5b:3e:39:06:11: cc:12:5b:60:86:14:0c:22:75:8c:9b:80:a2:72:4f:00:e9:97: 13:74:56:dc:69:58:8b:f8:a5:04:39:09:86:7e:7b:cb:0b:5b: 4d:db:31:b9:e7:25:08:2b:1c:82:3a:59:8a:6f:bf:c4:9b:09: 7b:60:f7:88:c8:95:2f:33:be:d4:05:57:85:78:9e:f9:7c:b0: 2a:1a:c7:56:1a:ea:93:9f:b9:94:10:f1:91:af:ad:9f:f6:86: 6a:74:c6:52:2d:9c:fa:28:0e:7f:7b:6e:4e:4e:25:69:8f:82: c2:50:8c:78:81:fa:af:ac:21:63:79:75:6e:7a:a9:33:74:e4: 3d:fd:03:71:fd:0d:aa:1c:e0:5e:c0:fc:79:0b:ff:95:c8:3e: a4:fe:d5:6a:7d:81:32:22:5e:19:74:82:3e:95:18:6c:72:4b: 1c:9e:b4:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjYxMDEyMjE1NzMyWhcNMjYxMDE5MjE1NzMyWjAYMRYwFAYD VQQDEw02YWNkNTdjYy00N2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34bld/937alLWxGtcEt60YgrKIYlkMiNkmO2vFH1x/ZcKXvq0J3ldV/Ax7jO P6HGZ61HSAbG+/HdeCPjp8aj2rJSBpkWa3E5GbCpm5b1f2h/Arp+SdBtFMvzEZr7 pl6Ac/LaQB0304EmIDA4pxSHm3UPOg/SMIvEeqjyKoqoCMWB8YnOi9yiLanNboLt wUCf6S6WWLUgRvmgYTtdk5X8WTcEi0L39z+8ag1X4HlLWdIeIzklX5VMzM40cL9H o/uspSNEaOilaA3mxFG04jho1B45Y0qP5adOPUfCygOqd/m0xylI27h5ntCbjyF9 cV2TcB4E6cyGhqsBEaYoAQgf3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlRX2Im MI7TOfrB09dUbi6dNGPnMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3 Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIFeXT78c4ATX0CvWrs57HUHyxA9XlOZH3HOsHyK7Kg2v8ximwFFKPFVtJtsv 5REx3ZDAoJSHUvBOPY3K+Fl7xR9EZGmS89RfEIfkWlnDNhKtUmEUZ1s+OQYRzBJb YIYUDCJ1jJuAonJPAOmXE3RW3GlYi/ilBDkJhn57ywtbTdsxueclCCscgjpZim+/ xJsJe2D3iMiVLzO+1AVXhXie+XywKhrHVhrqk5+5lBDxka+tn/aGanTGUi2c+igO f3tuTk4laY+CwlCMeIH6r6whY3l1bnqpM3TkPf0Dcf0NqhzgXsD8eQv/lcg+pP7V an2BMiJeGXSCPpUYbHJLHJ60FQ== -----END CERTIFICATE-----Generated at Tue Oct 13 17:07:37 2026 by rpki-client