$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft File: IYcWgl28-N8zl0SFeJ5HubEAyyk.mft (raw, json) Hash identifier: 2hcrwNq1T1XKfeowzOg06nF8T0kyIlV/aVk0LspzbcM= Subject key identifier: 1F:93:57:B2:FF:22:0A:6E:1A:AA:4C:54:5D:6A:EF:9F:F2:91:D5:7C Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29 Certificate issuer: /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft Manifest number: 25 Signing time: Sun 11 Oct 2026 09:32:01 +0000 Manifest this update: Sun 11 Oct 2026 09:32:01 +0000 Manifest next update: Sun 18 Oct 2026 09:32:01 +0000 Files and hashes: 1: IYcWgl28-N8zl0SFeJ5HubEAyyk.crl (hash: eWEQ+9pZ9D0jDAkwMTyYAO9jXjCpFnkPvajRzD4iBRg=) 2: 9F7A4D22950711F196EC2BEB4C11F970.roa (hash: ii4enchmx/iTiouv3evG9RhEX3dHM7Ii6fGAmSdmsqY=) 3: 7913A610950711F18B35F6754C11F970.roa (hash: Q8JIey66nEoQJLkb6C5AMFi1AtY6XdaeX1xLRY7kKvs=) 4: AFADDB38960011F18583530F5711F970.roa (hash: bGe10TBYBAca5SNsLjK2aIGEmSAIakbZTdRvYFBgU0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29 Validity Not Before: Oct 11 09:32:01 2026 GMT Not After : Oct 18 09:32:01 2026 GMT Subject: CN=6acb5791-1e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:54:f3:84:d4:7d:04:db:67:5d:5c:da:9f:d1: 2c:e3:21:ef:2d:9d:f9:e6:7d:0e:70:44:06:f2:87: 9d:e5:c4:86:6a:8a:7d:e5:29:90:ee:e3:cb:0e:ad: 44:2f:ad:e6:b4:76:15:9c:40:8c:9e:1d:d0:ed:ae: 1b:d8:29:2b:22:92:5e:13:fa:a9:90:fa:82:2c:2b: 1f:ec:bc:ad:03:5e:77:e1:1e:a5:89:64:e4:e3:0b: a0:d0:96:4c:d9:f6:69:a4:cd:e3:d5:56:a9:af:32: 16:bc:ee:16:3c:fc:00:aa:7f:59:1a:86:b7:0b:f2: e0:f8:b8:c2:d3:cc:9d:76:4c:96:a4:99:7c:89:c8: f8:8f:e4:68:f6:d4:d9:06:59:5b:10:c5:d6:d3:a2: 34:29:a6:62:69:ea:6d:df:76:8b:50:e1:35:9a:07: e3:78:f4:98:60:53:1e:1f:e3:59:8e:9b:93:7c:ec: 75:cc:30:36:e9:ae:49:44:02:4f:30:b6:de:c0:02: f0:a3:54:26:63:2a:c7:53:3a:2a:f6:74:2a:65:9b: e7:79:d0:a3:51:4e:48:ea:55:b9:dc:96:5c:a8:8e: fe:a5:8d:06:91:dd:c8:cb:db:f3:b1:89:a9:72:7b: cd:73:6f:6a:1b:81:72:8b:60:f4:f1:d9:eb:64:63: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:57:B2:FF:22:0A:6E:1A:AA:4C:54:5D:6A:EF:9F:F2:91:D5:7C X509v3 Authority Key Identifier: keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:06:0e:5f:19:56:6b:da:c2:d1:8a:d0:d2:06:0f:0a:d6:d9: 64:24:64:66:c3:3c:ba:59:55:c8:49:3b:b9:1f:0f:d0:09:22: a4:3b:ba:bc:f2:22:d7:34:f3:71:1b:a1:cd:a3:35:36:f1:d0: 1e:1b:c2:e4:a0:5e:0b:c5:e9:5b:f5:91:00:0e:80:93:67:5e: 79:f3:de:92:d0:31:b4:b8:c5:7a:07:77:11:d5:f9:49:d4:b7: 81:33:83:6f:fe:a2:de:e8:28:0d:64:dd:bc:c0:50:97:c0:f7: 29:31:12:fb:1a:30:75:bd:a2:b8:ed:87:6a:d6:a0:f8:1c:31: 40:e0:7e:54:00:62:59:9f:0d:c1:c6:7a:e0:94:2d:58:cb:44: 22:54:29:34:49:e6:b4:33:9d:51:8b:55:b0:17:fa:d1:57:a2: f3:88:84:26:9b:18:cd:54:e0:d3:18:f5:42:c9:ff:c0:27:a4: 49:84:83:5d:3d:11:44:90:13:53:6e:0d:b7:52:90:83:49:b9: 9b:17:01:9d:58:08:f9:20:3a:7f:57:e1:60:1c:f9:c7:75:76: d0:2a:ec:90:a8:38:8a:5c:ba:55:da:70:f8:58:c3:b5:25:dc: a6:b9:8e:6a:fa:15:47:5b:cc:f4:e0:e3:0c:8d:67:48:cc:13: bd:da:a2:2b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTJEOTExMC8GA1UEBRMoMjE4NzE2ODI1REJDRjhERjMzOTc0NDg1Nzg5RTQ3QjlC MTAwQ0IyOTAeFw0yNjEwMTEwOTMyMDFaFw0yNjEwMTgwOTMyMDFaMBgxFjAUBgNV BAMTDTZhY2I1NzkxLTFlMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzVPOE1H0E22ddXNqf0SzjIe8tnfnmfQ5wRAbyh53lxIZqin3lKZDu48sOrUQv rea0dhWcQIyeHdDtrhvYKSsikl4T+qmQ+oIsKx/svK0DXnfhHqWJZOTjC6DQlkzZ 9mmkzePVVqmvMha87hY8/ACqf1kahrcL8uD4uMLTzJ12TJakmXyJyPiP5Gj21NkG WVsQxdbTojQppmJp6m3fdotQ4TWaB+N49JhgUx4f41mOm5N87HXMMDbprklEAk8w tt7AAvCjVCZjKsdTOir2dCplm+d50KNRTkjqVbncllyojv6ljQaR3cjL2/Oxialy e81zb2obgXKLYPTx2etkY5iTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUH5NXsv8i Cm4aqkxUXWrvn/KR1XwwHwYDVR0jBBgwFoAUIYcWgl28+N8zl0SFeJ5HubEAyykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMkQ5L0NEQjFBN0NDOTUw NjExRjFBNDZBQjczNjRDMTFGOTcwL0lZY1dnbDI4LU44emwwU0ZlSjVIdWJFQXl5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVljV2dsMjgtTjh6bDBTRmVKNUh1YkVBeXlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MkQ5L0NEQjFBN0NDOTUwNjExRjFBNDZBQjczNjRDMTFGOTcwL0lZY1dnbDI4LU44 emwwU0ZlSjVIdWJFQXl5ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArBg5fGVZr2sLRitDSBg8K1tlkJGRmwzy6WVXISTu5Hw/QCSKkO7q88iLXNPNx G6HNozU28dAeG8LkoF4Lxelb9ZEADoCTZ155896S0DG0uMV6B3cR1flJ1LeBM4Nv /qLe6CgNZN28wFCXwPcpMRL7GjB1vaK47Ydq1qD4HDFA4H5UAGJZnw3BxnrglC1Y y0QiVCk0Sea0M51Ri1WwF/rRV6LziIQmmxjNVODTGPVCyf/AJ6RJhINdPRFEkBNT bg23UpCDSbmbFwGdWAj5IDp/V+FgHPnHdXbQKuyQqDiKXLpV2nD4WMO1JdymuY5q +hVHW8z04OMMjWdIzBO92qIr -----END CERTIFICATE-----Generated at Sun Oct 11 17:32:25 2026 by rpki-client