$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: Qp8gZsVTk/Imf6z6gMbk0Vj6NwkbMzB90BM88FMAQGw= Subject key identifier: 26:A5:55:ED:C7:5F:B7:63:65:EF:EA:AF:97:1F:20:BD:8C:8A:92:FA Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0A8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 0A7B Signing time: Sat 10 Oct 2026 19:41:12 +0000 Manifest this update: Sat 10 Oct 2026 19:41:11 +0000 Manifest next update: Sat 17 Oct 2026 19:41:11 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: +kV5Fdm31pcvafUHxdGah4EMWNj4mOpQVTt3NAOKKL0=) 2: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: yPrHXW56u10NuXEptMs9yPazlowJhKqcgzRm+PPp5R0=) 3: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8KJdeJ1nwNs4LjppGEg0usy43brI/WoaqsTc6Du3z9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2702 (0xa8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: Oct 10 19:41:11 2026 GMT Not After : Oct 17 19:41:11 2026 GMT Subject: CN=6aca94d7-59b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:fc:ab:ad:88:68:61:45:4e:d4:6e:3c:fc: 70:c6:f4:5c:00:bf:06:5f:f0:21:77:ef:4a:47:9b: 2b:db:42:15:c1:f3:55:68:0b:f9:b5:fb:44:ad:20: 2b:7e:44:4e:6f:dc:cb:f1:5b:1b:8f:88:d8:8b:56: d4:26:ee:0f:d7:b9:77:7c:6d:a2:d1:3e:f4:74:63: e5:ff:cc:1a:4d:ae:1a:71:75:26:b7:cf:d7:06:00: 19:60:43:19:a8:e2:ed:4f:b6:38:b6:1e:e9:29:a8: 25:24:26:f7:72:af:4f:de:20:e4:0d:fa:bf:e6:ee: 03:5c:17:28:8d:bc:3a:71:ce:17:77:12:da:37:79: 8f:bd:b9:28:f6:ac:03:c8:99:55:e3:39:bd:f5:20: 96:60:07:ec:ce:94:12:91:98:38:02:b9:f5:bc:da: ae:d7:13:84:a6:1a:25:cd:43:47:af:fe:6c:eb:64: 0f:e5:33:9e:0e:c1:6a:cc:9a:94:17:14:e5:5f:3e: 40:20:45:74:66:ac:fb:e8:9c:5e:c2:c3:3f:9f:db: 61:04:12:3c:1d:06:29:79:0b:82:c8:f7:9c:59:ac: 5b:8c:be:b4:94:09:1c:06:4e:cb:44:b6:d7:b2:09: 12:eb:5f:50:b1:b2:e5:a4:82:95:d6:65:0f:4f:81: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A5:55:ED:C7:5F:B7:63:65:EF:EA:AF:97:1F:20:BD:8C:8A:92:FA X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:5b:20:83:f4:d5:5a:99:87:42:ef:3f:ad:2b:da:e9:33:d2: 71:f6:94:81:c5:9e:94:8c:7f:f1:08:a3:5b:62:4d:bc:98:32: d4:8a:ff:d4:38:4f:d9:eb:b6:4c:4e:5b:64:99:19:da:45:3a: 17:a3:74:5e:ad:71:22:16:96:e7:fe:52:20:e6:46:1c:16:44: 0b:d7:c6:6e:1b:b8:3d:45:c6:21:a7:52:ef:cf:85:f9:10:b8: c6:54:ec:e4:f1:ef:a8:46:12:f8:aa:e6:29:a1:00:9d:86:d3: 5f:3d:c0:38:a5:04:f9:46:72:32:b6:9f:5a:03:4a:70:50:e1: e6:ab:dc:9b:10:d4:63:d7:0b:14:a0:d3:23:51:77:c3:de:8b: 4e:1d:39:79:7c:f4:f4:b9:f2:2b:ab:59:ac:85:a6:5c:1f:3b: dc:5c:88:af:b9:b3:01:60:cc:1f:e1:83:6e:bb:49:4a:a9:fe: 80:4e:3e:73:dd:41:bf:d5:21:95:a9:8a:c6:95:8b:87:13:51: e2:20:8c:fb:c6:bf:05:07:02:8d:61:e8:7e:eb:0c:2f:12:77: 8e:2d:bc:22:60:7c:c7:c6:e1:81:20:cb:e2:8c:97:b9:26:4b: ff:f8:d8:0d:51:da:59:61:80:85:d4:86:28:89:e3:b5:3a:10: 81:ae:30:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjYxMDEwMTk0MTExWhcNMjYxMDE3MTk0MTExWjAYMRYwFAYD VQQDEw02YWNhOTRkNy01OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjOH8q62IaGFFTtRuPPxwxvRcAL8GX/Ahd+9KR5sr20IVwfNVaAv5tftErSAr fkROb9zL8Vsbj4jYi1bUJu4P17l3fG2i0T70dGPl/8waTa4acXUmt8/XBgAZYEMZ qOLtT7Y4th7pKaglJCb3cq9P3iDkDfq/5u4DXBcojbw6cc4XdxLaN3mPvbko9qwD yJlV4zm99SCWYAfszpQSkZg4Arn1vNqu1xOEpholzUNHr/5s62QP5TOeDsFqzJqU FxTlXz5AIEV0Zqz76JxewsM/n9thBBI8HQYpeQuCyPecWaxbjL60lAkcBk7LRLbX sgkS619QsbLlpIKV1mUPT4G52QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCalVe3H X7djZe/qr5cfIL2MipL6MB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA61sgg/TVWpmHQu8/rSva6TPScfaUgcWelIx/8QijW2JNvJgy1Ir/1DhP2eu2 TE5bZJkZ2kU6F6N0Xq1xIhaW5/5SIOZGHBZEC9fGbhu4PUXGIadS78+F+RC4xlTs 5PHvqEYS+KrmKaEAnYbTXz3AOKUE+UZyMrafWgNKcFDh5qvcmxDUY9cLFKDTI1F3 w96LTh05eXz09LnyK6tZrIWmXB873FyIr7mzAWDMH+GDbrtJSqn+gE4+c91Bv9Uh lamKxpWLhxNR4iCM+8a/BQcCjWHofusMLxJ3ji28ImB8x8bhgSDL4oyXuSZL//jY DVHaWWGAhdSGKInjtToQga4w1Q== -----END CERTIFICATE-----Generated at Sun Oct 11 09:13:33 2026 by rpki-client