$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft File: iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json) Hash identifier: aCrAnR6Nb3ZiWi9fFt71819ko/fI5LsQYhOX+00kPfQ= Subject key identifier: F9:7D:AD:89:82:06:C7:89:EC:A1:6E:18:F0:DD:41:BB:B6:A1:9C:24 Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2 Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2 Certificate serial: 1063 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft Manifest number: 1025 Signing time: Mon 28 Sep 2026 17:33:03 +0000 Manifest this update: Mon 28 Sep 2026 17:33:03 +0000 Manifest next update: Mon 05 Oct 2026 17:33:03 +0000 Files and hashes: 1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: lhlhHG03dUQ7lYPEJNR1bCWtL470kMy0D9tsT9rtFGs=) 2: Xy8LFEi61v4Ltr5AcJfz--DXldA.asa (hash: yk9MkCgjtFzyc+9aVydvxchcW9X4cDgekUG0qRO3vFQ=) 3: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: thWs/wjgTce2OH8uRbqin2U/9yRfT0t37bg0yz1umNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 17:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4195 (0x1063) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2 Validity Not Before: Sep 28 17:33:03 2026 GMT Not After : Oct 5 17:33:03 2026 GMT Subject: CN=6abaa4cf-adc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:63:1c:72:bc:f1:99:4b:46:b1:3a:cb:cd: dc:93:bc:e8:aa:c3:2c:34:b3:eb:61:5f:50:ad:12: 13:68:c6:89:65:bd:8f:72:2c:d1:04:d8:37:35:3f: 5a:58:a8:09:2f:f4:66:d3:4d:6b:eb:a0:4f:ef:5a: 88:6a:8a:78:f7:c9:d2:1f:bd:40:37:02:96:24:db: 4f:da:64:dd:dc:72:62:2f:88:d4:e0:c1:b1:7c:f9: 69:cc:5d:7a:95:12:45:d1:3c:c0:d3:8b:d6:aa:34: 83:42:80:35:97:5a:6a:d3:09:69:99:9c:fe:31:29: ba:7f:c3:3c:0c:bf:94:09:14:df:db:4d:bf:82:97: 1c:04:cc:0d:f0:98:6e:6e:1b:d9:10:58:95:4b:6b: 70:95:3f:38:c3:9e:41:52:ea:b1:f2:f1:b2:5e:26: d3:8b:33:75:14:08:af:11:47:f7:f2:19:51:66:dc: 89:f5:4b:5b:c9:21:fa:c9:fc:c0:bb:20:b2:5f:30: 0c:cd:73:8d:bd:60:01:37:26:52:8d:79:aa:8a:9c: 1b:26:34:3f:16:e3:53:4f:c1:e8:d8:8f:7f:11:85: 83:7d:ec:99:5a:46:17:67:14:30:06:6e:97:84:ae: 0b:a0:07:c6:93:5a:b0:2f:97:69:4d:29:9f:9b:d1: f6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7D:AD:89:82:06:C7:89:EC:A1:6E:18:F0:DD:41:BB:B6:A1:9C:24 X509v3 Authority Key Identifier: keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:72:ff:d5:9b:dc:92:42:a9:b3:90:bf:1a:c0:b2:ca:22:f9: 6e:33:06:a8:11:fb:2f:17:09:f0:81:39:a8:e5:97:86:16:56: c7:d6:48:ad:ef:30:0c:c9:bb:a6:55:bd:7b:b1:68:79:fc:09: fd:ef:72:27:44:7d:9c:95:e6:68:01:3f:e9:7d:6f:b4:d6:24: b2:67:44:c4:20:c7:b9:91:e1:d7:1f:1d:5f:83:f4:ba:7f:bb: d3:f5:bf:1f:0b:d0:95:6d:e6:6b:38:75:59:e5:21:b4:64:db: 66:d0:c9:4e:34:f5:6c:cc:95:2b:45:88:86:45:05:49:f8:af: 79:e6:78:9c:87:00:49:e5:ee:69:95:9a:2c:9c:7f:aa:1d:e6: 2d:ee:fe:18:80:30:81:7a:6f:1c:d3:d3:d1:c4:fc:9d:42:93: 52:8e:03:75:9a:f0:dd:0c:89:63:9d:1c:ef:2f:3f:c3:7e:5b: 82:95:4b:07:04:dd:e3:c2:10:02:76:2c:e3:38:02:5f:29:57: c2:22:0a:06:32:cf:4d:89:91:77:93:63:08:28:b8:26:64:86: f4:f0:83:68:f9:23:22:bc:62:48:47:20:da:b4:fa:ba:8b:6b: 5b:a4:9a:f2:5f:64:fb:65:44:45:a0:f9:78:10:4e:cf:08:ce: e8:7b:6f:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlEMEYxMTAvBgNVBAUTKDg4RTdCNTQxRjQyMjk4RDZFOUI1MTY1RDk2NTI0NkND MUNDMUY1QTIwHhcNMjYwOTI4MTczMzAzWhcNMjYxMDA1MTczMzAzWjAYMRYwFAYD VQQDEw02YWJhYTRjZi1hZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWdjHHK88ZlLRrE6y83ck7zoqsMsNLPrYV9QrRITaMaJZb2PcizRBNg3NT9a WKgJL/Rm001r66BP71qIaop498nSH71ANwKWJNtP2mTd3HJiL4jU4MGxfPlpzF16 lRJF0TzA04vWqjSDQoA1l1pq0wlpmZz+MSm6f8M8DL+UCRTf202/gpccBMwN8Jhu bhvZEFiVS2twlT84w55BUuqx8vGyXibTizN1FAivEUf38hlRZtyJ9UtbySH6yfzA uyCyXzAMzXONvWABNyZSjXmqipwbJjQ/FuNTT8Ho2I9/EYWDfeyZWkYXZxQwBm6X hK4LoAfGk1qwL5dpTSmfm9H2jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPl9rYmC BseJ7KFuGPDdQbu2oZwkMB8GA1UdIwQYMBaAFIjntUH0IpjW6bUWXZZSRswcwfWi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUQwRi83NEJFMzhENjgw Q0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1OYnB0UlpkbGxKR3pCekI5 YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lPZTFRZlFpbU5icHRSWmRsbEpHekJ6QjlhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUQwRi83NEJFMzhENjgwQ0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1O YnB0UlpkbGxKR3pCekI5YUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV3L/1ZvckkKps5C/GsCyyiL5bjMGqBH7LxcJ8IE5qOWXhhZWx9ZIre8wDMm7 plW9e7FoefwJ/e9yJ0R9nJXmaAE/6X1vtNYksmdExCDHuZHh1x8dX4P0un+70/W/ HwvQlW3mazh1WeUhtGTbZtDJTjT1bMyVK0WIhkUFSfiveeZ4nIcASeXuaZWaLJx/ qh3mLe7+GIAwgXpvHNPT0cT8nUKTUo4DdZrw3QyJY50c7y8/w35bgpVLBwTd48IQ AnYs4zgCXylXwiIKBjLPTYmRd5NjCCi4JmSG9PCDaPkjIrxiSEcg2rT6uotrW6Sa 8l9k+2VERaD5eBBOzwjO6HtvrQ== -----END CERTIFICATE-----Generated at Tue Sep 29 03:49:18 2026 by rpki-client