$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: E3qDvqs0h3R0BsQQ5WhNJ+cv5z2eXelUdt4qJu8EQ8U= Subject key identifier: 3D:38:9C:EB:6C:F3:E1:26:17:5E:F5:B6:F1:91:FC:45:A0:72:12:92 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 02E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 02D4 Signing time: Fri 25 Sep 2026 01:13:49 +0000 Manifest this update: Fri 25 Sep 2026 01:13:49 +0000 Manifest next update: Fri 02 Oct 2026 01:13:49 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: v73btfMW28eIczljWSBJOVbqcJSufsXE/LeYhx9T4eU=) 2: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 63Mc6PfxkqkDwQtpOI9U8lomk1Cxh7mzQMzSOn5gi4U=) 3: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: 0C9mx4bIr2S3KsrxXmmh+6ZkoQeTAaGyUsfLf68eqPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Sep 25 01:13:49 2026 GMT Not After : Oct 2 01:13:49 2026 GMT Subject: CN=6ab5cacd-a952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:9b:76:44:4b:36:37:14:23:a7:4e:5b:64: 19:53:b0:16:fd:4a:84:a3:7a:92:7e:bd:b0:e0:56: d1:50:88:46:26:6e:8e:01:53:85:73:fc:62:0d:8d: 5f:50:94:06:8a:a2:23:0c:50:75:7a:d8:1f:1f:1c: 95:9b:3c:f8:b4:9a:93:8c:47:fe:e4:80:09:f4:4e: 02:60:ab:53:60:5a:10:f2:4f:04:c1:2d:a7:a6:f1: fd:23:9e:00:c2:6a:a7:98:d0:84:e1:24:ff:2c:ba: 39:9c:4b:ed:1a:89:76:34:87:1e:11:99:6a:05:dc: c1:a9:73:03:ac:82:8a:ec:f7:01:3a:53:97:38:5d: 73:82:fc:d5:33:7f:5a:2c:10:56:76:22:e7:4b:a2: 22:f6:2e:d0:1c:54:55:f9:fa:13:b7:ee:6f:55:52: 93:a3:43:b6:92:0c:23:e6:20:ad:ad:27:a5:28:69: 02:c7:86:cb:5e:e5:20:35:c8:de:be:67:c8:d3:2f: ef:32:d9:c8:c7:bb:7a:97:55:6e:c8:49:b8:59:7f: 14:f4:4c:6a:86:11:47:bc:54:b4:2d:02:d8:10:e3: 37:14:35:bb:36:88:ab:a9:4a:15:8e:6f:05:88:c1: d3:20:90:85:12:f1:28:19:7f:e0:d5:8f:cf:e7:50: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:38:9C:EB:6C:F3:E1:26:17:5E:F5:B6:F1:91:FC:45:A0:72:12:92 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6d:1f:06:42:21:0b:29:c4:28:47:4d:fa:89:38:c6:4e:1a: 3f:b0:0a:b9:9d:76:bd:87:2b:16:b6:6f:f3:78:2a:ef:88:be: 8e:10:98:d0:e4:57:a8:61:29:9b:0e:cf:51:27:08:6c:39:1a: ef:0c:1d:b3:60:42:96:af:1f:79:b4:8b:23:3a:98:50:b1:13: e2:be:03:8a:31:53:62:58:18:5e:ad:2f:13:50:9b:6b:7e:3c: 77:a2:a6:57:01:5d:d3:b4:f4:4a:4d:22:6f:15:97:d6:21:bb: 3a:88:0e:94:30:ed:7b:79:f0:92:d7:7e:4c:83:fc:ea:10:42: 5f:51:f4:4d:1f:35:45:23:b8:01:4a:17:c4:6f:d3:93:76:fe: 9a:56:8d:96:6e:10:0f:34:8b:0b:ea:e0:07:25:89:97:53:b5: 56:e3:e5:02:60:9c:d0:42:86:03:7a:d4:cb:f0:6f:2c:49:44: 5e:70:3f:75:1d:32:48:8d:50:07:9a:94:26:8c:c7:c2:a2:f0: e7:7e:0c:5a:ba:52:68:b2:39:ce:9a:b3:ed:88:c3:9d:8d:4a: 48:17:da:66:ce:d5:14:f7:f3:e0:ca:4b:b3:4c:b7:e3:db:11: 08:64:5e:0b:e6:0a:ab:6c:83:f8:57:be:2e:05:ea:df:76:51: 1d:d8:95:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjYwOTI1MDExMzQ5WhcNMjYxMDAyMDExMzQ5WjAYMRYwFAYD VQQDEw02YWI1Y2FjZC1hOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjDmbdkRLNjcUI6dOW2QZU7AW/UqEo3qSfr2w4FbRUIhGJm6OAVOFc/xiDY1f UJQGiqIjDFB1etgfHxyVmzz4tJqTjEf+5IAJ9E4CYKtTYFoQ8k8EwS2npvH9I54A wmqnmNCE4ST/LLo5nEvtGol2NIceEZlqBdzBqXMDrIKK7PcBOlOXOF1zgvzVM39a LBBWdiLnS6Ii9i7QHFRV+foTt+5vVVKTo0O2kgwj5iCtrSelKGkCx4bLXuUgNcje vmfI0y/vMtnIx7t6l1VuyEm4WX8U9ExqhhFHvFS0LQLYEOM3FDW7NoirqUoVjm8F iMHTIJCFEvEoGX/g1Y/P51CNLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD04nOts 8+EmF171tvGR/EWgchKSMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA20fBkIhCynEKEdN+ok4xk4aP7AKuZ12vYcrFrZv83gq74i+jhCY0ORXqGEp mw7PUScIbDka7wwds2BClq8febSLIzqYULET4r4DijFTYlgYXq0vE1Cba348d6Km VwFd07T0Sk0ibxWX1iG7OogOlDDte3nwktd+TIP86hBCX1H0TR81RSO4AUoXxG/T k3b+mlaNlm4QDzSLC+rgByWJl1O1VuPlAmCc0EKGA3rUy/BvLElEXnA/dR0ySI1Q B5qUJozHwqLw534MWrpSaLI5zpqz7YjDnY1KSBfaZs7VFPfz4MpLs0y349sRCGRe C+YKq2yD+Fe+LgXq33ZRHdiVPQ== -----END CERTIFICATE-----Generated at Fri Sep 25 04:34:00 2026 by rpki-client