$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: 6IZu20Qx222YhbAMiNb/MW4TB0u/PiAZ6JtIIo4sJ+E= Subject key identifier: 2D:68:F9:A1:6B:00:F2:83:CF:DF:FB:B7:8C:8D:D2:8E:47:66:E1:31 Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0CE8 Signing time: Tue 22 Sep 2026 18:19:39 +0000 Manifest this update: Tue 22 Sep 2026 18:19:38 +0000 Manifest next update: Tue 29 Sep 2026 18:19:38 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: RDxwrPnNKTSOrda0pIPZlKZtVfejlp8wzdLQzWTipTo=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: Sep 22 18:19:38 2026 GMT Not After : Sep 29 18:19:38 2026 GMT Subject: CN=6ab2c6bb-c7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:c1:29:af:75:7e:0c:29:1e:70:e1:70:ed: f0:1a:0a:51:c8:fb:79:b9:a9:82:37:7b:d9:d0:33: 2d:0d:97:f0:4f:9f:31:48:b0:81:e1:1e:ca:c6:b2: 7a:7e:9c:8f:e2:4b:46:7f:a7:1d:2c:6b:64:3c:47: 77:ad:5b:31:71:3b:15:13:1e:1b:1f:1b:91:87:d6: c6:6a:ed:ec:f3:78:82:41:3b:5b:90:53:16:74:d2: 6e:73:18:6e:70:99:12:bd:88:9c:5d:6c:c7:69:d8: 0e:47:3f:7b:ce:b2:de:b8:44:4a:cc:b9:65:a9:77: c2:09:c6:ac:92:16:f0:b5:f7:52:b4:24:df:e7:ed: bf:80:24:c5:45:21:f1:6f:91:d3:1a:50:d9:9a:18: dc:7a:80:b0:12:a4:c8:35:b3:13:f2:a8:f0:20:13: 6f:9a:25:1f:a1:9a:ed:3e:a7:1f:3f:47:e2:1e:97: a8:b7:89:b4:b9:56:7b:48:27:fe:54:57:2c:54:12: 99:7e:46:ac:29:20:a2:d2:65:4a:ec:f6:fc:61:6b: c6:1a:41:cb:96:9a:75:4d:6e:a5:0c:57:09:ec:f4: 20:35:be:2a:03:d6:c2:a2:42:2f:41:6d:d7:f0:d8: c9:3f:fd:1f:1c:6c:04:83:2d:32:64:c9:fb:79:a0: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:F9:A1:6B:00:F2:83:CF:DF:FB:B7:8C:8D:D2:8E:47:66:E1:31 X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:36:b2:21:4f:7b:ca:4c:f1:45:02:11:09:12:f3:36:3d:43: 97:e7:96:28:4b:45:3c:82:37:0e:0f:14:fa:f2:58:48:ed:56: 9f:f6:70:b5:f3:43:1b:38:a6:f0:b0:b9:2a:ac:ba:64:f7:f7: 27:bd:d8:45:be:9f:28:40:99:5a:67:95:51:fe:9e:2f:8b:9e: 03:1c:58:1b:59:ad:46:46:09:8e:4a:6c:c2:ef:75:dc:e7:be: 67:72:1a:86:2c:33:a3:35:74:1a:9b:ed:91:36:55:af:ec:52: be:a2:59:ef:1e:a0:32:56:8a:cb:ae:ef:1d:72:bf:f9:ec:0e: bf:8b:fd:9c:45:be:44:ee:49:1e:99:c1:69:c7:59:28:5f:a8: 85:5b:0e:d6:ed:0f:c1:a2:5b:d6:99:5a:38:d8:e7:96:c6:ba: 33:fc:57:fb:41:57:45:4c:ec:e8:21:98:8b:83:d3:2d:bf:e1: 13:e6:d8:c0:c3:1a:71:72:79:b0:93:d9:1c:69:99:55:a4:88: f0:da:fb:ad:d2:45:0d:87:87:f2:5f:1d:eb:69:1d:0b:cc:1f: dc:8a:5d:1d:4e:02:a6:c8:83:3d:5e:02:05:fc:7a:c7:e0:73: 6b:74:11:a7:db:77:ae:99:09:8b:c5:6f:a8:32:29:86:ed:b5: 44:0b:05:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjYwOTIyMTgxOTM4WhcNMjYwOTI5MTgxOTM4WjAYMRYwFAYD VQQDEw02YWIyYzZiYi1jN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCHBKa91fgwpHnDhcO3wGgpRyPt5uamCN3vZ0DMtDZfwT58xSLCB4R7KxrJ6 fpyP4ktGf6cdLGtkPEd3rVsxcTsVEx4bHxuRh9bGau3s83iCQTtbkFMWdNJucxhu cJkSvYicXWzHadgORz97zrLeuERKzLllqXfCCcaskhbwtfdStCTf5+2/gCTFRSHx b5HTGlDZmhjceoCwEqTINbMT8qjwIBNvmiUfoZrtPqcfP0fiHpeot4m0uVZ7SCf+ VFcsVBKZfkasKSCi0mVK7Pb8YWvGGkHLlpp1TW6lDFcJ7PQgNb4qA9bCokIvQW3X 8NjJP/0fHGwEgy0yZMn7eaADNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1o+aFr APKDz9/7t4yN0o5HZuExMB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnzayIU97ykzxRQIRCRLzNj1Dl+eWKEtFPII3Dg8U+vJYSO1Wn/ZwtfNDGzim 8LC5Kqy6ZPf3J73YRb6fKECZWmeVUf6eL4ueAxxYG1mtRkYJjkpswu913Oe+Z3Ia hiwzozV0GpvtkTZVr+xSvqJZ7x6gMlaKy67vHXK/+ewOv4v9nEW+RO5JHpnBacdZ KF+ohVsO1u0PwaJb1plaONjnlsa6M/xX+0FXRUzs6CGYi4PTLb/hE+bYwMMacXJ5 sJPZHGmZVaSI8Nr7rdJFDYeH8l8d62kdC8wf3IpdHU4CpsiDPV4CBfx6x+Bza3QR p9t3rpkJi8VvqDIphu21RAsFYg== -----END CERTIFICATE-----Generated at Tue Sep 22 23:42:31 2026 by rpki-client