$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft File: IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json) Hash identifier: Ps+oJE5SbJEyUhCsQ8qYDs1GP1lzS00q+vx7JiKooKs= Subject key identifier: A0:D5:6E:00:1D:B2:67:92:37:01:97:76:AC:01:B2:B0:31:51:D3:75 Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 Certificate issuer: /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft Manifest number: 90 Signing time: Mon 21 Sep 2026 07:30:03 +0000 Manifest this update: Mon 21 Sep 2026 07:30:02 +0000 Manifest next update: Mon 28 Sep 2026 07:30:02 +0000 Files and hashes: 1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: l4wVHigyEtI8oXgxJjeKVsRr2I3zOTbYzrswidztnxQ=) 2: 78211876DA3811F080F82F148DD3641D.roa (hash: iQuCstGoIK1MPnU6/cDDIt+974fe7iZAlTkSxssvjXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Validity Not Before: Sep 21 07:30:02 2026 GMT Not After : Sep 28 07:30:02 2026 GMT Subject: CN=6ab0dcfa-1d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:0a:4e:bf:3b:f0:40:b6:57:58:e4:85:5a: dd:ee:fb:cc:8a:c4:3e:ce:ed:a5:df:80:2f:16:33: bd:d2:60:fd:8e:4a:ec:bd:76:dd:d6:24:f2:d3:23: c5:49:45:9d:e5:d5:98:72:69:04:2b:5a:64:35:24: a8:8d:d8:88:a7:a1:af:9d:58:c4:10:a9:c7:5b:8f: 47:63:11:73:83:ff:e8:83:a5:ff:a4:37:b9:a1:85: 35:9e:b8:09:7d:bd:63:63:50:e2:4c:80:0d:c5:29: c2:13:e1:fe:9b:e2:c7:56:d8:2f:f9:30:f3:64:c5: 9d:30:69:ff:87:e7:6a:e7:91:13:77:c8:2e:8d:a7: d8:26:d9:eb:31:9e:83:9b:b2:5c:99:fc:c3:73:9e: a3:34:fc:b2:3a:15:00:db:70:cd:bc:c6:75:d5:bd: 15:bc:ac:56:36:8a:7c:5a:dd:3b:91:1a:aa:e5:34: ff:31:bf:bd:91:39:99:0b:8a:26:db:84:a1:de:db: b2:ac:68:11:95:4e:c8:fa:a9:7a:12:f6:a6:70:35: a5:ee:71:38:e1:d3:40:08:b8:f5:e0:fc:78:89:04: a3:04:b7:44:f8:9f:d9:1a:dc:09:01:7e:49:2b:20: 8f:a3:62:b9:f6:af:cd:e4:9d:71:59:f8:04:59:77: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D5:6E:00:1D:B2:67:92:37:01:97:76:AC:01:B2:B0:31:51:D3:75 X509v3 Authority Key Identifier: keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:d4:fd:78:64:b2:5d:39:65:6e:ae:80:20:d2:dd:0e:22:13: a4:39:71:8a:e7:7e:d3:0b:28:f7:61:72:83:be:33:11:b3:d7: 19:72:84:e9:26:fb:28:08:85:6a:21:e3:ea:d5:72:b6:3e:cc: d2:e6:87:76:ec:78:90:82:8c:c8:0a:fb:98:0b:2c:94:ff:34: c1:d2:14:a9:2a:40:50:89:a7:d0:45:86:da:23:ad:d2:b3:ec: 76:db:57:97:e6:f5:f1:a9:e2:1b:d3:e4:0f:28:b8:a8:b4:21: f0:a5:b6:38:bb:ad:7d:1f:38:a9:04:60:8e:2c:80:a0:07:f8: 52:28:75:6f:e3:1f:41:ab:b8:52:8d:4b:72:f6:fc:58:7c:ca: 19:f8:e8:21:0a:da:ea:38:33:39:9f:b6:07:58:1a:2a:a8:4c: 3e:6f:64:95:08:06:10:05:bf:f6:41:80:44:9e:eb:2d:da:b0: 8f:21:2a:84:ed:56:70:44:7e:87:9e:d7:7a:e2:8a:f0:c9:5b: 74:13:d1:e5:8c:0f:7e:8d:b8:b0:78:45:e1:df:29:7a:dc:90: 80:e5:c4:3e:56:ad:f9:ab:67:ef:37:c6:72:58:53:1f:7c:36: 50:0f:a2:d8:55:1d:6d:85:8d:b6:76:e3:fd:8a:1a:84:79:2a: 28:50:50:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQwQjIxMTAvBgNVBAUTKDIwRjNCQkQ0OThGNDNDOTc5MTNFRTFCOTk0MjlEQjg5 MEI0NzYyQjAwHhcNMjYwOTIxMDczMDAyWhcNMjYwOTI4MDczMDAyWjAYMRYwFAYD VQQDEw02YWIwZGNmYS0xZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZ8KTr878EC2V1jkhVrd7vvMisQ+zu2l34AvFjO90mD9jkrsvXbd1iTy0yPF SUWd5dWYcmkEK1pkNSSojdiIp6GvnVjEEKnHW49HYxFzg//og6X/pDe5oYU1nrgJ fb1jY1DiTIANxSnCE+H+m+LHVtgv+TDzZMWdMGn/h+dq55ETd8gujafYJtnrMZ6D m7JcmfzDc56jNPyyOhUA23DNvMZ11b0VvKxWNop8Wt07kRqq5TT/Mb+9kTmZC4om 24Sh3tuyrGgRlU7I+ql6EvamcDWl7nE44dNACLj14Px4iQSjBLdE+J/ZGtwJAX5J KyCPo2K59q/N5J1xWfgEWXfigwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDVbgAd smeSNwGXdqwBsrAxUdN1MB8GA1UdIwQYMBaAFCDzu9SY9DyXkT7huZQp24kLR2Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDBCMi9EMTQ2RTRGMERB MzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9JUE83MUpqMFBKZVJQdUc1bENuYmlRdEhZ ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lQTzcxSmowUEplUlB1RzVsQ25iaVF0SFlyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDBCMi9EMTQ2RTRGMERBMzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9JUE83MUpqMFBK ZVJQdUc1bENuYmlRdEhZckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARtT9eGSyXTllbq6AINLdDiITpDlxiud+0wso92Fyg74zEbPXGXKE6Sb7KAiF aiHj6tVytj7M0uaHdux4kIKMyAr7mAsslP80wdIUqSpAUImn0EWG2iOt0rPsdttX l+b18aniG9PkDyi4qLQh8KW2OLutfR84qQRgjiyAoAf4Uih1b+MfQau4Uo1Lcvb8 WHzKGfjoIQra6jgzOZ+2B1gaKqhMPm9klQgGEAW/9kGARJ7rLdqwjyEqhO1WcER+ h57XeuKK8MlbdBPR5YwPfo24sHhF4d8petyQgOXEPlat+atn7zfGclhTH3w2UA+i 2FUdbYWNtnbj/YoahHkqKFBQYw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:14:54 2026 by rpki-client