$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: PnD5LMSGzD5BErsGcCCVNc13bQ+q6kTPcR/zZDhs22U= Subject key identifier: 67:89:E5:AC:D9:61:A3:6F:68:9A:44:E3:E3:F4:86:2E:EC:8B:BA:52 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 02CA Signing time: Mon 21 Sep 2026 01:16:18 +0000 Manifest this update: Mon 21 Sep 2026 01:16:18 +0000 Manifest next update: Mon 28 Sep 2026 01:16:18 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: +Qsn0PB8X6pzq6uw/7sCnqHVL69AJov1jH3G3c3Gyy0=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Sep 21 01:16:18 2026 GMT Not After : Sep 28 01:16:18 2026 GMT Subject: CN=6ab08562-b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:2d:97:48:b2:e6:4a:c8:16:b6:e4:a3:70: 61:75:de:73:96:a2:48:b6:3f:61:6d:67:95:0c:58: e3:e0:78:b3:47:74:69:38:cb:02:53:85:0f:b5:35: 8d:91:ad:42:56:9b:f0:77:79:a0:b0:59:52:79:64: ad:29:61:f3:2e:8b:83:a4:2f:dd:81:b5:ca:85:6b: a1:99:d0:b9:fb:80:bc:1a:0e:cb:88:83:70:3d:df: 39:db:56:b9:94:cc:96:c8:79:d4:27:9f:46:29:68: b3:b0:43:11:21:bd:aa:e1:3e:ed:62:4a:b3:f5:a3: a3:d6:1a:9e:49:3d:f7:9d:85:5c:78:ee:ee:76:0d: 88:cb:87:13:2c:d1:81:34:7e:64:b8:b9:97:88:0f: bd:c8:22:0c:07:37:c7:9f:94:ed:a3:ef:1f:e4:3a: 6c:c0:15:4a:11:39:cf:d5:d7:dd:b1:5a:6b:96:91: f2:14:9e:9c:41:68:f8:8a:66:81:0f:01:e2:d5:63: 78:89:c8:eb:0c:ec:21:22:58:16:04:f7:d6:33:20: e9:3f:2c:11:7a:9d:59:2c:37:92:70:ba:51:eb:6d: 13:38:1e:2c:ab:ea:38:f5:d2:fb:52:1c:05:60:04: 47:31:81:fc:18:9e:eb:b8:d5:b2:6b:c4:8c:d3:7e: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:89:E5:AC:D9:61:A3:6F:68:9A:44:E3:E3:F4:86:2E:EC:8B:BA:52 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ac:fb:6c:01:c0:03:50:58:a2:9a:dd:56:5d:95:e4:05:a5: 1d:94:f9:db:af:8e:54:6b:ad:45:5f:8e:86:0b:3f:f2:09:6d: 28:5b:02:8f:1e:db:c6:d0:51:6d:67:42:40:21:12:4b:89:f3: c1:88:5f:b7:36:e0:1b:a3:08:44:5b:3e:5c:cc:0e:d9:eb:e2: ba:0d:93:41:7a:80:0d:97:44:de:0c:96:95:06:9a:52:27:83: 49:49:8a:97:3d:94:6d:b4:d7:76:90:01:c9:c9:39:f3:84:0f: 96:aa:03:25:59:1a:84:e5:e4:66:31:ac:e6:04:e4:f7:a5:02: f3:12:8c:b6:84:c3:38:51:30:7f:64:20:0d:3d:52:a3:4b:e9: 0b:e2:f9:83:a2:8c:a2:88:54:87:f4:e5:75:67:c3:ac:16:45: 49:65:e7:19:12:ef:58:e1:fe:e0:c2:aa:97:fc:28:33:31:32: bd:cd:b7:1f:d6:49:ca:b0:08:9d:6f:a1:38:1e:69:61:fd:45: 92:d3:6d:9a:11:5d:dd:83:f7:36:30:85:70:21:17:b0:d7:1b: 5f:0a:9b:06:ef:cd:6f:47:d9:0b:10:c2:b8:47:8b:e3:92:4f: ad:e3:95:e1:6e:48:0a:6f:c6:f2:5e:88:37:eb:e0:c9:29:23: 55:c8:2d:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYwOTIxMDExNjE4WhcNMjYwOTI4MDExNjE4WjAYMRYwFAYD VQQDEw02YWIwODU2Mi1iODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OQtl0iy5krIFrbko3Bhdd5zlqJItj9hbWeVDFjj4HizR3RpOMsCU4UPtTWN ka1CVpvwd3mgsFlSeWStKWHzLouDpC/dgbXKhWuhmdC5+4C8Gg7LiINwPd8521a5 lMyWyHnUJ59GKWizsEMRIb2q4T7tYkqz9aOj1hqeST33nYVceO7udg2Iy4cTLNGB NH5kuLmXiA+9yCIMBzfHn5Tto+8f5DpswBVKETnP1dfdsVprlpHyFJ6cQWj4imaB DwHi1WN4icjrDOwhIlgWBPfWMyDpPywRep1ZLDeScLpR620TOB4sq+o49dL7UhwF YARHMYH8GJ7ruNWya8SM03462QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGeJ5azZ YaNvaJpE4+P0hi7si7pSMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKKz7bAHAA1BYoprdVl2V5AWlHZT526+OVGutRV+Ohgs/8gltKFsCjx7bxtBR bWdCQCESS4nzwYhftzbgG6MIRFs+XMwO2eviug2TQXqADZdE3gyWlQaaUieDSUmK lz2UbbTXdpAByck584QPlqoDJVkahOXkZjGs5gTk96UC8xKMtoTDOFEwf2QgDT1S o0vpC+L5g6KMoohUh/TldWfDrBZFSWXnGRLvWOH+4MKql/woMzEyvc23H9ZJyrAI nW+hOB5pYf1FktNtmhFd3YP3NjCFcCEXsNcbXwqbBu/Nb0fZCxDCuEeL45JPreOV 4W5ICm/G8l6IN+vgySkjVcgtQg== -----END CERTIFICATE-----Generated at Tue Sep 22 13:19:31 2026 by rpki-client