$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json) Hash identifier: iTQba2k4u6Kuk4km/3sNjykfE9qzrtt10n470VTm2nk= Subject key identifier: D9:B9:63:A1:16:E5:B8:1E:B3:59:76:E1:47:1A:36:FB:1E:7F:85:07 Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft Manifest number: 077A Signing time: Sun 20 Sep 2026 21:31:53 +0000 Manifest this update: Sun 20 Sep 2026 21:31:52 +0000 Manifest next update: Sun 27 Sep 2026 21:31:52 +0000 Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: VmjdKOaDRY9ktox8sLt8RsMofCiRFXLvKyW0FOz54OU=) 2: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=) 3: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=) 4: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Validity Not Before: Sep 20 21:31:52 2026 GMT Not After : Sep 27 21:31:52 2026 GMT Subject: CN=6ab050c8-135f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:95:ea:cf:fa:57:07:f0:d6:c7:1b:aa:cb:e2: b5:fb:e7:7c:47:38:6a:94:19:9f:1c:12:55:8b:6d: 8f:25:b5:30:2d:50:07:ea:9d:ef:31:78:d4:29:db: e4:f5:99:cc:88:e3:96:12:e5:18:69:19:12:f6:a7: 23:fd:56:db:e1:42:6f:80:c7:fb:36:c9:d5:6f:3b: 8e:57:63:ed:3a:cc:37:3b:01:fc:ef:7e:3b:08:ea: c7:29:a9:3f:3f:0b:9f:70:d9:36:b6:cb:42:05:6e: 55:b8:00:6f:04:d0:7b:ae:a3:99:a9:f2:cf:f5:6f: 45:6d:6b:21:4b:8b:56:63:8b:fe:0d:f8:33:72:69: e3:69:76:8f:c4:37:28:c7:1d:5e:03:84:aa:25:1f: ac:3e:2f:9f:12:f8:f2:c4:a2:4f:f3:7a:5c:78:92: 16:22:ab:2b:49:c1:bf:c2:2e:a4:74:b1:95:a8:86: a7:4b:01:2c:51:89:25:bb:16:2a:61:a9:b9:59:76: f3:a4:43:c5:54:16:ff:94:fc:e5:53:3b:8f:22:b2: 75:18:5b:ce:08:e7:17:69:5c:b7:fb:17:77:63:8d: f7:93:99:1a:63:d9:0d:55:0c:5e:c7:75:ff:18:c1: 66:e5:05:f9:88:38:fb:fa:e8:61:47:c8:5a:bf:7b: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B9:63:A1:16:E5:B8:1E:B3:59:76:E1:47:1A:36:FB:1E:7F:85:07 X509v3 Authority Key Identifier: keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a4:a6:f8:3b:48:97:10:55:c5:9b:75:e9:c0:65:b9:86:cb: dd:78:d7:fa:d5:f6:ea:13:df:ad:be:0b:e8:15:19:9f:ee:d4: 92:76:3b:ca:bb:27:56:3d:e4:5b:51:71:b9:15:ae:af:ff:e4: f8:e0:ba:55:38:66:2c:df:8f:ce:6b:53:7a:82:5c:d1:a5:c7: 30:3b:41:05:64:b3:c1:e6:23:75:b8:63:f2:64:d7:75:75:06: d0:ba:64:9b:88:bb:e1:36:2f:8e:41:3d:7b:97:c5:08:0a:30: 20:03:b1:a5:8c:13:12:67:ca:88:e5:e0:6a:52:c5:49:0b:ca: 13:40:8e:e8:99:c2:e4:1a:c1:10:5c:3a:7e:56:2d:e2:33:4b: 4d:46:62:4d:0c:97:10:ad:8e:cd:9a:4e:32:0e:cd:22:14:c4: 89:f0:f6:61:99:8f:67:a5:16:03:c4:bc:d3:1d:02:15:c7:76: 9e:2a:24:ad:e2:c9:83:7a:70:df:e7:20:f7:a9:e8:13:5a:1e: 37:85:4e:43:53:39:db:5a:fe:19:0b:09:5c:08:a0:41:8f:cb: 74:2b:ac:ff:ef:ba:04:41:74:b3:b4:04:3d:bf:70:3d:60:3f: c8:90:26:b7:26:d2:f6:67:c3:3c:64:f0:17:a7:cd:b9:fa:2c: d0:50:35:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5 MTZDN0I0RkQwHhcNMjYwOTIwMjEzMTUyWhcNMjYwOTI3MjEzMTUyWjAYMRYwFAYD VQQDEw02YWIwNTBjOC0xMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+pXqz/pXB/DWxxuqy+K1++d8RzhqlBmfHBJVi22PJbUwLVAH6p3vMXjUKdvk 9ZnMiOOWEuUYaRkS9qcj/Vbb4UJvgMf7NsnVbzuOV2PtOsw3OwH87347COrHKak/ PwufcNk2tstCBW5VuABvBNB7rqOZqfLP9W9FbWshS4tWY4v+DfgzcmnjaXaPxDco xx1eA4SqJR+sPi+fEvjyxKJP83pceJIWIqsrScG/wi6kdLGVqIanSwEsUYkluxYq Yam5WXbzpEPFVBb/lPzlUzuPIrJ1GFvOCOcXaVy3+xd3Y433k5kaY9kNVQxex3X/ GMFm5QX5iDj7+uhhR8hav3tJIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNm5Y6EW 5bges1l24UcaNvsef4UHMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVFNi84N0QxRUQwNjdBODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5w YjVlYUpZWFBKenlSYkh0UDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp6Sm+DtIlxBVxZt16cBluYbL3XjX+tX26hPfrb4L6BUZn+7UknY7yrsnVj3k W1FxuRWur//k+OC6VThmLN+PzmtTeoJc0aXHMDtBBWSzweYjdbhj8mTXdXUG0Lpk m4i74TYvjkE9e5fFCAowIAOxpYwTEmfKiOXgalLFSQvKE0CO6JnC5BrBEFw6flYt 4jNLTUZiTQyXEK2OzZpOMg7NIhTEifD2YZmPZ6UWA8S80x0CFcd2niokreLJg3pw 3+cg96noE1oeN4VOQ1M521r+GQsJXAigQY/LdCus/++6BEF0s7QEPb9wPWA/yJAm tybS9mfDPGTwF6fNufos0FA1Sw== -----END CERTIFICATE-----Generated at Tue Sep 22 22:01:14 2026 by rpki-client