$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft File: iPsdIcuIPJfCmst31NaIhLOnpgg.mft (raw, json) Hash identifier: mud5SFUQLnvSO2FDsS9ri5ejmK/aoRVDgBCEpXXlDLE= Subject key identifier: B1:30:9A:C6:CE:33:E5:AE:8E:3A:57:32:F2:7E:C4:CF:E4:28:6A:27 Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 Certificate issuer: /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft Manifest number: 9D Signing time: Sat 19 Sep 2026 07:24:36 +0000 Manifest this update: Sat 19 Sep 2026 07:24:36 +0000 Manifest next update: Sat 26 Sep 2026 07:24:36 +0000 Files and hashes: 1: iPsdIcuIPJfCmst31NaIhLOnpgg.crl (hash: 06WMmjLinfbBx5pLIIc0pXh6Od/bIEnLr1ROBZqp/o4=) 2: 74C3FC2413B911F1B7CEB625083D8C67.roa (hash: P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Validity Not Before: Sep 19 07:24:36 2026 GMT Not After : Sep 26 07:24:36 2026 GMT Subject: CN=6aae38b4-fe4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:70:44:1f:9b:8b:44:c3:8e:30:40:2d:0b: d7:88:24:8a:5f:f6:06:81:4d:43:1a:e1:0c:43:f5: 6b:81:5f:ff:50:2d:6f:51:85:ba:15:a2:c6:35:2a: 87:7a:5b:98:f0:76:fe:96:9d:0b:aa:0d:a7:76:45: 46:27:46:c5:fe:90:cf:fb:43:ae:ab:ae:a5:0b:9a: 93:10:01:1c:0e:24:d9:38:d6:1a:14:f8:82:45:da: 88:12:bc:a2:76:82:df:bc:b5:68:67:b5:df:3f:10: 9f:4e:3b:16:6a:32:48:22:e5:d1:3b:e7:49:30:25: c0:6f:86:99:a0:db:c7:00:73:25:bc:0d:d5:f9:04: ec:4c:af:96:36:8e:d2:ae:85:d2:f7:e8:25:d1:ee: 46:1d:00:79:23:0e:89:5b:7a:4a:73:9c:4c:2f:3c: 59:03:53:af:46:07:94:52:a0:fd:b9:c1:61:13:40: 6b:6e:2c:78:bc:bf:f7:64:a6:4a:de:71:de:7d:46: 21:c6:4d:f9:05:d3:6c:29:85:a0:e1:92:57:e7:a9: e0:44:91:63:9b:77:e7:60:7c:93:1e:12:81:62:d2: 62:59:76:7c:e7:a2:b2:a2:54:93:ec:da:16:b2:61: 84:50:86:8c:4d:4f:44:b9:49:1e:29:60:f2:e3:9c: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:30:9A:C6:CE:33:E5:AE:8E:3A:57:32:F2:7E:C4:CF:E4:28:6A:27 X509v3 Authority Key Identifier: keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7e:d9:01:44:a9:a5:5a:ba:c7:37:b9:f4:77:a0:b5:ac:1c: 69:25:7d:ad:f9:cf:1a:da:5e:29:b5:fe:eb:85:c4:c3:f9:38: 02:1a:48:0c:c4:af:87:79:10:a9:95:c7:18:f2:e1:6b:e2:c9: 7f:7d:e0:78:83:0d:a2:4c:b7:53:c4:fe:bc:ce:4e:4e:e9:ad: a3:8f:31:6d:49:b2:b8:c7:b4:2f:f6:73:66:07:30:53:35:b6: 5a:40:d3:5c:50:11:09:3a:1a:6d:8d:33:e3:11:0f:bd:f5:ce: 24:89:36:4e:a4:3a:de:42:84:d8:33:a2:ff:0d:cd:54:7c:63: b7:31:b1:09:7d:8b:91:21:ed:93:26:ff:ea:e5:13:5a:a3:72: 6c:d5:58:42:9e:5a:72:2f:b7:f9:ee:f7:30:3f:e9:0b:d9:c8: fb:28:80:dd:02:59:8f:d1:b8:13:ed:6e:6f:e0:8e:91:28:75: 42:7b:93:89:bd:70:2e:02:fe:66:79:d7:71:1d:81:df:ec:60: d7:21:7a:b6:22:42:d9:a3:11:05:7d:99:9e:a2:80:7e:d1:07: 09:f9:c1:31:a8:c3:85:33:08:da:c3:a9:b6:d2:f6:73:96:97: 08:3e:2f:b9:67:dd:5d:4c:de:a4:01:89:31:04:be:e1:fa:ed: 49:02:9d:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBMDQxMTAvBgNVBAUTKDg4RkIxRDIxQ0I4ODNDOTdDMjlBQ0I3N0Q0RDY4ODg0 QjNBN0E2MDgwHhcNMjYwOTE5MDcyNDM2WhcNMjYwOTI2MDcyNDM2WjAYMRYwFAYD VQQDEw02YWFlMzhiNC1mZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTZwRB+bi0TDjjBALQvXiCSKX/YGgU1DGuEMQ/VrgV//UC1vUYW6FaLGNSqH eluY8Hb+lp0Lqg2ndkVGJ0bF/pDP+0Ouq66lC5qTEAEcDiTZONYaFPiCRdqIEryi doLfvLVoZ7XfPxCfTjsWajJIIuXRO+dJMCXAb4aZoNvHAHMlvA3V+QTsTK+WNo7S roXS9+gl0e5GHQB5Iw6JW3pKc5xMLzxZA1OvRgeUUqD9ucFhE0Brbix4vL/3ZKZK 3nHefUYhxk35BdNsKYWg4ZJX56ngRJFjm3fnYHyTHhKBYtJiWXZ856KyolST7NoW smGEUIaMTU9EuUkeKWDy45x/iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEwmsbO M+WujjpXMvJ+xM/kKGonMB8GA1UdIwQYMBaAFIj7HSHLiDyXwprLd9TWiISzp6YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkEwNC8yNUM1Mjc3RUM5 QUUxMUYwOThFOTI3NDVDNEY5QUUwMi9pUHNkSWN1SVBKZkNtc3QzMU5hSWhMT25w Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lQc2RJY3VJUEpmQ21zdDMxTmFJaExPbnBnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkEwNC8yNUM1Mjc3RUM5QUUxMUYwOThFOTI3NDVDNEY5QUUwMi9pUHNkSWN1SVBK ZkNtc3QzMU5hSWhMT25wZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHH7ZAUSppVq6xze59HegtawcaSV9rfnPGtpeKbX+64XEw/k4AhpIDMSvh3kQ qZXHGPLha+LJf33geIMNoky3U8T+vM5OTumto48xbUmyuMe0L/ZzZgcwUzW2WkDT XFARCToabY0z4xEPvfXOJIk2TqQ63kKE2DOi/w3NVHxjtzGxCX2LkSHtkyb/6uUT WqNybNVYQp5aci+3+e73MD/pC9nI+yiA3QJZj9G4E+1ub+COkSh1QnuTib1wLgL+ ZnnXcR2B3+xg1yF6tiJC2aMRBX2ZnqKAftEHCfnBMajDhTMI2sOpttL2c5aXCD4v uWfdXUzepAGJMQS+4frtSQKdKg== -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:10 2026 by rpki-client