$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json) Hash identifier: SJl6eff9P+lRke6KixVwdUIX67A2s55fC2NLhCHTvMw= Subject key identifier: E7:FC:49:78:4B:53:95:64:D6:B7:58:31:43:8D:78:2F:44:A4:A6:28 Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft Manifest number: 0684 Signing time: Sun 20 Sep 2026 22:22:57 +0000 Manifest this update: Sun 20 Sep 2026 22:22:56 +0000 Manifest next update: Sun 27 Sep 2026 22:22:56 +0000 Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: pmxhdRbr9Tw1CNMU+p5h0rvPQJZ9AMZpoUIAUIi10/E=) 2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 7ciUUzLJ+kZgShwA8i58YsGujRYv/UGV/4XGImsbT2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Validity Not Before: Sep 20 22:22:56 2026 GMT Not After : Sep 27 22:22:56 2026 GMT Subject: CN=6ab05cc1-5ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:0f:65:6e:a6:73:e6:8d:23:1f:18:d1:9a: ea:c2:0d:08:34:f6:33:ef:02:b3:1f:fb:09:b5:43: 7f:68:b7:b0:eb:f2:4d:7b:2d:94:77:5c:75:99:64: 21:fc:fc:e8:cb:d2:20:15:d0:23:5e:67:1b:9d:29: 3a:3a:be:4b:b4:b4:91:cf:16:d6:6c:d6:78:3f:73: 67:22:64:13:5d:44:e0:55:0e:a9:c6:89:62:44:fc: 76:6b:8c:c4:dd:60:64:aa:fb:0f:a1:56:4a:70:ce: 9f:49:f7:5b:ae:f3:f6:49:40:d1:dc:ed:e5:28:cc: a0:e5:22:fb:35:18:2f:c9:a0:53:0b:12:02:c5:24: 73:3e:89:f6:96:36:2a:9b:4b:84:37:1c:64:43:1e: f8:d7:35:36:a4:32:6e:3b:0e:db:89:61:1f:52:b8: 53:30:18:40:ca:f8:a7:88:54:81:d2:fd:3f:40:0b: fc:0d:a9:b2:f6:a2:28:87:10:8c:94:ff:ef:b3:26: 27:7d:fe:39:c6:1f:54:dd:c3:30:20:a9:ee:71:65: 7a:be:0f:9f:e5:1e:2a:a9:96:96:7b:ba:81:d6:26: e6:d8:be:0c:d1:57:f3:e2:cf:61:14:2c:27:dd:ef: 07:94:bb:02:04:90:88:59:3e:28:05:f7:78:d3:ec: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FC:49:78:4B:53:95:64:D6:B7:58:31:43:8D:78:2F:44:A4:A6:28 X509v3 Authority Key Identifier: keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:83:6e:17:2b:49:3b:06:7a:72:67:65:4f:b8:bc:29:33:24: 99:d4:7c:e4:c5:10:cb:ea:df:4c:93:53:c5:a0:57:c1:4c:c0: a8:1c:ac:cd:9f:de:d5:ca:62:26:77:46:0e:f9:f3:7d:07:c6: ff:c4:ff:3e:46:5f:f7:87:b0:8e:08:4e:94:12:af:ee:27:cc: ce:6a:35:94:4c:b5:ca:83:79:9d:54:27:8e:55:15:74:2b:96: 13:51:af:08:d9:aa:e1:25:88:f5:c0:bf:f6:b3:33:7e:a6:21: 39:f3:bf:8d:85:f5:69:13:54:36:37:97:61:18:49:47:0a:ee: b2:89:f5:64:13:11:11:59:f4:43:67:b8:5b:a0:05:0f:31:70: 28:42:50:bf:71:50:73:de:fc:87:3b:e8:1e:02:95:50:97:9b: 68:b9:92:81:12:98:2a:71:fc:9e:b1:7f:03:d3:c5:89:19:71: 7d:a0:d2:8d:31:b3:bb:5c:c5:e8:81:95:61:7b:2e:ec:a4:b9: 83:74:fa:e6:bc:f7:1e:7d:7e:85:0b:e5:4a:94:19:76:bc:f4: 12:29:39:15:3c:a6:27:31:09:c4:a5:54:8b:2b:36:68:04:c0: 92:9e:0e:de:cc:06:9e:cd:ee:23:e7:34:00:d9:6d:ca:74:9f: 07:0a:ac:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE NTUwMkUyODgwHhcNMjYwOTIwMjIyMjU2WhcNMjYwOTI3MjIyMjU2WjAYMRYwFAYD VQQDEw02YWIwNWNjMS01ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmD4PZW6mc+aNIx8Y0Zrqwg0INPYz7wKzH/sJtUN/aLew6/JNey2Ud1x1mWQh /Pzoy9IgFdAjXmcbnSk6Or5LtLSRzxbWbNZ4P3NnImQTXUTgVQ6pxoliRPx2a4zE 3WBkqvsPoVZKcM6fSfdbrvP2SUDR3O3lKMyg5SL7NRgvyaBTCxICxSRzPon2ljYq m0uENxxkQx741zU2pDJuOw7biWEfUrhTMBhAyviniFSB0v0/QAv8Damy9qIohxCM lP/vsyYnff45xh9U3cMwIKnucWV6vg+f5R4qqZaWe7qB1ibm2L4M0Vfz4s9hFCwn 3e8HlLsCBJCIWT4oBfd40+xDXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOf8SXhL U5Vk1rdYMUONeC9EpKYoMB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2 NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x djhJZG5NcWVLNGJWVUM0b2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlINuFytJOwZ6cmdlT7i8KTMkmdR85MUQy+rfTJNTxaBXwUzAqByszZ/e1cpi JndGDvnzfQfG/8T/PkZf94ewjghOlBKv7ifMzmo1lEy1yoN5nVQnjlUVdCuWE1Gv CNmq4SWI9cC/9rMzfqYhOfO/jYX1aRNUNjeXYRhJRwruson1ZBMREVn0Q2e4W6AF DzFwKEJQv3FQc978hzvoHgKVUJebaLmSgRKYKnH8nrF/A9PFiRlxfaDSjTGzu1zF 6IGVYXsu7KS5g3T65rz3Hn1+hQvlSpQZdrz0Eik5FTymJzEJxKVUiys2aATAkp4O 3swGns3uI+c0ANltynSfBwqswg== -----END CERTIFICATE-----Generated at Tue Sep 22 05:35:44 2026 by rpki-client