$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json) Hash identifier: SP+ZGNRu6JuJHrvEqvY5JVofKv/2NubGHzruc169J3g= Subject key identifier: 82:F1:2C:0D:BD:55:A9:B3:D0:9E:4C:F3:BB:09:5E:97:D0:A0:50:85 Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft Manifest number: 0BEE Signing time: Fri 02 Oct 2026 19:13:38 +0000 Manifest this update: Fri 02 Oct 2026 19:13:38 +0000 Manifest next update: Fri 09 Oct 2026 19:13:38 +0000 Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: r531uYQorPURKSSErs72Vp2uqomz3R2bbrmdKaWQzu8=) 2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=) 3: 0C63520A89A311F19CE9D9314011F970.roa (hash: btffrqxnv+LEdVRDJ0NPhpvOIf7HzJYoZs3Wq7IbLmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Validity Not Before: Oct 2 19:13:38 2026 GMT Not After : Oct 9 19:13:38 2026 GMT Subject: CN=6ac00262-c8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:56:09:6a:e0:de:9e:5c:d8:af:20:89:a6:48: 12:51:7e:6a:c4:c0:db:66:9e:05:3a:3b:57:3d:b2: bd:d6:68:4d:d0:b1:b2:06:f3:fe:80:48:a9:2a:7c: 47:67:2f:cd:3f:c5:9e:8a:33:90:79:c2:14:8c:48: fb:b0:af:4a:04:60:c1:07:b9:56:ba:9d:da:e3:7b: 5c:73:16:07:83:aa:2f:64:0b:83:13:5b:d0:93:b1: a9:85:bc:c5:f3:6e:0f:11:52:3a:e2:29:e3:0c:f9: 1c:f7:84:7c:6a:a4:b5:83:be:a3:04:bf:6b:e7:aa: 29:ee:61:d5:29:9e:0e:54:d2:f6:ec:70:5e:c4:76: bf:57:9e:9f:39:3e:2c:f1:be:e9:2b:f9:cb:24:cf: b9:b2:2b:7c:2f:16:e2:77:66:35:15:3c:0d:1d:af: a8:6d:82:f0:f6:86:98:71:69:69:0f:98:d7:c0:c7: d5:3b:08:ab:58:9d:57:f2:05:17:9a:b9:1d:9a:9d: 27:33:61:b2:4d:0b:e3:f8:dd:44:88:eb:d0:6e:0d: 1d:69:a0:74:f2:5a:88:34:76:59:6a:68:7c:85:41: f2:29:ab:cf:13:d8:49:17:0b:94:7d:18:f1:f6:2a: ed:f5:b0:35:11:ed:42:30:d4:f3:d8:67:b6:97:f8: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:2C:0D:BD:55:A9:B3:D0:9E:4C:F3:BB:09:5E:97:D0:A0:50:85 X509v3 Authority Key Identifier: keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:8b:78:2f:1c:44:86:61:77:6d:33:be:95:b8:44:17:73:f4: fd:da:1d:4a:66:87:50:98:0d:50:fb:c0:94:9a:aa:17:73:21: be:02:e6:4c:a8:36:b2:9e:da:7c:69:eb:41:b5:78:29:f8:78: 7e:c5:fa:79:b7:c2:7f:3b:d9:fd:db:eb:17:a9:8f:3c:23:2b: 4f:37:a2:4c:c4:55:46:88:52:07:79:60:24:58:ad:bc:89:b0: f8:15:c8:04:74:84:d8:2b:e8:16:17:6b:9d:6f:1a:76:d1:a9: 19:3e:d7:08:1c:54:5d:5c:b7:e6:ad:4a:87:5c:72:48:7b:b9: ff:3f:65:b4:e7:fd:99:11:b8:97:69:5b:00:d4:41:87:a2:b1: ba:81:6e:4a:8f:5f:fc:3e:c2:64:69:a0:23:6f:8b:48:42:a6: d1:84:3a:8f:96:c6:19:1a:44:77:0e:13:46:3f:ee:5b:de:a3: 90:f7:91:38:7a:88:2f:49:f1:28:10:91:f8:6d:fd:37:df:7f: 47:c6:b1:1c:3b:9d:74:5d:97:c5:30:76:44:82:d8:9b:fc:94: 8f:33:8f:94:8c:f7:c4:75:40:9f:71:85:86:3e:bb:70:d6:77: 96:28:9a:22:0a:32:d5:04:df:d3:b3:15:87:0d:df:f2:75:da: 65:85:a1:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE MTgwN0ExNEMwHhcNMjYxMDAyMTkxMzM4WhcNMjYxMDA5MTkxMzM4WjAYMRYwFAYD VQQDEw02YWMwMDI2Mi1jOGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FYJauDenlzYryCJpkgSUX5qxMDbZp4FOjtXPbK91mhN0LGyBvP+gEipKnxH Zy/NP8WeijOQecIUjEj7sK9KBGDBB7lWup3a43tccxYHg6ovZAuDE1vQk7GphbzF 824PEVI64injDPkc94R8aqS1g76jBL9r56op7mHVKZ4OVNL27HBexHa/V56fOT4s 8b7pK/nLJM+5sit8Lxbid2Y1FTwNHa+obYLw9oaYcWlpD5jXwMfVOwirWJ1X8gUX mrkdmp0nM2GyTQvj+N1EiOvQbg0daaB08lqINHZZamh8hUHyKavPE9hJFwuUfRjx 9irt9bA1Ee1CMNTz2Ge2l/jLLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILxLA29 Vamz0J5M87sJXpfQoFCFMB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4 RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjkwNS8xRkE3QzQ2QzQ4RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6 TmNCN2ttQmFMZF9SZ0hvVXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYIt4LxxEhmF3bTO+lbhEF3P0/dodSmaHUJgNUPvAlJqqF3MhvgLmTKg2sp7a fGnrQbV4Kfh4fsX6ebfCfzvZ/dvrF6mPPCMrTzeiTMRVRohSB3lgJFitvImw+BXI BHSE2CvoFhdrnW8adtGpGT7XCBxUXVy35q1Kh1xySHu5/z9ltOf9mRG4l2lbANRB h6KxuoFuSo9f/D7CZGmgI2+LSEKm0YQ6j5bGGRpEdw4TRj/uW96jkPeROHqIL0nx KBCR+G39N99/R8axHDuddF2XxTB2RILYm/yUjzOPlIz3xHVAn3GFhj67cNZ3liia Igoy1QTf07MVhw3f8nXaZYWhmw== -----END CERTIFICATE-----Generated at Sat Oct 3 19:37:17 2026 by rpki-client