$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json) Hash identifier: Tm6ydUBnHn7yt9O4N28d+jzO9smUOEM//B5loI3dHME= Subject key identifier: 27:14:27:A1:98:36:53:2F:E9:24:9F:0C:52:DD:67:79:1E:DF:78:DF Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft Manifest number: 01C9 Signing time: Fri 25 Sep 2026 03:50:19 +0000 Manifest this update: Fri 25 Sep 2026 03:50:19 +0000 Manifest next update: Fri 02 Oct 2026 03:50:19 +0000 Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: Q4FfheDaGLhhrCYM2tKvZ/UyIvCxsSUt2T2CwOObSuw=) 2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: L0M83R15EvxuSf1jDp04uRVhbAU3t/uCIwmIug3ad70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Validity Not Before: Sep 25 03:50:19 2026 GMT Not After : Oct 2 03:50:19 2026 GMT Subject: CN=6ab5ef7b-bbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:07:60:95:c9:78:39:0b:a2:53:67:60:7d: bf:89:40:d0:d8:67:49:c8:b9:2f:41:7d:ce:b7:20: 88:6d:c4:13:c3:65:fd:1b:fd:f9:67:24:ef:97:f2: ed:80:d9:49:4e:ff:d3:74:3f:7b:91:28:93:2b:e3: b1:02:35:a7:df:25:c1:8c:99:4c:71:fa:df:ee:2d: 31:1b:78:bb:2c:b3:2f:19:6a:ef:b1:2d:46:04:be: 10:f9:96:4f:41:ff:72:ac:ba:4f:bc:b4:43:86:35: 24:9a:7f:40:f4:73:07:01:7e:38:a7:45:fa:d5:a3: a9:1e:82:c2:93:0d:21:11:f5:f2:c6:f7:f3:12:2a: 75:5b:73:be:f0:91:0e:50:56:a7:b5:e1:c1:10:16: 5f:71:f3:53:dd:13:59:1f:e3:ff:cd:d6:6a:4d:e0: 9f:0e:97:34:f6:fc:dc:bf:a0:ec:ec:95:ac:72:11: a9:3e:ab:ac:87:52:40:99:2f:5c:e1:a8:00:a4:74: 79:10:bb:b3:dd:26:51:ec:db:d8:76:8b:95:8c:8b: 91:a9:85:42:54:ed:5f:cc:cc:fc:ec:68:63:db:4a: 52:50:c1:27:d2:73:6e:3f:7d:38:2c:8e:48:fe:5b: c7:0b:92:f8:1b:4a:a1:83:e0:46:73:e3:4f:9a:c6: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:14:27:A1:98:36:53:2F:E9:24:9F:0C:52:DD:67:79:1E:DF:78:DF X509v3 Authority Key Identifier: keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d3:b8:24:2e:e6:02:b2:f7:45:d0:cd:9b:89:13:f0:6c:12: 1b:ca:69:28:a3:88:23:b9:e4:56:43:2d:7e:77:b4:44:4c:d3: fd:a9:dd:29:bc:f8:b5:62:b9:68:d2:13:c8:69:30:24:bf:7c: 18:dc:d4:78:95:d6:68:fd:0d:0c:2c:44:05:43:6f:54:b1:4f: ae:b9:ec:c3:03:a3:62:67:60:4a:a4:86:07:df:1a:5f:47:d9: 78:c0:50:cb:fd:a4:ac:bb:21:a9:f8:4d:8a:04:0d:5e:41:fa: 79:f7:0e:ce:a8:f5:49:00:10:1b:0b:55:50:99:ca:1b:01:ed: ac:0d:5d:12:1d:22:f1:ac:c0:a7:f2:c6:85:39:98:66:a5:aa: 53:45:db:7a:28:3a:10:82:55:80:9e:ab:89:d8:b7:c3:b1:60: c1:16:24:3b:30:d1:77:21:a0:7f:6c:7d:f4:c6:41:c2:23:1d: 7c:57:80:ad:33:7d:75:40:1a:02:39:8a:02:71:2a:d1:b7:9e: ef:49:2c:ac:eb:47:2f:6d:43:b0:6a:6e:15:69:8a:b5:29:1f: a0:a2:40:c7:37:5e:f5:47:95:1a:c8:55:62:19:86:f2:4c:7a: b7:a8:14:f4:21:5e:d1:58:8e:b9:6c:f4:cd:7b:f9:38:7e:98: a5:5c:b6:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRkQxMTAvBgNVBAUTKDIxOTM0MTk4RTgzMzEwNjFEMjc1QjhDRkM3OTQ1OEQz MkZBQkQ2QzkwHhcNMjYwOTI1MDM1MDE5WhcNMjYxMDAyMDM1MDE5WjAYMRYwFAYD VQQDEw02YWI1ZWY3Yi1iYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDIHYJXJeDkLolNnYH2/iUDQ2GdJyLkvQX3OtyCIbcQTw2X9G/35ZyTvl/Lt gNlJTv/TdD97kSiTK+OxAjWn3yXBjJlMcfrf7i0xG3i7LLMvGWrvsS1GBL4Q+ZZP Qf9yrLpPvLRDhjUkmn9A9HMHAX44p0X61aOpHoLCkw0hEfXyxvfzEip1W3O+8JEO UFanteHBEBZfcfNT3RNZH+P/zdZqTeCfDpc09vzcv6Ds7JWschGpPqush1JAmS9c 4agApHR5ELuz3SZR7NvYdouVjIuRqYVCVO1fzMz87Ghj20pSUMEn0nNuP304LI5I /lvHC5L4G0qhg+BGc+NPmsZc+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcUJ6GY NlMv6SSfDFLdZ3ke33jfMB8GA1UdIwQYMBaAFCGTQZjoMxBh0nW4z8eUWNMvq9bJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNGRC82ODhFNTdFRUZG MzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVHSFNkYmpQeDVSWTB5LXIx c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laTkJtT2d6RUdIU2RialB4NVJZMHktcjFzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNGRC82ODhFNTdFRUZGMzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVH SFNkYmpQeDVSWTB5LXIxc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmdO4JC7mArL3RdDNm4kT8GwSG8ppKKOII7nkVkMtfne0REzT/andKbz4tWK5 aNITyGkwJL98GNzUeJXWaP0NDCxEBUNvVLFPrrnswwOjYmdgSqSGB98aX0fZeMBQ y/2krLshqfhNigQNXkH6efcOzqj1SQAQGwtVUJnKGwHtrA1dEh0i8azAp/LGhTmY ZqWqU0Xbeig6EIJVgJ6ridi3w7FgwRYkOzDRdyGgf2x99MZBwiMdfFeArTN9dUAa AjmKAnEq0bee70ksrOtHL21DsGpuFWmKtSkfoKJAxzde9UeVGshVYhmG8kx6t6gU 9CFe0ViOuWz0zXv5OH6YpVy2Qw== -----END CERTIFICATE-----Generated at Fri Sep 25 18:26:45 2026 by rpki-client