$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json) Hash identifier: 657fZyEue7o54XGyK6o7510BvkMjL+XindmZybVWCq4= Subject key identifier: 36:5C:FF:41:A2:0F:9F:75:05:F1:28:9D:2B:E7:2C:D2:46:D5:F9:37 Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft Manifest number: 0158 Signing time: Sat 19 Sep 2026 05:17:09 +0000 Manifest this update: Sat 19 Sep 2026 05:17:09 +0000 Manifest next update: Sat 26 Sep 2026 05:17:09 +0000 Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: rJUdsdT/mBPGgXwYW0rMWyyKaAqSbDdKMbV0VO2l/qU=) 2: lM-TprDofa3mdD2nduyXi_4xBlU.asa (hash: nBHzp1rY3qS8haLL2LslsF//VUiGFxVcvC4ou7bnwZI=) 3: BB5954CE241111F094390A32C4F9AE02.roa (hash: ef4lv30v406PmcKm4a1LzWHrixGqc5q9ekgP0Wh8CuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Validity Not Before: Sep 19 05:17:09 2026 GMT Not After : Sep 26 05:17:09 2026 GMT Subject: CN=6aae1ad5-87a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:7c:eb:63:8b:6f:3a:ae:1c:9f:1f:2b:1d: 94:e0:25:f1:a2:ba:d7:5a:2e:eb:d4:15:7e:22:de: 19:d7:bf:a6:11:aa:5b:f1:25:a2:ce:e2:88:1e:21: 0a:86:6d:74:6f:f2:79:ca:ec:5b:03:aa:20:a1:d0: e7:12:48:f9:14:49:c7:13:78:ad:e4:f3:3f:b8:54: 58:e8:90:ef:1e:14:dd:1e:b0:2a:7b:b5:41:bd:5a: f9:19:5b:e6:3b:56:9d:56:7b:17:83:82:bb:45:68: 50:9d:fb:ad:de:ec:31:6e:5c:77:d7:95:50:2d:23: 70:81:32:b1:f7:91:53:2c:62:80:8d:1d:44:94:ca: 46:a6:a8:b3:89:76:a3:97:f9:b4:23:c4:b7:51:60: 86:5b:1d:4c:f1:b0:07:bd:8c:6c:bb:db:3a:db:1e: ff:77:d6:c9:62:2b:c1:4b:4e:b1:92:ef:1b:f2:ff: 1c:01:a6:c3:39:6f:b4:0e:76:e0:68:9b:29:5d:82: 8d:90:0d:5f:ec:2c:a4:df:cc:e1:91:39:39:a9:8e: d8:53:7d:28:84:be:be:42:46:9c:f1:ca:44:f3:bf: 71:fe:8d:77:4d:64:c9:86:3e:a0:da:b3:8e:ab:6d: 9b:a3:b1:6b:34:5d:e4:e9:9a:a3:d7:ed:77:ca:06: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5C:FF:41:A2:0F:9F:75:05:F1:28:9D:2B:E7:2C:D2:46:D5:F9:37 X509v3 Authority Key Identifier: keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1f:98:54:10:a4:11:a3:12:c8:b2:b4:2a:4b:7f:e5:f4:51: 51:90:9d:fb:1e:61:cb:8c:d7:d3:b8:0e:f5:5d:51:86:ed:e0: 16:84:20:6b:4b:9c:6d:6e:69:32:53:af:08:d1:8c:87:80:de: 28:84:88:d1:db:b9:82:bf:9c:be:64:91:2b:c0:3c:6b:6a:84: 62:a2:e7:45:45:d9:aa:94:8b:df:e6:2c:04:fa:bb:62:e2:6c: 6c:24:c2:c9:25:c4:cd:a5:e5:d0:d3:ff:8d:7b:e7:f9:87:26: b8:a1:a8:7e:c4:41:a3:0b:8b:b7:1d:31:b6:11:16:36:59:a7: 80:a6:82:a2:34:42:22:5b:df:95:4a:73:75:dc:5d:8e:18:1e: 1d:ab:bd:e6:d9:c8:b7:d8:8f:a6:e2:5d:02:11:d4:cd:59:71: af:62:f9:a9:23:57:86:d8:3f:87:af:47:30:a0:2a:6e:c3:7b: a7:3e:56:53:3f:44:42:2f:35:47:f7:93:c8:0f:83:2c:bf:8b: e8:c3:3d:93:be:a7:f2:8c:fb:3c:3a:e9:de:f3:a5:26:aa:9a: 2f:52:dd:b2:76:e0:84:c4:98:a1:e3:aa:00:e4:50:14:4f:05: c1:e5:9b:36:10:9a:b5:b4:d5:75:0a:0b:24:52:c6:f4:cc:e1: e8:14:5b:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKEQ2MjcxNkY3NjFGMTg4RDU2RkExMTdGOURDOTRCRTQx NDEwNEE2ODEwHhcNMjYwOTE5MDUxNzA5WhcNMjYwOTI2MDUxNzA5WjAYMRYwFAYD VQQDEw02YWFlMWFkNS04N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02J862OLbzquHJ8fKx2U4CXxorrXWi7r1BV+It4Z17+mEapb8SWizuKIHiEK hm10b/J5yuxbA6ogodDnEkj5FEnHE3it5PM/uFRY6JDvHhTdHrAqe7VBvVr5GVvm O1adVnsXg4K7RWhQnfut3uwxblx315VQLSNwgTKx95FTLGKAjR1ElMpGpqiziXaj l/m0I8S3UWCGWx1M8bAHvYxsu9s62x7/d9bJYivBS06xku8b8v8cAabDOW+0Dnbg aJspXYKNkA1f7Cyk38zhkTk5qY7YU30ohL6+Qkac8cpE879x/o13TWTJhj6g2rOO q22bo7FrNF3k6Zqj1+13ygb82wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZc/0Gi D591BfEonSvnLNJG1fk3MB8GA1UdIwQYMBaAFNYnFvdh8YjVb6EX+dyUvkFBBKaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My8wNUZGQzAwRUFD ODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlOVnZvUmY1M0pTLVFVRUVw b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My8wNUZGQzAwRUFDODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlO VnZvUmY1M0pTLVFVRUVwb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGx+YVBCkEaMSyLK0Kkt/5fRRUZCd+x5hy4zX07gO9V1Rhu3gFoQga0ucbW5p MlOvCNGMh4DeKISI0du5gr+cvmSRK8A8a2qEYqLnRUXZqpSL3+YsBPq7YuJsbCTC ySXEzaXl0NP/jXvn+YcmuKGofsRBowuLtx0xthEWNlmngKaCojRCIlvflUpzddxd jhgeHau95tnIt9iPpuJdAhHUzVlxr2L5qSNXhtg/h69HMKAqbsN7pz5WUz9EQi81 R/eTyA+DLL+L6MM9k76n8oz7PDrp3vOlJqqaL1LdsnbghMSYoeOqAORQFE8FweWb NhCatbTVdQoLJFLG9Mzh6BRb/g== -----END CERTIFICATE-----Generated at Sun Sep 20 13:53:32 2026 by rpki-client