$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft File: Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json) Hash identifier: Lj+mkgGmHE91Qqx5Mdvq+yXkem7ZWIo7avO2eiwpbhg= Subject key identifier: 20:C3:AA:C3:19:85:DC:8D:CD:D8:DE:CB:FF:00:EF:5B:F0:6E:E4:28 Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft Manifest number: BE Signing time: Wed 23 Sep 2026 06:40:52 +0000 Manifest this update: Wed 23 Sep 2026 06:40:51 +0000 Manifest next update: Wed 30 Sep 2026 06:40:51 +0000 Files and hashes: 1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: AITKllsyJq/53i9NVNJHNRdyyvt3p0nEPbgyU/Utwig=) 2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: 2jaK9Imhu+Xw7a9whl7nd2mMko9E0vTzAQrleZ3Kuic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Validity Not Before: Sep 23 06:40:51 2026 GMT Not After : Sep 30 06:40:51 2026 GMT Subject: CN=6ab37474-6aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:78:d3:b7:7b:aa:b8:75:fc:d9:8c:7f:81: 9e:ab:85:af:5c:ca:72:b2:67:e8:47:6c:0b:56:4d: f5:46:c4:1a:a3:06:1a:05:11:92:7b:55:7e:ff:9b: 27:6f:23:b5:38:76:4b:06:bc:40:49:c9:24:23:81: a0:f1:87:76:ff:16:b6:9c:1f:e2:52:4c:ec:4f:2d: 0c:8c:38:66:0d:53:06:43:57:c0:3c:85:a8:6f:3b: 5b:e1:fe:c2:1c:df:57:bf:da:2e:84:e9:06:ea:02: 73:c6:6f:c3:19:b9:39:d1:0f:c4:0b:6e:24:be:b6: e9:9d:ad:54:9c:ed:55:05:74:6c:d8:ea:39:68:64: 09:d7:80:b5:52:88:c4:ae:7b:9c:01:ad:73:05:e4: 0b:cd:c4:6c:72:b4:10:58:6a:70:1c:e2:78:e2:3e: 7e:a7:5e:26:30:e5:ac:59:4d:81:6e:8a:8e:59:86: 40:e0:64:f9:9d:c2:d9:59:be:81:51:51:29:e6:68: 64:85:69:68:6f:c0:db:a6:ea:69:1a:65:75:f9:07: bb:06:12:2e:96:2e:fe:78:f1:4a:19:3b:63:e7:5e: 91:1d:83:86:0e:9f:1b:c1:76:1a:0c:3c:7d:df:67: 1b:69:ed:54:c7:9c:a4:fb:14:6e:b3:1a:8e:25:4e: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C3:AA:C3:19:85:DC:8D:CD:D8:DE:CB:FF:00:EF:5B:F0:6E:E4:28 X509v3 Authority Key Identifier: keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:f1:e5:5b:aa:fa:0b:a1:07:ac:c8:92:0d:05:ee:85:59:7c: 00:69:03:bf:dd:b5:01:da:89:dc:db:27:7c:ee:eb:1f:ea:e3: 92:74:07:90:05:83:0e:86:1b:7f:f0:42:9f:ae:76:5a:71:70: ec:2f:90:cb:57:8c:ed:f4:89:0b:14:a8:22:81:23:ab:ce:34: e4:07:e3:77:3e:c3:ff:1d:54:5d:ed:dc:ea:02:b2:48:06:ce: b0:84:6c:71:d0:e9:a9:ed:f0:0e:61:ee:9b:e0:2c:91:6c:72: dc:20:20:22:5e:73:a4:0d:98:66:6d:a0:04:d0:a6:3b:aa:0a: 4a:9d:e9:0c:0c:5a:21:c6:e3:79:9f:af:eb:39:ed:02:1d:2e: 8a:5a:3e:a6:ef:c0:3b:0d:9d:1e:da:3c:6b:60:59:50:8b:e8: 44:35:b5:0d:bb:78:eb:26:09:a7:40:e1:6d:2c:c3:29:2d:b4: ad:41:9c:95:7a:1e:16:12:78:a8:41:a7:53:7d:2e:fd:2b:97: ab:2e:eb:d7:3c:2d:ae:6e:09:2a:71:35:7c:f0:e2:39:2b:16: 5d:0e:7c:15:7d:b7:3a:54:4e:11:20:ea:00:be:bd:53:12:9d: 42:11:6e:3d:c9:f9:35:10:81:01:c9:fa:06:d1:dc:70:bb:74: 20:db:00:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFNkQxMTAvBgNVBAUTKDIyNDcyMTg3NkExMUUyRDNBNEI5OEIyMUJDODRGNzhF NjRGRUM4NDYwHhcNMjYwOTIzMDY0MDUxWhcNMjYwOTMwMDY0MDUxWjAYMRYwFAYD VQQDEw02YWIzNzQ3NC02YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowZ407d7qrh1/NmMf4Geq4WvXMpysmfoR2wLVk31RsQaowYaBRGSe1V+/5sn byO1OHZLBrxASckkI4Gg8Yd2/xa2nB/iUkzsTy0MjDhmDVMGQ1fAPIWobztb4f7C HN9Xv9ouhOkG6gJzxm/DGbk50Q/EC24kvrbpna1UnO1VBXRs2Oo5aGQJ14C1UojE rnucAa1zBeQLzcRscrQQWGpwHOJ44j5+p14mMOWsWU2BboqOWYZA4GT5ncLZWb6B UVEp5mhkhWlob8DbpuppGmV1+Qe7BhIuli7+ePFKGTtj516RHYOGDp8bwXYaDDx9 32cbae1Ux5yk+xRusxqOJU5IqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDDqsMZ hdyNzdjey/8A71vwbuQoMB8GA1UdIwQYMBaAFCJHIYdqEeLTpLmLIbyE945k/shG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU2RC81MTExMEFGRTk3 NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0T2t1WXNodklUM2ptVC15 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrY2hoMm9SNHRPa3VZc2h2SVQzam1ULXlFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU2RC81MTExMEFGRTk3NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0 T2t1WXNodklUM2ptVC15RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzPHlW6r6C6EHrMiSDQXuhVl8AGkDv921AdqJ3NsnfO7rH+rjknQHkAWDDoYb f/BCn652WnFw7C+Qy1eM7fSJCxSoIoEjq8405Afjdz7D/x1UXe3c6gKySAbOsIRs cdDpqe3wDmHum+AskWxy3CAgIl5zpA2YZm2gBNCmO6oKSp3pDAxaIcbjeZ+v6znt Ah0uilo+pu/AOw2dHto8a2BZUIvoRDW1Dbt46yYJp0DhbSzDKS20rUGclXoeFhJ4 qEGnU30u/SuXqy7r1zwtrm4JKnE1fPDiOSsWXQ58FX23OlROESDqAL69UxKdQhFu Pcn5NRCBAcn6BtHccLt0INsAqg== -----END CERTIFICATE-----Generated at Wed Sep 23 23:51:42 2026 by rpki-client