$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: cfLnKutfFFlBdiMrH2rwMfFOh2ewbPGvVOuCzUZbqHc= Subject key identifier: 85:D0:B0:C9:8D:33:69:E0:04:86:A3:E9:8B:C0:29:D5:98:74:5C:72 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 023D Signing time: Mon 21 Sep 2026 02:32:06 +0000 Manifest this update: Mon 21 Sep 2026 02:32:06 +0000 Manifest next update: Mon 28 Sep 2026 02:32:06 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: WGAqZ1sdJs9Ds5rz8Ne4H31947So+0zWPv7SBfStSvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Sep 21 02:32:06 2026 GMT Not After : Sep 28 02:32:06 2026 GMT Subject: CN=6ab09726-5cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:8c:97:e6:13:7c:d1:01:cd:66:d2:94:e7: 1e:7d:3f:10:fb:8f:ed:7f:80:3e:ee:51:16:b7:98: 24:fd:84:58:fc:32:3d:6a:19:6e:4a:95:87:ae:7c: f1:14:03:d4:6f:d2:04:c5:f7:7f:50:09:b3:c8:d3: 69:da:6d:e4:51:51:fd:17:38:0b:52:bd:d0:35:65: ce:54:36:e5:85:8b:8f:32:aa:99:74:f6:b0:f0:b4: 85:53:05:a7:8a:49:9c:8d:6f:82:cb:d4:9e:7e:4c: 6a:e9:1a:da:a6:5b:c6:71:75:7e:4a:08:49:f1:2a: 8c:66:5e:77:46:de:65:92:ca:54:96:46:58:fd:54: 19:d7:de:e6:15:76:e0:4d:03:65:a3:96:68:25:cd: b6:50:6a:93:88:9f:a4:1c:29:dd:29:2b:76:75:ec: 2e:80:07:cd:9f:b7:f7:7e:b7:79:d3:fa:18:e5:c0: e6:02:2b:cd:94:52:0c:2a:42:d5:4e:bd:24:30:b8: 96:79:65:86:b3:16:f8:46:a9:d5:c0:21:11:74:c1: 86:f7:01:8f:cb:17:60:27:68:35:01:19:86:b2:75: 93:2b:24:09:04:63:73:5e:27:4c:1f:9e:d6:f0:4f: d4:b0:71:dd:57:8a:ab:09:5b:82:79:21:d3:16:45: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D0:B0:C9:8D:33:69:E0:04:86:A3:E9:8B:C0:29:D5:98:74:5C:72 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:28:38:16:a5:43:2c:b3:7d:25:d6:af:fa:33:4c:11:ec:d0: f6:6d:2c:5d:33:15:71:86:8f:94:cd:ec:53:a9:5b:d1:4c:18: 5c:d2:3c:83:81:65:54:d2:24:9c:c4:cd:85:89:68:36:a8:06: 0e:2e:b4:bd:b0:41:93:c9:4c:5b:91:ef:4f:54:d6:6a:9e:56: e3:38:69:1c:54:1c:c7:76:10:51:aa:ec:00:ee:d0:c4:29:9e: 25:f4:82:3f:79:32:37:c6:b1:78:00:f5:34:b2:c1:a7:72:78: da:af:6b:6c:1b:77:5c:ab:46:4e:dd:07:bb:2c:21:fb:41:65: 58:bb:fa:f7:47:fb:1c:72:8e:c7:76:1a:3b:3f:0e:df:22:75: 7e:4d:f1:a5:c7:f6:3d:a7:47:98:41:54:e5:7d:17:1e:64:57: a4:f0:e1:c7:26:c3:70:ef:7a:03:a1:da:12:ff:26:ae:8d:d9: 6b:36:69:d7:fa:39:76:ff:1a:6c:fe:cb:8f:5e:3a:1d:f9:70: c7:11:80:4b:f4:22:13:c2:43:97:ba:db:92:3f:64:ad:ab:5c: c2:3a:03:bc:90:f2:d0:de:53:9c:2a:ee:7d:6c:94:64:c4:b1: db:76:6f:35:4a:ca:1f:36:6e:ec:bc:15:b2:b4:85:84:d3:2e: da:d4:bc:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjYwOTIxMDIzMjA2WhcNMjYwOTI4MDIzMjA2WjAYMRYwFAYD VQQDEw02YWIwOTcyNi01Y2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOSMl+YTfNEBzWbSlOcefT8Q+4/tf4A+7lEWt5gk/YRY/DI9ahluSpWHrnzx FAPUb9IExfd/UAmzyNNp2m3kUVH9FzgLUr3QNWXOVDblhYuPMqqZdPaw8LSFUwWn ikmcjW+Cy9Sefkxq6RraplvGcXV+SghJ8SqMZl53Rt5lkspUlkZY/VQZ197mFXbg TQNlo5ZoJc22UGqTiJ+kHCndKSt2dewugAfNn7f3frd50/oY5cDmAivNlFIMKkLV Tr0kMLiWeWWGsxb4RqnVwCERdMGG9wGPyxdgJ2g1ARmGsnWTKyQJBGNzXidMH57W 8E/UsHHdV4qrCVuCeSHTFkWk4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXQsMmN M2ngBIaj6YvAKdWYdFxyMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2yg4FqVDLLN9Jdav+jNMEezQ9m0sXTMVcYaPlM3sU6lb0UwYXNI8g4FlVNIk nMTNhYloNqgGDi60vbBBk8lMW5HvT1TWap5W4zhpHFQcx3YQUarsAO7QxCmeJfSC P3kyN8axeAD1NLLBp3J42q9rbBt3XKtGTt0Huywh+0FlWLv690f7HHKOx3YaOz8O 3yJ1fk3xpcf2PadHmEFU5X0XHmRXpPDhxybDcO96A6HaEv8mro3ZazZp1/o5dv8a bP7Lj146HflwxxGAS/QiE8JDl7rbkj9kratcwjoDvJDy0N5TnCrufWyUZMSx23Zv NUrKHzZu7LwVsrSFhNMu2tS8JQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:35:46 2026 by rpki-client