$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft File: IY_bC_-9DsQ8Nb53hZviztXFQOo.mft (raw, json) Hash identifier: MPCx3+r7CnpmI9DbZV5lsRcCsX3shwd//CssnDE2AzE= Subject key identifier: 07:98:F7:30:25:50:E7:5F:16:F7:8C:47:07:8E:26:C7:E4:1E:B6:FB Authority key identifier: 21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA Certificate issuer: /CN=A91CF477/serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft Manifest number: 3A Signing time: Thu 15 Oct 2026 09:42:27 +0000 Manifest this update: Thu 15 Oct 2026 09:42:26 +0000 Manifest next update: Thu 22 Oct 2026 09:42:26 +0000 Files and hashes: 1: IY_bC_-9DsQ8Nb53hZviztXFQOo.crl (hash: pQJkvKiOukpTXHewoo96pzkkw9yFuCy3Ae3I58gbrag=) 2: BB05DCBA712511F1BDAC11CB6EA30FBC.roa (hash: P4GuX5ou/U+Rpw8seN62fuLfOYRcHVXRnnvShlDFcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF477, serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA Validity Not Before: Oct 15 09:42:26 2026 GMT Not After : Oct 22 09:42:26 2026 GMT Subject: CN=6ad0a002-336b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:b5:f7:05:e5:2e:b7:b0:9e:40:6a:aa:6a: ce:ec:cd:bd:df:46:de:98:92:eb:03:a6:10:6f:9f: e7:fa:b6:3a:ef:51:4f:a3:4f:cb:26:2b:63:70:aa: fd:a3:38:75:fe:8b:af:89:71:93:32:b6:61:9a:5d: df:ff:cd:21:51:bd:7c:bc:ae:47:08:14:41:1f:02: b8:46:52:ee:32:73:71:e3:aa:ce:19:37:fd:b6:a4: 91:9e:1c:d9:cc:60:01:89:b5:9e:29:53:2a:34:cb: e7:29:e3:ce:dc:23:1b:22:cc:8d:24:1d:45:25:f2: cc:3a:db:db:25:79:53:4e:c0:2f:66:ff:7d:4e:fa: 71:a0:99:a9:1f:6d:67:3b:3a:93:d9:2b:35:b4:fc: 70:b7:32:be:8e:b1:6e:9d:19:ad:e5:ea:d3:4c:80: 10:2d:78:95:81:00:9a:ef:82:6d:3a:39:00:11:91: 64:61:35:d5:65:b8:4a:e6:d0:64:31:7f:e4:b4:8e: f3:5e:c2:da:0f:69:43:0c:80:06:40:7a:85:de:a8: 28:b9:a7:fa:98:f1:4e:31:70:6b:1a:ab:5d:7e:60: 5b:20:8a:e0:8a:da:65:5f:35:e0:7e:97:33:bf:c5: e4:f2:ed:09:e4:89:f2:8f:b2:b8:0c:91:52:a7:69: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:98:F7:30:25:50:E7:5F:16:F7:8C:47:07:8E:26:C7:E4:1E:B6:FB X509v3 Authority Key Identifier: keyid:21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:01:b3:76:e7:ef:68:c1:08:49:ac:84:16:37:5e:5d:12:c1: b9:e3:0f:8a:89:3d:b1:f1:fd:85:7f:ab:04:a4:80:d6:ec:03: c2:01:3f:f8:c1:78:58:1a:88:89:62:e1:34:e3:ca:e5:22:89: 2b:db:40:c8:86:11:54:45:67:7c:89:41:53:09:93:5e:c7:a4: 0d:fb:d4:ae:03:9d:5d:22:b1:49:63:05:62:9c:57:ad:79:46: 5a:d7:b9:4b:58:08:c7:a9:e8:71:74:a9:a4:31:33:3b:69:b0: 0c:01:dc:99:fa:ea:6f:6a:38:f3:ce:43:29:1a:af:16:3f:d2: 7e:d9:99:10:30:68:41:c5:b4:0c:a8:33:8c:c4:3e:c6:5a:d9: 24:71:89:b2:81:7b:e0:92:9e:4e:3e:01:8e:51:61:f9:91:e2: da:f7:97:a8:b7:ee:7f:7e:61:a9:13:8c:38:2e:43:48:1c:b6: 17:0a:77:7f:1f:92:24:bb:2b:66:74:d3:01:2a:02:14:22:7a: 54:eb:f4:17:33:da:00:a7:44:e1:ff:af:ab:c1:81:15:1d:47: bd:5a:a7:9d:db:93:8f:be:8d:71:d7:6c:9d:5d:97:f5:65:1b: 4a:17:da:b4:77:e5:54:ee:c9:94:ef:8d:a4:3d:b3:77:f5:be: 37:dd:c4:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RjQ3NzExMC8GA1UEBRMoMjE4RkRCMEJGRkJEMEVDNDNDMzVCRTc3ODU5QkUyQ0VE NUM1NDBFQTAeFw0yNjEwMTUwOTQyMjZaFw0yNjEwMjIwOTQyMjZaMBgxFjAUBgNV BAMTDTZhZDBhMDAyLTMzNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzDrX3BeUut7CeQGqqas7szb3fRt6YkusDphBvn+f6tjrvUU+jT8smK2Nwqv2j OHX+i6+JcZMytmGaXd//zSFRvXy8rkcIFEEfArhGUu4yc3Hjqs4ZN/22pJGeHNnM YAGJtZ4pUyo0y+cp487cIxsizI0kHUUl8sw629sleVNOwC9m/31O+nGgmakfbWc7 OpPZKzW0/HC3Mr6OsW6dGa3l6tNMgBAteJWBAJrvgm06OQARkWRhNdVluErm0GQx f+S0jvNewtoPaUMMgAZAeoXeqCi5p/qY8U4xcGsaq11+YFsgiuCK2mVfNeB+lzO/ xeTy7QnkifKPsrgMkVKnaZGlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB5j3MCVQ 518W94xHB44mx+QetvswHwYDVR0jBBgwFoAUIY/bC/+9DsQ8Nb53hZviztXFQOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGNDc3LzY1NDJDNjQ0NzEy NTExRjE4N0VBQURDQTZEQTMwRkJDL0lZX2JDXy05RHNROE5iNTNoWnZpenRYRlFP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVlfYkNfLTlEc1E4TmI1M2hadml6dFhGUU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG NDc3LzY1NDJDNjQ0NzEyNTExRjE4N0VBQURDQTZEQTMwRkJDL0lZX2JDXy05RHNR OE5iNTNoWnZpenRYRlFPby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwAbN25+9owQhJrIQWN15dEsG54w+KiT2x8f2Ff6sEpIDW7APCAT/4wXhYGoiJ YuE048rlIokr20DIhhFURWd8iUFTCZNex6QN+9SuA51dIrFJYwVinFeteUZa17lL WAjHqehxdKmkMTM7abAMAdyZ+upvajjzzkMpGq8WP9J+2ZkQMGhBxbQMqDOMxD7G WtkkcYmygXvgkp5OPgGOUWH5keLa95eot+5/fmGpE4w4LkNIHLYXCnd/H5Ikuytm dNMBKgIUInpU6/QXM9oAp0Th/6+rwYEVHUe9Wqed25OPvo1x12ydXZf1ZRtKF9q0 d+VU7smU742kPbN39b433cRf -----END CERTIFICATE-----Generated at Thu Oct 15 14:09:00 2026 by rpki-client