$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: jK37b0khf9XjIBigy6wKrXdyrrKFSN78PFeU4YFYSlI= Subject key identifier: 4E:47:93:35:FA:68:9A:44:39:E1:FE:28:37:09:CB:EE:94:85:1C:AA Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: F7 Signing time: Sat 19 Sep 2026 06:25:10 +0000 Manifest this update: Sat 19 Sep 2026 06:25:10 +0000 Manifest next update: Sat 26 Sep 2026 06:25:10 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: kcfBuT7AaFC8+w1qhExQEW+KA7NV9kWO43l0WD31L14=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: +lH463qDPAwERrsUQl45+mVf4irW7NMTQzUVhbxqY6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Sep 19 06:25:10 2026 GMT Not After : Sep 26 06:25:10 2026 GMT Subject: CN=6aae2ac6-0aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:14:ed:cf:07:41:1c:ec:5b:da:ff:54:14: d7:18:8b:fc:55:47:7b:ce:03:f6:20:e2:fa:c6:93: f7:78:7b:00:6c:c0:aa:e1:02:f1:6e:dd:02:99:18: 93:f0:4d:07:1d:db:96:0f:e0:d2:24:cb:f5:84:7e: 91:27:6a:5f:15:b1:d9:97:20:f9:fc:23:42:c6:03: 9b:95:99:07:a7:1c:18:44:c6:18:8c:6a:bd:28:84: 2b:5a:7d:5c:1a:a5:ea:18:e9:61:23:f6:aa:e6:c2: 56:64:50:72:66:fb:03:bd:8c:a5:25:f5:37:f4:d9: 72:ff:dd:84:f3:ed:af:a2:ad:bc:63:15:1f:f6:54: 81:20:bb:07:8f:34:e2:9d:bc:e3:83:22:eb:fd:f8: 79:e1:7e:19:65:53:51:2b:20:a5:3a:96:68:bc:f3: 9f:7e:75:29:b1:b6:ed:88:13:03:8e:2f:2e:71:d8: bd:f7:ec:14:f2:39:45:38:e3:0e:30:97:93:cf:25: 99:8f:ec:91:63:bd:ab:8e:a7:50:0d:0d:bf:fa:98: 28:03:5f:2d:2a:c2:74:e0:96:57:a0:73:39:dc:e8: ce:b2:73:b8:11:d9:9a:18:dc:e6:e0:b3:dc:6d:3b: 82:77:6b:04:c6:c9:21:a4:28:86:46:4f:ff:73:a1: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:47:93:35:FA:68:9A:44:39:E1:FE:28:37:09:CB:EE:94:85:1C:AA X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:25:e2:fb:05:ff:a6:0d:12:a6:a4:98:21:7c:79:57:26:35: 26:19:4b:7d:3d:85:c9:de:12:56:42:1d:58:84:11:0c:a7:0e: 49:17:c1:9c:36:29:3b:d4:97:a7:92:53:a0:53:15:22:9c:7e: de:5d:1b:44:f7:6d:79:00:76:0e:64:54:5e:6d:3a:16:a4:8e: bc:83:74:5f:0e:90:35:d7:fe:be:4f:2d:6e:cd:f2:b8:1e:52: 52:e1:6a:f6:37:86:1f:d8:cf:66:04:59:b8:48:70:7c:30:95: cd:e3:99:c7:b2:da:df:fa:9d:86:7e:71:30:c1:77:6f:7b:cf: 60:f3:21:a8:9d:a7:01:c3:94:70:4a:97:5b:0c:7f:8c:95:f4: 8a:e0:35:45:c7:5c:05:43:69:32:b3:fc:75:48:7e:ab:30:f8: 2c:2f:80:1a:2b:8d:ed:d6:ab:b5:c5:e7:5e:c9:f0:41:02:40: 50:26:84:68:8b:70:6e:70:42:f0:be:c7:96:17:7e:0a:b3:d2: 5b:79:2e:6e:55:fc:20:b1:00:2b:f3:25:af:f3:89:3d:a0:28: 57:79:b2:29:1d:a4:c4:6c:50:0d:41:6d:d9:e6:36:86:91:1f: 31:db:ca:e8:df:79:d2:64:b9:e0:8d:d5:69:7d:92:60:fb:35: 27:f0:98:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0 OUJDNDZDODkwHhcNMjYwOTE5MDYyNTEwWhcNMjYwOTI2MDYyNTEwWjAYMRYwFAYD VQQDEw02YWFlMmFjNi0wYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeoU7c8HQRzsW9r/VBTXGIv8VUd7zgP2IOL6xpP3eHsAbMCq4QLxbt0CmRiT 8E0HHduWD+DSJMv1hH6RJ2pfFbHZlyD5/CNCxgOblZkHpxwYRMYYjGq9KIQrWn1c GqXqGOlhI/aq5sJWZFByZvsDvYylJfU39Nly/92E8+2voq28YxUf9lSBILsHjzTi nbzjgyLr/fh54X4ZZVNRKyClOpZovPOffnUpsbbtiBMDji8ucdi99+wU8jlFOOMO MJeTzyWZj+yRY72rjqdQDQ2/+pgoA18tKsJ04JZXoHM53OjOsnO4EdmaGNzm4LPc bTuCd2sExskhpCiGRk//c6H1/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5HkzX6 aJpEOeH+KDcJy+6UhRyqMB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9FRDBGMTFGNDQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJs Y0dWVXRTeThWdlJKdkViSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASiXi+wX/pg0SpqSYIXx5VyY1JhlLfT2Fyd4SVkIdWIQRDKcOSRfBnDYpO9SX p5JToFMVIpx+3l0bRPdteQB2DmRUXm06FqSOvIN0Xw6QNdf+vk8tbs3yuB5SUuFq 9jeGH9jPZgRZuEhwfDCVzeOZx7La3/qdhn5xMMF3b3vPYPMhqJ2nAcOUcEqXWwx/ jJX0iuA1RcdcBUNpMrP8dUh+qzD4LC+AGiuN7dartcXnXsnwQQJAUCaEaItwbnBC 8L7Hlhd+CrPSW3kublX8ILEAK/Mlr/OJPaAoV3myKR2kxGxQDUFt2eY2hpEfMdvK 6N950mS54I3VaX2SYPs1J/CYzw== -----END CERTIFICATE-----Generated at Mon Sep 21 05:40:54 2026 by rpki-client