$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: 4jdXzI1xnphhNth6M1HPTOA3moaSd2DfHdoWHtYWLgQ= Subject key identifier: 35:84:DC:BB:CD:1A:CD:1F:BD:A2:C4:2B:95:F0:58:97:FE:07:E7:79 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: F8 Signing time: Mon 21 Sep 2026 06:19:05 +0000 Manifest this update: Mon 21 Sep 2026 06:19:04 +0000 Manifest next update: Mon 28 Sep 2026 06:19:04 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: WsoQwXgmDbHYAZhyCONcp2gwv08C8s+xeVjTgAwwVzs=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: +lH463qDPAwERrsUQl45+mVf4irW7NMTQzUVhbxqY6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Sep 21 06:19:04 2026 GMT Not After : Sep 28 06:19:04 2026 GMT Subject: CN=6ab0cc59-2624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:ac:68:34:a1:4c:ab:ea:0d:9c:58:67:78: a7:63:02:4e:f3:7c:bd:8c:1e:c9:02:e2:e7:c4:06: bb:86:83:06:2d:e5:d8:2a:4b:9a:88:42:41:06:c2: 43:c5:6a:b3:47:f0:3a:35:9d:e6:19:00:bc:54:ae: e5:dd:5c:3c:b4:9f:b1:07:2f:91:29:ca:69:e2:d5: a6:fe:8d:21:90:6d:b3:ab:c5:7a:e5:32:80:32:8a: 21:35:14:f3:ec:cd:55:75:7e:25:d7:ed:0d:9c:da: 11:c5:4c:f7:a2:67:19:67:28:f5:52:f2:35:79:a1: fc:e9:f0:07:36:4f:83:4a:2e:ba:d0:f9:98:0b:a3: 70:be:db:db:a4:95:95:97:8d:8a:19:67:e5:b1:b7: 4a:6d:f6:a9:9b:8e:12:21:94:75:1d:bd:d7:53:2a: 77:df:ba:30:83:5b:21:20:d6:7e:3c:10:72:63:44: 79:0a:af:49:1c:0b:a1:1f:76:55:7e:c2:ed:e5:1e: 53:45:bf:d5:90:22:81:60:e2:f1:af:13:19:c5:d3: c7:bc:12:ea:30:bb:03:9e:f3:45:5b:fa:ca:b0:e4: d9:66:49:9d:69:19:9d:c4:1d:7b:7f:e4:46:43:49: 0e:38:7e:4f:1b:3d:b6:65:37:9a:1b:1c:00:40:03: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:84:DC:BB:CD:1A:CD:1F:BD:A2:C4:2B:95:F0:58:97:FE:07:E7:79 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:41:b9:ab:43:3a:3c:51:ce:dc:d9:d5:34:5e:8d:84:88:94: 9e:fd:2f:29:c1:37:c9:07:f9:06:95:93:f5:46:cf:49:8e:9c: a8:a7:d9:5d:0d:e6:30:56:37:0c:d2:cf:94:47:c0:21:9e:65: 7f:0f:60:57:3b:d8:aa:82:dc:d4:5e:76:fa:b9:e1:de:53:60: ba:87:07:a1:d9:a7:6b:40:15:d0:a6:4c:b2:de:e7:f5:0b:08: 06:a9:14:c5:bf:9f:6c:6b:7e:c3:f5:70:43:29:88:1d:fb:34: a5:83:9d:b3:c6:b8:6e:e7:82:a7:84:82:a6:2a:be:c2:7d:29: 45:be:3e:e4:42:a3:ba:29:c6:0e:bd:89:2f:dc:f2:61:b1:c9: 5d:bf:62:5c:b6:f8:c3:b4:b2:06:bf:93:32:65:04:c0:52:89: 32:8c:05:b1:f7:ef:35:01:88:80:3e:8c:fb:54:a5:ce:b7:7e: 09:d1:ed:b8:0a:61:06:3a:4d:e2:8f:a9:2b:81:b5:72:98:a6: 7d:24:e0:52:25:71:da:2e:7e:fd:67:67:60:ed:00:8f:93:d8: 0d:86:1e:90:fa:76:a8:54:79:f7:36:21:77:dd:8f:6e:74:75: 3d:6d:ea:b5:fb:06:6a:a8:9c:1f:aa:82:cd:4c:db:65:c6:2a: b9:d5:9b:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0 OUJDNDZDODkwHhcNMjYwOTIxMDYxOTA0WhcNMjYwOTI4MDYxOTA0WjAYMRYwFAYD VQQDEw02YWIwY2M1OS0yNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkWsaDShTKvqDZxYZ3inYwJO83y9jB7JAuLnxAa7hoMGLeXYKkuaiEJBBsJD xWqzR/A6NZ3mGQC8VK7l3Vw8tJ+xBy+RKcpp4tWm/o0hkG2zq8V65TKAMoohNRTz 7M1VdX4l1+0NnNoRxUz3omcZZyj1UvI1eaH86fAHNk+DSi660PmYC6NwvtvbpJWV l42KGWflsbdKbfapm44SIZR1Hb3XUyp337owg1shINZ+PBByY0R5Cq9JHAuhH3ZV fsLt5R5TRb/VkCKBYOLxrxMZxdPHvBLqMLsDnvNFW/rKsOTZZkmdaRmdxB17f+RG Q0kOOH5PGz22ZTeaGxwAQANvzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWE3LvN Gs0fvaLEK5XwWJf+B+d5MB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9FRDBGMTFGNDQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJs Y0dWVXRTeThWdlJKdkViSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0G5q0M6PFHO3NnVNF6NhIiUnv0vKcE3yQf5BpWT9UbPSY6cqKfZXQ3mMFY3 DNLPlEfAIZ5lfw9gVzvYqoLc1F52+rnh3lNguocHodmna0AV0KZMst7n9QsIBqkU xb+fbGt+w/VwQymIHfs0pYOds8a4bueCp4SCpiq+wn0pRb4+5EKjuinGDr2JL9zy YbHJXb9iXLb4w7SyBr+TMmUEwFKJMowFsffvNQGIgD6M+1Slzrd+CdHtuAphBjpN 4o+pK4G1cpimfSTgUiVx2i5+/WdnYO0Aj5PYDYYekPp2qFR59zYhd92PbnR1PW3q tfsGaqicH6qCzUzbZcYqudWb3w== -----END CERTIFICATE-----Generated at Mon Sep 21 13:22:30 2026 by rpki-client