$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: FrdgBCgzWdCC9YMB3JZGSmNf9W4wzKcgUA71FVg3wbo= Subject key identifier: 4A:9C:2E:18:8F:F6:D9:50:87:72:1B:92:D8:8F:CE:09:F6:FA:09:D6 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 01F8 Signing time: Mon 21 Sep 2026 03:21:09 +0000 Manifest this update: Mon 21 Sep 2026 03:21:09 +0000 Manifest next update: Mon 28 Sep 2026 03:21:09 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: 7cB95H2gEv+XaYnFyYpjwnCpLneCQAbRsgnSoc1ITek=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RzTaCvSWMhcAn1QVwJbuqA3HBhTH7/SoovljwgVLgeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Sep 21 03:21:09 2026 GMT Not After : Sep 28 03:21:09 2026 GMT Subject: CN=6ab0a2a5-c159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:99:a8:80:68:13:9b:6c:e0:bb:da:41:be:23: d2:61:eb:18:ac:94:0d:fb:0d:01:8f:21:c2:0a:92: 2c:f8:cf:fe:15:9d:3f:32:a2:58:6b:38:3f:fd:68: 0a:28:ba:75:cf:d8:d5:3e:5e:a9:4d:3d:b8:23:a7: bf:5e:02:fb:29:d5:55:71:1f:20:ef:82:ff:cd:f9: 27:3c:32:6e:90:41:52:62:51:36:87:ec:c0:d3:4a: ff:0a:d4:26:10:8f:f1:3f:38:34:5e:88:34:4f:7f: 3e:94:c1:43:19:bc:46:2c:13:55:02:29:79:1d:c9: 3f:35:6d:92:8f:f4:42:a0:8b:ec:0a:78:33:6e:23: 4c:9b:21:70:e0:45:d9:27:72:31:17:67:79:15:46: 99:b0:e6:35:09:6c:4d:56:46:c1:e0:8b:8f:3b:59: 5c:28:12:59:98:c1:3c:8e:46:14:8c:87:f4:7a:cf: 36:31:92:7c:8a:3d:15:38:f0:b3:2c:ac:6f:1a:78: 85:b7:72:31:d3:b1:bd:42:f9:be:6d:c0:31:97:fd: b2:48:99:9e:f3:80:db:c1:96:91:dd:fa:6a:b6:be: 16:ec:ed:dd:8e:d6:69:5f:d6:31:1a:dd:e6:72:83: e8:69:9e:8e:fb:ee:64:d9:e0:d3:36:cd:df:3a:38: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9C:2E:18:8F:F6:D9:50:87:72:1B:92:D8:8F:CE:09:F6:FA:09:D6 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7b:42:15:fe:f1:f2:e7:15:57:d0:70:63:82:6f:1e:09:6e: cb:89:38:55:97:fe:d3:c9:da:6f:a3:31:ca:33:a2:60:f6:e4: d0:6a:08:9c:f9:59:0a:c2:f7:49:36:0a:cf:ad:e2:39:a3:ef: 2f:9e:fe:cf:5a:f0:50:d2:2b:7e:16:d8:66:04:9c:74:35:46: 0c:6a:4c:c3:1f:13:dd:cc:c9:41:e4:2c:1d:57:67:aa:76:76: 3c:77:8c:83:54:c5:fc:d6:ba:a7:67:0d:72:83:d7:1e:04:e9: 22:5d:f1:fd:c1:ed:a9:cf:89:12:c6:eb:b8:4b:1d:03:f8:06: 0e:4b:96:b2:09:74:c3:c9:cc:b0:ca:1e:d6:90:7f:99:80:a3: 2f:31:82:d7:68:70:7e:40:69:89:a8:96:7f:76:26:e2:6a:98: 65:a1:c5:d1:40:8d:33:21:9c:45:15:9e:f1:96:66:80:e8:4a: 23:6d:7d:58:d3:cd:9d:af:bf:71:46:19:90:68:d4:30:2d:bd: 3f:7c:58:a6:d4:68:f4:e6:6a:41:2b:8c:2e:55:52:25:24:1f: 3c:fc:7c:28:5f:cb:78:34:67:73:d0:10:7f:3b:ac:ce:35:87: 89:45:94:d3:17:f9:38:b4:1c:e1:c7:35:24:48:21:b4:3d:87: 3b:9e:47:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjYwOTIxMDMyMTA5WhcNMjYwOTI4MDMyMTA5WjAYMRYwFAYD VQQDEw02YWIwYTJhNS1jMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpmogGgTm2zgu9pBviPSYesYrJQN+w0BjyHCCpIs+M/+FZ0/MqJYazg//WgK KLp1z9jVPl6pTT24I6e/XgL7KdVVcR8g74L/zfknPDJukEFSYlE2h+zA00r/CtQm EI/xPzg0Xog0T38+lMFDGbxGLBNVAil5Hck/NW2Sj/RCoIvsCngzbiNMmyFw4EXZ J3IxF2d5FUaZsOY1CWxNVkbB4IuPO1lcKBJZmME8jkYUjIf0es82MZJ8ij0VOPCz LKxvGniFt3Ix07G9Qvm+bcAxl/2ySJme84DbwZaR3fpqtr4W7O3djtZpX9YxGt3m coPoaZ6O++5k2eDTNs3fOjjsRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqcLhiP 9tlQh3IbktiPzgn2+gnWMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAXtCFf7x8ucVV9BwY4JvHgluy4k4VZf+08nab6MxyjOiYPbk0GoInPlZCsL3 STYKz63iOaPvL57+z1rwUNIrfhbYZgScdDVGDGpMwx8T3czJQeQsHVdnqnZ2PHeM g1TF/Na6p2cNcoPXHgTpIl3x/cHtqc+JEsbruEsdA/gGDkuWsgl0w8nMsMoe1pB/ mYCjLzGC12hwfkBpiaiWf3Ym4mqYZaHF0UCNMyGcRRWe8ZZmgOhKI219WNPNna+/ cUYZkGjUMC29P3xYptRo9OZqQSuMLlVSJSQfPPx8KF/LeDRnc9AQfzuszjWHiUWU 0xf5OLQc4cc1JEghtD2HO55Hdg== -----END CERTIFICATE-----Generated at Tue Sep 22 21:56:44 2026 by rpki-client