$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: dJ3lb9U4hVL8aRaa9sfH/85whPPEOYTWak2DKSB8BUA= Subject key identifier: 3F:60:D0:F4:E8:20:A7:54:F0:39:52:5D:85:8B:5B:59:CE:8A:A0:02 Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: 01E2 Signing time: Mon 21 Sep 2026 03:31:30 +0000 Manifest this update: Mon 21 Sep 2026 03:31:29 +0000 Manifest next update: Mon 28 Sep 2026 03:31:29 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: NaG3juJpRshQABwxxOqcH29a8U3ctpG8f904GhDHc8w=) 2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: m02khT/jg2hbvP72RR7nK1qweNEQkqkW4mCPiNuzwrw=) 3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: KXSh6prRPhPWK5BnqXhTsFwQImo2BvM4I7HOo4Rrn/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Sep 21 03:31:29 2026 GMT Not After : Sep 28 03:31:29 2026 GMT Subject: CN=6ab0a512-4c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:2d:5b:95:8c:8b:86:1f:71:c5:f3:04:12: 12:65:93:1f:48:ea:0e:e8:47:a2:c7:38:c3:4d:4e: d6:75:45:d3:10:9f:2f:9b:43:d1:44:e9:4b:5d:3c: 4b:71:d2:4c:c5:b6:f8:db:f7:ed:f2:e3:b5:14:fa: 35:2b:61:4b:32:f6:08:66:8a:b4:21:a4:be:64:18: e0:ac:25:f1:4a:25:fb:c7:32:c6:7d:9c:0c:c7:e2: bb:83:4c:0b:00:0e:65:20:c4:46:3e:e8:b7:79:b4: d1:3b:5e:65:d9:93:44:9f:c8:f6:ce:33:a9:e8:ed: 70:2a:fe:f1:28:8f:2b:a8:20:b2:3a:d6:04:a0:9b: 2d:b4:ce:03:fe:e4:0f:0f:c6:da:f7:bd:3e:8d:e6: 73:ea:5a:95:d6:b6:99:f8:86:52:5a:a8:19:f9:47: f3:df:6b:39:86:9d:db:ec:60:5a:24:7e:2e:33:7a: fa:9d:94:3f:84:9d:55:c3:dc:69:89:4d:b9:8b:ac: 1e:7a:31:e1:0f:f1:61:c1:49:c3:7c:61:35:50:9b: ef:18:2e:b9:05:73:f5:5d:d0:c9:7a:af:77:5c:ad: 92:59:8f:56:96:70:f2:36:02:7b:f4:33:a6:48:27: d8:34:4a:80:ba:69:69:d2:28:46:e2:84:d1:0d:2d: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:60:D0:F4:E8:20:A7:54:F0:39:52:5D:85:8B:5B:59:CE:8A:A0:02 X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:da:65:08:6b:62:ca:00:75:a0:f4:ea:49:bf:38:6d:9a:d5: 97:59:59:8f:90:69:27:e1:1b:4c:75:de:c8:41:b0:df:07:8f: e4:bf:31:76:73:5d:c9:4e:cd:f3:6c:ac:01:62:cb:4c:fd:59: d7:37:c1:21:8e:91:53:b4:2f:33:32:6a:b1:70:dc:c7:b3:38: 86:38:07:49:d4:f0:44:fc:59:5d:bc:61:53:da:b8:b1:91:60: c5:16:a3:63:42:b5:a5:b6:93:56:2a:e7:75:34:14:3a:15:85: 1d:00:88:c0:d9:2c:6c:c4:5d:8c:28:2c:33:4e:83:b1:0b:94: fe:d6:b1:2c:3a:46:b9:f9:6a:d0:1b:64:7e:28:bc:8b:65:44: 7b:56:55:15:26:95:ec:49:65:81:57:10:b5:2a:5e:91:35:ac: ee:dd:f2:f8:25:48:12:d3:71:e7:63:d5:10:ab:89:b5:9b:db: 76:6e:ca:dc:e9:61:9c:f2:b7:e8:a8:d1:b6:4e:74:ef:db:15: be:a5:a5:e0:d7:a5:d9:70:d0:4c:5e:e2:12:e1:21:e2:c1:2d: bf:2e:3f:60:6b:0f:25:6a:40:12:ac:25:8e:2a:d4:99:e0:ec: 57:25:5d:8d:ea:b8:db:cd:9e:9d:4f:98:94:15:e6:9a:18:b2: 6e:3e:13:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjYwOTIxMDMzMTI5WhcNMjYwOTI4MDMzMTI5WjAYMRYwFAYD VQQDEw02YWIwYTUxMi00YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFUtW5WMi4YfccXzBBISZZMfSOoO6EeixzjDTU7WdUXTEJ8vm0PRROlLXTxL cdJMxbb42/ft8uO1FPo1K2FLMvYIZoq0IaS+ZBjgrCXxSiX7xzLGfZwMx+K7g0wL AA5lIMRGPui3ebTRO15l2ZNEn8j2zjOp6O1wKv7xKI8rqCCyOtYEoJsttM4D/uQP D8ba970+jeZz6lqV1raZ+IZSWqgZ+Ufz32s5hp3b7GBaJH4uM3r6nZQ/hJ1Vw9xp iU25i6weejHhD/FhwUnDfGE1UJvvGC65BXP1XdDJeq93XK2SWY9WlnDyNgJ79DOm SCfYNEqAumlp0ihG4oTRDS2dEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9g0PTo IKdU8DlSXYWLW1nOiqACMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvNplCGtiygB1oPTqSb84bZrVl1lZj5BpJ+EbTHXeyEGw3weP5L8xdnNdyU7N 82ysAWLLTP1Z1zfBIY6RU7QvMzJqsXDcx7M4hjgHSdTwRPxZXbxhU9q4sZFgxRaj Y0K1pbaTVirndTQUOhWFHQCIwNksbMRdjCgsM06DsQuU/taxLDpGuflq0Btkfii8 i2VEe1ZVFSaV7EllgVcQtSpekTWs7t3y+CVIEtNx52PVEKuJtZvbdm7K3OlhnPK3 6KjRtk5079sVvqWl4Nel2XDQTF7iEuEh4sEtvy4/YGsPJWpAEqwljirUmeDsVyVd jeq4282enU+YlBXmmhiybj4T1A== -----END CERTIFICATE-----Generated at Tue Sep 22 14:49:26 2026 by rpki-client